d7e5d76dd4
Only run it for te required playbooks, exclude the phrik playbook as we only need it to give demize access to phrik and only running archusers removes demize from the phrik group. Seperate bug which should be fixed...
2.4 KiB
2.4 KiB
Offboarding an Arch Linux team member
Details
- Team member username:
- Currently held roles:
- Removal request:
- Voting result:
All roles checklist
- Remove user email by reverting instructions from
docs/email.md. - Set user to inactive in archweb: https://www.archlinux.org/admin/auth/user/
- Remove member from staff mailing list
- Ask the user to leave
#archlinux-staffon Libera Chat and forget the password - Remove staff cloak on Libera Chat (Group contacts)
TU/Developer offboarding checklist
- Remove entry in
group_vars/all/archusers.yml. - Remove SSH pubkey from
pubkeys/<username>.pub. - Run
ansible-playbook -t archusers $(git grep -l archusers playbooks/ | grep -v phrik). - Remove the user from the
Trusted Users/Developersgroups on Keycloak. - Moderate email address on arch-dev-public (find member and moderate)
- Remove member from arch-tu and/or arch-dev mailing lists
- Create issue in archlinux-keyring (choose "Remove Packager Key" and/or "Remove Main Key" template)
DevOps offboarding checklist
- Remove entries in
group_vars/all/root_access.yml. - Run
ansible-playbook -t root_ssh playbooks/*.yml. - Run
ansible-playbook playbooks/hetzner_storagebox.yml playbooks/rsync.net.yml. - Remove the user from the
DevOpsgroup on Keycloak. - Remove member from arch-devops-private mailing lists
- Remove pubkey from Hetzner's key management
Wiki Administrator checklist
- Remove the user from the
Wiki Adminsgroup on Keycloak. - Remove member from arch-wiki-admins mailing list.