Change 299078 had a related patch set uploaded (by Rush):
madhu: transition to ops

https://gerrit.wikimedia.org/r/299078

• Added as admin on Tools project
• administrator, bureaucrat and cloudadmin on wikitech
• Added as maintainer of admin tool
• Added to "roots" sudoer list for Tools

how about +2 in Gerrit? LDAP ops group.

ops mailing list

access to password store (add GPG key )

to ops/puppet? it's given by ldap/ops, which I imagine should be on a generic ops onboarding list somewhere

In T140422#2464795, @Dzahn wrote:

how about +2 in Gerrit?

There is a few LDAP groups that do that inherently (that staff are commonly in I believe), probably best to check the groups the user is in.

https://office.wikimedia.org/wiki/Operations/On%28Off%29boarding

• ops mailing list was already done

@madhuvishy when you get to it we'll need a GPG key to add you to https://office.wikimedia.org/wiki/Pwstore That will give you all the "misc" passwords we have in ops.

Change 299196 had a related patch set uploaded (by Dzahn):
icinga: let Madhu run commands from webui

https://gerrit.wikimedia.org/r/299196

Change 299198 had a related patch set uploaded (by Dzahn):
nagios_common: add Madhu to sms (ops paging) group

https://gerrit.wikimedia.org/r/299198

I granted Madhu admin/admin in keystone so she should be able to view all the stats &c in Horizon.

Should get a new key setup for labs root, and probably good to rotate all keys anyway.

In T140422#2470486, @yuvipanda wrote:

Should get a new key setup for labs root, and probably good to rotate all keys anyway.

@madhuvishy can you sync up w/ yuvi w/ a new labs root key?

• Should we order a yubikey (via OIT?) and set it up ?

Madhu is approved for Ops access. Yes, she should also get a Yubikey. :)

• added to ops-private
• added to root@ mail

I asked madhu to change her user key along with the role/access change before https://gerrit.wikimedia.org/r/#/c/299078/. Seems appropriate in case of ever key forwarding, etc. Just good sense I hope :)

Change 299078 merged by Rush:
madhu: transition to ops for admin.yaml

https://gerrit.wikimedia.org/r/299078

Change 299597 had a related patch set uploaded (by Madhuvishy):
Add ssh key for user Madhuvishy to root-authorized-keys

https://gerrit.wikimedia.org/r/299597

Change 299597 merged by Rush:
Add ssh key for user Madhuvishy to root-authorized-keys

https://gerrit.wikimedia.org/r/299597

also: https://gerrit.wikimedia.org/r/#/c/299595

As for getting a Yubikey - I requested a new one and OIT has placed an order.

Change 299196 merged by Dzahn:
icinga: let Madhu run commands from webui

https://gerrit.wikimedia.org/r/299196

Change 299198 merged by Dzahn:
nagios_common: add Madhu to sms (ops paging) group

https://gerrit.wikimedia.org/r/299198

Pasting public gpg key here - if this isn't the best idea, happy to make a new one.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1

