Page MenuHomePhabricator

Requesting access to releasers-wikibase for toan
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: Tobias Andersson
  • Preferred shell username: toan
  • Email address: tobias.andersson@wikimedia.de
  • Ssh public key (must be dedicated key for wmf production): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJnJucB0FLTr5RIaUfy/oFP95U7afCiTXJWTVTvH5kRF toan@C342
  • Requested group membership: releasers-wikibase
  • Reason for access: T268818 I'm working on the wikibase release hike and we plan to create this new group with access to releases.wikimedia.org
  • Name of approving party (hiring manager for WMF staff): @WMDE-leszek (for WMDE) and @TODO (for WMF)
  • Requestor -- Please Acknowledge that you have read and signed the L3 Wikimedia Server Access Responsibilities document: I've read and signed it
  • Requestor -- Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (This can be checked by Operations via the NDA tracking sheet & is included in all WMF Staff/Contractor hiring.)
  • - User has provided the following: wikitech username, preferred shell username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponser for volunteers, manager for wmf staff)
  • - Patchset for access request

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

I believe what @toan needs is "shell access" to production. For the time being would indeed be access to a subspace of releases.wikimedia.org, which is managed via releasers-wikibase (LDAP?) group (see T268818 for context).

I believe we would need an approval from some other manager than @Ottomata, as it is not the Analytics related access request. I am not sure, though, he is the right manager to approve this. @thcipriani?
Please advise.

I do approve this request from WMDE's side

This request depends on T268818 being resolved first. That is a request to add the group mentioned here. So far that doesn't exist. It's not an LDAP group, it's an admin group that needs to be created in the puppet repo.

Change 647662 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] admin: add toan user

https://gerrit.wikimedia.org/r/647662

@toan I have created the CR to add your shell account and wiull merge at the same time as the change to add releasers-wikibase

@KFrancis Are you able to confirm NDA status for Tobias, thanks

jbond triaged this task as Medium priority.Dec 10 2020, 3:32 PM

@KFrancis Are you able to confirm NDA status for Tobias, thanks

@jbond I was not able to find an NDA on record, but will process one now. I'll contact you if I have additional information. Thanks!

@KFrancis Are you able to confirm NDA status for Tobias, thanks

@jbond I was not able to find an NDA on record, but will process one now. I'll contact you if I have additional information. Thanks!

I have my copy of the NDA i've signed with WMDE, it has something that looks like a unique identifier (DocuSign Envelope ID) would that help if provided?

@toan In addition to the agreement you signed with WMDE, you'll need to sign another with WMF -- @KFrancis will get you set up. Once that's taken care of, I can go ahead on both this task and T269678.

@jbond I am confirming the completed NDA! Please feel free to proceed! Thanks!

Change 647662 merged by RLazarus:
[operations/puppet@production] admin: add toan user and add to wikibase-releasers group

https://gerrit.wikimedia.org/r/647662

RLazarus claimed this task.

@KFrancis Thank you!

@toan Your releasers-wikibase access should be taken care of (may take up to 30 min to roll out everywhere).

@KFrancis Thank you!

@toan Your releasers-wikibase access should be taken care of (may take up to 30 min to roll out everywhere).

Thank you!