Group for Delivery team members to be able to access release instance to analyze logs via ssh
Details
- Point of contact for this request: @mbursi
- If a call is needed, what is the proposed date and time of the call: 8:00-17:00 UTC
- Additional call details (format, type of call): any format
SRE Support Needed
(proposed solution based on current access control implementation via groups)
- Create new Chef Group for Delivery team members, with permission scoped to access logs in release instance via ssh. Accessing logs is the only permission needed.
- Assign current Delivery team members to the group (with relative ssh keys)
Problem Statement
The release instance is a one-off that enables us to test our deployments. We do not centrally manage the logs of this instance. Thus one of the few ways to troubleshoot this instance is to ensure that an Engineer is able to view the logs on the instance itself. At the moment, not all Engineers even have ssh access, thus must rely on an SRE for assistance.
More info on issue delivery#2392 (comment 954707257)
Edited by Michele Bursi