Requesting access to analytics-privatedata-users for RoccoMo
Closed, ResolvedPublicRequest
Actions

Assigned To

Authored By

	Isaac
	May 10 2022, 6:08 PM

Project Tags

Referenced Files

None

Subscribers

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

Wikitech username: Mo Houtti
Email address: mohamed.houtti@gmail.com
SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-rsa 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 mhoutti@infra04-wg324.eduroam.wireless.umn.edu
Requested group membership: analytics-privatedata-users
Reason for access: a formal collaborator and intern with Research who will work on article importance project (MOU/NDA are signed -- current MOU is through August 11, 2022 though it will almost certainly be extended)
Name of approving party (manager for WMF/WMDE staff): @Isaac
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Check.
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
- User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	admin: Add mhoutti to analytics-privatedata-users with ssh and kerberos	RLazarus	operations/puppet	production	+12 -1

Customize query in gerrit

Event Timeline

Isaac created this task.May 10 2022, 6:08 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 10 2022, 6:08 PM

Hey SRE/Analytics -- we have a new formal collaborator onboard: @RoccoMo. They need access to HDFS and the stat machines for a new research project. Don't hesitate to let me know if you need more information.

@RoccoMo: in the task description, could you add your public SSH key (instructions) and acknowledge that you read and signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document (instructions)?

RoccoMo updated the task description. (Show Details)May 10 2022, 6:22 PM

@RoccoMo Hi from the SRE team! Thanks for the request, we'll get you sorted out shortly.

@Ottomata Can you approve for Analytics please?

@KFrancis I understand the NDA is already signed, can you confirm please?

Isaac updated the task description. (Show Details)May 10 2022, 6:34 PM

@RLazarus I am confirming we have a signed NDA for Mo. Thanks!

Approved! This will also need kerberos access and LDAP nda group membership.

Thanks both! Proceeding.

Change 790754 had a related patch set uploaded (by RLazarus; author: RLazarus):

[operations/puppet@production] admin: Add mhoutti to analytics-privatedata-users with ssh and kerberos

https://gerrit.wikimedia.org/r/790754

gerritbot added a project: Patch-For-Review.May 10 2022, 8:23 PM

Change 790754 merged by RLazarus:

[operations/puppet@production] admin: Add mhoutti to analytics-privatedata-users with ssh and kerberos

https://gerrit.wikimedia.org/r/790754

Added to ldap/nda:

rzl@mwmaint1002:~$ ldapsearch -x cn=nda | grep mhoutti
member: uid=mhoutti,ou=people,dc=wikimedia,dc=org

Kerberos principal created:

rzl@krb1001:~$ sudo manage_principals.py create mhoutti --email_address=mohamed.houtti@gmail.com
Principal successfully created. Make sure to update data.yaml in Puppet.
Successfully sent email to mohamed.houtti@gmail.com

@RoccoMo Please wait up to 30 minutes for your SSH access to propagate through the fleet, then you should be all set! You should have an email with instructions for setting a Kerberos password (but you may need to wait those 30 minutes before you can do so).

I'm marking this resolved, but feel free to reopen if you have any trouble using your new access.

Maintenance_bot removed a project: Patch-For-Review.May 10 2022, 9:30 PM

Requesting access to analytics-privatedata-users for RoccoMoClosed, ResolvedPublicRequestActions