Page MenuHomePhabricator

decommission elastic1017
Open, MediumPublicRequest


elastic1017 is showing up as failing in all fleetwide Cumin/debdeploy runs, turning T230518 into a proper decommission ticket.

The first 5 steps should be completed by the service owner that is returning the server to DC-ops (for reclaim to spare or decommissioning, dependent on server configuration and age.)

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system)
  • - unassign service owner from this task, check off completed steps,

Steps for DC-Ops:

The following steps cannot be interrupted, as it will leave the system in an unfinished state.

Start non-interrupt steps:

  • - disable puppet on host (hardware is broken)
  • - power down host (hardware is broken)
  • - update netbox status to Decomissioning
  • - disable switch port
  • - switch port assignment noted on this task (for later removal)
  • - remove all remaining puppet references (include role::spare)
  • - remove production dns entries
  • - puppet node clean, puppet node deactivate (handled by wmf-decommission-host)
  • - remove dbmonitor entries on neodymium/sarin: sudo curl -X DELETE https://debmonitor.discovery.wmnet/hosts/${HOST_FQDN} --cert /etc/debmonitor/ssl/cert.pem --key /etc/debmonitor/ssl/server.key (handled by wmf-decommission-host)

End non-interrupt steps.

  • - system disks wiped (by onsite)
  • - IF DECOM: system unracked and decommissioned (by onsite), update racktables with result
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: system added back to spares tracking (by onsite)


Related Gerrit Patches:
operations/puppet : productionelastic1017: Remove puppet references
operations/dns : masterRemove DNS entry for elastic1017

Event Timeline

MoritzMuehlenhoff created this task.
MoritzMuehlenhoff added a project: Operations.
MoritzMuehlenhoff updated the task description. (Show Details)
Gehel reassigned this task from Gehel to RobH.Oct 2 2019, 9:54 AM
Gehel updated the task description. (Show Details)
Gehel added a subscriber: Gehel.
Gehel added a comment.Oct 2 2019, 10:05 AM

Host is shutdown and has networking issues. As such the role(system::spare) was not applied and it is still in puppetdb. Since that cleanup step is part of the "uninterruptible" steps, it has not been performed yet.

cookbooks.sre.hosts.decommission executed by gehel@cumin1001 for hosts: elastic1017.eqiad.wmnet

  • elastic1017.eqiad.wmnet (FAIL)
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Unable to connect to the host, wipe of bootloaders will not be performed: Cumin execution failed (exit_code=2)
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

ERROR: some step on some host failed, check the bolded items above

Gehel added a subscriber: Volans.Oct 2 2019, 10:20 AM

After discussion with @Volans, I ran the decom script. Host is now properly removed from icinga and puppetdb.

Gehel updated the task description. (Show Details)Oct 2 2019, 10:21 AM

Change 540407 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] elastic1017: Remove puppet references

Change 540415 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/dns@master] Remove DNS entry for elastic1017

Change 540415 merged by Muehlenhoff:
[operations/dns@master] Remove DNS entry for elastic1017

Change 540407 merged by Muehlenhoff:
[operations/puppet@production] elastic1017: Remove puppet references

RobH removed a subscriber: RobH.Mar 3 2020, 6:01 PM
RobH edited projects, added ops-eqiad; removed DC-Ops.Wed, Apr 1, 5:04 PM
RobH added a subscriber: RobH.
RobH updated the task description. (Show Details)Wed, Apr 1, 5:33 PM
RobH removed a subscriber: RobH.
RobH moved this task from Backlog to Decommission on the ops-eqiad board.Wed, Apr 1, 5:51 PM