Page MenuHomePhabricator

Requesting access to ores-admin for ml-team-admins
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

  • Requested group membership: ores-admin
  • Reason for access: The ml-team-admins group should be listed among the ores-admins so that all its members will be automatically added. For the moment only Kevin and Chris are in the ores-admin group, and our newest member Aiko is not.
  • Name of approving party (manager for WMF/WMDE staff): Chris Albon
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

elukey renamed this task from Requesting access to ores-admins for ml-team-admins to Requesting access to ores-admin for ml-team-admins.Jun 7 2022, 9:00 AM
elukey updated the task description. (Show Details)
elukey added a subscriber: klausman.

Change 803457 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/puppet@production] admin: add ml-team-admins to ores-admin by default

https://gerrit.wikimedia.org/r/803457

@calbon could you please review and approve? :)

elukey removed calbon as the assignee of this task.Jun 9 2022, 7:45 AM

Chris approved, I think that we can proceed!

My understanding is that we are requiring the same level of access to ORES nodes to a new team member, refactoring a bit how groups are related to each other, so even if Aiko will get sudo permissions on ORES nodes it should be fine to not wait for an SRE team meeting to merge https://gerrit.wikimedia.org/r/803457. Lemme know if this is the case and I'll proceed with the patch :)

Change 803457 merged by Elukey:

[operations/puppet@production] admin: add ml-team-admins to ores-admin by default

https://gerrit.wikimedia.org/r/803457