Page MenuHomePhabricator

Requesting access to Superset/Turnilo for Kinneretgordon
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: Kinneretgordon
  • Email address: kgordon@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): Not sure how to get this.
  • Requested group membership: wmf or nda LDAP group
  • Reason for access: member of Partnerships team working with Product Analytics/Research on page-views experiments, Wikipedia Preview analytics, and more.
  • Name of approving party (manager for WMF/WMDE staff): Maryana Pinchuk
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document:
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Hi! @KinneretG's manager here – looks like she was blocked from Superset over the weekend for some reason. Could you please reinstate her permissions? Thanks!

Hi. We have just checked the group membership for wmf and it appears that the user kgordon is still a member. Kindly share the specific errors you are experiencing to be able to troubleshoot the problem further.

Arnoldokoth changed the task status from Open to In Progress.Feb 11 2022, 5:40 PM

Hi, we have investigated this further and have found that you have two accounts one with a contractor email and the other with a full-time employee email. @KinneretG Please confirm which account you were using when you experienced this problem and also did you transition from contractor to FT or vice versa? Thanks.

Hi, I just realized that was the issue. I used my contractor username and full-time employee password. So all is good now :) I moved from contractor to full-time so maybe the old account can be deleted?
Thank you and sorry for the trouble!

Change 763200 had a related patch set uploaded (by MMandere; author: MMandere):

[operations/puppet@production] admin: Change Kinneret username

https://gerrit.wikimedia.org/r/763200

Change 763200 merged by MMandere:

[operations/puppet@production] admin: Change Kinneret username

https://gerrit.wikimedia.org/r/763200

Change 763200 merged by MMandere:

[operations/puppet@production] admin: Change Kinneret username

https://gerrit.wikimedia.org/r/763200

Adding the above failed to list user results using the command:

ldapsearch -x uid=<username>

but on further searching with the user's FTE email instead as so:

ldapsearch -x mail=<useremail>

We were able to get the correct username The following patch aims to correct that error, by substituting with the right username. @MoritzMuehlenhoff thank you for guiding through!

Change 763498 had a related patch set uploaded (by MMandere; author: MMandere):

[operations/puppet@production] admin: Change Kinneret username

https://gerrit.wikimedia.org/r/763498

Change 763498 merged by MMandere:

[operations/puppet@production] admin: Change Kinneret username

https://gerrit.wikimedia.org/r/763498

MMandere claimed this task.

Marking this task as resolved. @KinneretG, please feel free to reopen it if you encounter any new issue with your login.