Page MenuHomePhabricator

Requesting access to Production Shell Access (analytics-privatedata-users) for Rmaung
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: Rmaung
  • Preferred shell username: rmaung
  • Email address: rmaung@wikimedia.org
  • Ssh public key (must be dedicated key for wmf production): (below)
  • Requested group membership: analytics-privatedata-users
  • Reason for access: team is starting to use R, and needs to access data sources and jupyter
  • Name of approving party (hiring manager for WMF staff): Sumeet Bodington (new supervisor as of October 26), Janeen Uzzell (acting supervisor as of this request). Neither party is on phabricator
  • Requestor -- Please Acknowledge that you have read and signed the L3 Wikimedia Server Access Responsibilities document: Yes, read and signed.
  • Requestor -- Please coordinate obtaining a comment of approval on this task from the approving party.

Thank you!

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICpqwO761eLDHfC7ZiUFLW4d8BLWO3lqYeioD7nnESvc rmaung@Rebeccas-MBP

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (This can be checked by Operations via the NDA tracking sheet & is included in all WMF Staff/Contractor hiring.)
  • - User has provided the following: wikitech username, preferred shell username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponser for volunteers, manager for wmf staff)
  • - non-staff requests: 3 business day wait must pass with no objections being noted on the task
  • - Patchset for access request

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Marostegui moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.
Marostegui added a subscriber: elukey.

@KFrancis can you confirm if @Rmaung has a valid NDA signed? I cannot see it on the NDA tracking sheet.

Confirmed that @Rmaung is staff by checking via ldap-corp.
@Rmaung we'd also need your manager to sign off this request.

@KFrancis can you confirm if @Rmaung has a valid NDA signed? I cannot see it on the NDA tracking sheet.

I confirmed with T&C @Rmaung is an employee of the WMF and is covered by an employee NDA. Thanks!

@Rmaung: can you describe what data are looking to access? This is so we can see what is the appropriate level of access (cc @Ottomata) .

Also, @Rmaung please take a look at https://wikitech.wikimedia.org/wiki/Analytics/Data_Access_Guidelines and ask any questions you might have about it on task

herron subscribed.

Since this has been awaiting input for several weeks, I'll temporarily transition it to closed due to inactivity.

@Rmaung please update and re-open this task when ready to proceed. Thanks in advance!

herron reassigned this task from Rmaung to Sbodington.

Approved from Data Engineering standpoint.

FYI we will be re-writing our Jupyter hub documentation and setup this quarter. Documentation updates are WIP, for now please refer to https://wikitech.wikimedia.org/wiki/Analytics/Systems/Jupyter#Newpyter.

As JAnstee´s manager, I approve the request. Please let me know if you need any additional information.

Change 656840 had a related patch set uploaded (by Ayounsi; owner: Ayounsi):
[operations/puppet@production] Add rmaung to analytics-privatedata-users

https://gerrit.wikimedia.org/r/656840

Change 656840 merged by Ayounsi:
[operations/puppet@production] Add rmaung to analytics-privatedata-users

https://gerrit.wikimedia.org/r/656840

ayounsi subscribed.

Access created, you should have received an email as well about your kerberos account.