Page MenuHomePhabricator

Decommission dbproxy1004 and dbproxy1009
Open, NormalPublic

Description

m4 (eventlogging - db1107 and db1108) has two proxies: dbproxy1004 and dbproxy1009, which are currently not in use (and have not been in used for more than a year: https://gerrit.wikimedia.org/r/#/c/operations/dns/+/425231/).

# host m4-master
m4-master.eqiad.wmnet is an alias for db1107.eqiad.wmnet.
db1107.eqiad.wmnet has address 10.64.0.214

These two hosts were purchased in 2011 and of course out of warranty.

The first 5 steps should be completed by the service owner that is returning the server to DC-ops (for reclaim to spare or decommissioning, dependent on server configuration and age.)

dbproxy1004

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/525527/
  • - unassign service owner from this task, check off completed steps, and assign to @RobH for followup on below steps.

Steps for DC-Ops:

The following steps cannot be interrupted, as it will leave the system in an unfinished state.

Start non-interrupt steps:

  • - disable puppet on host
  • - power down host
  • - update netbox status to decom (if decom) or Planned (if spare)
  • - disable switch port
  • - switch port assignment noted on this task (for later removal) asw2-b-eqiad:ge-5/0/12
  • - remove all remaining puppet references (include role::spare)
  • - remove production dns entries
  • - puppet node clean, puppet node deactivate (handled by wmf-decommission-host)
  • - remove dbmonitor entries on neodymium/sarin: sudo curl -X DELETE https://debmonitor.discovery.wmnet/hosts/${HOST_FQDN} --cert /etc/debmonitor/ssl/cert.pem --key /etc/debmonitor/ssl/server.key (handled by wmf-decommission-host)

End non-interrupt steps.

  • - system disks wiped (by onsite)
  • - IF DECOM: system unracked and decommissioned (by onsite), update racktables with result
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: system added back to spares tracking (by onsite)

dbproxy1009

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/525527/
  • - unassign service owner from this task, check off completed steps, and assign to @RobH for followup on below steps.

Steps for DC-Ops:

The following steps cannot be interrupted, as it will leave the system in an unfinished state.

Start non-interrupt steps:

  • - disable puppet on host
  • - power down host
  • - update netbox status to decom
  • - disable switch port
  • - switch port assignment noted on this task (for later removal) asw2-c-eqiad:ge-7/0/4
  • - remove all remaining puppet references (include role::spare)
  • - remove production dns entries
  • - puppet node clean, puppet node deactivate (handled by wmf-decommission-host)
  • - remove dbmonitor entries on neodymium/sarin: sudo curl -X DELETE https://debmonitor.discovery.wmnet/hosts/${HOST_FQDN} --cert /etc/debmonitor/ssl/cert.pem --key /etc/debmonitor/ssl/server.key (handled by wmf-decommission-host)

End non-interrupt steps.

  • - system disks wiped (by onsite)
  • - IF DECOM: system unracked and decommissioned (by onsite), update racktables with result
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: system added back to spares tracking (by onsite)

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptTue, Jul 23, 3:13 PM
Marostegui triaged this task as Normal priority.Wed, Jul 24, 10:06 AM

+2 from Analytics

Marostegui added a project: DBA.

Great - thanks. I will get them decommissioned

Marostegui renamed this task from Decommission m4 proxies (dbproxy1004 and dbproxy1008) to Decommission dbproxy1004 and dbproxy1009.Wed, Jul 24, 10:15 AM
Marostegui updated the task description. (Show Details)
Marostegui added a project: decommission.
Marostegui added a subscriber: RobH.
Marostegui moved this task from Triage to In progress on the DBA board.Wed, Jul 24, 12:18 PM

Mentioned in SAL (#wikimedia-operations) [2019-07-24T12:19:49Z] <marostegui> Stop haproxy on dbproxy1004 and dbproxy1009 (m4 - eventlogging) - T228768

I have stopped haproxy on both hosts, and will leave it like that for 24h, just to be fully sure nothing uses it.

Change 525527 had a related patch set uploaded (by Marostegui; owner: Marostegui):
[operations/puppet@production] mariadb: Decommission dbproxy1004 and dbproxy1009

https://gerrit.wikimedia.org/r/525527

Change 525527 merged by Marostegui:
[operations/puppet@production] mariadb: Decommission dbproxy1004 and dbproxy1009

https://gerrit.wikimedia.org/r/525527

Change 525555 had a related patch set uploaded (by Marostegui; owner: Marostegui):
[operations/puppet@production] mariadb: Re-add production-m4.sql grants file

https://gerrit.wikimedia.org/r/525555

Change 525555 merged by Marostegui:
[operations/puppet@production] mariadb: Re-add production-m4.sql grants file

https://gerrit.wikimedia.org/r/525555

Marostegui updated the task description. (Show Details)
Marostegui edited projects, added ops-eqiad; removed Patch-For-Review, DBA.

These two hosts are ready for DC-Ops to decommission

RobH moved this task from Backlog to Decommission on the ops-eqiad board.Thu, Jul 25, 3:13 PM
RobH updated the task description. (Show Details)Thu, Jul 25, 3:32 PM

cookbooks.sre.hosts.decommission executed by robh@cumin1001 for hosts: dbproxy1004.eqiad.wmnet

  • dbproxy1004.eqiad.wmnet
    • Removed from Puppet master and PuppetDB
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Removed from DebMonitor

cookbooks.sre.hosts.decommission executed by robh@cumin1001 for hosts: dbproxy1009.eqiad.wmnet

  • dbproxy1009.eqiad.wmnet
    • Removed from Puppet master and PuppetDB
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Removed from DebMonitor

Change 525571 had a related patch set uploaded (by RobH; owner: RobH):
[operations/puppet@production] decom dbproxy100[49]

https://gerrit.wikimedia.org/r/525571

Change 525572 had a related patch set uploaded (by RobH; owner: RobH):
[operations/dns@master] decom dbproxy100[49]

https://gerrit.wikimedia.org/r/525572

Change 525572 merged by RobH:
[operations/dns@master] decom dbproxy100[49]

https://gerrit.wikimedia.org/r/525572

Change 525571 merged by RobH:
[operations/puppet@production] decom dbproxy100[49]

https://gerrit.wikimedia.org/r/525571

RobH removed RobH as the assignee of this task.Thu, Jul 25, 3:43 PM
RobH removed a project: Patch-For-Review.
RobH updated the task description. (Show Details)
fdans moved this task from Operational Excellence to Radar on the Analytics board.