Page MenuHomePhabricator

Please add Abstract Wiki team members to `deployment` prod SRE group
Closed, ResolvedPublicRequest

Description

We're preparing for Wikifunctions to go live, so it would be great if all team members had the rights to participate, able to deploy our services as well as backports for MW things as needed.

  • jforrester {James F.)
  • apine (Cory)
  • cec (Carrie)
  • dmartin (David M.)
  • gengh (Geno)
  • kindrobot (Stef)

Event Timeline

Hi @Jdforrester-WMF: I am the SRE on clinic duty and happy to fulfill this request. Some notes before we can start processing this:

  1. @CCoxwell-WMF and @gengh: please note that you do not currently have shell access and will need to file separate tickets for that with the relevant information on the template. To speed up the process, please complete all the steps and get the managerial approval on the task.
  1. Further, @thcipriani this requires your approval.

I will add the other members in the meantime.

Change 931675 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: update membership for deployment and deploy-service

https://gerrit.wikimedia.org/r/931675

deployment includes deploy-service rights, so granting both is not necessary.

  1. Further, @thcipriani this requires your approval.

Approved for deployment—you'll need to be in that group to access kubeconfig files.

@Jdforrester-WMF do you need deploy-service, too? My puppet grepping fails me here.

deployment includes deploy-service rights, so granting both is not necessary.

Hmm, is that new? I certainly had deployment when I was granted deploy-service, so I assume it was needed at the time.

  1. Further, @thcipriani this requires your approval.

Approved for deployment—you'll need to be in that group to access kubeconfig files.

Thanks!

@Jdforrester-WMF do you need deploy-service, too? My puppet grepping fails me here.

Maybe not? Happy to just go with deployment if that's all that needed nowadays.

deployment includes deploy-service rights, so granting both is not necessary.

Hmm, is that new? I certainly had deployment when I was granted deploy-service, so I assume it was needed at the time.

Looks like it changed in 2017. https://gerrit.wikimedia.org/r/plugins/gitiles/operations/puppet/+/33c634b3c4166f5d23cc68d98a8130e98459286e%5E%21/hieradata/role/common/deployment_server.yaml

Jdforrester-WMF renamed this task from Please add Abstract Wiki team members to `deployment` and `deploy-service` prod SRE groups to Please add Abstract Wiki team members to `deployment` prod SRE group.Jun 22 2023, 8:20 PM
Jdforrester-WMF updated the task description. (Show Details)

Change 931675 merged by Ssingh:

[operations/puppet@production] admin: update membership for deployment group

https://gerrit.wikimedia.org/r/931675

deployment includes deploy-service rights, so granting both is not necessary.

Thanks, updated to use only deployment.

Dzahn changed the task status from Open to In Progress.EditedJun 29 2023, 8:40 PM
Dzahn assigned this task to CCoxwell-WMF.
Dzahn changed the status of subtask T340614: Requesting access to deployment for gengh from Open to In Progress.
Dzahn subscribed.

Access for @gengh is handled by T340614. For @CCoxwell-WMF we still need such a ticket. Carrie, can you copy basically what Geno did? thanks!

Access for Geno should work now. Feel free to try it out and let us know.