1216992 - Provide VPN access to Async contractors for 2 VMs

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: OpenVPN, task)

Description

[Mike Taylor [:miketaylr]]

Hi there.

We need to provide VPN access to our contractors (http://async.london/) who are building out tooling and test infrastructure for the web compat team.

The boxes were set up in Bug 1216188.

They need access to the following:

compatipede1.dmz.scl3.mozilla.com
compatipede2.dmz.scl3.mozilla.com

Comment 1

[Mike Taylor [:miketaylr]]

Conor, who will need access to the VMs? Just you and Seif?

Comment 2

[Justin Dow [:jabba]]

Both contractors will need to have individual LDAP accounts in the o=net org in LDAP. Once that is done, I can create the appropriate ACLs. If you give me the e-mail addresses and first/last names of the contractors, I can create the LDAP accounts.

Comment 3

[Mike Taylor [:miketaylr]]

Thanks Justin. Conor, can you provide that info?

Comment 4

[conor]

Thanks Justin, Mike

Here we go :

[e-mail] - Conor Curran
[e-mail] - Seif Lotfy
[e-mail] - Dainis Tillers

Comment 5

[Justin Dow [:jabba]]

I've created the accounts and the vpn group. The users will need to add their ssh keys to login.mozilla.com as well as download a VPN certificate and enroll in MFA. Once these steps are completed, their user accounts will be deployed on the compatipede hosts by puppet automation within an hour or so of them completing the steps.

Comment 6

[Mike Taylor [:miketaylr]]

Thanks!

Conor, please let me know if you get stuck w/ any of the instructions in Comment #5.