Page MenuHomePhabricator

Requesting access to analytics-privatedata-users group for DSantamaria
Closed, ResolvedPublic

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

  • Wikimedia developer account username: DSantamaria
  • Email address: dsantamaria@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFl4I2eCE83IlIHvPQ6U7ohFns5gElNXh1Z9LeUSs7aG dsantamaria@wmf3613
  • Requested group membership: analytics-privatedata-users
  • Reason for access: Superset dashboard https://superset.wikimedia.org/superset/dashboard/444/
  • Name of approving party (manager for WMF/WMDE staff): Amy Tsay
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: ✅
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

DSantamaria renamed this task from Add DSantamaria to the analytics-privatedata-users group to Requesting access to analytics-privatedata-users group for DSantamaria.Mar 12 2025, 4:50 PM
DSantamaria updated the task description. (Show Details)
BCornwall changed the task status from Open to In Progress.Mar 12 2025, 7:30 PM
BCornwall triaged this task as Medium priority.
BCornwall updated the task description. (Show Details)
BCornwall subscribed.

Hi, @DSantamaria! Your SSH key is rather weak (2048-bit RSA). I'd advise you to generate a new key, such as ECDSA. Instructions can be found here:

https://wikitech.wikimedia.org/wiki/SRE/Production_access#Generating_your_SSH_key

Change #1127996 had a related patch set uploaded (by BCornwall; author: BCornwall):

[operations/puppet@production] Add dsantamaria to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1127996

Sorry for the confusion, @DSantamaria, but analytics-privatedata-users doesn't need an SSH key, so that was all for naught! I've got a patch ready for merging but we need approval from your manager first and e.g. @Ottomata or @odimitrijevic

Hi @BCornwall ! group owner approval for analytics-privatedata-users is not needed for WMF or WMDE staff.

But anyway, approved!

From https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#analytics-privatedata-users, "WMF or WMDE staff do not need explicit approval from group owners", so @odimitrijevic's permission is not required. Sorry about the confusion; updating the task.

Ugh, sorry about that. But we do still nee @ATsay-WMF to approve, right?

Ugh, sorry about that. But we do still nee @ATsay-WMF to approve, right?

No worries, this is a recent change so even I had forgotten about it. And yes, Amy's approval is still required.

Change #1127996 merged by Ssingh:

[operations/puppet@production] Add dsantamaria to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1127996

@DSantamaria: This has been merged, please try accessing Superset ~30 mins after this comment. Thank you!