[go: nahoru, domu]

Page MenuHomePhabricator

Requesting access to analytics-privatedata-users for rickijay
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

Complete ALL items below as the individual person who is requesting access:

  • Wikimedia developer account username: rickijay
  • Email address: ricki.jay@wikimedia.de
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-rsa 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 ricki.jay@wmde-102978
  • Requested group membership: analytics-privatedata-users
  • Reason for access: Assigned work on Wikibase Pingback extension and data, with ultimate goal to expand scope of returned data
  • Name of approving party (manager for WMF/WMDE staff): @darthmon_wmde , @jon_amar-WMDE
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Signed August 4th, 2023
  • Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band (new ssh key probably not needed?)
    • - and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Hi! If possible could you please specifiy which of the following you are requesting?

a) analytics-privatedata-users (no kerberos, no ssh)

b) analytics-privatedata-users (no kerberos)

c) analytics-privatedata-users (with kerberos)

Here are the details provided by analytics what these mean:

https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Analytics_shell_(posix)_groups_explained

If in doubt let's assume it's just a) and go ahead with the basics without shell access and more can build on top of it. If that's the case you don't even need to provide a key.

@darthmon_wmde or @jon_amar-WMDE Assuming you are both managers, we'll need approval for this access requests from one of you. Thanks!

Dzahn changed the task status from Open to In Progress.May 23 2024, 6:16 PM
Dzahn assigned this task to RickiJay-WMDE.
Dzahn triaged this task as High priority.
Dzahn changed the task status from In Progress to Stalled.May 24 2024, 12:10 AM

stalled waiting for approval - handing over to next week's clinic duty

RickiJay-WMDE renamed this task from Requesting access to analytics for rickijay to Requesting access to analytics-privatedata-users for rickijay.May 24 2024, 9:46 AM

I believe just a), thank you very much

Hi @Dzahn I'm not clear whether I can provide approval (I'm the Product Manager for Wikibase Suite) or whether doing so in a comment is sufficient. If I can provide approval and this message is sufficient, then: I approve this request. Otherwise please point me in the right direction to help resolve this. And either way, thanks for your time!

colewhite updated the task description. (Show Details)

Pinging one of @odimitrijevic, @Milimetric, @WDoranWMF, @Ahoelzl for Analytics team approval.

Change #1036592 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] admin: add rickijay to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1036592

Hi @Dzahn I'm not clear whether I can provide approval (I'm the Product Manager for Wikibase Suite) or whether doing so in a comment is sufficient. If I can provide approval and this message is sufficient, then: I approve this request. Otherwise please point me in the right direction to help resolve this. And either way, thanks for your time!

Hi @jon_amar-WMDE

I checked and I'm afraid https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests says "direct supervisor" needs to approve.

I remember once WMDE had a "mitarbeitende.html" page or so but then it disappeared, so I'm honestly not sure how to look that up.

Can we get approval from her (people) manager at WMDE? A comment here on the ticket is sufficient and what we are after.

colewhite updated the task description. (Show Details)

Hi @Dzahn I'm not clear whether I can provide approval (I'm the Product Manager for Wikibase Suite) or whether doing so in a comment is sufficient. If I can provide approval and this message is sufficient, then: I approve this request. Otherwise please point me in the right direction to help resolve this. And either way, thanks for your time!

Hi @jon_amar-WMDE

I checked and I'm afraid https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests says "direct supervisor" needs to approve.

I remember once WMDE had a "mitarbeitende.html" page or so but then it disappeared, so I'm honestly not sure how to look that up.

For Wikimedia Deutschland staff, approval from one of the six people listed at https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#WMDE_Group is sufficient also for access requests like this.

Can we get approval from her (people) manager at WMDE? A comment here on the ticket is sufficient and what we are after.

hereby I, as "direct supervisor" of Ricki's, aprove for Ricki to get access to analytics-privatedata-users. Since this is crucial for the work she is carrying out at the moment.

Thanks all!

We are blocked on approval from one of:

@odimitrijevic, @Milimetric, @WDoranWMF, @Ahoelzl for Analytics team approval.

Dzahn changed the task status from Stalled to Open.Jun 10 2024, 8:40 PM

Change #1041227 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: add rickijay to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1041227

Dzahn changed the task status from Open to In Progress.Jun 10 2024, 8:59 PM

Change #1041227 merged by Herron:

[operations/puppet@production] admin: add rickijay to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1041227

herron claimed this task.
herron subscribed.

The patch to provision this access has been merged, and will fully propagate within 30 minutes. I'll go ahead and transition this task to resolved now, please re-open if any followup is needed. Thanks!

Change #1036592 abandoned by Cwhite:

[operations/puppet@production] admin: add rickijay to analytics-privatedata-users

Reason:

https://gerrit.wikimedia.org/r/1036592