New Gateway Checklist

is the icinga ipmi user added (fabric)
is it in on the correct (OPN/LHCONE) section of the network
are the firewall holes in place (1094)?
is it on the correct personality?
is the host blacklisted on the manager?
does it have a host certificate on /etc/grid-security/xrootd/ ?
does it have the xrootd keyring in /etc/ceph ?
is the xrootd@{unified,tpc} cmsd@unified service active and running?
is the host downtimed in icinga (new ones show about 11 am)?
are the functional tests passing?
is it pingable externally on ipv4/ipv6?
compile the managers (the new hosts should show up in the xrootd config exports)
run network components on:
all of echo
lcgdns
ceph-influxdb01
on the new gateway
remove from blacklist
check kibana, sam tests and grafana