Skip to content
Open
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 32 additions & 0 deletions onboarding/web-infra.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
# @nodejs/web-infra Onboarding

This document is an outline of the tasks necessary to onboard a new member of the Web Infrastructure team (@nodejs/web-infra).

Please note these tasks should only be performed after an individual's nomination has passed.
To start the nomination process, see [GOVERNANCE.md](../GOVERNANCE.md).

## Tasks
Comment on lines +1 to +8
Copy link
Member

@avivkeller avivkeller Oct 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
# @nodejs/web-infra Onboarding
This document is an outline of the tasks necessary to onboard a new member of the Web Infrastructure team (@nodejs/web-infra).
Please note these tasks should only be performed after an individual's nomination has passed.
To start the nomination process, see [GOVERNANCE.md](../GOVERNANCE.md).
## Tasks
## @nodejs/web-infra Onboarding

Let's make this uniform w/ https://github.com/nodejs/web-team/blob/main/onboarding/nodejs-website.md?plain=1

Copy link
Member Author

@flakey5 flakey5 Oct 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should keep the two paragraphs since it gives a general outline and explicitly states when these steps should happen. While both can be inferred implicitly, I still think it's better to explicitly state these so avoid confusion or misinterpretation regardless of how unlikely


- [ ] The nominee should open a pull request in [nodejs/web-team](https://github.com/nodejs/web-team) adding themselves to the [MEMBERS.md](https://github.com/nodejs/web-team/blob/main/MEMBERS.md#nodejs-web-infra-team-nodejsweb-infra) document.
- [ ] Nominee should include this list in the pull request's body to keep track of what has been completed for their onboarding. The pull request should not be merged until the onboarding tasks have been completed.
- [ ] Please link any additional issues or pull requests back to this one for record keeping purposes.
- [ ] A Web Admin should add the nominee to the [@nodejs/web-infra](https://github.com/orgs/nodejs/teams/web-infra) team.
- [ ] The nominee should open an issue in [nodejs/admin](https://github.com/nodejs/admin) requesting access to the Web Infra 1Password vault.
- [ ] A Web Admin should invite the nominee to Node.js' Sentry account.
- [ ] The nominee should enable physical or passkey 2FA on their Sentry account.
- [ ] A Web Admin should invite the nominee to Node.js' Vercel account.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we also give access to Cloudflare even if in a read-only capacity?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have admin read-only, I had assumed that was something all of web-infra has so we can see what's going on there

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think that is up to the build team, I do think admin read only would be nice but right now there's no set level of access (i.e. I have workers read and R2 read atm)

- [ ] The nominee should enable physical or passkey 2FA on their Vercel account.
- [ ] The nominee should open a pull request in [nodejs/email](https://github.com/nodejs/email) to add their email to the `nodejs-crowdin` email chain.
- [ ] An OpenJS Slack Admin should add their Slack account to the `nodejs-website-team` team.

### Recommendations

- [ ] A Web Admin should recommend the nominee have some form of physical 2FA (i.e. Yubikey) or passkey enabled on their GitHub account
- [ ] A Web Admin should recommend any SSH or GPG key attached to their GitHub account have passphrases or be stored on a physical 2FA device.
- [ ] A Web Admin should recommend the nominee sign their Git commits.

## Notes

There currently is not a set level of access that @nodejs/web-infra members have on Cloudflare.

Should you need additional access, it may be granted, however, access is not given by default since we do not control it.
Loading