Wikimedia Release Engineering Team/Onboarding/Ahmon

This is your primary onboarding document for the team.

You

 * ✅ Get access to your `@wikimedia.org` email (should happen before your first day).
 * ✅ IRC
 * ✅ Follow the IRC guide on meta wiki
 * ✅ If you choose to use IRCCloud (recommended if you are unfamiliar with IRC), get added to the Wikimedia group account by emailing techsupport@wikimedia.org with the email you used to register (your `@wikimedia.org` email).
 * ✅ Join public IRC channels (`#wikimedia-releng`, `#wikimedia-operations`, `#wikimedia-pipeline`, `#wikimedia-cloud`, `#wikimedia-cloud-admin` ).
 * ✅ Note the channel descriptions.
 * ✅ Skim the full list of Wikimedia channels
 * ✅ Private message `thcipriani` when the above is complete.
 * ✅ Mailing lists and Google Groups (descriptions of the lists)
 * ✅ Subscribe to ops@
 * ✅ Subscribe to wikitech-l@
 * Verify you are subscribed to Foundation Official and tech-all Google Groups. You may need to ask for assistance from Tyler for Foundation Official, or verify with someone in Office IT when you talk to them about comms. not on tech-all
 * Development accounts
 * If you do not yet have one, request a YubiKey from Office IT. tyler requested on my behalf. not received yet
 * ✅ Create a Wikimedia developer account (aka: "LDAP account" or "wikitech account"). Follow the "VPS and General users" process.
 * ✅ Add 2factor to your Wikimedia developer account
 * ✅ Generate two ssh keys. One for production and one for your Wikimedia developer account.
 * ✅ Ensure your "~/.ssh/config" is setup correctly
 * ✅ Add the "wmfdev" ssh public key to your Wikimedia developer account.
 * ✅ Register in Phabricator using your Wikimedia developer account.
 * ✅ Associate your Wikimedia wiki account (created by OIT at https://meta.wikimedia.org/) with your Phabricator user account on https://phabricator.wikimedia.org/settings/panel/external/
 * ✅ Add 2factor to Phabricator login at https://phabricator.wikimedia.org/settings/panel/multifactor/
 * ✅ Add the `wmfdev` ssh public key to Phabricator.
 * ✅ Follow the Gerrit tutorial. Add your `wmfdev` ssh key in Gerrit.
 * If you have a GitHub user, request access to the Release Engineering team in the Wikimedia Foundation organization.
 * Server access
 * Request access to production servers in these groups: `deployment`, `contint-admins`, and `contint-docker`. Use your `wmfprod` ssh public key.
 * Add that request task as a subtask to this one.
 * Shared password management
 * Create GPG key for use with our pwstore (if you don't already have one).
 * Ask Tyler to setup a team signing party.
 * Monitoring
 * Once added to `wmf` LDAP group, make sure you can access Logstash.
 * Bookmark: logstash, grafana, icinga, SAL
 * Add yourself to the Contact List on officewiki.
 * Bookmark the contact List on officewiki — you'll use it a whole lot
 * Understand that you will be asked in the first team meeting (and, likely, other subsequent meetings) to "tell us a bit about yourself" and prepare mentally and emotionally for that
 * Read the readings.
 * Meet the rest of the team individually.

Somebody else (default: Tyler)

 * ✅ Add to weekly team meeting as soon as the Google account is created
 * ✅ Have first day meeting with Tyler
 * ✅ Schedule weekly 1:1 with Tyler
 * ✅ Add to releng@ private team mailing list
 * ✅ Add to engprod@ private team mailing list
 * IRC
 * ✅ Add to team related IRC access lists.
 * ✅ Request addition to the other private IRC channels
 * ✅ Tyler schedules 1:1s with everyone on the team.
 * ✅ Add to relevant Team Drives in Google Drive: RelEng, Pipeline, Code Health
 * File an LDAP-Access-Requests for,  ,   (link as subtask)
 * ✅ Add to RelEng's Gerrit group (which gives Administrator and wmf-deployments by inheritance)
 * ✅ Phabricator
 * ✅ Add to Phabricator groups: #WMF-NDA, #trusted-contributors, #acl_releng, #acl_repository-admins, #acl_project-admins, #acl_phabricator
 * Add to the kanban board's sidebar
 * Add to kanban Herald rule: H229
 * Request addition to #Security phabricator group (link as subtask)
 * ✅ Add to our Cloud VPS projects:  and
 * Setup a keysigning party
 * Add GPG key to our pwstore
 * ✅ Add to team page on mediawiki.org (team members and timezone).
 * ✅ Add to https://time.releng.team/