Running Doc: https://www.mediawiki.org/wiki/Wikimedia_Cloud_Services_team/Onboarding_Francesco
- IRC
- Join core IRC channels (wikimedia-operations, wikimedia-cloud, wikimedia-cloud-admin, wikimedia-cloud-feed)
- Set enforce for irc nick (https://meta.wikimedia.org/wiki/IRC/Instructions#Register_your_nickname,_identify,_and_enforce )
- Apply for Wikimedia cloak (https://meta.wikimedia.org/wiki/IRC/Cloaks)
- Get invites to non-public IRC channels (wikimedia-cloud-private, mediawiki-security)
- Backchannel
- Add to WMCS Telegram group
- Add to Technical Engagement Telegram group
- Add to #technical-engagement Slack channel
- Join toolhub-team Slack channel
- Technical Engagement team shares (should happen automatically with addition to Technical Engagement Internal mailing list?)
- Calendar invites
- Wikitech
- Create Wikimedia developer account (ldap)
- Add 2factor to wikitech login (which will also be used by toolsadmin and horizon)
- Mailing lists
- Add to Technical Engagement Internal mailing list (google groups list) (@nskaggs)
- Add to Cloud Services Internal mailing list (google groups list) (@nskaggs)
- Add to ops mailing list (https://lists.wikimedia.org/mailman/listinfo/ops)
- Add to ops-private mailing list (https://lists.wikimedia.org/mailman/listinfo/ops-private)
- Subscribe to cloud-announce mailing list
- Subscribe to cloud mailing list
- Subscribe to wikitech-l mailing list
- Subscribe to toolhub-dev mailing list
- Phabricator
- Register in phabricator (https://www.mediawiki.org/wiki/Phabricator/Help#Creating_your_account)
- Associate WMF mediawiki account with phab user account (https://phabricator.wikimedia.org/settings/panel/external/)
- Add 2factor to Phabricator login
- Access to WMF-NDA protected tasks on Phabricator (https://phabricator.wikimedia.org/project/members/974/)
- trusted-contributors group https://phabricator.wikimedia.org/project/members/3104/
- server access and responsibilities agreement https://phabricator.wikimedia.org/L3
- Join WMCS team (https://phabricator.wikimedia.org/project/members/2773/)
- (Optional) Watch WMCS parent project / set email notification preferences
- Cloud VPS
- Make projectadmin in "admin" project
- Make projectadmin in "tools" project
- Make projectadmin in "toolsbeta" project
- Make projectadmin in "paws" project
- Toolforge
- Request access to Toolforge project https://toolsadmin.wikimedia.org/tools/membership/apply
- Make projectadmin for Tools project
- sudo for Toolforge
- Add as maintainer of "admin" Toolforge tool (tools.admin LDAP group)
- Add as maintainer of "admin" Toolsbeta tool (toolsbeta.admin LDAP group)
- Add as maintainer of "admin" PAWS "tool" (paws.admin LDAP group)
- Gerrit
- Request invite to toollabs-trusted and wmcs-trusted groups in Gerrit (create a Phab request then add it as a Subtask of this task) (T314276)
- Shell account configuration
- Add wikitech-static entries to /etc/hosts (https://office.wikimedia.org/wiki/Guide_for_new_engineering_staff#Wikis)
- Request production shell access (create a Phab request as described here: https://wikitech.wikimedia.org/wiki/SRE/Production_access#Access_Request_Process and add it as a Subtask of this task) (T313504)
- Request to be added to wmf and ops ldap groups (create a Phab request from here: https://phabricator.wikimedia.org/project/view/1564/ and add it as a Subtask of this task) (T314066)
- Add prod contact to cgi.cfg (operations/puppet:modules/icinga/files/cgi.cfg), then push a patch to operations/puppet, have it reviewed, submit, puppet-merge
- add to sms contact group (operations/puppet:modules/nagios_common/files/contactgroups.cfg), then push a patch to operations/puppet, have it reviewed, submit, puppet-merge
- Add prod icinga contact to contacts.cfg in private Puppet repo (this repo is not in Gerrit, see https://wikitech.wikimedia.org/wiki/Puppet#Private_puppet)
- add to root@ alias in exim (make sure to use your email username, not shell) by editing modules/privateexim/files/wikimedia.org in the private Puppet repo (https://wikitech.wikimedia.org/wiki/Puppet#Private_puppet)
- Add to cloud-wide root (put up a patchset to modules/passwords/templates/root-authorized-keys.erb in https://gerrit.wikimedia.org/r/#/admin/projects/labs/private)
- Add GPG key to pwstore repo (https://office.wikimedia.org/wiki/Pwstore)
- Create VictorOps account (note: VictorOps is now actually named 'Splunk On Call' but everyone still calls it VictorOps)
- Check that you can successfully SSH to this bastion: ssh primary.bastion.wmflabs.org