cumin is now at a place where it's sufficiently mature enough (or at least as mature) and battle-tested to be able to serve as a SaltStack replacement for our limited use cases, or at least where it's close to becoming that.
For infrastructure simplicity, as well as security reasons (Salt is yet another way for root-level access), we should devise a plan forward to fully deprecate Salt for all our use cases.
At least the following need to happen for this to complete:
- Migrate everything that's still on trebuchet to scap3
- Remove trebuchet from everywhere installed + its puppet manifests
- Migrate debdeploy to cumin, potentially adding features that are missing
- Retire and/or replace custom salt grains from puppet
- Find and replace all salt references in documentation (wikitech)
- Uninstall salt-minion and salt masters from everywhere in production
- Migrate Cloud VPS to be able to use Cumin as distributed command execution
- Uninstall salt-minion and salt masters from everywhere in Labs?
- Remove Icinga monitoring of salt-minions in prod
- Remove wmf-auto-reimage / wmf-reimage dependencies on salt
- Search for all Trebuchet-related and Salt/SaltStack-related tasks on Phabricator and resolve them (free-text search too, there are a lot). Archive the Trebuchet and Salt components