Features included:
- T144710: Create Wikitech/LDAP accounts via a new user friendly guided workflow
- T147024: Striker should respect TitleBlacklist bans on new account names
- T144712: Check for 2FA protection and enforce validation of 2FA tokens
- T144711: Allow management of LDAP SSH keys
- T153935: Allow changing LDAP password from Striker
Deploy checklist:
- create strikerbot only wikitech oauth consumer
- update strikerbot groups to allow 2fa
- get new secrets to a root for Puppet patch
- verify config on californium
- scap3 deploy
- test login with 2fa protected account
- test account creation via striker
- verify that striker created account can log into wikitech
- verify that striker created account can log into gerrit
- test ssh key management via striker
- test password change via striker
- announce for others to poke at