Page MenuHomePhabricator
Create Task
Maniphest T222592

Decommission es2001, es2002, es2003, es2004
Closed, ResolvedPublic
Actions

Description

es2001,2,3,4 were old hosts which were replaced by es201* hosts. However, due to the lack of space elsewhere, it was requested to keep them for external store backups of non-read only hosts, and later, for backup target of metadata and misc databases.

dbprov and the new bacula shelves were setup, replacing this functionality. So these 4 hosts are ready for decommission.

es2001

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

es2002

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

es2003

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

es2004

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

Details

SubjectRepoBranchLines +/-
DNS: Remove mgmt asset tag for es200[1-4]operations/dnsmaster+0 -8
Remove es2001-4 entries for decommission, but not touching asset tagsoperations/dnsmaster+0 -16
Decommission es2001, es2002, es2003, es2004operations/puppetproduction+1 -81
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedPapaulT222592 Decommission es2001, es2002, es2003, es2004
 ResolvedjcrespoT225131 (OoW) Degraded RAID on es2003

Event Timeline

jcrespo created this task.May 6 2019, 9:32 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 6 2019, 9:32 AM
jcrespo changed the task status from Open to Stalled.May 6 2019, 9:33 AM

Blocked on bacula setup.

jcrespo moved this task from Triage to Blocked external/Not db team on the DBA board.May 6 2019, 9:33 AM
jcrespo mentioned this in T220002: Decommission dbstore2001.codfw.wmnet and dbstore2002.codfw.wmnet.
• Marostegui added a subtask: T225131: (OoW) Degraded RAID on es2003.Jun 13 2019, 7:41 AM
• Marostegui closed subtask T225131: (OoW) Degraded RAID on es2003 as Resolved.Jul 18 2019, 5:02 AM
faidon mentioned this in T245161: Track down and replace very old HW.Feb 13 2020, 3:36 PM
• Marostegui mentioned this in T251017: Degraded RAID on es2004.Apr 27 2020, 5:31 AM
jcrespo claimed this task.Apr 27 2020, 6:48 AM
jcrespo moved this task from Blocked external/Not db team to In progress on the DBA board.
gerritbot added a comment.Apr 27 2020, 9:11 AM

Change 592617 had a related patch set uploaded (by Jcrespo; owner: Jcrespo):
[operations/puppet@production] Decommission es2001, es2002, es2003, es2004

https://gerrit.wikimedia.org/r/592617

gerritbot added a project: Patch-For-Review.Apr 27 2020, 9:11 AM
jcrespo changed the task status from Stalled to Open.Apr 27 2020, 9:16 AM
jcrespo updated the task description. (Show Details)
jcrespo updated the task description. (Show Details)Apr 27 2020, 9:19 AM
jcrespo updated the task description. (Show Details)
gerritbot added a comment.Apr 27 2020, 9:23 AM

Change 592617 merged by Jcrespo:
[operations/puppet@production] Decommission es2001, es2002, es2003, es2004

https://gerrit.wikimedia.org/r/592617

jcrespo updated the task description. (Show Details)Apr 27 2020, 9:29 AM
ops-monitoring-bot added a comment.Apr 27 2020, 9:32 AM

cookbooks.sre.hosts.decommission executed by jynus@cumin2001 for hosts: es2001.codfw.wmnet

  • es2001.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
ops-monitoring-bot added a comment.Apr 27 2020, 9:33 AM

cookbooks.sre.hosts.decommission executed by jynus@cumin2001 for hosts: es2002.codfw.wmnet

  • es2002.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
ops-monitoring-bot added a comment.Apr 27 2020, 9:34 AM

cookbooks.sre.hosts.decommission executed by jynus@cumin2001 for hosts: es2003.codfw.wmnet

  • es2003.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
ops-monitoring-bot added a comment.Apr 27 2020, 9:34 AM

cookbooks.sre.hosts.decommission executed by jynus@cumin2001 for hosts: es2004.codfw.wmnet

