Page MenuHomePhabricator

decommission relforge1001.eqiad.wmnet and relforge1002.eqiad.wmnet
Closed, ResolvedPublicRequest

Description

This task will track the decommission-hardware of servers relforge1001.eqiad.wmnet and relforge1002.eqiad.wmnet.

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.

relforge1001.eqiad.wmnet

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: set netbox state to 'inventory' and hostname to asset tag

relforge1002.eqiad.wmnet

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: set netbox state to 'inventory' and hostname to asset tag

Event Timeline

Change 657453 had a related patch set uploaded (by Ryan Kemper; owner: Ryan Kemper):
[operations/puppet@production] Decommission relforge100[1,2]

https://gerrit.wikimedia.org/r/657453

Mentioned in SAL (#wikimedia-operations) [2021-01-26T20:36:00Z] <ryankemper> T272444 (Decommission relforge100[1,2]) Downtimed relforge100[1,2] in Icinga cookbook for the next 26 hours

Change 657453 merged by Ryan Kemper:
[operations/puppet@production] Decommission relforge100[1,2]

https://gerrit.wikimedia.org/r/657453

Mentioned in SAL (#wikimedia-operations) [2021-01-26T20:37:47Z] <ryankemper> T272444 (Decommission relforge100[1,2]) Merged https://gerrit.wikimedia.org/r/c/operations/puppet/+/657453 prior to running decom cookbook

Mentioned in SAL (#wikimedia-operations) [2021-01-26T20:40:28Z] <ryankemper> T272444 (Decommission relforge100[1,2]) Beginning decommission of relforge1001: sudo -i cookbook sre.hosts.decommission relforge1001.eqiad.wmnet -t T272444

cookbooks.sre.hosts.decommission executed by ryankemper@cumin1001 for hosts: relforge1001.eqiad.wmnet

  • relforge1001.eqiad.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

Mentioned in SAL (#wikimedia-operations) [2021-01-26T20:52:12Z] <ryankemper> T272444 (Decommission relforge100[1,2]) Beginning decommission of relforge1002: sudo -i cookbook sre.hosts.decommission relforge1002.eqiad.wmnet -t T272444

cookbooks.sre.hosts.decommission executed by ryankemper@cumin1001 for hosts: relforge1002.eqiad.wmnet

  • relforge1002.eqiad.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

Change 658683 had a related patch set uploaded (by Ryan Kemper; owner: Ryan Kemper):
[operations/puppet@production] relforge: remove decommed relforge100[1,2]

https://gerrit.wikimedia.org/r/658683

Change 658683 merged by Ryan Kemper:
[operations/puppet@production] relforge: remove decommed relforge100[1,2]

https://gerrit.wikimedia.org/r/658683

RKemper updated the task description. (Show Details)
Gehel added a subscriber: Gehel.

Removing Search Platform, the remaining work is under the control of DC-Ops.

netbox updated and removed from rack