Page MenuHomePhabricator

Grant Access to wmf for ksiebert
Closed, ResolvedPublic

Description

  • The username of your existing account on wikitech.wikimedia.org: ksiebert
  • Do you currently have shell access (Yes/No)? yes
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc): Turnilo and Superset
  • The specific LDAP group that you want to be added to (optional): wmf

For contractors only:

  • Contract end date:
  • Contract contact person:

Event Timeline

Hi and welcome @KSiebert,

you indicate you already do have shell access but while I can see your user KSiebert in LDAP I cannot see it in the shell access section. Is that maybe a different user name or an oversight?

Best regards,

Daniel

Hi and welcome @KSiebert,

you indicate you already do have shell access but while I can see your user KSiebert in LDAP I cannot see it in the shell access section. Is that maybe a different user name or an oversight?

Best regards,

Daniel

I actually see all the data for shell access in @KSiebert's ldap account, I think the confusion is between production shell access and Cloud shell access. Anyways, that's irrelevant for the current task.

Change 724865 had a related patch set uploaded (by Giuseppe Lavagetto; author: Giuseppe Lavagetto):

[operations/puppet@production] admin: add ksiebert as ldap user

https://gerrit.wikimedia.org/r/724865

Change 724865 merged by Giuseppe Lavagetto:

[operations/puppet@production] admin: add ksiebert as ldap user

https://gerrit.wikimedia.org/r/724865

Joe claimed this task.

Hi @KSiebert and welcome! I've added you to the "wmf" group in LDAP , which should give you access to turnilo, but for access to superset you will likely need to request access to analytics-privatedata-users, see https://wikitech.wikimedia.org/wiki/Analytics/Data_access for details.

I'll resolve the task now, but please feel free to ask further questions here or on slack/IRC.

I actually see all the data for shell access in @KSiebert's ldap account, I think the confusion is between production shell access and Cloud shell access. Anyways, that's irrelevant for the current task.

Ah yes, prod vs cloud shell access makes sense. But I was asking like this because if they are not a production shell user they won't be in the puppet repo admin module yet and need to be added to the ldap_only section. I see this happened in https://gerrit.wikimedia.org/r/c/operations/puppet/+/724865 so all good.

Hey all, thanks for processing this so quickly!!! Just saw it now.