New joiner starting on July 1st, 2026.
Ref. tasks from previous onboardings: T266068: Onboard David Caro to Wikimedia Foundation as SRE in Cloud Services, T312597: Onboard Francesco Negri as a SRE in Cloud Services, T386715: Onboard Chuck Onwumelu
WMCS Template: https://www.mediawiki.org/wiki/Wikimedia_Cloud_Services_team/Onboarding_template
- IRC
- Join core IRC channels (wikimedia-operations, wikimedia-cloud, wikimedia-cloud-admin, wikimedia-cloud-feed)
- Set enforce for irc nick (https://meta.wikimedia.org/wiki/IRC/Instructions#Register_your_nickname,_identify,_and_enforce )
- Apply for Wikimedia cloak (https://meta.wikimedia.org/wiki/IRC/Cloaks)
- Get invites to non-public IRC channels:
- #wikimedia-cloud-private
- #mediawiki_security
- WMF Slack
- Join tools-platform-team Slack channel
- Join developer-experience Slack channel
- Check potential other channels to join via office wiki
- Calendar invites
- Wikitech
- Create a work Wikimedia global account (ex. with -WMF in the name)
- Create Wikimedia developer account linked to the global account (you can follow the 'toolforge' access flow).
- Username: Thibaut Le Page
- Add 2factor to wikitech login (which will also be used by toolsadmin and horizon)
- Mailing lists
- Add to Cloud Services Internal mailing list (google groups list) (@aputhin)
- Subscribe to cloud-announce mailing list
- Subscribe to cloud mailing list
- Subscribe to wikitech-l mailing list
- Subscribe to toolhub-dev mailing list
- Phabricator
- Register in phabricator
- Associate WMF mediawiki global account with phab user account (https://phabricator.wikimedia.org/settings/panel/external/)
- Add 2factor to Phabricator login
- Access to WMF-NDA protected tasks on Phabricator (https://phabricator.wikimedia.org/project/profile/974/)
- trusted-contributors group (https://phabricator.wikimedia.org/project/members/3104/)
- Sign server access and responsibilities agreement https://phabricator.wikimedia.org/L3
- Join the cloud services project
- Cloud VPS
- Make projectadmin in "admin" project
- Make projectadmin in "tools" project
- Make projectadmin in "toolsbeta" project
- Make projectadmin in "paws" project
- Make projectadmin in "quarry" project
- Give access to cloudcontrol servers to be able to use the openstack CLI (https://wikitech.wikimedia.org/wiki/SRE/Production_access wmcs-roots group)
- Make sure to follow and open the proper task request
- T431010: Requesting access to cloudcontrol servers for tlepage
Add to cloud-wide root (put up a patchset to modules/profile/data/wmcs/instance/root-keys.yaml in https://gerrit.wikimedia.org/r/#/admin/projects/operations/puppet)- Check that you can successfully SSH to this bastion: ssh primary.bastion.wmcloud.org
- Toolforge
- Get started on Toolforge using the quickstart guide
- sudo for Toolforge — [TLP] can’t initiate that on my own, can I?
- Add as maintainer of "admin" Toolforge tool (tools.admin LDAP group)
- Add as maintainer of "admin" Toolsbeta tool (toolsbeta.admin LDAP group)
- Run lima-kilo on your laptop and run the functional tests — managed to get all tests green ✅
- Access cloudcumin node and run root@cloudcumin1001:~# cookbook wmcs.toolforge.toolsdb.get_cluster_status (should work ok)
- I think that depends on T431010: Requesting access to cloudcontrol servers for tlepage
- Create account in harbor (harbor-toolsbeta.wmcloud.org and harbor-tools.wmcloud.org) — [TLP] how do I do that? The linked page is only about ops
- [DC] We have the admin account where you can log in directly, then create your account, I can send you the user creation request directly too (might be easier)
- PAWS
- Gitlab
- Request access to https://gitlab.wikimedia.org/groups/repos/cloud/ (see https://gitlab.wikimedia.org/groups/repos/cloud/-/group_members)
- Get familiar with the deployment flow for toolforge components
- Gerrit
- Request invite to toollabs-trusted and wmcs-trusted groups in Gerrit (create a Phab request as described here: https://www.mediawiki.org/wiki/Gerrit/Privilege_policy#Requesting_Gerrit_privileges then add it as a Subtask of this task)