Page MenuHomePhabricator
Create Task
Maniphest T365832

Requesting access to analytics-privatedata-users for Rae Adimer
Closed, ResolvedPublicRequest
Actions

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

  • Wikimedia developer account username: Rae Adimer
  • Email address: radimer@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-rsa 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
  • Requested group membership: analytics-privatedata-users
  • Reason for access: Seeking ssh login to analytics client servers without Hadoop/Hive/Presto, and dashboards in Superset that access private data. My work in MoveComms involves support for projects and communications where access to Superset data would be useful, and that support has recently started to involve querying private data from MariaDB. (for more context on the latter, see https://phabricator.wikimedia.org/P63108)
  • Name of approving party (manager for WMF/WMDE staff): Elena Lappen
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Yep!
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band (via email with @herron)
    • - and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

SubjectRepoBranchLines +/-
admin: add radimer to analytics-privatedata-usersoperations/puppetproduction+9 -7
admin: add radimer to analytics-privatedata-usersoperations/puppetproduction+12 -6
Customize query in gerrit

Event Timeline

RAdimer-WMF created this task.Fri, May 24, 3:30 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFri, May 24, 3:30 PM
RAdimer-WMF renamed this task from Requesting access to <ENTER RESOURCE NAME> for <ENTER YOUR USERNAME> to Requesting access to analytics-privatedata-users for Rae Adimer.Fri, May 24, 3:31 PM
elappen-WMF added a comment.Fri, May 24, 3:42 PM

Approving access from my end.

colewhite claimed this task.Tue, May 28, 10:32 PM
colewhite updated the task description. (Show Details)Tue, May 28, 10:37 PM
colewhite added subscribers: Ahoelzl, odimitrijevic, WDoranWMF, Milimetric.

Pinging one of @odimitrijevic, @Milimetric, @WDoranWMF, @Ahoelzl for Analytics team approval.

gerritbot added a comment.Tue, May 28, 10:40 PM

Change #1036593 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] admin: add radimer to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1036593

gerritbot added a project: Patch-For-Review.Tue, May 28, 10:40 PM
colewhite moved this task from Untriaged to Manager/NDA Approval/Confirmation on the SRE-Access-Requests board.Tue, May 28, 10:41 PM
colewhite changed the task status from Open to Stalled.Fri, May 31, 9:16 PM
colewhite removed colewhite as the assignee of this task.
colewhite subscribed.
Ladsgroup subscribed.Mon, Jun 3, 5:46 PM
odimitrijevic added a comment.Fri, Jun 7, 8:12 PM

approved

herron updated the task description. (Show Details)Mon, Jun 10, 7:37 PM
herron moved this task from Manager/NDA Approval/Confirmation to Awaiting User Input on the SRE-Access-Requests board.Mon, Jun 10, 7:44 PM
herron subscribed.

(SSH key verification email sent)

herron updated the task description. (Show Details)Mon, Jun 10, 7:53 PM
gerritbot added a comment.Mon, Jun 10, 8:22 PM

Change #1041218 had a related patch set uploaded (by Herron; author: Herron):

[operations/puppet@production] admin: add radimer to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1041218

gerritbot added a comment.Mon, Jun 10, 8:24 PM

Change #1036593 abandoned by Herron:

[operations/puppet@production] admin: add radimer to analytics-privatedata-users

Reason:

rebase went sideways, using Ic9683b55668b65a8d5e37aa6a513486f4a493686 instead

https://gerrit.wikimedia.org/r/1036593

herron moved this task from Awaiting User Input to Manager/NDA Approval/Confirmation on the SRE-Access-Requests board.Mon, Jun 10, 8:40 PM
herron added a subscriber: LMccabe.
In T365832#9830059, @elappen-WMF wrote:

Approving access from my end.

Hi @LMccabe @elappen-WMF we noticed when writing the patch that the email address has also changed from radimer-ctr@wikimedia.org to radimer@wikimedia.org, and that the approver on this task is different from the expiry contact. Could you confirm that this is expected? And also please confirm if we should remove the expiry date from the account?

It is currently defined like so:

radimer:
  ensure: present
  realname: Rae Adimer
  email: radimer-ctr@wikimedia.org
  expiry_date: "2024-06-30"
  expiry_contact: lmccabe@wikimedia.org

Thanks in advance

elappen-WMF added a comment.Mon, Jun 10, 9:25 PM

Hello! Yes I can confirm the email change is correct and yes you can remove the expiry. Also if needed confirming the change in manager from Lisa to me.

gerritbot added a comment.Tue, Jun 11, 4:16 PM

Change #1041218 merged by Herron:

[operations/puppet@production] admin: add radimer to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1041218

herron closed this task as Resolved.Tue, Jun 11, 4:19 PM
herron claimed this task.

The patch to provision this access has been merged and will fully propagate within the next 30 minutes. I'll transition this to resolved now, please re-open if any followup is needed. Thanks!

Maintenance_bot removed a project: Patch-For-Review.Tue, Jun 11, 4:30 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL