Chris W Offboarding

[TomNUSDS]

Offboarding checklist

Note: please do not put sensitive information here (issues are public)

Initially assign to team lead for person being offboarded.

Engineering specific:

• [x] Change GitHub access level
• [ ] Zenhub
• [ ] Azure (CDC as a result of ActiveDirectory)
• [ ] PagerDuty
• [ ] Splunk
• [ ] Akamai (ops)
• [ ] Docker Desktop license assignment

General Access:

• [x] Revoke Okta accounts (Search for name, agency email, and contractor email)
  • [x] staging
  • [x] prod
• [x] Slack access to channels
• [x] Metabase
  • [x] staging
  • [x] prod
• [ ] Office 365 (CDC as a result of ActiveDirectory)
• [x] Keybase
  • ❗ VPN creditials in /prime_dev_ops/vpn (revoke?)
    • I do not see a cwinters vpn directory, which means I do not have access to his certificate to revoke it.
  • [x] Access to keybase itself
• [ ] Mural
• [ ] Lucid Chart
• [ ] SendGrid access
• [ ] Any additional CDC-specific off-boarding (did they get a PIV?)

Workflow:

• [ ] Reassign any github issues
• [ ] Verify no open git PRs
• [ ] Delete any old, open branches (maybe work in progress)
• [ ] Set Away message in CDC Outlook saying they've left and who to contact instead. This is required since it takes time for CDC to deactivate their account.

[JosiahSiegel]

I removed Chris from group PRIME-ReportStream-DevOps and set his repo access to just read until next week. I don't want to risk breaking anything that he had access to until at least Monday

[TomNUSDS]

@JosiahSiegel Just following up on what else needs to be done. Feel free to check off items.

[TomNUSDS]

Did Okta and Metabase

[TomNUSDS]

Chris opened an issue on this against himself #6204.

I see he included Akamai access. Going to add that to the template.

[JosiahSiegel]

i'll work on revoking vpn

[JosiahSiegel]

@TomNUSDS I do not see a cwinters vpn directory, which means I do not have access to his certificate to revoke it.

[TomNUSDS]

Wahoo. Thanks!