Page MenuHomePhabricator

Request to be added to the ldap/wmde group
Closed, ResolvedPublic

Description

I’m employed at WMDE as a developer and would like to be added to the ldap/wmde group.
My Wikitech username is <Oleksandr Tsyba (WMDE)>, and my shell username is <oleksandrtsyba-wmde>.

I need to

  • sign NDA with WMF legal for LDAP access
  • get added to ldap/wmde

Checklist:

  • The username of your existing account on wikitech.wikimedia.org: Oleksandr Tsyba (WMDE)
  • Do you currently have shell access (Yes/No)? No
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc):
  • The specific LDAP group that you want to be added to (optional): wmde

For contractors only:

  • Contract end date: NA
  • Contract contact person: NA

Event Timeline

As the WMF-Legal project tag was added to this task, some general information to avoid wrong expectations:
Please note that public tasks in Wikimedia Phabricator are in general not a place where to expect feedback from the Legal Team of the Wikimedia Foundation due to the scope of the team and/or nature of legal topics. See the project tag description.
Please see https://meta.wikimedia.org/wiki/Legal for when and how to contact the Legal Team. Thanks!

Cleaned up the tags a bit, apologies @oleksandr_tsyba_WMDE. we have used a wrong template, again

On that note, I endorse this request on WMDE's end.

Hello, @oleksandr_tsyba_WMDE, I'll be helping with this request. Would you please send your WMDE email address to kfrancis@wikimedia.org?

I am confirming the NDA has been signed. Please proceed with the access request. Thanks!

Ladsgroup subscribed.

Thanks. I'm clinic duty this week.

Change 903691 had a related patch set uploaded (by Ladsgroup; author: Amir Sarabadani):

[operations/puppet@production] admin: Add Oleksandr Tsyba to ldap

https://gerrit.wikimedia.org/r/903691

Hi, I guessed your email address via the WMDE's email pattern, can you please confirm this? https://gerrit.wikimedia.org/r/c/operations/puppet/+/903691/1/modules/admin/data/data.yaml

  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc):

I don’t think we need access to any specific services yet? (Though I might be wrong.) But he should be in the wmde group to reflect that he works here, and in the nda group to reflect that the NDA was signed, I assume. (At least, those are the main groups I see for other WMDE staff in the wmde-access tool.)

That checklist is part of the process for giving the rights: https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#LDAP_access

I agree that it doesn't make much sense for new hires and these specific groups (wmf/wmde/nda) but fixing it is out of scope of this ticket. Being able to merge patches in gerrit is a valid case so I just merge the patch.

Change 903691 merged by Ladsgroup:

[operations/puppet@production] admin: Add Oleksandr Tsyba to ldap

https://gerrit.wikimedia.org/r/903691

I need to wait for puppet to propagate and then I do the ldap changes in mwmaint.

Okay, thanks! It sounded like the task was blocked on that checkmark, maybe that was a misunderstanding.

I prefer to have something there to satisfy the gods of bureaucracy but it's not mandatory for wmde/wmf groups for new hires.

Anyway, I updated the ldap records, it should be done now. It might take a bit of time to propagate.

Thank you, @Ladsgroup! 🙏

*in case of emergency

git rebase -i HEAD~1
drop 20bd3f71404912f60f45c1a84f0ed7d76386d6a5
git push --force`