mQENBFeNymQBCACipjHijiP7teB91169kIlv/L8O8HorhyvjvU/u4xpPjvZUZWR+
N79bN8wUBdAnAn836Yxyaq56lymlK3OAYTrHLUMEYe7p0uWoTnmQHRi8RAmLTq03
XLvbEpFEcIvhurjv0V9Lbp3d4GufbyziJaLZd71nEfoGWgph7GC3kLK40JOMqQOv
heaoqhgSU4BB6t27gkhOSRHUedAM1p1KEP91ihxtEOrXusRIcb00Pd/C/ZwwepsF
pmEhCJrsqfvql0a1DVTKu60jCfkkX1gA94e2xtZqXDV2XbHWTrW0duW9FrHK4kor
/G9vjkb7pEohVKZ607JSu4mJO7z7gGtcsd7vABEBAAG0QE1hZGh1bWl0aGEgVmlz
d2FuYXRoYW4gKE1hZGh1dmlzaHkpIDxtdmlzd2FuYXRoYW5Ad2lraW1lZGlhLm9y
Zz6JAT4EEwECACgFAleNymQCGwMFCQWjmoAGCwkIBwMCBhUIAgkKCwQWAgMBAh4B
AheAAAoJEKTR2sc7lHxNEx8IAIgpX1NnUkOjGyVgk465JmTtIXUGKl3Hiu4bLRie
91wd9pDmpDzF0yUqpKxs1tn/XrqaZZ9ekzZp7+358pgiNWsabyW/ESUaaED4l+1l
QI7fRdwxxFflkMFsp1Ducn+FStwkKMUQt04Rva2PjQkiV/aVQHMMAWHQ1R4jGfDG
cLOunWCH4p5OGzCeRxw7OIuHGH2KDTn89oLOrfzsroBikyLFzfY/6cUT5Ya3IWGj
h8MS6BwCvhHuyOQr06E/3slB1WT2b9zxKIYDi5mnbydghFA0T5DwzOL7wXDzBhRA
UoBeiL4uu39To9l9f2ArbQ6EPnKyw2NrecrKzpR4Mlkpcg+5AQ0EV43KZAEIALFH
wJgbjrVvID1dKfeKDvjcAi9EQBqAliakTAXmVaSHCXJ0EFvaDKIbsDqlx0gLv2eX
pdYh2JpkbsyyzwXui3vmN7JX2G1Pg4wOGkfMrDl7IAKBpgToqPWpTmoPdIICUVJc
W2P2JzpjZxp3dyAkFnoEbITOEuk1AiP7OQ5HMAilz3eTmSQVWS7R7Nez0NwyV7RF
2rc0XMcFXf6Z2SbiR/6MH2BjCkbTJLvQCppDTQEYHYgPdvf70XpDUwbppvuqqm8h
uLlaGUl1+GkJiQIcRHhxbz0+rU4yP9FmErMaIg4ycbb0h+rCu6kOjSekJBKSOPgT
zSQW4iJbWc0jnSAsTG0AEQEAAYkBJQQYAQIADwUCV43KZAIbDAUJBaOagAAKCRCk
0drHO5R8TU3oB/4nODdgoiSXC44mKuDMIoamWSSbqzrwx9wrTE0H3uIYC91zXNF5
vR97BGcoK3dwGGT3Cxq8gE9jd5VPFr+dYyMk/yaJRA5FtE1NlwLJTz+o8lbgEZkG
qpCwhuydt3KoJ2VwJakXEFbj3Le4pQZZO7ngMFQ+/xn7+oPrEaIdpV4UeZdbhDFN
1ym4yH8d81eW5Gp8uUAYz4gFbZmjoliVjOFM+6mj7zpUXwnCFMJw+wupHaRCi3zF
1SMk2uisNLaoCehgDQrV5rGV6kdhTAHddRQnyB7bu6ZZSgg5UD+L36PtXHd58pFG
gynQgbD/2/6vIJYsAo1JsmttwMLG9EPsaFBY
=ev1Y
-----END PGP PUBLIC KEY BLOCK-----

@madhuvishy for the pwstore part I think that you should follow up with @MoritzMuehlenhoff when he'll be back (I think July 25th). Not sure if other people manage it as well though :)

I am ops duty this week so please let me know if you are blocked with anything!

Looking at the recent history of the pw repository, at least @Dzahn and @ArielGlenn have recent commits, so they should be able to add your keys.

I can already sign yours, ping me on IRC and we can do a video identification...

We'd need to fix some pwstore issues so this could be a good occasion to add Madhu's key. Best to wait a bit for Moritz in my opinion!

I'll drop those people with an expired PGP key later on, so that we can add her to pwstore.

@madhuvishy : Please upload your PGP key to the public keyserver network by running

gpg --send-key FINGERPRINT_OF_YOUR_KEY

pool.sks-keyservers.net is usually preconfigured in most GnuPG distributions (but they all sync amonst each other)

@MoritzMuehlenhoff Done! http://keys.gnupg.net/pks/lookup?op=get&search=0xA4D1DAC73B947C4D

@Andrew @yuvipanda as list admins of labs-l and labs-announce, how about the remaining checkbox " Add as mod to labs-l/labs-announce"? does that really mean moderator or does it mean list admin? did you already share the password(s)?

In T140422#2493224, @madhuvishy wrote:

@MoritzMuehlenhoff Done! http://keys.gnupg.net/pks/lookup?op=get&search=0xA4D1DAC73B947C4D

Got it, the only thing missing now is two signatures on that key: https://wikitech.wikimedia.org/wiki/PGP_Keys#Signing_keys

@Dzahn I meant 'admin'. I don't have the password at all, I've just been using the mailman master password, which is probably pretty unhealthy. Can you reset it anyway?

I would prefer it if the list admins could handle administration of their lists. The password needs to be shared with the other admins.

Sure, I'll do that later then. There's no hurry for us to finish that box off.

cc: @ema the pwstore part should also be unblocked now.

Still needed to be add as labs root. This is not done yet

The labs root thing is all good now. Thanks @yuvipanda

@madhuvishy: your PGP key does not seem to be signed yet: https://wikitech.wikimedia.org/wiki/PGP_Keys#Signing_keys. Ping me if you want to schedule a mini-keysigning party today on hangout.