Page MenuHomePhabricator

onboarding Manuel Arostegui in ops
Closed, ResolvedPublic

Description

onboarding tracking ticket for onboarding Manuel Arostegui

please check list items

  • server root shell (T144470)
  • phabricator login
  • phabricator permissions to see NDA and Ops restricted tickets (usually separate ticket)
  • add to private IRC channels (done, but requires cloak to make it definitive)
  • add to mailing lists and aliases (not added to root for now)
  • icinga login, graphite login
  • icinga user and permissions (icinga commands, paging/notifications)
  • add to wmf and ops LDAP groups
  • gerrit login and +2 on operations/puppet (login confirmed, confirmed +2)
  • login on office wiki (done by OIT)
  • show password files for misc access (pending gpg signature)
  • db passwords / mysql root

Event Timeline

I've verified though @wikimedia email that his account is @Marostegui.

Change 307928 had a related patch set uploaded (by Jcrespo):
icinga: add Manuel Arostegui to icinga privileged accounts

https://gerrit.wikimedia.org/r/307928

Change 307928 merged by Marostegui:
icinga: add Manuel Arostegui to icinga privileged accounts

https://gerrit.wikimedia.org/r/307928

jcrespo updated the task description. (Show Details)
jcrespo claimed this task.

So, aside from the subtask T144496, most tasks were completed and checked.

There are some small hanging issues, like non-LDAP access to certain services; permanent cloak, etc. but I will set this as solved unless some major difficulty. Most access was checked as working.