Help:Cloud VPS user roles and rights

Cloud VPS

• Cloud Services overview
• Cloud VPS user docs
• Horizon web interface (help)

Get started

• About Cloud VPS projects
• Cloud VPS user roles and rights
• List of Cloud VPS projects

Instances and access

• Set up a Cloud VPS instance
• Access Cloud VPS instances
• Add disk space to instances (detachable volumes)
• Server groups
• Sudo policies
• Unmanaged instances

Networking

• Security groups and firewall settings
• Floating IP addresses
• Web proxies for exposing Cloud VPS services to the internet

Puppet

• Puppet on Cloud VPS
• Project puppetserver

Managed storage

• Database instances (Trove)
• Object storage (S3 / Swift)

Get help

• Help and communication
• Recommendations for moving to production

Programmatic usage

• OpenStack APIs
• OpenTofu

Documentation for admins

• Cloud VPS infrastructure
• Administrator documentation
• Administrator runbooks

[]

This page contains information about Wikimedia Cloud VPS user roles and rights.

Accounts you will need

This document can be improved to have clearer sequencing with related docs: phab:T347637

To access Toolforge, Cloud VPS, or other Wikimedia developer tools, you need the following two types of accounts:

Account Type	Description	Where to sign up
Wikimedia account	Also known as "Wikimedia single user login (SUL)" account. Allows you to log into wikis like Wikipedia, MediaWiki.org, MetaWiki, and Wikitech (this wiki).	Create Wikimedia account
Wikimedia developer account	Username (also called LDAP username) is used to log in on Gerrit, the Toolforge admin console, and other Wikimedia technical tools. In GitLab it is your displayed name, so you may want it to be your full name. You will not be able to change this later! Shell username is used to log into Toolforge, other Cloud VPS or Wikimedia production hosts using SSH.	Create Wikimedia developer account

Users and permissions

Permission	Logged-in users	Project reader	Project member	Cloud admins
Add and manage your public SSH keys	X	X	X	X
SSH to project instances		X	X	X
Manage project membership and user roles			X	X
Create or manage instances			X	X
Allocate and associate public IP addresses, and add public DNS entries to instances			X	X
Manage security groups and rules			X	X
Manage available puppet classes and variables			X	X
Manage sudo policies			X	X
Create/delete Cloud VPS projects				X
Create and manage DNS domains				X

Gaining specific permissions

The following people can grant Project reader or member rights:

• Project members. Project members can grant access on projects they are members of. You can find Project members listed on the individual pages for their projects.
• Cloud VPS admins. Cloud roots and Cloud admins, including Wikimedia Cloud Services staff and trusted community volunteers, can manage membership and Project admin status in any project.

Communication and support

Support and administration of the WMCS resources is provided by the Wikimedia Foundation Cloud Services team and Wikimedia movement volunteers. Please reach out with questions and join the conversation:

Discuss and receive general support

• Chat in real time in the IRC channel #wikimedia-cloud ^connect or the bridged Telegram group
• Discuss via email after you have subscribed to the cloud@ mailing list

Stay aware of critical changes and plans

• Subscribe to the cloud-announce@ mailing list (all messages are also mirrored to the cloud@ list)
• Read the News wiki page

Track work tasks and report bugs

Use a subproject of the #Cloud-Services Phabricator project to track confirmed bug reports and feature requests about the Cloud Services infrastructure itself

Read stories and WMCS blog posts

Read the Cloud Services Blog (for the broader Wikimedia movement, see the Wikimedia Technical Blog)