Page MenuHomePhabricator

Transfer Neil Shah-Quinn's production access to new developer account
Closed, ResolvedPublicRequest

Description

I changed my name several years ago and I finally got tired of having my old name on my developer account, so I've created a new account and am transferring my permissions to it.

https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#Renaming_shell_users

Requestor provided information and prerequisites

Old account

  • Wikitech username: Neil P. Quinn-WMF
  • Shell username: neilpquinn-wmf

New account

  • Wikitech username: Neil Shah-Quinn (WMF)
  • Shell username: nshahquinn-wmf

Other info

  • Email address: nshahquinn@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): Same as existing: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvdgZSS9FVp+GTF29K3OmkaOgtLAMjBROeZ/3KpuBoX nshahquinn@wikimedia.org_Wikimedia_production
  • Requested group membership: Same as existing, namely:
    • analytics-privatedata-users
    • analytics-product-users
    • wmf LDAP group
    • Analytics Kerberos principal
  • Reason for access: Accessing and analyzing private data in my role as data scientist
  • Name of approving party (manager for WMF/WMDE staff): @kzimmerman
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Done
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Change 923631 had a related patch set uploaded (by RhinosF1; author: RhinosF1):

[operations/puppet@production] admin: rename neilpquinn-wmf to nshahquinn-wmf

https://gerrit.wikimedia.org/r/923631

https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#Renaming_shell_users

Just to be clear, my prod account should be connected to the new developer account I've created rather than the old developer account (assuming that dev and prod accounts do actually get linked in some way). Not sure if that affects whether this should be treated as a rename or a new creation.

Change 927588 had a related patch set uploaded (by MVernon; author: MVernon):

[operations/puppet@production] admin: Add nshahquinn-wmf (new name for extant staff member)

https://gerrit.wikimedia.org/r/927588

Change 927588 merged by MVernon:

[operations/puppet@production] admin: Add nshahquinn-wmf (new name for extant staff member)

https://gerrit.wikimedia.org/r/927588

Hi @nshahquinn-wmf. I've created the new account (and added it to the relevant groups, and made a new krb principal).

If you need anything from your old home directory, please copy it across; when you're done (or if you're happy there's nothing there you need), please reassign this ticket to @MoritzMuehlenhoff for the removal of the old access.

Separately, I guess you have things in HDFS? Best would be to open a separate ticket tagged Data Engineering for that to be dealt with.

I hope that's all clear, and sorry for the delay.

@MatthewVernon thank you very much! Today, I started setting up the new account and testing everything out. I copied over my old home directory, and I'll spend a little time making sure nothing's missing. Once that's done, I'll pass this ticket along for the removal of the access.

I'm all set up with the new account with the exception of some Superset issues: T339385. Once those are sorted, we can lock the old account.

Separately, I guess you have things in HDFS? Best would be to open a separate ticket tagged Data Engineering for that to be dealt with.

For the record, I went through and deleted everything in my old account's HDFS home folder.

nshahquinn-wmf added a subscriber: MatthewVernon.

Everything is now migrated to the new account. It's safe to remove access from the old account and delete the data in its home directories.

Change 933388 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove access for neilpquinn-wmf (old account name of nshahquinn-wmf)

https://gerrit.wikimedia.org/r/933388

Change 933388 merged by Muehlenhoff:

[operations/puppet@production] Remove access for neilpquinn-wmf (old account name of nshahquinn-wmf)

https://gerrit.wikimedia.org/r/933388

I have removed SSH access for your neilpquinn-wmf account and removed it from the "wmf" LDAP group. The Kerberos principal was also removed. I opened the usual HDFS data transfer bug as T340524 (following our standard procedure, it can simply be closed on their end when your homes all come up empty). Resolving, if you run into any issues, please reopen!

Change 923631 abandoned by RhinosF1:

[operations/puppet@production] admin: rename neilpquinn-wmf to nshahquinn-wmf

Reason:

https://gerrit.wikimedia.org/r/923631