department-of-veterans-affairs / va.gov-cms

Editor-centered management for Veteran-centered content.
https://prod.cms.va.gov
GNU General Public License v2.0
96 stars 70 forks source link

Onboarding Template - Tyler Bird #17012

Closed michelle-dooley closed 3 months ago

michelle-dooley commented 7 months ago

Welcome to the VFS-CMS Team!

This ticket contains all of the onboarding activities for a new member joining the VFS-CMS Team. There's a lot to digest and the learning curve may take a few months, so we've organized the information in sections to help you pace yourself. Come back to this ticket any time to refresh your knowledge on a specific topic covered below. We look forward to getting to know you!

VFS-CMS Start Date:

Team info:

(More CMS team info can be found in below in Day One section.)

Day one ## Day one - [x] Meet with your Delivery Manager for a brief orientation to the CMS Team. - [x] Read about the CMS Team and see full team roster ([link](https://github.com/department-of-veterans-affairs/va.gov-team/tree/master/platform/cms )) - [x] Read the VA's Office of the CTO (OCTO) engineering excellence guiding principles post in DSVA slack ([link](https://dsva.slack.com/archives/C04KXPXL4/p1674065912579799)) - [x] Read the [VA.gov platform crew principals](https://depo-platform-documentation.scrollhelp.site/getting-started/platform-crew-principles). - [x] Open a VA.gov [Platform orientation ticket](https://depo-platform-documentation.scrollhelp.site/getting-started/guidance-for-new-teams-and-team-members#Guidancefornewteamsandteammembers-NewVFSteammembers). * The VA.gov Platform team manages VA.gov tooling and network access. In order to receive access to the SOCKS network proxy (described later), you must 1) create the Platform orientation ticket linked above, 2) have completed your e-QIP paperwork and receive/provide a screenshot of the email with your e-QIP transmittal date (your Delivery Manager will provide details on timing), 3) attend a Platform orientation. * These steps will result in getting you added to the VFS Platform roster. * If a Platform orientation isn't available for several weeks, sign up for the next available slot, then tag your Delivery Manager and VA Product Owner on your Platform ticket to expedite SOCKS access.
Week one ## Week one The goals of this week are: 1) get background paperwork completed as quickly as possible and 2) start gaining context for what we're doing and why. ### VA security clearance / VA onboarding paperwork Getting onboarded to the VA can take a few weeks to a few months. We encourage you to prioritize these tasks before any team tasks. - [x] Wait to receive an email directing you to the paperwork you should fill out for secure access to relevant VA systems. Federal contractors are required to complete many of the same forms as federal employees. If you're not sure which you contract you are on, ask your Delivery Manager. - **VFS-CMS** contract paperwork will come from A6. - [x] Complete and submit your initial paperwork per contract instructions, including setting up your fingerprinting appointment. - [x] When you are notified to complete your e-QIP (the online version of the federal standard investigation form, SF 86), it will require a lot of background information. [Review page 7 of the SF 86 guide](https://www.dcsa.mil/Portals/91/Documents/pv/mbi/standard-form-sf-86-guide-for-applicants.pdf) in advance for the list of information you'll need to collect to complete e-QIP ### Drupal Content Management System Gaining product knowledge about the CMS can take some time. These activities can be completed in any order and are secondary to your VA security clearance onboarding tasks above. - [ ] [Watch the 2021 Drupal GovCon presentation about the project](https://www.youtube.com/watch?v=WN4bGjEuQdM). - [x] Why are VA Medical Centers changing their websites? Watch the [2-minute YouTube video](https://youtu.be/Xrv5wCv6cKY). - [x] Why are Vet Centers important to Veterans? Watch the [2-minute YouTube video](https://www.youtube.com/watch?v=VMzkZNbKk1I).
Week two ## Week two ### What products do we support? - [x] Read the [product outlines](https://github.com/department-of-veterans-affairs/va.gov-team/tree/master/platform/cms/product-outlines) in the repository for a non-inclusive view of the platform. Be mindful of the dates, as some of these products have not been shipped but may still live in our backlog. ### Access Regardless of your role, please review these access notes. Your Delivery Manager will have set up most of the tools for you (with the exception of SOCKS). This list is for you to verify along the way: #### SOCKS - VA network proxy The VA network is required for Drupal CMS and other VA tools and usually requires a VA ID card (PIV or Smartcard). Until you get your paperwork approved and ID card, SOCKS proxy is a back door to some of these tools. This is the first priority for week two. - [x] File a [SOCKS proxy request](https://depo-platform-documentation.scrollhelp.site/getting-started/Internal-tools-access-via-SOCKS-proxy.1821081710.html) and select the label for your team. See https://github.com/department-of-veterans-affairs/va.gov-team/issues/68549 - [x] [Platform orientation](https://depo-platform-documentation.scrollhelp.site/getting-started/Calendly-Orientation-Sessions.2133393543.html#CalendlyOrientationSessions-GeneralOrientation). This should have been requested on day one as part of the Platform