In order to avoid accidental disruption of switchover procedure by cookbook runs, find a way to lock all cookbooks except:
- sre.switchdc.mediawiki
- sre.discovery.datacenter
- sre.discovery.service-route
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | Blake | T413974 Northward Datacenter Switchover (March 2026; codfw to eqiad) | |||
| Open | Blake | T330997 Support locking cookbooks run except for switchover related cookbooks |
Event Timeline
Comment Actions
Not strictly, but it would be nice to have for peace of mind. This may be a task that @Blake can work on in the coming quarter as prep for the next switchover.
Comment Actions
The way I'm considering going about this would be to create a switchover lock or flag file, and a cookbook allowlist. All cookbooks would need to check if a switchover lock exists, then, if it does, the cookbook would check the allowlist for its own name. If the name isn't in the allowlist, execution should cease. I'm going to see if I can find someone on Infrastructure Foundations to have a chat with about this approach.