Page MenuHomePhabricator

Revoke production access for jmorgan
Closed, ResolvedPublic

Description

2020-04-30 is @Capt_Swing's last day as a Wikimedia Foundation employee. This ticket captures the request for revoking his production access.

His shell name is jmorgan. He has access to stat1007 (and the cluster?). I'd appreciate if you can check if there are other stat machines or places that I may not have in mind.

Please remove production access.

Related Objects

Event Timeline

[OT] @leila: Related: Could you update the status and/or assignee of https://phabricator.wikimedia.org/maniphest/query/5gpN.lPseKRf/#R ? Thanks in advance! :)

Change 593733 had a related patch set uploaded (by Dzahn; owner: Dzahn):
[operations/puppet@production] admins: remove shell access for jmorgan

https://gerrit.wikimedia.org/r/593733

Change 593733 merged by Dzahn:
[operations/puppet@production] admins: remove shell access for jmorgan

https://gerrit.wikimedia.org/r/593733

Sad to see this ticket but can someone also ask OIT to lock https://meta.wikimedia.org/wiki/Special:CentralAuth?target=Jmorgan%20(WMF)

Strike that, opened a ticket on wikimedia.zendesk

@leila Done! He was in analytics-privatedata-users but no other groups. I merged the change above and ran puppet on all bastion hosts and all 95 "analytics-all-eqiad" hosts. Then confirmed it is now "id: ‘jmorgan’: no such user" on all of those as well.

Mentioned in SAL (#wikimedia-operations) [2020-05-01T12:05:42Z] <mutante> notebook1003 - puppet was failed due to removal of jmorgan while one of his processeswas still running. "change to absent failed.. user jmorgan currently used by porcess 3288". killing 3288, running puppet T251560

Mentioned in SAL (#wikimedia-operations) [2020-05-01T12:07:01Z] <mutante> notebook1004 - puppet was failed due to removal of jmorgan while one of his processes was still running. "change to absent failed.. user jmorgan currently used by process 29038". killing 29038, running puppet T251560

Created T251600 to check leftovers on analytics nodes.

@Dzahn thanks a lot!

@Aklapper thanks for flagging those. I'll need roughly a week to address those tasks.

@RhinosF1 thanks for flagging. I'll follow up with OIT.

@elukey I'm following up with you on the task.

Sad to see this ticket but can someone also ask OIT to lock https://meta.wikimedia.org/wiki/Special:CentralAuth?target=Jmorgan%20(WMF)

Strike that, opened a ticket on wikimedia.zendesk

Ok. Thanks!