This is the onboarding ticket and checklist for @hnowlan [[ https://www.mediawiki.org/wiki/User:HNowlan_(WMF) | SRE in the Core Platform team ]]
---
[x] Create Wikitech wiki (LDAP) user - https://wikitech.wikimedia.org | uid: hnowlan
[x] Phabricator User + 2FA | confirm login works on https://phabricator.wikimedia.org/ and setup 2fa
[ ] Phabricator permissions to see NDA and Ops restricted tickets, and added to trusted users for antivandal exempt: https://phabricator.wikimedia.org/project/profile/29/ https://phabricator.wikimedia.org/project/profile/61/ https://phabricator.wikimedia.org/project/profile/974/
[ ] Add to private IRC channels https://office.wikimedia.org/wiki/IRC#Channel_operators_commands
[x] Add to ops mailing lists (`ops` and `ops-private` minimum requirements) | https://lists.wikimedia.org/mailman/listinfo/ops
[ ] Add to Exim mail aliases (`root` via `private.git:modules/privateexim/files/wikimedia.org`)
[ ] Icinga contact in `private.git` (requires shell access, private puppet repo)
[ ] Icinga user and permissions (icinga commands, test privileges to run commands on hosts/services (public puppet repo)
[ ] Phone/pager setup (addition to the Icinga contact)
[ ] Add to wmf and ops LDAP groups (for web services) | requires Wikitech user and shell access
[ ] Access to Office Wiki (OIT grants that) | please confirm login works https://office.wikimedia.org
[ ] Gerrit login and +2 on operations/puppet (this is automatic from being added to LDAP groups above) | confirm login on https://gerrit.wikimedia.org and ability to +2 in operations/puppet repo
[ ] Create shell user (can connect to bastions) | please create a SSH key for this and paste the public part
[ ] Server root shell (membership in ops group) | code change in public puppet repo in admins module
[ ] Access to pwstore | please create a GPG key for this and have it signed by >= 2 others
[ ] Access to Google group for maint-announce mails
[ ] Add to "Ops vendor maintenance" Calendar