As new ML SRE, I would like to request access to the following groups:
and also a kerberos identity.
uid: dpogorzelski
The motivation is to be able to access the Data Lake and help my team with training data pipelines fetching data from it.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| admin: add dpogorzelski to ml-team-admins, analytics-privatedata-users | operations/puppet | production | +2 -2 |
rationale for ml-team-admins: while Dawid will soon be in ops, some tools available only to ml-team-admins will need to be tested in the future and not needing sudo to run/test them will be a big plus.
I think there is still a misunderstanding here but given the full root access is requested as well, let's go with that. Thanks for confirming.
My understanding is that asking a kerberos identity implies https://wikitech.wikimedia.org/wiki/Data_Platform/Data_access#All_of_the_above, what is the misunderstanding? I am genuinely asking to figure out what are the pain points for the other task :)
Change #1201187 had a related patch set uploaded (by Dzahn; author: Dzahn):
[operations/puppet@production] admin: add dpogorzelski to ml-team-admins, analytics-privatedata-users
Hello @calbon can we have one more approval over here for the ml-team-admins and analytics-privatedata part?
Change #1201187 merged by Elukey:
[operations/puppet@production] admin: add dpogorzelski to ml-team-admins, analytics-privatedata-users
I got in touch with @calbon on slack and got the approval from him, I think he didn't have time to follow up so I am going to unblock/expedite the task :)
elukey@krb1002:~$ sudo manage_principals.py get dpogorzelski get_principal: Principal does not exist while retrieving "dpogorzelski@WIKIMEDIA".
elukey@krb1002:~$ sudo manage_principals.py create dpogorzelski --email_address=dpogorzelski@wikimedia.org Principal successfully created. Make sure to update data.yaml in Puppet. Successfully sent email to dpogorzelski@wikimedia.org
@DPogorzelski-WMF I created a kerberos identity for you (see https://wikitech.wikimedia.org/wiki/Data_Platform/Systems/Kerberos for more info). You should have received an email with a temporary password, you'll need to log in to one of the stat10xx hosts and run kinit with that password. The first time it will ask you for a new one, please keep it secure since we don't store it elsewhere :)