Page MenuHomePhabricator
Create Task
Maniphest T333169

decommission cloudvirt1017.eqiad.wmnet and cloudvirt102[1-2].eqiad.wmnet
Closed, ResolvedPublicRequest
Actions

Description

This task will track the decommission-hardware of servers cloudvirt1017.eqiad.wmnet and cloudvirt102[1-4].eqiad.wmnet.

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.

cloudvirt1017.eqiad.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal, and run homer.
  • - remove all remaining puppet references and all host entries in the puppet repo
  • - reassign task from service owner to DC ops team member and site project (ops-sitename) depending on site of server

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.

cloudvirt1021.eqiad.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal, and run homer.
  • - remove all remaining puppet references and all host entries in the puppet repo
  • - reassign task from service owner to DC ops team member and site project (ops-sitename) depending on site of server

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.

cloudvirt1022.eqiad.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal, and run homer.
  • - remove all remaining puppet references and all host entries in the puppet repo
  • - reassign task from service owner to DC ops team member and site project (ops-sitename) depending on site of server

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.

Details

SubjectRepoBranchLines +/-
Remove puppet references to cloudvirt1017, 1021, and 1022operations/puppetproduction+4 -26
Revert "Mark cloudvirt1017, 1021 and 1022 as spare systems."operations/puppetproduction+2 -8
Mark cloudvirt1017, 1021 and 1022 as spare systems.operations/puppetproduction+8 -2
Customize query in gerrit

Event Timeline

Andrew created this task.Mar 27 2023, 2:04 PM
Restricted Application added a project: cloud-services-team. · View Herald TranscriptMar 27 2023, 2:04 PM
Andrew renamed this task from decommission cloudvirt1017.eqiad.wmnet and cloudvirt102[1-4].eqiad.wmnet to decommission cloudvirt1017.eqiad.wmnet and cloudvirt102[1-2].eqiad.wmnet.Mar 27 2023, 2:17 PM
Andrew updated the task description. (Show Details)
gerritbot added a comment.Mar 27 2023, 2:21 PM

Change 903263 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):

[operations/puppet@production] Mark cloudvirt1017, 1021 and 1022 as spare systems.

https://gerrit.wikimedia.org/r/903263

gerritbot added a project: Patch-For-Review.Mar 27 2023, 2:21 PM
gerritbot added a comment.Mar 27 2023, 2:24 PM

Change 903263 merged by Andrew Bogott:

[operations/puppet@production] Mark cloudvirt1017, 1021 and 1022 as spare systems.

https://gerrit.wikimedia.org/r/903263

Maintenance_bot removed a project: Patch-For-Review.Mar 27 2023, 2:31 PM
gerritbot added a comment.Mar 27 2023, 2:43 PM

Change 903268 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):

[operations/puppet@production] Revert "Mark cloudvirt1017, 1021 and 1022 as spare systems."

https://gerrit.wikimedia.org/r/903268

gerritbot added a project: Patch-For-Review.Mar 27 2023, 2:43 PM
gerritbot added a comment.Mar 27 2023, 2:46 PM

Change 903268 merged by Andrew Bogott:

[operations/puppet@production] Revert "Mark cloudvirt1017, 1021 and 1022 as spare systems."

https://gerrit.wikimedia.org/r/903268

Maintenance_bot removed a project: Patch-For-Review.Mar 27 2023, 3:11 PM
gerritbot added a comment.Mar 27 2023, 8:17 PM

Change 903330 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):

[operations/puppet@production] Remove puppet references to cloudvirt1017, 1021, and 1022

https://gerrit.wikimedia.org/r/903330

gerritbot added a project: Patch-For-Review.Mar 27 2023, 8:17 PM

Change 903330 merged by Andrew Bogott:

[operations/puppet@production] Remove puppet references to cloudvirt1017, 1021, and 1022

https://gerrit.wikimedia.org/r/903330

ops-monitoring-bot added a comment.Mar 27 2023, 8:25 PM

cookbooks.sre.hosts.decommission executed by andrew@cumin1001 for hosts: cloudvirt1017.eqiad.wmnet

  • cloudvirt1017.eqiad.wmnet (WARN)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Management interface not found on Icinga, unable to downtime it
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
Maintenance_bot removed a project: Patch-For-Review.Mar 27 2023, 8:30 PM
ops-monitoring-bot added a comment.Mar 27 2023, 8:35 PM

cookbooks.sre.hosts.decommission executed by andrew@cumin1001 for hosts: cloudvirt1021.eqiad.wmnet

  • cloudvirt1021.eqiad.wmnet (WARN)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Management interface not found on Icinga, unable to downtime it
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
ops-monitoring-bot added a comment.Mar 27 2023, 8:45 PM

cookbooks.sre.hosts.decommission executed by andrew@cumin1001 for hosts: cloudvirt1022.eqiad.wmnet

  • cloudvirt1022.eqiad.wmnet (WARN)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Management interface not found on Icinga, unable to downtime it
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
Andrew reassigned this task from Andrew to Jclark-ctr.Mar 27 2023, 8:45 PM
Andrew updated the task description. (Show Details)
Andrew added a project: ops-eqiad.
Maintenance_bot added a project: SRE.Mar 27 2023, 8:45 PM
• Cmjohnson moved this task from Backlog to Decommission on the ops-eqiad board.Mar 29 2023, 6:38 PM
Jclark-ctr closed this task as Resolved.Apr 13 2023, 6:01 PM
Jclark-ctr updated the task description. (Show Details)
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL