Page MenuHomePhabricator
Create Task
Maniphest T314563

LDAP access to wmde and nda for Simon Kock (WMDE)
Closed, ResolvedPublic
Actions

Description

Please give me access to the wmde and nda LDAP group. I am an employee at WMDE (Data Analyst).

Username: Siko WMDE

Shell access: No

Purpose: Superset / Turnilo

I will contact Katie Francis, so she will have my e-mail adress.
Thank you and best regards!

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (This can be checked by SRE via the NDA tracking sheet & is included in all WMF Staff/Contractor hiring.)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform.
  • - Access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for WMF/WMDE staff). If the permissions also give access to restricted data then the data owner must also approve the request.
  • - Patchset for access request

Details

SubjectRepoBranchLines +/-
admin: add Simon Kock to ldap_only admins (nda,wmde)operations/puppetproduction+4 -0
Customize query in gerrit

Event Timeline

Siko_WMDE created this task.Aug 4 2022, 10:14 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 4 2022, 10:14 AM
Zabe added a project: LDAP-Access-Requests.Aug 4 2022, 10:16 AM
Maintenance_bot added a project: SRE.Aug 4 2022, 10:29 AM
Aklapper added a comment.Aug 4 2022, 10:50 AM

@Siko_WMDE: Please make any potential internal docs point to https://phabricator.wikimedia.org/tag/ldap-access-requests/ which has canonical instructions for such requests, for future reference. Thanks. :)

Aklapper renamed this task from LDAP access for Simon Kock (WMDE) to LDAP access to wmde and nda for Simon Kock (WMDE).Aug 4 2022, 10:51 AM
Dzahn added a subscriber: KFrancis.Aug 4 2022, 12:43 PM
Dzahn added a subscriber: Dzahn.Aug 4 2022, 12:47 PM

Hello @Siko_WMDE

please create a user on the Wikitech wiki ( https://wikitech.wikimedia.org/wiki/Special:CreateAccount)
and let us know the user name you picked once done.

Additionally, please let us know which is the right manager in WMDE to approve this, or simply add them here directly to the ticket.

The list is at:

https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#wmde_access

Best,

Daniel

Dzahn moved this task from Backlog to Awaiting User Input on the LDAP-Access-Requests board.Aug 4 2022, 12:48 PM
Dzahn moved this task from Awaiting User Input to NDA Pending on the LDAP-Access-Requests board.
WMDE-leszek added a subscriber: WMDE-leszek.Aug 4 2022, 1:53 PM

I confirm @Siko_WMDE's identity, and approve the request. Thank you!

Siko_WMDE added a comment.Aug 4 2022, 2:30 PM

Hi @Dzahn,

I already created a user on Wikitech wiki, the name is:

Siko_WMDE

Thank you and best regards,
Simon

KFrancis added a comment.Aug 4 2022, 6:57 PM

@Dzahn The agreement is out for signatures. I'll let you know when it's complete.

Dzahn added a comment.EditedAug 4 2022, 6:58 PM

Thank you @KFrancis as always!

@Siko_WMDE Thank you, I will prepare a patch to go into code review.

gerritbot added a comment.Aug 6 2022, 12:53 AM

Change 820830 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: add Simon Kock to ldap_only admins (nda,wmde)

https://gerrit.wikimedia.org/r/820830

gerritbot added a project: Patch-For-Review.Aug 6 2022, 12:53 AM
Dzahn changed the task status from Open to In Progress.Aug 6 2022, 12:57 AM
KFrancis added a comment.Aug 8 2022, 5:37 PM

@Dzahn I am confirming the NDA has been signed. Please proceed with the access request. Thanks!

BCornwall claimed this task.Aug 8 2022, 9:07 PM
BCornwall added a comment.Aug 8 2022, 9:13 PM

@Siko_WMDE, what is the email address associated with your user? I need that before we can merge the change in. Thank you.

BCornwall triaged this task as Medium priority.Aug 8 2022, 9:36 PM
BCornwall moved this task from NDA Pending to Awaiting User Input on the LDAP-Access-Requests board.
BCornwall updated the task description. (Show Details)
Siko_WMDE added a comment.Aug 9 2022, 6:49 AM

@BCornwall, the associated e-mail address is: simon.kock@wikimedia.de

thank you :)

BCornwall updated the task description. (Show Details)Aug 9 2022, 3:07 PM
BCornwall updated the task description. (Show Details)
BCornwall added a comment.Aug 9 2022, 3:15 PM

Hi, @Siko_WMDE I'll need you to:

  • Get your manager's approval here in this ticket
  • Provide your SSH pubkey (This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • Provide your full name, and preferred shell username

Thanks!

jbond updated the task description. (Show Details)Aug 10 2022, 8:23 AM
jbond updated the task description. (Show Details)
jbond updated the task description. (Show Details)Aug 10 2022, 8:25 AM
jbond added a subscriber: jbond.Aug 10 2022, 8:31 AM
In T314563#8140631, @BCornwall wrote:

Hi, @Siko_WMDE I'll need you to:

This is still required

confirmed

  • Get your manager's approval here in this ticket

confirmed as per https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#wmde_access

  • Provide your SSH pubkey (This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • Provide your full name, and preferred shell username

Neither of theses are required, @Siko_WMDE did you use a form or link to create this access request, if so which one, as it seems like its a bit outdated?

Siko_WMDE added a comment.Aug 10 2022, 10:40 AM

Hi @jbond,

I signed the L3 document.
To create the access request, I did not use a form or link..

Thank you and best regards,
Simon

jbond updated the task description. (Show Details)Aug 10 2022, 10:50 AM
gerritbot added a comment.Aug 10 2022, 10:50 AM

Change 820830 merged by Jbond:

[operations/puppet@production] admin: add Simon Kock to ldap_only admins (nda,wmde)

https://gerrit.wikimedia.org/r/820830

jbond added a comment.Aug 10 2022, 10:53 AM
In T314563#8140631, @BCornwall wrote:

Hi, @Siko_WMDE I'll need you to:

This is still required

  • Get your manager's approval here in this ticket
  • Provide your SSH pubkey (This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • Provide your full name, and preferred shell username

Thanks!

In T314563#8142312, @Siko_WMDE wrote:

Hi @jbond,

I signed the L3 document.
To create the access request, I did not use a form or link..

Thank you and best regards,
Simon

Ack, thanks you should have access now

Maintenance_bot removed a project: Patch-For-Review.Aug 10 2022, 11:30 AM
BCornwall closed this task as Resolved.Aug 10 2022, 3:45 PM
BCornwall reassigned this task from BCornwall to jbond.
BCornwall added a subscriber: BCornwall.
Dzahn awarded a token.Aug 10 2022, 3:46 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL