Access Requests
Add or verify data bag
Section titled “Add or verify data bag”- Check ssh key
- Check unix groups
- knife data bag from file users
.json
Chef Access
Section titled “Chef Access”chef-server-ctl user-create <username> <first> <last> <email> $(openssl rand -hex 20)
chef-server-ctl org-user-add gitlab <username>Ops Instance Access
Section titled “Ops Instance Access”Generally when developers ask for access to the ops instance, we are concerned
with chatops access, which requires developer on gitlab-com group.
If access to any other groups are needed, please clarify with the requester.
Read Only Rails Console Access
Section titled “Read Only Rails Console Access”When developers ask for access to the rails console, have them submit an access request via Teleport using the Teleport Rails Console Runbook - Then approve that request (if appropriate) using the Teleport Approval Workflow - If the request is for Read/Write access, it’s best to give the commands to an SRE and have them run them.