Requesting access to analytics-privatedata-users for GeorgeMikesell
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	cchen
	Mar 1 2024, 10:19 PM

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

Wikimedia developer account username: GeorgeMikesell
Email address: gmikesell-ctr@wikimedia.org
SSH public key (must be a separate key from Wikimedia cloud SSH access): sh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOnm+TGg4lLdOeDMaeB+X8Gtkjn84OJvzX4FRkjTUvnm gmikesell-ctr@wikimedia.org
Requested group membership: analytics-private-data (along with Keberos identity)
Reason for access: user needs to do QA work for instrumentations and scehmas
Name of approving party (manager for WMF/WMDE staff): @SBisson
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Yes
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
- User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
- The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

	Subject	Repo	Branch	Lines +/-
	admin: Add GeorgeMikesell's production access	operations/puppet	production	+13 -1

Customize query in gerrit

Event Timeline

cchen created this task.Mar 1 2024, 10:19 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 1 2024, 10:19 PM

• Marostegui triaged this task as Medium priority.Mar 4 2024, 6:00 AM

• Marostegui updated the task description. (Show Details)

• Marostegui updated the task description. (Show Details)Mar 4 2024, 6:05 AM

While we verify the ssh account - @SBisson can you approve this request?
For analytics-privatedata-users group, @odimitrijevic is this approved?

• Marostegui updated the task description. (Show Details)Mar 4 2024, 5:18 PM

Approved

• Marostegui updated the task description. (Show Details)Mar 5 2024, 6:12 AM

I approve but I am not @GMikesell-WMF's manager. That woul probably be @Jrbranaa

Is this with or without shell access? Could we have a reason / what is the purpose of this access?

I approve

Confirmed per https://www.mediawiki.org/wiki/Wikimedia_Quality_and_Test_Engineering_Team

Dzahn moved this task from Manager/NDA Approval/Confirmation to Ready To Go on the SRE-Access-Requests board.Mar 14 2024, 9:30 PM

@Jrbranaa Thanks for the approval, we just need one more small thing. Could you let us know an expiry/renewal date for this access, please?

We add these for contractors and I see a "-ctr" in the email address.

Dzahn moved this task from Ready To Go to Awaiting User Input on the SRE-Access-Requests board.Mar 14 2024, 9:34 PM

Reminder to @Jrbranaa that this is blocked on getting an answer to the question in the previous comment. As an addendum please note that modifying that later is quite trivial and shouldn't cause loss of access.

Sorry for the delay. The renewal/expiry date is June 30, 2025.

jcrespo claimed this task.Mar 25 2024, 6:02 PM

jcrespo moved this task from Awaiting User Input to Patch in Review on the SRE-Access-Requests board.

Change #1014426 had a related patch set uploaded (by Jcrespo; author: Jcrespo):

[operations/puppet@production] admin: Add GeorgeMikesell's production access

https://gerrit.wikimedia.org/r/1014426

gerritbot added a project: Patch-For-Review.Mar 26 2024, 8:48 AM

Mentioned in SAL (#wikimedia-operations) [2024-03-26T17:06:50Z] <jynus> add georgemikesell to wmf ldap group T358922

Change #1014426 merged by Jcrespo:

[operations/puppet@production] admin: Add GeorgeMikesell's production access

https://gerrit.wikimedia.org/r/1014426

jcrespo moved this task from Patch in Review to Ready To Go on the SRE-Access-Requests board.Mar 26 2024, 5:10 PM

@GMikesell-WMF (or @cchen on his behalf)- access has been merged, it may take ~30 minutes to be fully deployed on all servers, after that please check you can access the production hosts and given datasets. Kerberos principal has been also created, and instructions have been automatically sent to email.

Please reopen this ticket if you have further doubts, questions or problems logging in. Here is some documentation about it: https://wikitech.wikimedia.org/wiki/SRE/Production_access#Setting_up_your_access but please communicate if you have any issues.

Mentioned in SAL (#wikimedia-operations) [2024-03-26T19:48:44Z] <mutante> phabricator - added GMikesell-WMF to WMF-NDA because that goes together with the wmf LDAP group (https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#WMF_Group) - T358922

Requesting access to analytics-privatedata-users for GeorgeMikesellClosed, ResolvedPublicActions