Added the infra SOPs ported to asciidoc.
This commit is contained in:
parent
8a7f111a12
commit
a0301e30f1
148 changed files with 18575 additions and 17 deletions
63
modules/sysadmin_guide/pages/departing-admin.adoc
Normal file
63
modules/sysadmin_guide/pages/departing-admin.adoc
Normal file
|
@ -0,0 +1,63 @@
|
|||
= Departing admin SOP
|
||||
|
||||
From time to time admins depart the project, this SOP checks any access
|
||||
they may no longer need.
|
||||
|
||||
== Contact Information
|
||||
|
||||
Owner::
|
||||
Fedora Infrastructure Team
|
||||
Contact::
|
||||
#fedora-admin, sysadmin-main
|
||||
Location::
|
||||
Everywhere
|
||||
Servers::
|
||||
all
|
||||
|
||||
== Description
|
||||
|
||||
From time to time people with admin access to various parts of the
|
||||
project may leave the project or no longer wish to contribute. This SOP
|
||||
attempts to list the process for removing access they no longer need.
|
||||
|
||||
[arabic, start=0]
|
||||
. First, make sure that this SOP is needed. Verify the person has left
|
||||
the project and what areas they might wish to still contibute to.
|
||||
. Gather info: fas username, email address, knowledge of passwords.
|
||||
. Check the following areas with the following commands:
|
||||
+
|
||||
____
|
||||
email address in ansible::
|
||||
* Check: `git grep email@address`
|
||||
* Remove: `git commit`
|
||||
koji admin::
|
||||
* Check: `koji list-permissions --user=username`
|
||||
* Remove: `koji revoke-permission permissionname username`
|
||||
wiki pages::
|
||||
* Check: look for https://fedoraproject.org/wiki/User:Username
|
||||
* Remove: delete page, or modify with info they are no longer
|
||||
contributing.
|
||||
packages::
|
||||
* Check: Download
|
||||
https://admin.fedoraproject.org/pkgdb/lists/bugzilla?tg_format=plain
|
||||
and grep
|
||||
* Remove: remove from cc, orphan packages or reassign.
|
||||
fas account::
|
||||
* Check: check username in fas
|
||||
* Remove: set user inactive
|
||||
+
|
||||
[NOTE]
|
||||
.Note
|
||||
====
|
||||
If there are scripts or files needed, save homedir of user.
|
||||
====
|
||||
passwords::
|
||||
* Check: if departing admin knew sensitive passwords.
|
||||
* Remove: Change passwords.
|
||||
+
|
||||
[NOTE]
|
||||
.Note
|
||||
====
|
||||
root pw, management interfaces, etc
|
||||
====
|
||||
____
|
Loading…
Add table
Add a link
Reference in a new issue