Page MenuHomePhabricator

Requesting update to SSH key and Kerberos for Joseph Seddon
Closed, ResolvedPublic

Description

  1. analytics-privatedata-users SSH key update
  2. A Kerberos principal

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: seddon
  • Email address: seddon@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access):
    • -- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO67q9JInjvpeJa6U3Xx00zvPqOpHjgylaQmo9J0X19m seddon@wikimedia.org
  • Requested group membership:
    • Access to the analytics client servers was approved with T194445 but I was a rookie and sued my ssh key on cloud. This is to finally rectify that so just need a Kerberos principal and the SSH key updated
  • Reason for access: Structured Data Engineering
  • Name of approving party (manager for WMF/WMDE staff): Mark Holmquist - @MarkTraceur
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Done
  • Please coordinate obtaining a comment of approval on this task from the approving party: Done

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Event Timeline

Seddon renamed this task from Requesting update to SSH key for Joseph Seddon to Requesting update to SSH key and Kerberos for Joseph Seddon.Jan 25 2022, 3:34 AM
Seddon updated the task description. (Show Details)
Seddon updated the task description. (Show Details)
Seddon added subscribers: MarkTraceur, Ottomata.

In case this is a thing that needs a manager to approve, I am here to approve it!

@Seddon this is my first time handling access requests, so I apologize if I get something wrong. My understanding is that for shell access we ask folks to sign the L3 document. Could you modify this task using the form, https://phabricator.wikimedia.org/maniphest/task/edit/form/8/, so we are sure we are following the correct process?

@MarkTraceur & @Ottomata please approve

Just to note that @MarkTraceur approved above

In case this is a thing that needs a manager to approve, I am here to approve it!

Change 757673 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] seddon: add ssh key & set kerberos to true

https://gerrit.wikimedia.org/r/757673

Change 757673 merged by JHathaway:

[operations/puppet@production] seddon: add ssh key & set kerberos to true

https://gerrit.wikimedia.org/r/757673

@Seddon you ssh key has been updated and your kerberos principal has been created, please check your email for details.

Thank you. Can confirm it's all working.