Page MenuHomePhabricator

Create shell access for Zeljko - RelEng rights
Closed, ResolvedPublic

Description

Zeljko,

I've created the task for this, so you can skip the create a ticket link, but you need to read and acklnowledge the steps in: https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Please review, and reply back with the following:

  1. Read, comprehend, and sign the Acknowledgement of Wikimedia Server Access Responsibilities document
  • Your labs username/wikitech username (a link to your profile is welcome).
    • We base production UID from labs UID, so you have to sign up on labs/wikitech before you request access to the normal cluster.
  • Your preferred shell user name.
  • Your public RSA/DSA key must be provided, and has a few criteria:
    • Key must be uploaded via a non-email means, the following suggestions suffice:
      • Put a copy of your public key on your wiki user page.
      • Paste your public key into a phabricator task directly or onto a file/paste via web (but not via email!)
      • Upload your own patchset to gerrit which includes your public key.

Your access has been previously approved by Greg, so we don't need the manager approval on this task.

Once you have done the following, please reassign this from you to me.

Thanks!

~RobH

Event Timeline

RobH assigned this task to zeljkofilipin.
RobH raised the priority of this task from to Medium.
RobH updated the task description. (Show Details)
RobH added a project: SRE-Access-Requests.
RobH added subscribers: RobH, greg, Krenair and 8 others.

Apologies for the late reply, I was traveling for the last 3 weeks. I am working on this now.

Apologies for being slow on this. I have installed a clean OS on my main machine before going to a 3 week business trip. Now that I am back I am overwhelmed with stuff that needs to be done. I am getting my machine set up, and this is high on my todo list.

@zeljkofilipin we can pair it together if you want :-]

@hashar: That would be great, thanks! So, this should be resolved around noon tomorrow CET. :)

Related, @zeljkofilipin has been added to the WMF-NDA Phabricator group ( T89230 ).

From our 1/1 make sure to use a dedicated key to connect to the wikimedia production cluster and configure your ssh client to only use that one:

Host *.wikimedia.org *.wmnet
	IdentityFile ~/.ssh/wmf_id_rsa.pub
	IdentitiesOnly yes
	StrictHostKeyChecking yes

The key can be used on different laptop or you can get one key per laptop up to you. Add the public key in operations/puppet.git at modules/admin/data/data.yaml

labs UID: 2580

preferred shell user name: zfilipin

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0EYlgOW63HKlQz7OduxiH1NM4NPxgjxci8qznJdlo75f54mFT308wFlI7DYL/JFkv6yoELEu/xzazRybWu7kpQdL6j95CUkQypOZ+dLMvBbtH1MZROyP/KO1ngwJH9KAmvwlFJ11JD2oCFqZIXtUNueAo5VJM0986JGAyEaIsUqaCNtXBaWKMreLv5nR347nZVKTp8/397buoFGwP3VnU6sbwZcsY8li9GyS6QKplxxe1TAKiOxfg9uaMgD1r6lGoAi6sxrislVZRBj+3PPyemyGraLKLmEaehQNZCp9spSv1rtjA5dl+I73g4v76lxExNJraDMyMdvxXxp6K6J5x zfilipin@wmf_prod

gerritbot added a subscriber: gerritbot.

Change 190202 had a related patch set uploaded (by Hashar):
Add account for Željko Filipin

https://gerrit.wikimedia.org/r/190202

Patch-For-Review

Change 190202 merged by Alexandros Kosiaris:
Add account for Željko Filipin

https://gerrit.wikimedia.org/r/190202

akosiaris added a subscriber: akosiaris.

Changed merged. Welcome to the production cluster :-)

Change 190210 had a related patch set uploaded (by Alexandros Kosiaris):
Followup commit for I051a7a7070136b79

https://gerrit.wikimedia.org/r/190210

Patch-For-Review

Change 190210 merged by Alexandros Kosiaris:
Followup commit for I051a7a7070136b79

https://gerrit.wikimedia.org/r/190210

Confirmed with Zeljkof that everything works for him :-)