Page MenuHomePhabricator

Requesting access to analytics for Manuel
Closed, ResolvedPublicRequest


This request is only an addition to T320504. Thank you!

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: Manuel Merz (WMDE)
  • Email address:
  • SSH public key (must be a separate key from Wikimedia cloud SSH access):

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRfx0qyiPeMovMrMFvFI0g8uZpN4kmuV9ypP8GIPuYJ4IiI7J5p5DJJeA4DKToQeHTujhoHQhu4PXeTYRowYMFbpiDC8ntz71RMxFLrzwmc68arid67o4WZkJ1t0YQoWyAYzSz+B3cfdxyWz9n4v1dBNGJR/U9/G+4cjeOzkIQ16paqUNX5rCLCfd6jz45muOEZY0bpfVvqnjVOlBXT7ajYPwDJq9dWlsXIVVbIBoDCTQYjEeHoqNMfcJOnangB/siTXMoIMqDxobEn4lRnDnq7PGHoHXqc51EqFCFz1Hos7g59KNYyGGad7UCmj15RpkzyOiR7z7ZBXZJOiNddGi8i0PlSRtruydqkr5t/qi8ApvrCsHFlpqvQYtC3dRn81odD7PIn/kK8EB9YonKxqIptkq7H4dMz3E5+QsPbgJ1ztMZSyJoopagjiwD7X6SWEQ0Vh8musYl59JThVTU2mze+sXIdLDTAmcX9YX0TMpx4/uTHInqARG1NOanGdqXMqN26tRPidueo2ANVdEePlMOy4tDHX7I5dAZWy0xEvTT0i6fEdFqqsiJWqt6WoBMjelj74pSg0eXeJqNRLenXzXkneoccI3QzvCM0MnXczkzQGVvkuKaIZ6FgWXe1glY5J5SddUvlZRD//+W9iAbLMraGoO5CVm/X5V3IOMcsXfT1Q==

  • Requested group membership: analytics-privatedata-users and analytics-wmde-users
  • Reason for access: I am the Analytics Product Manager for Wikidata (Wikidata Dev Team) and I'll need access to Hadoop, Superset, and other data sources.
  • Name of approving party (manager for WMF/WMDE staff): @Lea_WMDE
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: done
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see

Event Timeline

As @Manuel 's manager, I support this request :)

Change 920780 had a related patch set uploaded (by CDanis; author: CDanis):

[operations/puppet@production] manuel-wmde ssh access & analytics-wmde-users

Change 920780 merged by CDanis:

[operations/puppet@production] manuel-wmde ssh access & analytics-wmde-users

CDanis claimed this task.
CDanis added a subscriber: CDanis.

Will be live in half an hour. Please re-open the task if you have any trouble with SSH access!

Thank you, @CDanis! It's working well! :)

Manuel reopened this task as Open.EditedWed, May 24, 11:26 AM

Hi @CDanis, while SSH is working, I get the following message when I try to use kinit in JupyterHub:

Client 'manuel-wmde@WIKIMEDIA' not found in Kerberos database while getting initial credentials

Maybe this step T335437#8810771 is still missing in my case?

@Manuel Seems like the analytics-privatedata-users access was not configured. @Ottomata / @odimitrijevic are you able to approve Manuel's access to analytics-privatedata-users, thanks

Change 922926 had a related patch set uploaded (by CDanis; author: CDanis):

[operations/puppet@production] add kerberos for manuel-wmde

Change 922926 merged by CDanis:

[operations/puppet@production] add kerberos for manuel-wmde

Apologies for omitting Kerberos originally! You should now have an email with instructions on how to configure it.

Thank you for your quick solution! Kerberos is working now \o/