Requesting access to analytics-privatedata-users for mpham
Closed, DuplicatePublicRequest
Actions

Assigned To

Authored By

	MPhamWMF
	Mar 21 2024, 2:48 PM

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

Wikimedia developer account username: Mike Pham
Email address: mpham@wikimedia.org
SSH public key (must be a separate key from Wikimedia cloud SSH access): not needed
Requested group membership: analytics-privatedata-users
Reason for access: superset
Name of approving party (manager for WMF/WMDE staff): Marshall Miller @MMiller_WMF
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: working on it, need to reset mfa
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)

[N/A] - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
[N/A] - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.

- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

	Subject	Repo	Branch	Lines +/-
	admin: Add Mike Pham (mttp) to analytics-privatedata-users (keyless)	operations/puppet	production	+8 -1

Customize query in gerrit

Related Objects

Mentioned Here: T270438: LDAP access to the wmf group for Mike Pham

Event Timeline

MPhamWMF created this task.Mar 21 2024, 2:48 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 21 2024, 2:48 PM

mpopov subscribed.Mar 21 2024, 2:48 PM

I am Mike's manager and I approve this request!

@MPhamWMF Please read carefully and, if agreed, sign L3 to proceed with the access request. Even if you are not asking for ssh access, there is a "Handling sensitive data" part that still applies to you (but please read it all, as you are signing it all/agreeing for later further access, if provided!).

Let me know if you need help ti find someone to reset your MFA.

For SREs: User is already on WMF group, only additional access is required.

Also, and as a recommendation, but not a hard requirement, please consider linking your LDAP account to your Phabricator account for faster admin request management 0:-). It should be doable here for you: https://phabricator.wikimedia.org/settings/user/MPhamWMF/page/external/

jcrespo updated the task description. (Show Details)Mar 25 2024, 9:56 AM

Thanks @jcrespo . Andre helped me reset my MFA and I was able to sign the L3, and link my LDAP account.

jcrespo updated the task description. (Show Details)Mar 25 2024, 10:02 AM

I can see it, thank you! So now only pending approval from Data-Engineering 's list of people that can approve that access: @odimitrijevic @Milimetric @WDoranWMF or @Ahoelzl.

Approved from me!

jcrespo claimed this task.Mar 26 2024, 3:58 PM

jcrespo updated the task description. (Show Details)

jcrespo moved this task from Manager/NDA Approval/Confirmation to Patch in Review on the SRE-Access-Requests board.

Change #1014558 had a related patch set uploaded (by Jcrespo; author: Jcrespo):

[operations/puppet@production] admin: Add Mike Pham (mttp) to analytics-privatedata-users (keyless)

https://gerrit.wikimedia.org/r/1014558

gerritbot added a project: Patch-For-Review.Mar 26 2024, 4:38 PM

Apologies, but this access was already provided back in 2020 at T270438 (https://gerrit.wikimedia.org/r/c/operations/puppet/+/650298), and it is still active. I only realized when I got a duplicate key error.

@MPhamWMF Can you try accessing it now, in case you have issues? Or maybe there was some additional access asked, not already provided?

Change #1014558 abandoned by Jcrespo:

[operations/puppet@production] admin: Add Mike Pham (mttp) to analytics-privatedata-users (keyless)

Reason:

https://phabricator.wikimedia.org/T360641#9662474

https://gerrit.wikimedia.org/r/1014558

jcrespo moved this task from Patch in Review to Awaiting User Input on the SRE-Access-Requests board.Mar 26 2024, 5:09 PM

@jcrespo , Looks like I have access. Thanks, and sorry for the confusion with the duplicate request (I didn't realize either)

jcrespo closed this task as a duplicate of T270438: LDAP access to the wmf group for Mike Pham.Mar 27 2024, 8:42 AM

Requesting access to analytics-privatedata-users for mphamClosed, DuplicatePublicRequestActions