Page MenuHomePhabricator

decommission elastic1017
Closed, ResolvedPublicRequest

Description

elastic1017 is showing up as failing in all fleetwide Cumin/debdeploy runs, turning T230518 into a proper decommission ticket.

The first 5 steps should be completed by the service owner that is returning the server to DC-ops (for reclaim to spare or decommissioning, dependent on server configuration and age.)

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system)
  • - unassign service owner from this task, check off completed steps,

Steps for DC-Ops:

The following steps cannot be interrupted, as it will leave the system in an unfinished state.

Start non-interrupt steps:

  • - disable puppet on host (hardware is broken)
  • - power down host (hardware is broken)
  • - update netbox status to Decomissioning
  • - disable switch port
  • - switch port assignment noted on this task (for later removal)
  • - remove all remaining puppet references (include role::spare)
  • - remove production dns entries
  • - puppet node clean, puppet node deactivate (handled by wmf-decommission-host)
  • - remove dbmonitor entries on neodymium/sarin: sudo curl -X DELETE https://debmonitor.discovery.wmnet/hosts/${HOST_FQDN} --cert /etc/debmonitor/ssl/cert.pem --key /etc/debmonitor/ssl/server.key (handled by wmf-decommission-host)

End non-interrupt steps.

  • - system disks wiped (by onsite)
  • - IF DECOM: system unracked and decommissioned (by onsite), update racktables with result
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: system added back to spares tracking (by onsite)

Event Timeline

MoritzMuehlenhoff created this task.
MoritzMuehlenhoff added a project: SRE.
MoritzMuehlenhoff updated the task description. (Show Details)
Gehel updated the task description. (Show Details)
Gehel subscribed.

Host is shutdown and has networking issues. As such the role(system::spare) was not applied and it is still in puppetdb. Since that cleanup step is part of the "uninterruptible" steps, it has not been performed yet.

cookbooks.sre.hosts.decommission executed by gehel@cumin1001 for hosts: elastic1017.eqiad.wmnet

  • elastic1017.eqiad.wmnet (FAIL)
    • Downtimed host on Icinga
    • Downtimed management interface on Icinga
    • Unable to connect to the host, wipe of bootloaders will not be performed: Cumin execution failed (exit_code=2)
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

ERROR: some step on some host failed, check the bolded items above

After discussion with @Volans, I ran the decom script. Host is now properly removed from icinga and puppetdb.

Change 540407 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] elastic1017: Remove puppet references

https://gerrit.wikimedia.org/r/540407

Change 540415 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/dns@master] Remove DNS entry for elastic1017

https://gerrit.wikimedia.org/r/540415

Change 540415 merged by Muehlenhoff:
[operations/dns@master] Remove DNS entry for elastic1017

https://gerrit.wikimedia.org/r/540415

Change 540407 merged by Muehlenhoff:
[operations/puppet@production] elastic1017: Remove puppet references

https://gerrit.wikimedia.org/r/540407

RobH subscribed.
Cmjohnson updated the task description. (Show Details)