Page MenuHomePhabricator

Requesting access to Analytics Private Data Users for Naray-ctr
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: Naray-ctr
  • Email address: naray-ctr@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHikH6sYbvJhMy3+y80QcS6lt9ZkJz9GvTFy3+G8aXBw naray-ctr@wikimedia.org
  • Requested group membership: analytics-privatedata-users
  • Reason for access: work with global data and insights team
  • Name of approving party (manager for WMF/WMDE staff): @TAndic @JAnstee_WMF
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Y
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Access for Namrata is approved by her manager; can also be confirmed with @janstee if needed!

Dzahn changed the task status from Open to In Progress.Oct 19 2021, 6:18 PM
Dzahn claimed this task.
Dzahn triaged this task as High priority.
Dzahn updated the task description. (Show Details)

confirmed L3 signature

@TAndic Thanks, ticket looks good and is in progress. Just one more thing: for contractors we require 2 extra lines of information. An expiry date and an expiry contact. Could you let me know a date when the contract either ends or will be renewed and which person should be the contact we ask about renewal once we get close to that date? Thank you!

@Dzahn My contract end date is May 9, 2022, and the person of contact will be @TAndic

@NaRay Hello and welcome! Do you already have a user on the Wikitech wiki (https://wikitech.wikimedia.org/wiki/Main_Page) ? Could you let me know the user name or register if you have not registered yet? I can't seem to find one yet starting with "Naray". Or is it a different name? Cheers, Daniel

@Dzahn My contract end date is May 9, 2022, and the person of contact will be @TAndic

Perfect, thank you. This will let me upload the needed code change.

@NaRay Hello and welcome! Do you already have a user on the Wikitech wiki (https://wikitech.wikimedia.org/wiki/Main_Page) ? Could you let me know the user name or register if you have not registered yet? I can't seem to find one yet starting with "Naray". Or is it a different name? Cheers, Daniel

Apologies, my Wikitech username is Naray-ctr

Apologies, my Wikitech username is Naray-ctr

No worries, I did not search for your email the right way. @Urbanecm pointed me to uid=statwithlatte from https://wikitech.wikimedia.org/wiki/Special:Contributions/Naray-ctr. I got everything I need now.

Change 732038 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: create user for Namrata Ray and add to analytics-privatedata

https://gerrit.wikimedia.org/r/732038

@Ottomata or @odimitrijevic Hi, do you approve this access request?

It looks to me just like the one you recently approved in T292992 which then lead to an extra ticket T293189 to add Kerberos to it.

Both say "work with Global Data and Insights team" but only one explicitly stated Hadoop access, but seems like the same thing to me, so I am assuming this needs Kerberos in my change: (right, @TAndic ?)

https://gerrit.wikimedia.org/r/c/operations/puppet/+/732038

Approved. @NaRay, do you need shell access, or will you just be accessing dashboards in superset?

Please see: https://wikitech.wikimedia.org/wiki/Analytics/Data_access#What_access_should_I_request?

Dzahn lowered the priority of this task from High to Medium.
Dzahn subscribed.

Hi @Dzahn! @NaRay should need both Kerberos and shell access for her scope of work.

Good call on following @KCVelaga_WMF's requests -- they are working together as Research Fellows this year and should have the same access.

Change 732038 merged by Dzahn:

[operations/puppet@production] admin: create user for Namrata Ray and add to analytics-privatedata

https://gerrit.wikimedia.org/r/732038

Hi @TAndic ! Thanks for confirming. I merged the code change and access is granted. I followed what KVVelaga got and ran the same command Razzi ran in their ticket.

[krb1001:~] $ sudo manage_principals.py create statwithlatte --email_address=naray-ctr@wikimedia.org
Principal successfully created. Make sure to update data.yaml in Puppet.
Successfully sent email to naray-ctr@wikimedia.org

@NaRay Hi, your access has been granted. You should have also received email about the Kerberos access. You should have the same privileges that KCVelaga has, about 30 minutes from now..when the change has been deployed to all analytics servers.

Dzahn claimed this task.
Dzahn updated the task description. (Show Details)
Dzahn removed a project: Patch-For-Review.

Feel free to reopen this if you have any questions or run into problems.