Page MenuHomePhabricator

analytics-research keytab on stat machines
Closed, ResolvedPublic

Description

Can we update the stat machines to mount the kerberos keytab for the analytics-research user? This is for testing airflow dags with ./run_dev_instance.sh.

Event Timeline

Hm, do you need to use analytics-research when developing? Could you use the analytics-privatedata system user instead?

We don't have the ability to use any other 'production' system users for development on the stat boxes.

I was initially worried about inadvertently causing harm using the analytics-privatedata user, but misunderstood as this user doesn't actually have any write rights to production data. We are using it for airflow testing (i.e. starting the dev instance with a user that has a keytab). Using the analytics-privatedata works for this purpose, probably even better than having to deal with making sure the research user doesn't do harmful things itself while testing. Closing this out.

fkaelin claimed this task.