+1

+1

@nskaggs, any update on the legal/NDA situation here?

This is still under review. Unfortunately I don't have an ETA to share.

@nskaggs @Andrew Hello! I am writing to confirm the NDA has been signed! You may proceed with granting access. Thanks for your patience!

• Project administrator: This allows a user to add and delete other users from the Toolforge project.
• sudo policy "roots": This allows a user to use sudo to become root on Toolforge instances.
• 'admin' tool maintainer: This allows a user to log into infrastructure instances and perform tasks as the admin tool.
• Gerrit group "toollabs-trusted": This allows a user to +2 changes in repositories exclusive to Toolforge.

• Project administrator: This allows a user to add and delete other users from the Toolforge project.

# openstack role add --project tools --user taavi projectadmin

Mentioned in SAL (#wikimedia-cloud) [2021-05-05T19:27:03Z] <andrewbogott> adding taavi as a sudo root to project toolforge for T278390

• cloud-admin@lists.wikimedia.org per https://wikitech.wikimedia.org/wiki/Help:Access_policies#Responsibilities

In T278390#7063594, @Stashbot wrote:

Mentioned in SAL (#wikimedia-cloud) [2021-05-05T19:27:03Z] <andrewbogott> adding taavi as a sudo root to project toolforge for T278390

• sudo policy "roots": This allows a user to use sudo to become root on Toolforge instances.

• 'admin' tool maintainer: This allows a user to log into infrastructure instances and perform tasks as the admin tool.

• Gerrit group "toollabs-trusted": This allows a user to +2 changes in repositories exclusive to Toolforge.

Mentioned in SAL (#wikimedia-cloud) [2021-05-06T04:34:58Z] <Majavah> add own root key to project hiera on horizon T278390

Confirmed is already in Google doc NDA and MOU: Volunteer accounts with Server and LDAP-level access

edit: wrong ticket, meant T292783 which is kind of a follow-up to this