Page MenuHomePhabricator

Requesting access to analytics-privatedata-users for appledora
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: Appledora but the instructions suggest you also need the "instance shell account name" which is appledora
  • Email address: ntasnim-ctr@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDl3CP/l+yFwQqG5ifShJgIgmp1x/krK8slFXTIRYuFOj1imPrZJRoWp144UPZsQ279ulIpaVJol4vNULqIFuG1nE1TCH9ICnIUquoZEjqRrm+1U0jXFrrye1U4SjUnq2bdFli1rkNkLI9MT/ZcPBBcN9kwASfwYAHQOnUtlHgvGdGvtSeQzV0G3lqwYCqyZzEQi6N+DR/s5tfQo2osnufEGZZpf2jRWrm6D6AK7LDODyzj/LmNvCgH3yme024kn3KvGjzs2B5+nQqIFa1cA21ETKbq3jS6HwqHaOYGR/aAfGFBaAn3G89ppTlAMqXKdfRAfqb7O7bQKxxfWnXxJLYEwkKBKc/XEq6Zyil3WJd0/Z5Bhaglopp2TLcGHhO//kM4P+IlAowp/YNwEpZnIu4zojW0cd3u7hH+84yfjqonKt9j2BPodZArdJDavNUS2ZmPXm/Ddql4qnGQmYK21XVrAswNeEI/y6PlYVmxTiV4rTaZMHaP6IU6ay3ko9zYO35xQcsHv/yXALh4K/myxP0QLHFz3dBXIFdVZt5n6y90+mINsI3zy9r9RigjPX52iaccAI0vyJo/hGUk1vlt8nmB0/CiVKlDHSrGAT20Jcp004ezkASNP77RE1H8wqfIB6Iew4UnW6+wJ/PCGRhMW3CyWWSQzOGABHna52yfFQhbdw== appledora@pop-os
  • Requested group membership: "ssh login to analytics client servers (AKA stat boxes) with Hadoop, Hive, Presto access" per Wikitech aka analytics-privatedata-users + Kerberos
  • Reason for access: Nazia is contracting with us on T316941 and will need cluster access for building and testing out the libraries she's developing.
  • Name of approving party (manager for WMF/WMDE staff): @Isaac
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document:
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Hey SRE/Analytics/Legal -- we have a new contractor onboard: @Appledora. She needs access to HDFS and the stat machines for a new research project. Don't hesitate to let me know if you need more information. I believe she has an NDA signed as part of the contracting process but she's not a formal collaborator so I'm not 100% certain.

@Appledora: in the task description, could you add your public SSH key (instructions) and acknowledge that you read and signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document (instructions)?

Thanks all!

herron triaged this task as Medium priority.Oct 18 2022, 2:38 PM

Hello!

@KFrancis could you please confirm that we have an NDA on file for @Appledora?

@odimitrijevic @Ottomata could you please approve for analytics-privatedata-users + Kerberos?

Thanks in advance!

@herron I am confirming an NDA is on file. Please proceed with the access request. Thanks!

^^ Just unchecking the SSH key box so SRE can do that.

Change 845033 had a related patch set uploaded (by Herron; author: Herron):

[operations/puppet@production] admin: add appledora to analytics-privatedata-users

https://gerrit.wikimedia.org/r/845033

Hi @Appledora It says here you have a contractor email address (ntasnim-ctr@wikimedia.org), is that right? In LDAP (your wikitech wiki user) we don't see that though and instead a private mail address. Would you mind changing that at https://wikitech.wikimedia.org/wiki/Special:Preferences ?

Or alternatively you can also have both, a personal and a work account, if you would prefer that. Cheers

Hey @Dzahn , for now I have updated my email with the contractor email. Hope this helps!

@Appledora Thank you! I'll make sure to get this resolved soon.

Change 845033 merged by Herron:

[operations/puppet@production] admin: add appledora to analytics-privatedata-users

https://gerrit.wikimedia.org/r/845033

herron claimed this task.

The requested access has been granted and will fully propagate within 30 minutes. Transitioning this to resolved now, please reopen if any followup is needed. Thanks!

Thanks all as always for the quick and helpful support in granting access!