Requesting access to analytics-privatedata-users for bdgreenlee
Closed, ResolvedPublicRequest
Actions

Assigned To

Authored By

	bdgreenlee
	Mar 6 2024, 4:28 PM

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

Wikimedia developer account username: bdgreenlee
Email address: bgreenlee-ctr@wikimedia.org
SSH public key (must be a separate key from Wikimedia cloud SSH access):

ssh-rsa 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 bgreenlee-ctr@wikimedia.org

Requested group membership: analytics-privatedata-users
Reason for access: Data modeling
Name of approving party (manager for WMF/WMDE staff): @odimitrijevic
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Yes
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
- User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
- The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

	Subject	Repo	Branch	Lines +/-
	Add SSH and kerberos access for bdgreenlee	operations/puppet	production	+3 -1
	data.yaml: Add bdgreenlee to analytics-privatedata-users	operations/puppet	production	+10 -7

Customize query in gerrit

Related Objects

Mentioned In: T359645: Requesting ssh & kerberos access to analytics-privatedata-users (with ssh & kerberos) for bdgreenlee
T359197: Grant Access to analytics-privatedata-users for bdgreenlee
Mentioned Here: rECIR10095612b6d5: Create patch set 2

Event Timeline

bdgreenlee created this task.Mar 6 2024, 4:28 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 6 2024, 4:28 PM

Approved

bdgreenlee mentioned this in T359197: Grant Access to analytics-privatedata-users for bdgreenlee.Mar 6 2024, 5:12 PM

@odimitrijevic I assume you are also their manager and hence approving for manager and analytics group?

Marostegui triaged this task as Medium priority.Mar 6 2024, 5:23 PM

Yes, that's correct! Approve x 2

Marostegui updated the task description. (Show Details)Mar 6 2024, 6:57 PM

Marostegui updated the task description. (Show Details)

Waiting for ssh out of band verification

Marostegui moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.Mar 7 2024, 6:29 AM

Marostegui updated the task description. (Show Details)Mar 7 2024, 4:05 PM

Change rECIR10095612b6d5 had a related patch set uploaded (by Marostegui; author: Marostegui):

[operations/puppet@production] data.yaml: Add bdgreenlee to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1009561

gerritbot added a project: Patch-For-Review.Mar 7 2024, 4:09 PM

Which access you specifically need for analytics-private-users? https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Analytics_shell_(posix)_groups_explained

Sounds like, at least for now, no kerberos, no ssh. Presumably if it turns out I do need either, I can request it then. Thanks.

Incidentally, I originally posted that reply via email and it failed (guessing maybe bolding that text in my email client caused it to send in an unrecognized format?):

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  general@phabricator.wikimedia.org
    (generated from T359417+public+35aca05f1a7eb7f0@phabricator.wikimedia.org)
    local delivery failed

The following text was generated during the delivery attempt:

------ general@phabricator.wikimedia.org
       (generated from T359417+public+35aca05f1a7eb7f0@phabricator.wikimedia.org) ------

/usr/local/bin/phab_epipe.py:57: DeprecationWarning: The SafeConfigParser class has been renamed to ConfigParser in Python 3.2. This alias will be removed in future versions. Use ConfigParser directly instead.
  parser = configparser.SafeConfigParser()
Error parsing message

Please contact a WMF Phabricator admin.
[2024-03-07 17:16:01] EXCEPTION: (RuntimeException) Undefined index: subject at [<arcanist>/src/error/PhutilErrorHandler.php:251]
arcanist(), ava(), phorge(), translations(), wmf-ext-misc()
  #0 PhutilErrorHandler::handleError(integer, string, string, integer, array) called at [<phorge>/scripts/mail/mail_handler.php:58]

Marostegui moved this task from Awaiting User Input to Patch in Review on the SRE-Access-Requests board.Mar 7 2024, 5:28 PM

Change rECIR10095612b6d5 merged by Marostegui:

[operations/puppet@production] data.yaml: Add bdgreenlee to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1009561