Page MenuHomePhabricator
Create Task
Maniphest T208585

Decommission cp3007-cp3010
Closed, ResolvedPublic
Actions

Description

This task will track the decommission-hardware of server cp3007, cp3008, cp3009, cp3010

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.

cp3007

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server: codfw = @Papaul, eqiad = @Jclark-ctr, all other sites = @RobH.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned. If uncertain, ask @wiki_willy.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp3008

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server: codfw = @Papaul, eqiad = @Jclark-ctr, all other sites = @RobH.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned. If uncertain, ask @wiki_willy.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp3009

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server: codfw = @Papaul, eqiad = @Jclark-ctr, all other sites = @RobH.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned. If uncertain, ask @wiki_willy.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp3010

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server: codfw = @Papaul, eqiad = @Jclark-ctr, all other sites = @RobH.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned. If uncertain, ask @wiki_willy.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

Details

SubjectRepoBranchLines +/-
cleanup for old cp3007-10operations/dnsmaster+0 -15
cleanup for old cp3007-10operations/puppetproduction+5 -21
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 Resolvedwiki_willyT235805 ESAMS Refresh/Rebuild (October 2019)
 ResolvedPapaulT208585 Decommission cp3007-cp3010

Event Timeline

• ema created this task.Nov 2 2018, 1:30 PM
Restricted Application added a project: SRE. · View Herald TranscriptNov 2 2018, 1:30 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
• ema renamed this task from Decommission cache_misc hosts to Decommission esams cache_misc hosts.Nov 2 2018, 1:43 PM
• ema triaged this task as Medium priority.
• ema added projects: decommission-hardware, ops-esams.
• ema updated the task description. (Show Details)
• ema moved this task from Backlog to Hardware on the Traffic board.
• Phabricator_maintenance moved this task from Backlog to Acknowledged on the SRE board.Jan 26 2019, 10:36 PM
RobH moved this task from Backlog to Ready for Decommission on the decommission-hardware board.Mar 7 2019, 9:04 PM
RobH moved this task from Ready for Decommission to Blocked on Service Owners on the decommission-hardware board.Jul 15 2019, 6:00 PM
RobH moved this task from Backlog to Decommission on the ops-esams board.Sep 18 2019, 5:29 PM
MoritzMuehlenhoff moved this task from Blocked on Service Owners to Ready for Decommission on the decommission-hardware board.Sep 27 2019, 10:43 AM
MoritzMuehlenhoff moved this task from Ready for Decommission to Blocked on Service Owners on the decommission-hardware board.
Dzahn mentioned this in T235234: fix IPMI over LAN on certain HP hosts.Oct 11 2019, 12:12 AM
ops-monitoring-bot added a comment.Oct 23 2019, 2:36 PM

cookbooks.sre.hosts.decommission executed by ema@cumin1001 for hosts: cp3007.esams.wmnet

  • cp3007.esams.wmnet (PASS)
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
ops-monitoring-bot added a comment.Oct 23 2019, 2:38 PM

cookbooks.sre.hosts.decommission executed by ema@cumin1001 for hosts: cp3008.esams.wmnet

  • cp3008.esams.wmnet (FAIL)
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Failed to power off, manual intervention required: Remote IPMI for cp3008.mgmt.esams.wmnet failed (exit=1): b''
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

ERROR: some step on some host failed, check the bolded items above

ops-monitoring-bot added a comment.Oct 23 2019, 2:40 PM

cookbooks.sre.hosts.decommission executed by ema@cumin1001 for hosts: cp3010.esams.wmnet

  • cp3010.esams.wmnet (PASS)
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
• ema added a comment.Oct 23 2019, 2:41 PM
In T208585#5599005, @ops-monitoring-bot wrote:
  • Failed to power off, manual intervention required: Remote IPMI for cp3008.mgmt.esams.wmnet failed (exit=1): b''

Other than cp3008 failing to power off, everything else went fine.

BBlack added a parent task: T235805: ESAMS Refresh/Rebuild (October 2019).Oct 25 2019, 5:03 AM
gerritbot added a comment.Oct 25 2019, 5:06 AM

Change 546011 had a related patch set uploaded (by BBlack; owner: BBlack):
[operations/puppet@production] cleanup for old cp3007-10

https://gerrit.wikimedia.org/r/546011

gerritbot added a project: Patch-For-Review.Oct 25 2019, 5:06 AM

Change 546012 had a related patch set uploaded (by BBlack; owner: BBlack):
[operations/dns@master] cleanup for old cp3007-10

https://gerrit.wikimedia.org/r/546012

gerritbot added a comment.Oct 25 2019, 5:08 AM

Change 546011 merged by BBlack:
[operations/puppet@production] cleanup for old cp3007-10

https://gerrit.wikimedia.org/r/546011

gerritbot added a comment.Oct 25 2019, 5:09 AM

Change 546012 merged by BBlack:
[operations/dns@master] cleanup for old cp3007-10

https://gerrit.wikimedia.org/r/546012

Maintenance_bot removed a project: Patch-For-Review.Oct 25 2019, 5:10 AM
Volans mentioned this in T229998: decom cookbook: dry-run mode not working / PuppetDB and Debmonitor removals can fail.Oct 25 2019, 5:41 PM
BBlack renamed this task from Decommission esams cache_misc hosts to Decommission cp3007-cp3010.Oct 29 2019, 1:24 PM
BBlack updated the task description. (Show Details)
BBlack added subscribers: Jclark-ctr, wiki_willy, Papaul, RobH.
Papaul closed this task as Resolved.Oct 29 2019, 8:25 PM
Papaul claimed this task.
Papaul updated the task description. (Show Details)

Complete

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL