Page MenuHomePhabricator
Create Task
Maniphest T229796

Remove sarin and neodymium GRANTs from all the databases
Closed, ResolvedPublic
Actions

Description

Sarin and neodymium are going to get decommissioned T220503: Decommission neodymium T220504: Decommission sarin
We have to remove all the grants for their IPs in our production db environment before they get decommissioned and their IPs get re-used.

host sarin.codfw.wmnet
sarin.codfw.wmnet has address 10.192.0.140
host neodymium.eqiad.wmnet
neodymium.eqiad.wmnet has address 10.64.32.20

The grants were already removed from puppet: https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/466833/

Deletion progress across all the servers

  • sarin
  • neodymium

Related Objects
Search...

Event Timeline

• Marostegui created this task.Aug 5 2019, 10:22 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 5 2019, 10:22 AM
• Marostegui triaged this task as Medium priority.Aug 5 2019, 10:22 AM
• Marostegui moved this task from Triage to Pending comment on the DBA board.
• Marostegui added subtasks: T220504: Decommission sarin, T220503: Decommission neodymium.
• Marostegui removed subtasks: T220503: Decommission neodymium, T220504: Decommission sarin.
• Marostegui added parent tasks: T220504: Decommission sarin, T220503: Decommission neodymium.
• MoritzMuehlenhoff mentioned this in T220503: Decommission neodymium.Aug 5 2019, 10:30 AM
• MoritzMuehlenhoff mentioned this in T220504: Decommission sarin.
• Marostegui claimed this task.Aug 27 2019, 10:20 AM
• Marostegui moved this task from Pending comment to In progress on the DBA board.

I am going to start removing sarin grants first

Stashbot added a comment.Aug 27 2019, 10:25 AM

Mentioned in SAL (#wikimedia-operations) [2019-08-27T10:25:43Z] <marostegui> Remove grants from sarin from all the dbs, dbstore, parsercache, es, labsdb - T229796

• Marostegui added a comment.Aug 27 2019, 10:44 AM

sarin grants have been removed everywhere.

• Marostegui updated the task description. (Show Details)Aug 27 2019, 10:45 AM
Stashbot added a comment.Aug 28 2019, 5:19 AM

Mentioned in SAL (#wikimedia-operations) [2019-08-28T05:19:06Z] <marostegui> Start dropping neodymium grants across all the databases, parsercache, es, dbstore... T229796

• Marostegui closed this task as Resolved.Aug 28 2019, 6:21 AM
• Marostegui updated the task description. (Show Details)

neodymium grants have been removed everywhere

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits