Page MenuHomePhabricator

Onboarding Stephen Shirley
Closed, ResolvedPublic

Description

New member on the SRE Team.

Pre boarding checklist: https://wikitech.wikimedia.org/wiki/SRE_Onboarding#Pre-boarding_checklist

Event Timeline

Change 588651 had a related patch set uploaded (by Kormat; owner: Kormat):
[operations/puppet@production] admin: Add user kormat

https://gerrit.wikimedia.org/r/588651

Change 588651 merged by Marostegui:
[operations/puppet@production] admin: Add user kormat

https://gerrit.wikimedia.org/r/588651

Mentioned in SAL (#wikimedia-operations) [2020-04-14T09:08:40Z] <marostegui> Add kormat to ops and wmf ldap groups - T250134

ssh to bast3004 confirmed by Stephen

Change 588657 had a related patch set uploaded (by Kormat; owner: Kormat):
[operations/puppet@production] admin: upgrade kormat to root shell user (ops)

https://gerrit.wikimedia.org/r/588657

Change 588657 merged by Kormat:
[operations/puppet@production] admin: upgrade kormat to root shell user (ops)

https://gerrit.wikimedia.org/r/588657

Access & root:

kormat@puppetmaster1001:~$ sudo -i
root@puppetmaster1001:~#
kormat@cumin1001:~$ sudo -i
root@cumin1001:~#
  • Invited to "maint-announce" / "ops maintenance" shared inbox on Google.

Invitation sent to ops and ops-private

Change 588661 had a related patch set uploaded (by Kormat; owner: Kormat):
[operations/puppet@production] icinga: grant liberal permissions to kormat

https://gerrit.wikimedia.org/r/588661

Change 588661 merged by Kormat:
[operations/puppet@production] icinga: grant liberal permissions to kormat

https://gerrit.wikimedia.org/r/588661

Kormat updated the task description. (Show Details)

Change 588939 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] Fix email entry for Stephen

https://gerrit.wikimedia.org/r/588939

Change 588939 merged by Muehlenhoff:
[operations/puppet@production] Fix email entry for Stephen

https://gerrit.wikimedia.org/r/588939

I confirm I can see Stephen on VictorOps as "Oncall SRE"

I have verified over videocall @Kormat's gpg KEYID and signed it.

Added to pwstore. re-signed .users file and re-encrypted all the files for the "ops" group. Stephen confirmed he can decrypt the management file and has a working mgmt pass now.

Kormat updated the task description. (Show Details)

Got u2f key, enrolled in both idp and google apps, and tested both. We're done, folks :)