1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-28 20:51:20 +02:00
infrastructure/.gitlab/issue_templates/Offboarding.md
Levente Polyak 264eff7dac
gitlab: add keyring revocation to offboarding template
Strictly speaking this is not a devops duty, but I believe this is
currently the best place to ensure we won't ever forget to create a
keyring revocation ticket for an offboarded former staff.
2021-03-29 00:57:51 +02:00

1.9 KiB

Offboarding an Arch Linux team member

Details

  • Team member username:
  • Currently held roles:
  • Removal request:
    • Voting result:

All roles checklist

TU/Developer offboarding checklist

  • Remove entry in group_vars/all/archusers.yml.
  • Remove SSH pubkey from pubkeys/<username>.pub.
  • Run ansible-playbook -t archusers playbooks/*.yml.
  • Remove the user from the Trusted Users/Developers groups on Keycloak.
  • Moderate email address on arch-dev-public (find member and moderate)
  • Remove member from arch-tu mailing lists
  • Remove member from staff mailing lists
  • Create keyring revocation ticket

DevOps offboarding checklist

  • Remove entries in group_vars/all/root_access.yml.
  • Run ansible-playbook -t root_ssh playbooks/*.yml.
  • Run ansible-playbook playbooks/hetzner_storagebox.yml playbooks/rsync.net.yml.
  • Remove the user from the DevOps group on Keycloak.
  • Remove member from arch-devops-private mailing lists
  • Remove pubkey from Hetzner's key management

Wiki Administrator checklist