onboarding ticket but is here as a reminder that this is a blocker for SOCKS access as you'll need to get added to their ecosystem roster in order to proceed. - [x] Provide a screenshot of the email that confirms your eQip transmittal date. This is an acknowledgement that your paperwork is being processed from a security standpoint. You cannot receive SOCKS access prior to this point in your onboarding. - [x] [Request a Github personal access token first](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token). You only need to do the "repo" panel in that form and leave the other panels as is. It may take a day or two for the SOCKS proxy request to be fulfilled before you can complete the rest of the SOCKS process. This can be a complex process. Post in #sitewide-program Slack channel if you need help from a current member - we're happy to help. #### Github - for issue tracking and document sharing - [x] [VA.gov request instructions](https://github.com/department-of-veterans-affairs/github-user-requests/issues/new?labels=add-user-to-org%2C+new-user%2C+user-created&template=add-user-to-the-va-organization.md&title=ADD+USER+TO+ORG+-+%5BUSERNAME%5D) - Your Delivery Manager should have already requested this for you so double check with them before submitting a new request. - [x] [Zenhub extension instructions](https://www.zenhub.com/extension) - Optional: We use GitHub and ZenHub on this project, so this can be a helpful extension to use on your preferred browser. - [x] [Intro to CMS Team Github](https://github.com/department-of-veterans-affairs/va.gov-cms#readme) - [x] [CMS team list](https://github.com/orgs/department-of-veterans-affairs/teams/vfs-cms-team/members) - Same as above. You must be added to this team to contribute in Github. - [x] Optional: New to Github and markdown? [Learn about writing on Github](https://docs.github.com/en/github/writing-on-github/getting-started-with-writing-and-formatting-on-github) or [watch a tutorial video](https://youtu.be/TBbtbKplUoc) #### Slack - for instant messaging Your Delivery Manager should have already requested this for you, but if not, view the [request instructions](https://github.com/department-of-veterans-affairs/va.gov-team/blob/master/platform/working-with-vsp/orientation/slack-requests.md) - [x] [Review Slack etiquette](https://slack.com/blog/collaboration/etiquette-tips-in-slack). - [x] Update your profiles in Slack (in the A6 and DSVA workspaces), add a calendar link - [x] Reach out to your Delivery Manager if you have questions about which appropriate Slack channels and user groups to join in the DSVA workspace These are the initial Slack channels you'll be added to by your Delivery Manager: - [x] In the A6/agency workspace = your team channel is`#team-vfs-cms` for general communication outside of our project work - [x] In the DSVA workspace = your team channel is`#sitewide-cms-platform` for project-related communication and collaboration - [x] [This is a description of other channels](https://docs.google.com/spreadsheets/d/1_lZzectbSzs8zt4dvTFJTiPURxa0Kfp3xinYEuZdqq4/edit#gid=0) to put on your radar. Note that many are going to be dependent on which workstream you're in. #### Drupal - for logging into the CMS (SOCKS or VA access with PIV card required) Drupal is the VA's content management system of choice. For anyone on our team, it's beneficial to have a CMS user account so you can login, look at settings, and understand how the CMS works at a high level. If you need help completing the technical steps here, schedule 30 mins with your Delivery Manager. - [ ] [Learn about the different Drupal environments](https://github.com/department-of-veterans-affairs/va.gov-cms/blob/main/READMES/environments.md) - [ ] Drupal production environment access (SOCKS or VA network required) - in DSVA #cms-support channel, use the Slack workflow to file a helpdesk support request. Ask the helpdesk to create a Drupal user for you in [prod.cms.va.gov](prod.cms.va.gov). * Product Managers should request an Administrator account. * DevOps team members require an administrator account. (SOCKS or VA access with PIV card required) * Standard practice for other roles is to have minimal access in prod (content editor or even a blocked account) and full admin access in lower environments. ##### Tugboat - for previewing in demo environments (SOCKS or VA access with PIV card required) Tugboat is a development server platform where you can preview CMS code changes pre-production. - [ ] [Tugboat for non-engineers](https://prod.cms.va.gov/help/demo-environments-tugboat-guides) - [ ] [Tugboat for engineers](https://github.com/department-of-veterans-affairs/va.gov-cms/blob/main/READMES/tugboat.md) #### Other tools - [x] Confluence (your Delivery Manager will get you added) - [ ] [Datadog](https://depo-platform-documentation.scrollhelp.site/getting-started/Request-access-to-tools.969605215.html#Requestaccesstotools-Requestaccess) to access monitoring metrics (your Delivery Manager will get you added)
