⚓ T162073 Ops Onboarding for Arzhel Younsi

	Subject	Repo	Branch	Lines +/-
	icinga: allow command execution for Ayounsi	operations/puppet	production	+5 -5
	Add ayounsi shell account in ops	operations/puppet	production	+10 -1

BBlack created this task.Apr 3 2017, 5:55 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 3 2017, 5:56 PM

Change 346182 had a related patch set uploaded (by BBlack):
[operations/puppet@production] Add ayounsi shell account in ops

https://gerrit.wikimedia.org/r/346182

gerritbot added a project: Patch-For-Review.Apr 3 2017, 5:57 PM

BBlack edited projects, added Traffic; removed Patch-For-Review.Apr 3 2017, 5:58 PM

Change 346182 merged by BBlack:
[operations/puppet@production] Add ayounsi shell account in ops

https://gerrit.wikimedia.org/r/346182

added to ops mailing list

Added to all 34 network devices (cr, asw/csw, msw, mr, pfw).

BBlack updated the task description. (Show Details)Apr 3 2017, 6:03 PM

BBlack updated the task description. (Show Details)

BBlack updated the task description. (Show Details)Apr 3 2017, 6:07 PM

Change 346184 had a related patch set uploaded (by Dzahn):
[operations/puppet@production] icinga: allow command execution for Ayounsi

https://gerrit.wikimedia.org/r/346184

gerritbot added a project: Patch-For-Review.Apr 3 2017, 6:09 PM

added to root@ mail alias (prepare for incoming wave of mails :p)

added Icinga contact in private repo (with just email notification method for now, no phone number / paging just yet)

Added to other email aliases in private repo as well: dns-admin, peering, ripe-updates

Change 346184 merged by Ayounsi:
[operations/puppet@production] icinga: allow command execution for Ayounsi

https://gerrit.wikimedia.org/r/346184

BBlack updated the task description. (Show Details)Apr 3 2017, 6:48 PM

Mentioned in SAL (#wikimedia-operations) [2017-04-03T19:15:50Z] <mutante> phabricator/ops: adding ayounsi to WMF-NDA (project 61) and acl*operations-team (project 29) (T162073)

phabricator permissions to see NDA and Ops restricted tickets

I did the same steps that were done by @Aklapper in T144496#2601909.

https://phabricator.wikimedia.org/p/Ayounsi/ links to LDAP user ayounsi and https://www.mediawiki.org/w/index.php?title=User:AYounsi%20(WMF)
https://www.mediawiki.org/wiki/Special:CentralAuth/AYounsi_%28WMF%29 shows meta as creation wiki
https://meta.wikimedia.org/w/index.php?title=Special:Log&page=User:AYounsi_%28WMF%29 shows user was created by Josephine of OIT. Hence account is verified.
for access to S4 i went to https://phabricator.wikimedia.org/project/members/29/ and added the user
for restricted tickets ("WMF-NDA') i went to https://phabricator.wikimedia.org/project/members/61/ and added the user

Dzahn updated the task description. (Show Details)Apr 3 2017, 7:23 PM

@Muehlenhoff, here is my public GPG key for pwstore.

• MZMcBride subscribed.Apr 3 2017, 10:43 PM

BBlack updated the task description. (Show Details)Apr 4 2017, 9:54 PM

I signed Arzhel's GPG key after he read the fingerprint to me over Hangout.

gpg --fingerprint 58E24182

Key fingerprint = 8F89 0CBB E7BE 94F1 FE1A  8B88 8930 0BD2 58E2 4182

I uploaded to: gpg --keyserver keys.gnupg.net --send-keys 58E24182

@ayounsi I've added you to pwstore and re-encrypted the password files. Docs can be found at https://office.wikimedia.org/wiki/Pwstore, please try accessing a password file and let me know if you run into any problems.

MoritzMuehlenhoff updated the task description. (Show Details)Apr 5 2017, 10:31 AM

pwstore works fine!

We should be good to close this task.

MoritzMuehlenhoff closed this task as Resolved.Apr 5 2017, 4:58 PM

we did not make an RT user, but RT is still used for maint-announce mails which affect networking. we should probably create one (and/or switch to the Google group) @RobH @ArielGlenn

Dzahn added subscribers: RobH, ArielGlenn.May 3 2017, 6:45 PM

Dzahn reopened this task as Open.May 3 2017, 7:36 PM

Dzahn removed BBlack as the assignee of this task.

Dzahn triaged this task as Low priority.

Dzahn updated the task description. (Show Details)

ArielGlenn closed this task as Resolved.May 4 2017, 8:42 AM

ArielGlenn updated the task description. (Show Details)

@ayounsi Since we recently added Icinga SMS notifications for Keith Herron, i noticed we did not add that for you yet either. There is the Icinga contact and the permissions but no paging yet? Do you wanna add that now?

Ops Onboarding for Arzhel Younsi
Closed, ResolvedPublic
Actions

Description

Details

Related Objects

Event Timeline

Ops Onboarding for Arzhel YounsiClosed, ResolvedPublicActions

Description

Details

Related Objects

Event Timeline

Ops Onboarding for Arzhel Younsi
Closed, ResolvedPublic
Actions