Page MenuHomePhabricator

access request for researcher to analytics-users in Hadoop
Closed, ResolvedPublic

Description

Hi,

We will be onboarding a researcher who needs access to analytics-users
group in Hadoop. We'd appreciate your help with it.

Name: Ashwin Pradeep Paranjape
Wikitech shell username: ashwinpp
Public Key: available at https://wikitech.wikimedia.org/wiki/User:Ashwinpp
Specific request: please add Ashwin to analytics-users group in Hadopp
cluster.
When we need it by: Monday, February 16

Please let me know if you need more information.

Thanks,
Leila

SRE

Event Timeline

leila updated the task description. (Show Details)
leila added a project: acl*sre-team.
leila subscribed.
Aklapper renamed this task from access request to access request for researcher to analytics-users in Hadoop.Feb 11 2015, 6:05 PM
Aklapper updated the task description. (Show Details)
Aklapper set Security to None.
Dzahn triaged this task as High priority.Feb 13 2015, 9:33 PM
Dzahn added a project: SRE-Access-Requests.
Dzahn subscribed.

raising priority because due date is Monday

Hiya! Sorry for the delay on this! (Leila, poke me next time!)

Has Ashwin signed this?
https://phabricator.wikimedia.org/L3

gerritbot subscribed.

Change 191338 had a related patch set uploaded (by Ottomata):
Put new user Ashwin Pradeep Paranjape in analytics-users group

https://gerrit.wikimedia.org/r/191338

Patch-For-Review

Also, I think we need approval from a manager for Ashwin. I'm not sure who this would be. Dario?

@Ottomata, Ashwin has signed the link. Approval should come from Toby. He was in the ops-requests email I sent this request in. Should I ask him to approve in the same email thread?

Change 191338 merged by Ottomata:
Put new user Ashwin Pradeep Paranjape in analytics-users group

https://gerrit.wikimedia.org/r/191338

@Ottomata, I just talked to Toby about it. He approved that it's fine to give Ashwin access to what Bob has access to given that he has signed the NDA and MOU.

Great, thanks.

Bob also has access to analytics-privatedata-users, private data in Hadoop. I think we don't need that for this.

Instead, I will also grant access to statistics-privatedata-users. This will give Ashwin access to stat1002, but not unsampled webrequest logs in hadoop.

Change 191478 had a related patch set uploaded (by Ottomata):
Also add ashwinpp to statistics-privatedata-users

https://gerrit.wikimedia.org/r/191478

Patch-For-Review

Change 191478 merged by Ottomata:
Also add ashwinpp to statistics-privatedata-users

https://gerrit.wikimedia.org/r/191478

You'll need this in your .ssh/config

ForwardAgent no

Host !bast1001.wikimedia.org *.wikimedia.org *.wmnet 
     ProxyCommand ssh -a -W %h:%p bast1001.wikimedia.org

@Ottomata, I'm sorry to resurrect this task.

Can you use Ashwin's new public key here: https://wikitech.wikimedia.org/wiki/User:Ashwinpp instead of the old one? The old public and private keys were on a computer that Ashwin didn't have full control over and we figured it's safer to regenerate new public and private keys and give him access only through his own machine with the new keys.

Change 191668 had a related patch set uploaded (by Ottomata):
Change SSH key for Ashwinpp

https://gerrit.wikimedia.org/r/191668

Patch-For-Review

Change 191668 merged by Ottomata:
Change SSH key for Ashwinpp

https://gerrit.wikimedia.org/r/191668