This is mostly for tickets like this one:
https://phabricator.wikimedia.org/T430770
The idea is to re-tool the existing scripts into something more modern, to run from the cumin host (maybe even as a cookbook).
We should also talk to the maintainers of the wider-WMF offboarding docs/scripts about how this should mentioned there.
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| cookbooks/idm: Add user-cleanup cookbook for DPE SRE hosts | Klausman | operations/cookbooks | master | +454 -0 |
Change #1342235 had a related patch set uploaded (by Klausman; author: Klausman):
[operations/cookbooks@master] cookbooks/idm: Add user-cleanup cookbook for DPE SRE hosts
You can also investigate if the steps can be integrated into the existing sre.idm.logout cookbook via logout.d scripts, see https://phabricator.wikimedia.org/T283242 for context
I feel like they are mildly orthogonal: the logout cookbook affects system state, but does not permanently remove data (AIUI); on the other hand, the cookbook I wrote does not affect state at all (and I think it shouldn't, deleting data that may be unrecoverable must have a human in the loop). So I think it's better to keep them separate, but mention both in documentation. The latter cookbook would also be something people out of DPE SRE can run without worry, and only if there's something to do, they'd open a ticket with us, and we'd see about the actual deletion of things.