Page MenuHomePhabricator
Create Task
Maniphest T337121

Grant Access to nda for eccenux
Closed, ResolvedPublicRequest
Actions

Description

  • The username of your existing account on wikitech.wikimedia.org: eccenux
  • Do you currently have shell access (Yes/No)? – No (unless you count Tools server)
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc): Logstash. I would like to request access to the monitoring server. In particular, I am interested in the frontend, i.e. JS error logs, in particular errors from pl.wiki, but I also have interface administrator privileges on pl.ws, pl.wm, meta.
  • The specific LDAP group that you want to be added to (optional): nda

For contractors only:

  • Contract end date:
  • Contract contact person:

Details

SubjectRepoBranchLines +/-
admin: add eccenux to ldap_only_usersoperations/puppetproduction+4 -0
Customize query in gerrit

Related Objects

Event Timeline

Nux created this task.May 20 2023, 12:57 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 20 2023, 12:57 PM
sgrabarczuk added a comment.May 20 2023, 2:47 PM

As a community-facing person, I support this request. Nux is a trusted person with a long experience in collaborating with us.

taavi added a subscriber: taavi.May 20 2023, 2:53 PM

analytics-privatedata-users is the wrong group and SRE-Access-Requests is the wrong workflow here. What you want for (especially client) log access is Logstash access which can be received via the nda LDAP group which is required via LDAP-Access-Requests.

Nux renamed this task from Requesting access to JS moniring for eccenux to Grant Access to nda for eccenux.EditedMay 20 2023, 8:50 PM
Nux updated the task description. (Show Details)
Nux edited projects, added LDAP-Access-Requests; removed SRE-Access-Requests.

analytics-privatedata-users is the wrong group and SRE-Access-Requests is the wrong workflow here. What you want for (especially client) log access is Logstash access which can be received via the nda LDAP group which is required via LDAP-Access-Requests.

Thanks. Fixed template and tags.

RhinosF1 added a subscriber: RhinosF1.May 20 2023, 8:52 PM

@Nux: do you have a WMF sponsor for this?

RhinosF1 added a comment.May 20 2023, 8:54 PM
In T337121#8868286, @RhinosF1 wrote:

@Nux: do you have a WMF sponsor for this?

@sgrabarczuk: Can you sponsor this formally? You'll need your manager and C-Level sign off?

jbond added subscribers: KFrancis, jbond.May 22 2023, 1:11 PM

@KFrancis are you able to confirm or arrange an NDA for @Nux thanks

jbond changed the task status from Open to In Progress.May 22 2023, 1:15 PM
jbond triaged this task as Medium priority.
KFrancis added a comment.May 22 2023, 7:18 PM

Hi all, I will need the volunteer's full name, mailing address, and email to process the NDA. Please send the following information to: kfrancis@wikimedia.org. Thank you!

Nux added a comment.May 22 2023, 9:11 PM

Sent an e-mail signed with my PGP, fingerprint: 86C84A9B865FDD51FCFB12D2EE3F8013A0DD3792.

MatthewVernon added a subscriber: MatthewVernon.Jun 6 2023, 10:22 AM

@KFrancis is the NDA still a work-in-progress here? [I'm on clinic duty this week and just want to make sure this ticket isn't waiting on SRE action]

KFrancis added a comment.Jun 6 2023, 4:52 PM

I'm still waiting for the following info from the user: volunteer's full name, mailing address, and email to process the NDA.

MatthewVernon added a comment.Jun 6 2023, 7:26 PM
In T337121#8872212, @Nux wrote:

Sent an e-mail signed with my PGP, fingerprint: 86C84A9B865FDD51FCFB12D2EE3F8013A0DD3792.

and

In T337121#8906818, @KFrancis wrote:

I'm still waiting for the following info from the user: volunteer's full name, mailing address, and email to process the NDA.

@Nux it looks like your email has gone AWOL; maybe try sending again?

Nux added a comment.Jun 6 2023, 11:04 PM

@KFrancis I sent you an email. Please let me know if it didn't arrive or something else would be needed.

KFrancis added a comment.Jun 7 2023, 12:58 AM

The agreement has been sent for signatures. I'll update when it's complete. Thanks!

MatthewVernon moved this task from Backlog to NDA Pending on the LDAP-Access-Requests board.Jun 8 2023, 1:14 PM
KFrancis added a comment.Jun 8 2023, 11:32 PM

Hi all, I am confirming the NDA is complete. Please proceed with the access request. Thanks!

ssingh claimed this task.Jun 19 2023, 5:38 PM
ssingh added a subscriber: ssingh.

Thanks @KFrancis!

This still needs someone from WMF to sponsor this request.

Jdlrobson added a subscriber: Jdlrobson.Jun 21 2023, 5:59 PM

@ssingh I + @sgrabarczuk can sponsor this. What do you need?

sgrabarczuk added a comment.Jun 21 2023, 6:02 PM

I confirm, I may be a sponsor.

ssingh added a comment.Jun 21 2023, 6:13 PM

@Jdlrobson, @sgrabarczuk: just the comment here is enough, I will process this shortly. Thanks.

gerritbot added a comment.Jun 21 2023, 6:52 PM

Change 931989 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: add eccenux to ldap_only_users

https://gerrit.wikimedia.org/r/931989

gerritbot added a project: Patch-For-Review.Jun 21 2023, 6:52 PM
gerritbot added a comment.Jun 21 2023, 7:02 PM

Change 931989 merged by Ssingh:

[operations/puppet@production] admin: add eccenux to ldap_only_users

https://gerrit.wikimedia.org/r/931989

Maintenance_bot removed a project: Patch-For-Review.Jun 21 2023, 7:11 PM
ssingh added a comment.Jun 21 2023, 7:14 PM

Added to nda. Resolving this, please open if there are any issues.

ssingh closed this task as Resolved.Jun 21 2023, 7:14 PM
Urbanecm_WMF mentioned this in T348520: Grant access to nda LDAP group to xqt.Oct 30 2023, 12:39 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL