Follow up from T204079#4579043
10.195.0.72/29 - frack-administration-codfw is running out of IPs
The agreed over IRC plan is to move the only host in 10.195.0.64/29 - frack-bastion-codfw (frbast2001) to a new subnet, and grow frack-administration-codfw to 10.195.0.64/28, this should cause minimum downtime.
1) Move frbast2001
[x] Reserve 10.195.0.128/29 (and future IPs) in DNS for frack-bastion-codfw
[x] Configure new subnet on pfw3-codfw (on same interface)
[x] Update firewall policies to have both old/new bastion subnet
[x] Downtime monitoring for frbast2001
[] Change IP config of frbast2001
[] Update NAT rule on pfw3-codfw to point to new IP
[] Re-enable monitoring for frbast2001
[] Remove old IPs from DNS
[] Remove old IPs from firewall policies
2) Grow frack-administration-codfw
[] Assign 10.195.0.65/28 to pfw3-codfw:reth0.2134 (in addition to current .73/29)
[] Change netmask of frack-administration hosts to /28 and gateway to .65
[] Remove .73/29 IP from pfw3-codfw:reth0.2134
[] Update DNS