infrastructure/.gitlab/issue_templates/Onboarding.md

Onboarding an Arch Linux team member

Details

• Team member username:
• Application:
  • Voting result:

All roles checklist

The mailing list password can be found in misc/additional-credentials.vault.

• Add new user email as per docs/email.md.
• Create a new user in archweb: https://www.archlinux.org/devel/newuser/ This is also linked in the django admin backend at the top
• Subscribe user to internal staff mailing list
• Give the user access to #archlinux-staff on Freenode
• Give the user a link to our staff services page

Developer onboarding checklist

• Add entry in group_vars/all/archusers.yml.
• Add SSH pubkey to pubkeys/<username>.pub.
• Run ansible-playbook -t archusers playbooks/*.yml.
• Assign the user to the Developers groups on Keycloak.
• Assign the user to the Developers group on archlinux.org
• Subscribe user to internal arch-dev mailing list
• Whitelist email address on arch-dev-public (find member and unmoderate)

TU onboarding checklist

• Add entry in group_vars/all/archusers.yml.
• Add SSH pubkey to pubkeys/<username>.pub.
• Run ansible-playbook -t archusers playbooks/*.yml.
• Assign the user to the Trusted Users groups on Keycloak.
• Assign the user to the Trusted Users group on archlinux.org
• Whitelist email address on arch-dev-public (find member and unmoderate)
• Subscribe user to internal arch-tu mailing list

DevOps onboarding checklist

• Add entries in group_vars/all/root_access.yml.
• Run ansible-playbook -t root_ssh playbooks/all-hosts-basic.yml.
• Run ansible-playbook playbooks/hetzner_storagebox.yml playbooks/rsync.net.yml.
• Assign the user to the DevOps group on Keycloak.
• Subscribe user to arch-devops-private mailing lists
• Add pubkey to Hetzner's key management for Dedicated server rescue system.

Wiki Administrator checklist

• Assign the user to the Wiki Admins group on Keycloak.
• Subscribe the user to the arch-wiki-admins mailing list.