Svoboda | Graniru | BBC Russia | Golosameriki | Facebook
BBC RussianHomePhabricator
Log In
Maniphest T327780

Requesting shell access to analytics-privatedata for Sam Walton
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikitech username: samwalton
  • Email address: [email protected]
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHRwfKdfKRxIwUG9xj97nfMH4kyfLe5zsRezMzO4jk6 [email protected]
  • Requested group membership: analytics-privatedata-users
  • Reason for access: I have been using Hue to perform data queries on mediawiki_history but am finding it frustrating. I'd prefer to use Jupyter notebooks, which requires ssh/statbox access. I believe, in my previous request (T277298) ssh access was left out.
  • Name of approving party (manager for WMF/WMDE staff): @DannyH ?
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Yes.
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Do I need approval again? I got it already in T277298 for the private data access.

@Samwalton9 Not the person that will manage your request, but access additions after the first access was granted is a simplified process- probably just approval from the team responsible and deploy would be needed, but the person on clinic duty is to say.

Hi @Samwalton9,
I need :

  • Approval from @Ottomata or @odimitrijevic for the privilege extension to shell access, as group approvers
  • Approval from @DannyH for the same, as manager
Clement_Goubert changed the task status from Open to In Progress.Jan 24 2023, 1:20 PM
Clement_Goubert triaged this task as Medium priority.
Clement_Goubert moved this task from Backlog to Acknowledged on the SRE board.
Clement_Goubert renamed this task from Requesting access to Jupyter for Sam Walton to Requesting shell access to analytics-privatedata for Sam Walton.Jan 24 2023, 1:27 PM

Change 883187 had a related patch set uploaded (by Clément Goubert; author: Clément Goubert):

[operations/puppet@production] admin: Grant shell for samwalton on analytics-privatedata

https://gerrit.wikimedia.org/r/883187

Approved. This will need kerberos access too.

Ack. CR updated for kerberos access.

Change 883187 merged by Clément Goubert:

[operations/puppet@production] admin: Grants for samwalton on analytics-privatedata-users

https://gerrit.wikimedia.org/r/883187

@Samwalton9 your access to the relevant groups has been granted. Please wait 30m (as of this comment) before trying it out as the access propagates across the fleet. You should also have received an email regarding Kerberos, you can follow the instructions on there to set your credentials. If you didn't, please check your spam folder just in case.

I'll resolve this task, feel free to reopen if you meet issues.

Thanks @Clement_Goubert! Confirming that I received the Kerberos email in my spam folder :)