Page MenuHomePhabricator
Create Task
Maniphest T249115

decommission cp20[18,20,22,24-26].codfw.wmnet
Closed, ResolvedPublicRequest
Actions

Description

This task will track the decommission-hardware of server cp20[18,20,22,24-26].codfw.wmnet.

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.

cp2018.codfw.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp2020.codfw.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server:

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp2022.codfw.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server:

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp2024.codfw.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server:

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp2025.codfw.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server:

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

cp2026.codfw.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of server:

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks wiped (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configration removed from switch once system is unracked.
  • - IF DECOM: add system to decommission tracking google sheet
  • - IF DECOM: mgmt dns entries removed.

Details

SubjectRepoBranchLines +/-
DNS Remove mgmt asset tag DNS for cp20[16-20,22-26]operations/dnsmaster+0 -20
Remove cp[2018,2020,2022,2024-2026] entriesoperations/dnsmaster+0 -36
site: decommission cp20[18,20,22,24-26]operations/puppetproduction+1 -55
Customize query in gerrit

Related Objects

Event Timeline

Vgutierrez created this task.Apr 1 2020, 2:34 PM
Restricted Application added a project: SRE. · View Herald TranscriptApr 1 2020, 2:34 PM
Vgutierrez mentioned this in T248816: Replace cp20[01-26] with cp20[27-42].Apr 1 2020, 2:34 PM
gerritbot added a comment.Apr 1 2020, 2:39 PM

Change 585244 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] site: decommission cp20[18,20,22,24-26]

https://gerrit.wikimedia.org/r/585244

gerritbot added a project: Patch-For-Review.Apr 1 2020, 2:39 PM
RobH unsubscribed.Apr 1 2020, 2:41 PM
Stashbot added a comment.Apr 1 2020, 2:43 PM

Mentioned in SAL (#wikimedia-traffic) [2020-04-01T14:43:45Z] <vgutierrez> depool && decommission cp[2018,2020,2022,2024-2026].codfw.wmnet - T249115

ops-monitoring-bot added a comment.Apr 1 2020, 2:49 PM

cookbooks.sre.hosts.decommission executed by vgutierrez@cumin1001 for hosts: cp2018.codfw.wmnet

  • cp2018.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
ops-monitoring-bot added a comment.Apr 1 2020, 2:52 PM

cookbooks.sre.hosts.decommission executed by vgutierrez@cumin1001 for hosts: cp[2020,2022,2024-2026].codfw.wmnet

  • cp2020.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2022.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2024.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2025.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2026.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
Vgutierrez moved this task from Backlog to Hardware on the Traffic board.Apr 1 2020, 2:53 PM
gerritbot added a comment.Apr 1 2020, 3:00 PM

Change 585244 merged by Vgutierrez:
[operations/puppet@production] site: decommission cp20[18,20,22,24-26]

https://gerrit.wikimedia.org/r/585244

gerritbot added a comment.Apr 1 2020, 3:03 PM

Change 585249 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/dns@master] Remove cp[2018,2020,2022,2024-2026] entries

https://gerrit.wikimedia.org/r/585249

gerritbot added a comment.Apr 1 2020, 3:05 PM

Change 585249 merged by Vgutierrez:
[operations/dns@master] Remove cp[2018,2020,2022,2024-2026] entries

https://gerrit.wikimedia.org/r/585249

Vgutierrez reassigned this task from Vgutierrez to Papaul.Apr 1 2020, 3:07 PM
Vgutierrez updated the task description. (Show Details)
Vgutierrez removed a project: Patch-For-Review.
Vgutierrez added a subscriber: RobH.
RobH unsubscribed.Apr 1 2020, 3:44 PM
Papaul moved this task from Backlog to Decommission on the ops-codfw board.Apr 1 2020, 4:08 PM
RobH moved this task from Backlog to pending onsite steps (codfw) on the decommission-hardware board.Apr 1 2020, 5:08 PM
RobH updated the task description. (Show Details)Apr 1 2020, 5:38 PM
RobH removed a subscriber: wiki_willy.
Papaul added a comment.Apr 2 2020, 1:34 PM
[edit interfaces interface-range disabled]
     member xe-7/0/3 { ... }
+    member xe-7/0/5;
[edit interfaces]
-   xe-7/0/5 {
-       description cp2018;
-       enable;
-   }
[edit interfaces interface-range disabled]
     member xe-7/0/0 { ... }
+    member xe-2/0/1;
[edit interfaces]
-   xe-2/0/1 {
-       description cp2020;
-       enable;
-   }
[edit interfaces interface-range disabled]
     member xe-2/0/1 { ... }
+    member xe-2/0/3;
[edit interfaces]
-   xe-2/0/3 {
-       description cp2022;
-       enable;
-   }
[edit interfaces interface-range disabled]
     member xe-2/0/1 { ... }
+    member xe-2/0/3;
+    member xe-7/0/1;
+    member xe-7/0/2;
+    member xe-7/0/3;
[edit interfaces]
-   xe-2/0/3 {
-       description cp2022;
-       enable;
-   }
-   xe-7/0/1 {
-       description cp2024;
-       enable;
-   }
-   xe-7/0/2 {
-       description cp2025;
-       enable;
-   }
-   xe-7/0/3 {
-       description cp2026;
-       enable;
-   }
Papaul updated the task description. (Show Details)Apr 2 2020, 1:37 PM
Papaul updated the task description. (Show Details)Apr 10 2020, 4:45 PM
gerritbot added a comment.Apr 10 2020, 5:02 PM

Change 588019 had a related patch set uploaded (by Papaul; owner: Papaul):
[operations/dns@master] DNS Remove mgmt asset tag from cp20[16-20,22-26]

https://gerrit.wikimedia.org/r/588019

gerritbot added a project: Patch-For-Review.Apr 10 2020, 5:02 PM
gerritbot added a comment.Apr 10 2020, 5:06 PM

Change 588019 merged by Papaul:
[operations/dns@master] DNS Remove mgmt asset tag DNS for cp20[16-20,22-26]

https://gerrit.wikimedia.org/r/588019

Papaul closed this task as Resolved.Apr 10 2020, 5:10 PM
Papaul updated the task description. (Show Details)

complete

Maintenance_bot removed a project: Patch-For-Review.Apr 10 2020, 5:10 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL