Page MenuHomePhabricator

Get Data Engineering folks access to hosts and systems needed for maintenance of the existing dumps system
Open, HighPublic

Description

  • Determine who on the Data Engineering team ought to have access to the snapshot, dumpsdata and clouddumps hosts, along with the various dumps repos and supporting tools
  • Determine which SREs will handle puppet merges, cunim usage and such, and see if there is any additional access they need

For the first group of folks, do immediately:

  • root access on snapshot, dumpsdata, clouddumps1001,2 hosts
  • admin in deployment-prep project
  • access to icinga for downtiming, acking alerts
  • access to grafana and similar monitoring services
  • membership in ops-dumps email alias
  • join Dumps-Generation phab project or otherwise arrange for regular notifications to updated/new tasks
  • admin of xmldatadumps-l email list
  • member of deployment group in puppet for MW backports, dumps scap
  • added to the #acl*procurement-review acl for viewing procurement tasks

For the first group, do after a while:

  • +2 in dumps, mwbzutils, dumps/scap repos
  • +2 in mediawiki-core, mediawiki-config, ActiveAbstract repos

Event Timeline

ArielGlenn created this task.
ArielGlenn updated the task description. (Show Details)

After a conversation with Will, Dan and others, the people who need the above access are @Milimetric , @xcollazo and @JEbe-WMF so now let me get started on that.

Change 936003 had a related patch set uploaded (by ArielGlenn; author: ArielGlenn):

[operations/puppet@production] Give Dan Andreescu and Jennifer Ebe root on dumps hosts

https://gerrit.wikimedia.org/r/936003

@RobH Would you be willing to add Milimetric, xcollazo and Jebe-WMF to the #acl*procurement-review acl so that they can view procurement tasks? I hope no new tasks will come up for some time but just in case, and it will let us look at psat ones and discuss. They will be working with me on the dumps now. Thanks!

@JEbe-WMF @Milimetric and @xcollazo would you please subscribe to https://lists.wikimedia.org/postorius/lists/xmldatadumps-l.lists.wikimedia.org/ and let me know which email addresses you used? I will add them as co-admins of the list. Thanks!

@JEbe-WMF and @xcollazo you should both sign up for MediaWiki deployment training here: https://phabricator.wikimedia.org/project/board/5265/ and get scheduled for that. Once that's done, we can add you to the deployers list in puppet. (Dan you are already a deployer so you're off the hook ;-) )

@ArielGlenn I approve. Let me know if you need me to comment on individual tasks.

@RobH Would you be willing to add Milimetric, xcollazo and Jebe-WMF to the #acl*procurement-review acl so that they can view procurement tasks? I hope no new tasks will come up for some time but just in case, and it will let us look at psat ones and discuss. They will be working with me on the dumps now. Thanks!

Done, all three users can now view tasks in the Procurement S4 space. Please convey to them the caveats of this access (no discussion of pricing in public, no sharing quotes outside of the organization, etc...)

@JEbe-WMF @Milimetric and @xcollazo would you please subscribe to https://lists.wikimedia.org/postorius/lists/xmldatadumps-l.lists.wikimedia.org/ and let me know which email addresses you used? I will add them as co-admins of the list. Thanks!

Sent you an email with my email (Didn't want to post the address publicly.). Thanks!

@JEbe-WMF and @xcollazo you should both sign up for MediaWiki deployment training here: https://phabricator.wikimedia.org/project/board/5265/ and get scheduled for that. Once that's done, we can add you to the deployers list in puppet. (Dan you are already a deployer so you're off the hook ;-) )

Opened ticket for myself at T341377.

Change 936003 merged by ArielGlenn:

[operations/puppet@production] Give Dan Andreescu and Jennifer Ebe root on dumps hosts

https://gerrit.wikimedia.org/r/936003

Dan and Xabriel already are members of the wmf group, giving access to grafana and icinga (though contact info might need to be added for executing commands on icinga). Jennifer is not yet in the group.

@JEbe-WMF you will need to folllow the instructions here https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#Checklist and create a task, feel free to add me as a subscriber and link this one to it. Make sure you ask for membership in the wmf ldap group. That will give you icinga/grafana/logstash access.

Change 938226 had a related patch set uploaded (by ArielGlenn; author: ArielGlenn):

[operations/puppet@production] add jebe and xcollazo to nagios command access

https://gerrit.wikimedia.org/r/938226

Change 938226 merged by ArielGlenn:

[operations/puppet@production] add jebe and xcollazo to nagios command access

https://gerrit.wikimedia.org/r/938226

There's one item in the checklist left before this task can be closed. And basically the holdup is just about getting the signoff from Tyler that the deployment trainings were completed; then we can get the rest of that item done.