As previously discussed as a potential outcome within T284090, the Security-Team would like to decommission the peek2001 VM at this point. The code should be in gerrit if we ever want to deploy the app again and I believe that's all we'd be concerned about "saving" as a team. Please let us know if anyone needs any more information, etc. to complete this request. Thanks.
Description
Description
Details
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| site/DHCP: decom peek2001 | operations/puppet | production | +0 -10 |
Related Objects
Related Objects
- Mentioned Here
- T284090: Disable peek for the Security Team
Event Timeline
Comment Actions
Change 710585 had a related patch set uploaded (by Dzahn; author: Dzahn):
[operations/puppet@production] site/DHCP: decom peek2001
Comment Actions
cookbooks.sre.hosts.decommission executed by dzahn@cumin1001 for hosts: peek2001.codfw.wmnet
- peek2001.codfw.wmnet (PASS)
- Downtimed host on Icinga
- Found Ganeti VM
- VM shutdown
- Started forced sync of VMs in Ganeti cluster ganeti01.svc.codfw.wmnet to Netbox
- Removed from DebMonitor
- Removed from Puppet master and PuppetDB
- VM removed
- Started forced sync of VMs in Ganeti cluster ganeti01.svc.codfw.wmnet to Netbox
Comment Actions
Change 710585 merged by Dzahn:
[operations/puppet@production] site/DHCP: decom peek2001
Comment Actions
done! thanks to the decom cookbook this VM is already deleted and removed from DNS now
I removed it from site.pp and DHCP but NOT deleting the puppet role/profile/module because as you say you might want to apply this again in the future and then it will be easy to do.