Discipline specific onboarding ## For DevOps members - [x] [VA.gov tools overview](https://depo-platform-documentation.scrollhelp.site/getting-started/Request-access-to-tools.969605215.html) - [ ] [IAM/SSO lower environment access](https://github.com/department-of-veterans-affairs/va.gov-team-sensitive/blob/master/platform/cms/cms-sso-saml-iam-login-braindump.md#testing-login) - [x] [Jenkins](http://jenkins.vfs.va.gov/) (SOCKS required) - [ ] [Grafana](http://grafana.vfs.va.gov/login) (SOCKS required) - [ ] [Sentry](http://sentry.vfs.va.gov.) (SOCKS required) - [x] [AWS](https://depo-platform-documentation.scrollhelp.site/getting-started/Request-access-to-tools.969605215.html#Requestaccesstotools-Requestaccess) (SOCKS required) - [ ] And request to be added to the `adhoc-vetsgov-devops` group. - [ ] sshuttle - [x] [Access to dev & staging to be able to replicate the SSO piece of the login experience](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/5838) (SOCKS or VA access required) - [ ] [Venafi access](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/14350) - [ ] [SSH access to CMS servers](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/14357) - [ ] [Okta access for Datadog](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/14396) - [ ] [Secure Access to GitHub Bot Account](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/14345) - [ ] [Access to dev & staging to be able to replicate the SSO piece of the login experience](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/14346) (SOCKS or VA access required) - [x] [PagerDuty access](https://github.com/department-of-veterans-affairs/va.gov-cms/issues/14393) ## Month one By this point you should have enough context and access to be able to start contributing. Work with your team to identify specific issues to focus on. ### Who? - [ ] Who are our VA points of contact? Discuss with your Delivery Manager or Product Owner. - [ ] Who should we know on the platform team? Who should we know on VFS Teams? Discuss with your Delivery Manager or Product Owner. ### What? - [x] Complete any VA-assigned trainings in the TMS system. If the TMS learning modules malfunction, assign yourself the print version of the module. (Ask in #proj-vagov-team if you need help.) - [x] You'll receive an email confirming that you have been approved for remote access, using Citrix Access Gateway (CAG). You can contact Enterprise Service desk via provided instructions to set up your CAG access manually, if you need access prior to receiving your PIV card. - [ ] After your background check is complete, you will get an email to get your Personal Identify Verification (PIV) card. Contact your local VA office (where you got your fingerprints taken) for information about getting your [PIV card](https://www.oit.va.gov/programs/piv/how-to.cfm?). - [ ] Review a [video about the benefits of the PIV card and VA network access](https://youtu.be/6rI-i8zmOzE). - [ ] PIV card will help you get remote VA network access. See [VA network remote access options](https://www.oit.va.gov/resources/remote-access/index.cfm?) - [x] [Azure virtual desktop is recommended for Windows](https://www.oit.va.gov/resources/remote-access/azure-virtual-desktop/) - [x] Mac users should [follow these CAG download instructions](https://docs.google.com/document/d/1_3HKMk4AXyqAoQcfF4CthEQ7uU_d1h9Tt7CPHGJ-FaM) - [x] Purchase a card reader, if you don't have one. A6 IT recommends these options: [USB](https://www.amazon.com/gp/product/B002N3MM6W/ref=ppx_yo_dt_b_asin_title_o01_s00?ie=UTF8&th=1) or [USB-C](https://www.amazon.com/gp/product/B002N3MM6W/ref=ppx_yo_dt_b_asin_title_o01_s00?ie=UTF8&th=1) - [ ] Use your PIV card to access CAG. You must access CAG every 60 days or your access will be expired. - [ ] [Drupal CMS and Design Systems](https://docs.google.com/spreadsheets/d/11ppWiIggKJh-YAWia28utZXW48tJZGCEg-sFJ6eIl9c) - [ ] Google Analytics: [Request access to Google Analytics](https://depo-platform-documentation.scrollhelp.site/analytics-monitoring/New-Users-to-Google-Analytics.1877704964.html) - [ ] [Opt out](https://www.va.gov/analytics-opt-out.html) of Google Analytics collection on VA.gov. - [ ] [Opt out](https://depo-platform-documentation.scrollhelp.site/?internal-user-opt-out=true) of analytics for Platform's website. You will not get a confirmation message and will have to do this for every browser and every time you clear cookies. - [ ] Once you have access to Prod, [browse the VA Drupal CMS Knowledge Base articles](https://prod.cms.va.gov/help/).
7hunderbird commented 6 months ago
7hunderbird commented 6 months ago
7hunderbird commented 6 months ago
7hunderbird commented 6 months ago

I submitted a PagerDuty request in #vfs-platform-support DSVA slack. I will update the ticket with requested information when I have the team name.

7hunderbird commented 6 months ago

Making progress on the Platform onboarding ticket:

7hunderbird commented 6 months ago

PagerDuty licenses caused my request to be initially rejected. It is possible we may be more licenses, but we may also get creative with Datadog notifications or Slack notifications.

7hunderbird commented 6 months ago

I tried to request AWS Access this morning and I need eQIP for that.

https://github.com/department-of-veterans-affairs/va.gov-team/issues/new?assignees=&labels=external-request%2Coperations%2Cops-access-request&projects=&template=aws-access-request.yml&title=AWS+access+for+%5Bindividual%5D

7hunderbird commented 6 months ago

Got my transmittal notice today. Starting on the forms.

7hunderbird commented 6 months ago

Submitted SOCKS access request and AWS Access Request! 🎉

7hunderbird commented 6 months ago

I am trying to get going on Datadog:

I have a PIV exemption so I'm trying to use that to create my Okta Account

7hunderbird commented 6 months ago

This is my current access snapshot.

Have Access To

Todo

Blocked

Not Applicable