Page MenuHomePhabricator

Requesting access to deployment for Zabe
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: User:Zabe
  • Email address: zabe@avorwerk.net
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIN7H2VAL+XuBguUzu4xy+Y2nr9prd4ERMxe+jh0fp4h wmf_prod
  • Requested group membership: deployment
  • Reason for access: I regularly help with trains or security related things that need backports. I also perform some database migrations (e.g. T233004) where a higher number of config patches need to be deployed and migration maintenance scripts need to be run. Deployment access would help me significantly with this work. I have had a few encounters with scap in the beta cluster.
  • Name of approving party (manager for WMF/WMDE staff): @Ladsgroup (sponsor), @thcipriani (approver for the deployment group)
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: done
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

Event Timeline

Zabe has done tremendous work in general maintenance of wikimedia infrastructure and specially in refactorings of our database schema (actor migration in checkuser and so on) which falls under my job mandate. So I'd be happy to sponsor this request to ease the work Zabe is doing. Zabe has already NDA and access to logstash and lots of sensitive pieces and this feels like the natural next step.

I confirm Zabe has done a lot of helpful work in different areas, including operations/puppet and mwcore.

here is a list of patches that have been merged:

https://gerrit.wikimedia.org/r/q/owner:zabe%2540avorwerk.net+project:operations/puppet

https://gerrit.wikimedia.org/r/q/owner:zabe%2540avorwerk.net+status:merged

Volans triaged this task as Medium priority.Jan 6 2023, 10:31 AM
Volans updated the task description. (Show Details)
Volans moved this task from Untriaged to In Discussion on the SRE-Access-Requests board.

This has my +1, Zabe's deployment access would help him in his work in many areas. Thanks for volunteering!

Change 877102 had a related patch set uploaded (by Jelto; author: Jelto):

[operations/puppet@production] admin: add zabe to deployment group

https://gerrit.wikimedia.org/r/877102

Jelto subscribed.

@thcipriani we need your approval here to add zabe to deployment group. Can you have a look?

@thcipriani we need your approval here to add zabe to deployment group. Can you have a look?

Approved! Would be happy to have @Zabe deploying, thanks for volunteering <3

Change 877102 merged by Jelto:

[operations/puppet@production] admin: add zabe to deployment group

https://gerrit.wikimedia.org/r/877102

Jelto claimed this task.

@Zabe you should have access to deployment group now. Happy to have you on board!

I'm closing this task. Feel free to re-open if you have problems with your access.