  • es2004.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
jcrespo updated the task description. (Show Details)Apr 27 2020, 9:35 AM
gerritbot added a comment.Apr 27 2020, 9:42 AM

Change 592623 had a related patch set uploaded (by Jcrespo; owner: Jcrespo):
[operations/dns@master] Remove es2001-4 DNS but leaving asset tags for decommission

https://gerrit.wikimedia.org/r/592623

gerritbot added a comment.Apr 27 2020, 9:52 AM

Change 592623 merged by Jcrespo:
[operations/dns@master] Remove es2001-4 entries for decommission, but not touching asset tags

https://gerrit.wikimedia.org/r/592623

jcrespo reassigned this task from jcrespo to Papaul.Apr 27 2020, 9:55 AM
jcrespo removed a project: Patch-For-Review.
jcrespo updated the task description. (Show Details)
jcrespo added a subscriber: RobH.

One year later, this is ready for full decommissioning.

Note: @Papaul These hosts used to contain all Wiki content, so disk should be wiped. Some, at least 2, may have failed already and were never replaces (as requested), FYI.

Obviously, this has little priority right now, leaving you for triaging.

jcrespo updated the task description. (Show Details)Apr 27 2020, 9:59 AM
• Marostegui edited projects, added decommission-hardware, ops-codfw, DC-Ops; removed DBA.Apr 27 2020, 10:51 AM
Restricted Application added a project: SRE. · View Herald TranscriptApr 27 2020, 10:51 AM
• Marostegui moved this task from Backlog to pending onsite steps (codfw) on the decommission-hardware board.Apr 27 2020, 10:52 AM
Papaul triaged this task as Low priority.Apr 27 2020, 2:19 PM
RobH unsubscribed.Apr 27 2020, 2:56 PM
Papaul moved this task from Backlog to Decommission on the ops-codfw board.Apr 27 2020, 2:58 PM
Papaul added a comment.Apr 27 2020, 5:43 PM
[edit interfaces interface-range disabled]
     member xe-7/0/6 { ... }
+    member ge-1/0/2;
[edit interfaces]
-   ge-1/0/2 {
-       description es2001;
-       enable;
-   }
[edit interfaces interface-range disabled]
     member ge-1/0/2 { ... }
+    member ge-6/0/13;
[edit interfaces]
-   ge-6/0/13 {
-       description es2002;
-       enable;
-   }
[edit interfaces interface-range vlan-private1-b-codfw]
-    member ge-1/0/5;
[edit interfaces interface-range disabled]
     member ge-3/0/23 { ... }
+    member ge-1/0/5;
[edit interfaces]
-   ge-1/0/5 {
-       description es2003;
-       enable;
-   }
[edit interfaces interface-range vlan-private1-b-codfw]
-    member ge-6/0/16;
[edit interfaces interface-range disabled]
     member ge-1/0/5 { ... }
+    member ge-6/0/16;
[edit interfaces]
-   ge-6/0/16 {
-       description es2004;
-       enable;
-   }
Papaul updated the task description. (Show Details)Apr 27 2020, 5:45 PM
Papaul updated the task description. (Show Details)Apr 29 2020, 3:14 PM
gerritbot added a comment.Apr 29 2020, 3:17 PM

Change 593256 had a related patch set uploaded (by Papaul; owner: Papaul):
[operations/dns@master] DNS: Remove mgmt asset tag for es200[1-4]

https://gerrit.wikimedia.org/r/593256

gerritbot added a project: Patch-For-Review.Apr 29 2020, 3:17 PM

Change 593256 merged by Papaul:
[operations/dns@master] DNS: Remove mgmt asset tag for es200[1-4]

https://gerrit.wikimedia.org/r/593256

Papaul closed this task as Resolved.Apr 29 2020, 3:19 PM
Papaul updated the task description. (Show Details)

complete

Maintenance_bot removed a project: Patch-For-Review.Apr 29 2020, 4:11 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL