Page MenuHomePhabricator

Add Pau Giner to analytics-privatedata-users
Closed, ResolvedPublicRequest


Requestor provided information and prerequisites

  • Wikitech username: Pginer
  • Preferred shell username: pginer (already assigned)
  • Email address:
  • Ssh public key (must be dedicated key for wmf production): N/A
  • Requested group membership: analytics-privatedata-users
  • Reason for access: Pau needs to view Superset dashboards showing metrics for his team's products. He is already in the wmf LDAP group, but some of these dashboards will be built on top of Presto queries, which means he will not be able to view them without being added to analytics-privatedata-users. He will not be using shell access, so he does not need to set up an SSH keypair.
  • Name of approving party (hiring manager for WMF staff): @MNovotny_WMF
  • Requestor -- Please Acknowledge that you have read and signed the L3 Wikimedia Server Access Responsibilities document:
  • Requestor -- Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (This can be checked by Operations via the NDA tracking sheet & is included in all WMF Staff/Contractor hiring.)
  • - User has provided the following: wikitech username, preferred shell username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponser for volunteers, manager for wmf staff)
  • - Patchset for access request

For additional details regarding access request requirements, please see

Event Timeline

@Pginer-WMF: can you read and sign the Acknowledgement of Wikimedia Server Access Responsibilities using your Phab account?

@MNovotny_WMF: can you comment on this task approving Pau to access confidential analytics data?

@Pginer-WMF: can you read and sign the Acknowledgement of Wikimedia Server Access Responsibilities using your Phab account?

Just signed it. Thanks for helping with the set-up!

Dzahn added a subscriber: Dzahn.

confirmed L3 signature, confirmed employee status (is listed as contractor in corp LDAP though, this would require an expiry_date but it's also likely that information is outdated)

taavi added a subscriber: Angel777342.
jbond added a subscriber: jbond.
jbond updated the task description. (Show Details)

Change 666316 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] admin- pginer: create unix account with now ssh key for superset access

Change 666316 merged by Jbond:
[operations/puppet@production] admin- pginer: create unix account with now ssh key for superset access

jbond claimed this task.

This access has been enabled now, please allow upto 30 minutes for the change to propagate and re-open this task if you suffer any issues, thanks

Change 666725 had a related patch set uploaded (by Ottomata; owner: Ottomata):
[operations/puppet@production] Add pginer to analytics-privatedata-users

Hi, FYI I think this missed the Data Engineering approval step. No worries I do approve!

@jbond Pau needed to be added to the analytics-privatedata-user group too!

Will merge and apply.

Change 666725 merged by Ottomata:
[operations/puppet@production] Add pginer to analytics-privatedata-users

I can get the fresh stats now. Thanks for helping with this!

@Ottomata Sorry i missed you and thanks for fixing :)