+1 from me, @Zabe should be eligible as one of the current +2 holders.

@thcipriani are you OK to approve this request, please? [or suggest someone else in releng who might be appropriate to do so?]

In T297323#7565793, @MatthewVernon wrote:

@thcipriani are you OK to approve this request, please? [or suggest someone else in releng who might be appropriate to do so?]

Approved!

I haven't been looped in on requests like this before, but I seem like a reasonable/appropriate person for this (I do spend a lot of time encouraging people to look at logstash 😅)

Alright, thanks for approving @thcipriani!

@Zabe I am on clinic duty this week, handling access requests. Since you have been approved we'll now continue with the "volunteer NDA" process (https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_access)

I'll add @KFrancis [https://meta.wikimedia.org/wiki/User:KFrancis_(WMF)] from Legal (Hi, Katie, could you start a new volunteer NDA for @Zabe please?) to the ticket.

@Zabe let Katie know your email and she'll let you know how to continue

Best regards,

Daniel

Thanks @Dzahn, @Zabe Please send me the following info:

Full legal name
Mailing address
Email address

If you prefer, you can send it to kfrancis@wikimedia.org

In T297323#7582289, @KFrancis wrote:

Thanks @Dzahn, @Zabe Please send me the following info:

Full legal name
Mailing address
Email address

If you prefer, you can send it to kfrancis@wikimedia.org

Sent

@Dzahn Thanks! I'll let you know when the agreement is complete.

Great, thank you. Feel free to assign it back to me or just comment. Happy Holidays

@Dzahn The NDA is fully executed. Please proceed with the access request. Happy Holidays to you too!

Thank you @KFrancis that was so quick.

@Zabe Just missed you on IRC, let's chat tomorrow how to continue. I was wondering how to deal with real name in the ops repo etc.

In T297323#7585099, @Dzahn wrote:

Thank you @KFrancis that was so quick.

@Zabe Just missed you on IRC, let's chat tomorrow how to continue. I was wondering how to deal with real name in the ops repo etc.

In at least one previous case (Daimona), private real name was handled by adding realname: (known to Legal). Might be a solution?

Yes, that is exactly what I meant. It's an option if you (Zabe) want to keep your real name out of the admin.yaml.

I have no problem with my real name showing up in data.yaml. It is visible in my git commits anyway.

Change 749534 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: add Zabe to ldap_only_admins for volunteer NDA group

https://gerrit.wikimedia.org/r/749534

Change 749534 merged by Dzahn:

[operations/puppet@production] admin: add Zabe to ldap_only_admins for volunteer NDA group

https://gerrit.wikimedia.org/r/749534

Mentioned in SAL (#wikimedia-operations) [2021-12-22T12:31:29Z] <mutante> LDAP added uid=zabe to group nda (T297323)

@Zabe Alright, done! You have been added. You should have Logstash access now. (and other things that come with the nda group)