• Added @Bstorm to WMCS google drive
• Added @Bstorm to WMCS team calendar
• Scheduled weekly 1:1 for @Bstorm and @bd808

Change 405886 had a related patch set uploaded (by Rush; owner: cpettet):
[operations/puppet@production] cloud: add bstorm to shinken instance

https://gerrit.wikimedia.org/r/405886

Change 405886 merged by Rush:
[operations/puppet@production] cloud: add bstorm to shinken instance

https://gerrit.wikimedia.org/r/405886

@Bstorm for Add to cloud-wide root you can put up a patchset to this file modules/passwords/templates/root-authorized-keys.erb in this repo https://gerrit.wikimedia.org/r/#/admin/projects/labs/private as a gerrit test :)

• subscribed to ops mailing list, invited to private mailing list

• added to Phab group "WMF-NDA requests" (https://phabricator.wikimedia.org/project/members/974/) which is the group of people who request to be added to WMF-NDA (https://phabricator.wikimedia.org/tag/wmf-nda/)

@Andrew when you have a chance can you do whatever cloud admin portion exists on wikitech please?

@Bstorm feel free to ping me about the Icinga contact part, happy to do it together or show you where to do it self-service. you can pick your own phone number, time zone etc and also use it as the example "ops/puppet" change to confirm you have +2 and can merge.

In T185493#3929231, @chasemp wrote:

@Andrew when you have a chance can you do whatever cloud admin portion exists on wikitech please?

Done!

In T185493#3929298, @Dzahn wrote:

@Bstorm feel free to ping me about the Icinga contact part, happy to do it together or show you where to do it self-service. you can pick your own phone number, time zone etc and also use it as the example "ops/puppet" change to confirm you have +2 and can merge.

Thanks!

Change 406842 had a related patch set uploaded (by Bstorm; owner: Bstorm):
[labs/private@master] Add bstorm to cloud-wide root

https://gerrit.wikimedia.org/r/406842

Change 406842 merged by Rush:
[labs/private@master] Add bstorm to cloud-wide root

https://gerrit.wikimedia.org/r/406842

racktables not worth it anymore? almost replaced by netbox. Netbox access should automatically come with the LDAP groups. (https://netbox.wikimedia.org/login/?next=/)

In T185493#3935805, @Dzahn wrote:

racktables not worth it anymore? almost replaced by netbox. Netbox access should automatically come with the LDAP groups. (https://netbox.wikimedia.org/login/?next=/)

I would still like to grant access when the general approval for root come in on the grounds that until it's actually gone who knows what the timeline for racktables will be.

@RobH could you do the racktables part? ^

Emailed it to her just now to update and change once she logs in.

I'm in racktables! :)

Mentioned in SAL (#wikimedia-operations) [2018-02-05T18:31:08Z] <mutante> added bstorm to the 'wmf' and 'ops' LDAP groups (modify-ldap-groups on terbium) (T185493)

Mentioned in SAL (#wikimedia-operations) [2018-02-05T18:37:09Z] <mutante> added bstorm to acl*operations-team (project 29) on Phabricator (T185493)

Change 408327 had a related patch set uploaded (by Madhuvishy; owner: Madhuvishy):
[operations/puppet@production] onboarding: Add Bstorm as prod icinga contact

https://gerrit.wikimedia.org/r/408327

Change 408328 had a related patch set uploaded (by Madhuvishy; owner: Madhuvishy):
[operations/puppet@production] onboarding: Add bstorm to sms contact group

https://gerrit.wikimedia.org/r/408328

Change 408327 merged by Madhuvishy:
[operations/puppet@production] onboarding: Add Bstorm as prod icinga contact

https://gerrit.wikimedia.org/r/408327

Change 408328 merged by Bstorm:
[operations/puppet@production] onboarding: Add bstorm to sms contact group

https://gerrit.wikimedia.org/r/408328

I see a PGP key for bstorm@wikimedia.org. Let's sign during teh team meeting and f2f tomorrow :)

Change 408445 had a related patch set uploaded (by Bstorm; owner: Bstorm):
[operations/puppet@production] Add MST to timeperiods.cfg for monitoring

https://gerrit.wikimedia.org/r/408445

Change 408445 merged by Bstorm:
[operations/puppet@production] icinga: Add MST to timeperiods.cfg for monitoring

https://gerrit.wikimedia.org/r/408445

@MoritzMuehlenhoff when you get a chance can you help @Bstorm get setup with pwstore? She has a key in the public registery and confirmed during a hangout today for me it was the correct key.

@chasemp Adding the key to pwstore requires that it has at least 2 signatures on it. Since you already confirmed the key during hangout, could you add one of those? Like sign the key and then upload the signed version to keyserver? Then it should show signatures with gpg --list-sigs 2051251AF5172F75 I could then do the second one.

get key:

gpg --search-keys bstorm@wikimedia.org
gpg --recv-keys 2051251AF5172F75

show fingerprint: (verified against a file on bast1001 that Brooke uploaded)
gpg --list-fingerprint 2051251AF5172F75

signed key:
gpg --sign-key 2051251AF5172F75

uploaded key:
gpg --send-keys 2051251AF5172F75
gpg: sending key 2051251AF5172F75 to hkps://hkps.pool.sks-keyservers.net
gpg --keyserver pgp.mit.edu --send-keys 2051251AF5172F75
gpg: sending key 2051251AF5172F75 to hkp://pgp.mit.edu

show signatures:

gpg --list-sigs 2051251AF5172F75

pub   rsa4096 2018-01-29 [SC] [expires: 2022-01-29]
      117337F5D48C4CFF8909CD9C2051251AF5172F75
uid           [ unknown] Brooke Storm <bstorm@wikimedia.org>
sig 3        2051251AF5172F75 2018-01-29  Brooke Storm <bstorm@wikimedia.org>
sig          37E9B5C6F5F6A067 2018-02-06  Daniel Zahn (WMF) <dzahn@wikimedia.org>
sub   rsa4096 2018-01-29 [E] [expires: 2022-01-29]
sig          2051251AF5172F75 2018-01-29  Brooke Storm <bstorm@wikimedia.org>

In T185493#3950325, @Dzahn wrote:

@chasemp Adding the key to pwstore requires that it has at least 2 signatures on it. Since you already confirmed the key during hangout, could you add one of those? Like sign the key and then upload the signed version to keyserver? Then it should show signatures with gpg --list-sigs 2051251AF5172F75 I could then do the second one.

Apologies, I thought I had already :D Should be gtg now?

I can't see your signature yet. I tried my default keyserver (hkps://hkps.pool.sks-keyservers.net) and pgp.mit.edu. Depending on which keyserver you used it might just take a while until they have synced.

It's on there, now.

Confirmed i saw the new signature now.

I added bstorm to the .users file and then gpg --clearsign'ed the .users file

Then i re-encrypted all (ops) files with pws.rb rc $file and a bash loop.

You should be able to use pwstore now.