Page MenuHomePhabricator
Create Task
Maniphest T420410

Grant Access to WMDE LDAP group for Sarmbruster
Closed, ResolvedPublicRequest
Actions

Description

Sarmbruster / stefan.armbruster@extern.wikimedia.de

  • Do you currently have shell access (Yes/No)?

No

  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc):

I'm a contractor for WMDE and I do need this for the project's work.

  • The specific LDAP group that you want to be added to (optional):

wmde

For contractors only:

  • Contract end date:

2026-04-30

  • Contract contact person:

@WMDE-leszek
@karapayneWMDE

  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - Approval from @karapayneWMDE or @WMDE-leszek for wmde group membership.
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
admin: Record LDAP access for sarmbrusteroperations/puppetproduction+6 -0
Customize query in gerrit

Related Objects

Event Timeline

Sarmbruster created this task.Mar 17 2026, 8:24 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 17 2026, 8:24 PM
WMDE-leszek added a comment.Mar 18 2026, 8:44 AM

Hello, I approve this request on WMDE's end. Thank you!

Aklapper added a comment.Mar 18 2026, 9:44 AM

@Sarmbruster: Please also link your LDAP account to your Phabricator account, so your 'LDAP User' account is shown on your Phabricator profile. Thanks a lot! :)

ayounsi updated the task description. (Show Details)Mar 18 2026, 1:29 PM
ayounsi added subscribers: KFrancis, ayounsi.

@KFrancis can you organize the NDA for this request ? Thanks

Sarmbruster added a comment.Mar 18 2026, 2:56 PM
In T420410#11721959, @Aklapper wrote:

@Sarmbruster: Please also link your LDAP account to your Phabricator account, so your 'LDAP User' account is shown on your Phabricator profile. Thanks a lot! :)

Done. Anything else needed from my side?

KFrancis added a comment.Mar 18 2026, 4:48 PM

Hi all, the NDA has been sent for signatures. I'll confirm when it's complete. Thanks!

Sarmbruster added a comment.Mar 19 2026, 8:58 AM

Just signed the NDA via docusign.

Scott_French subscribed.Mar 19 2026, 10:27 PM

Thanks, all. Once the NDA confirmation comes through, I believe we should be good to proceed with adding sarmbruster to wmde and nda per the docs.

Aside: I was slightly confused by the fact that this appears to be using the production shell access template, but is only requesting LDAP group access.

WMDE-leszek added a comment.Mar 19 2026, 10:47 PM

apologies @Scott_French I believe I am to be blame for accidentally pointing to a wrong template.

KFrancis added a comment.Mar 19 2026, 11:46 PM

Hi all, the NDA is complete. Thanks!

Scott_French renamed this task from Requesting access to WMDE LDAP group for Sarmbruster to Grant Access to WMDE LDAP group for Sarmbruster.Mar 20 2026, 12:17 AM
Scott_French updated the task description. (Show Details)
Scott_French edited projects, added LDAP-Access-Requests; removed SRE-Access-Requests.
Scott_French updated the task description. (Show Details)EditedMar 20 2026, 12:21 AM

Thanks, @KFrancis, and no worries all, @WMDE-leszek.

Great, I've updated the task description and title to reflect the request.

@Sarmbruster - If you could update the For contractors only portion with the appropriate contact and date, that would be greatly appreciated.

Sarmbruster updated the task description. (Show Details)Mar 20 2026, 8:22 AM

@Scott_French Thanks, I've updated the requested parts.

Scott_French added a comment.EditedMar 20 2026, 2:28 PM

@Sarmbruster - Thank you! Apologies for the imprecision - for Contract contact person could you add the WMDE point of contact you'll be working with?

WMDE-leszek updated the task description. (Show Details)Mar 20 2026, 7:03 PM

I've added us WMDE contact people in form of phabricator user links. Let me know if I should explicitly state email address or legal names there.

Scott_French added a comment.Mar 20 2026, 7:09 PM

@WMDE-leszek - Great, thank you! No, this is fine - I can convert them to email addresses via LDAP anyway. I'll get this rolling shortly.

gerritbot added a comment.Mar 20 2026, 7:12 PM

Change #1256490 had a related patch set uploaded (by Scott French; author: Scott French):

[operations/puppet@production] admin: Record LDAP access for sarmbruster

https://gerrit.wikimedia.org/r/1256490

gerritbot added a project: Patch-For-Review.Mar 20 2026, 7:12 PM
gerritbot added a comment.Mar 20 2026, 7:38 PM

Change #1256490 merged by Scott French:

[operations/puppet@production] admin: Record LDAP access for sarmbruster

https://gerrit.wikimedia.org/r/1256490

Scott_French closed this task as Resolved.Mar 20 2026, 7:58 PM
Scott_French claimed this task.

Alright, this is now done - sarmbruster has been added to both nda and wmde. Thanks, all!

Maintenance_bot removed a project: Patch-For-Review.Mar 20 2026, 8:30 PM
WMDE-leszek mentioned this in T424402: Extend wmde/nda LDAP access for Sarmbruster.Fri, Apr 24, 9:38 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits