Users access the sepia lab by tunnelling through an OpenVPN server run at gw.sepia.ceph.com. It's a Highly Available VM living in RHEV.

Managed by Ansible using the gateway role in ceph-cm-ansible.

The process for requesting lab access is documented here.

A ticket should be filed for paper trail purposes. Put the ticket in the commit messages for the PRs created below.

To grant a new user access to the VPN,

1. Add the user's public key to the keys.git repo. ¹⁾
2. Add their username and hashed password to lab_users in the ceph-sepia-secrets.git repo.
3. Once your PR has been merged, run the gateway role in ceph-cm-ansible to push the new user entry to the server.

ansible-playbook gateway.yml --tags="users"

Detailed information on our particular setup (how auth works and such) can be found in the old cookbook-gw.git repo.