Page MenuHomePhabricator

Yubikey-SSH-FIDO access for dduvall
Closed, ResolvedPublic

Description

For each yubikey:

  • Add entry to admin.yaml
  • Verify new access works

After everything:

  • Remove old non-fido key

Event Timeline

Change #1226922 had a related patch set uploaded (by Dduvall; author: Dduvall):

[operations/puppet@production] admin: Add new yubikey-ssh-fido keys for dduvall

https://gerrit.wikimedia.org/r/1226922

JMeybohm added subscribers: MoritzMuehlenhoff, JMeybohm.

@MoritzMuehlenhoff assigning to you so the next clinic duty person knows you're working on this with Dan, thanks

Change #1226922 merged by Muehlenhoff:

[operations/puppet@production] admin: Add new yubikey-ssh-fido keys for dduvall

https://gerrit.wikimedia.org/r/1226922

MoritzMuehlenhoff updated the task description. (Show Details)

Change #1227949 had a related patch set uploaded (by Dduvall; author: Dduvall):

[operations/puppet@production] admin: remove old non-fido keys for dduvall

https://gerrit.wikimedia.org/r/1227949

I've verified production access using my new FIDO SSH keys and submitted a patch to remove my old key.

Change #1227949 merged by Muehlenhoff:

[operations/puppet@production] admin: remove old non-fido keys for dduvall

https://gerrit.wikimedia.org/r/1227949