-
Notifications
You must be signed in to change notification settings - Fork 4
Leavers process
When someone leaves you should reverse the joiners process steps. You should similarly make a Trello ticket to track the progress of the tasks. Even if they are not a developer, you should check all the tasks as we often give permissions to non developers such as allowing product managers and content designers to edit Github.
Some accounts are handled centrally to GDS, and if they're moving teams they may still need access to the systems (though may need to be removed from notify teams within those systems).
- Pagerduty
- Github
- Zendesk
- gds-users AWS
You can prevent further use of the Yubikey with the following commands:
# reset e.g. WebAuthn credentials
ykman fido reset
# reset one time passcode credentials
ykman oath reset
From a practical perspective, this helps signal to others that the key should no longer be used.
From a security perspective, this prevents verification of any future commits signed with the key.
Remove user from:
- terraform/modules/local-development/iam.tf
- terraform/modules/local-development/variables.tf
- terraform/modules/main/modules/iam/variables.tf
Run terraform on all environments