Page MenuHomePhabricator

Requesting access to analytics-privatedata-users for Christoph Jauera
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: WMDE-Fisch
  • Email address: christoph.jauera@wikimedia.de
  • SSH public key: P7878 (also used in T211014, T202475 and T250362)
  • Requested group membership: analytics-privatedata-users
  • Reason for access: While working for the WMDE Technical Wishes projects we need to look into request data to understand current usage of different features. My current use case includes using Superset to query data from presto/webrequests.
  • Name of approving party: My engineering manger at WMDE is Tobias Gritschacher @Tobi_WMDE_SW
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: I signed that some time ago.
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Approving that @WMDE-Fisch is in my team and needs the access for the stated reasons. Would be awesome if it could be granted.

Change 739334 had a related patch set uploaded (by Awight; author: Awight):

[operations/puppet@production] admin: add wmde-fisch to analytics-privatedata-users

https://gerrit.wikimedia.org/r/739334

Jelto triaged this task as Medium priority.Nov 17 2021, 10:27 AM
Jelto updated the task description. (Show Details)

Thanks for the request and creating the change.

@Ottomata or @odimitrijevic could you also approve this access request to analytics-privatedata-users please ? Then we can proceed with this request.

Change 739856 had a related patch set uploaded (by Jelto; author: Jelto):

[operations/puppet@production] admin: add wmde-fisch to analytics-privatedata-users

https://gerrit.wikimedia.org/r/739856

Change 739856 merged by Jelto:

[operations/puppet@production] admin: add wmde-fisch to analytics-privatedata-users

https://gerrit.wikimedia.org/r/739856

Jelto claimed this task.

@WMDE-Fisch you should have access soon to analytics-privatedata-users group. I'm closing this task. Feel free to re-open in case you have any problems.

User principal was also added in kerberos:

krb1001:~$ sudo manage_principals.py create wmde-fisch --email_address=christoph.jauera@wikimedia.de
Principal successfully created. Make sure to update data.yaml in Puppet.
Successfully sent email to christoph.jauera@wikimedia.de

Change 739334 abandoned by Awight:

[operations/puppet@production] admin: add wmde-fisch to analytics-privatedata-users

Reason:

Already done in Id38f4961d382e39c91a9808e09d4c569310793ca

https://gerrit.wikimedia.org/r/739334