Non-puppet nodes: - Update rolemap.yaml to the new domain names - On each host edit /etc/hosts and change the domain - Run puppet agent twice on each host Renaming puppetdb server: - Do the above - Restart these services on the puppetdb server in some order (maybe even this one?): - postgresql - puppetdb - uwsgi-puppetdb-microservice - nginx - Restart apache2 on puppetmaster. Renaming puppetmaster: - Update rolemap.yaml - Edit /etc/hosts and set new domain - Run puppet agent. It will fail reloading apache2 - cp -a /var/lib/puppet/server/ssl/ca/signed/.pem /var/lib/puppet/server/ssl/certs/ - cp -a /var/lib/puppet/ssl/private_keys/.pem /var/lib/puppet/server/ssl/private_keys/ - restart apache2 - on each client: - sudo sed -i 's/eqiad.wmflabs/eqiad1.wikimedia.cloud/' /etc/puppet/puppet.conf - sudo sed -i 's/eqiad.wmflabs/eqiad1.wikimedia.cloud/' /etc/puppet/puppet.conf.d/10-main.conf - sudo run-puppet-agent Finally: - Drop the old hostnames from puppet db: `puppet node deactivate ` - And remove their certs and other metadata: `puppet node clean `