Change Details

db2001-db2009 are unused; decide what to do with them (probably decommission them). Current state: > No longer in use; used to contain private information > depooled from mediawiki > not present on puppet site.pp > puppet keys revoked > salt keys revoked > pending to remove dns/install entries >>! In T125827#2348537, @MoritzMuehlenhoff wrote: > I noticed this ticket when checking for db servers without base::firewall enabled: Summarising: > - db2008/db2009 were removed from mediawiki in https://gerrit.wikimedia.org/r/#/c/288945/, the change to remove them from site.pp is pending in https://gerrit.wikimedia.org/r/#/c/286172/ > - db2007 is currently used for tests by Daniel > - db2006 is not present in site.pp, puppet or salt, but the box is currently still powered on. As such, it can probably simply be unracked and decomissioned. > - db2001-db2005 are not present in site.pp, but are managed via puppet/salt. It's also listed in wmf-config decom checklist: db2001: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2002: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2003: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2004: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2005: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2006: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2007: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2008: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2009: [] - all system services confirmed offline from production use [] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [] - remove system from all lvs/pybal active configuration [] - any service group puppet/heira/dsh config removed [] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [] - disable puppet on host [] - remove all remaining puppet references (include role::spare) [] - power down host [] - disable switch port [] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked..

db2001-db2009 are unused; decide what to do with them (probably decommission them). Current state: > No longer in use; used to contain private information > depooled from mediawiki > not present on puppet site.pp > puppet keys revoked > salt keys revoked > pending to remove dns/install entries >>! In T125827#2348537, @MoritzMuehlenhoff wrote: > I noticed this ticket when checking for db servers without base::firewall enabled: Summarising: > - db2008/db2009 were removed from mediawiki in https://gerrit.wikimedia.org/r/#/c/288945/, the change to remove them from site.pp is pending in https://gerrit.wikimedia.org/r/#/c/286172/ > - db2007 is currently used for tests by Daniel > - db2006 is not present in site.pp, puppet or salt, but the box is currently still powered on. As such, it can probably simply be unracked and decomissioned. > - db2001-db2005 are not present in site.pp, but are managed via puppet/salt. It's also listed in wmf-config decom checklist: db2001: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2002: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2003: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2004: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2005: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2006: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2007: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2008: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked.. db2009: [x] - all system services confirmed offline from production use [x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. [x] - remove system from all lvs/pybal active configuration [x] - any service group puppet/heira/dsh config removed [x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.) START NON-INTERRUPPTABLE STEPS [x] - disable puppet on host [x] - remove all remaining puppet references (include role::spare) [x] - power down host [x] - disable switch port [x] - switch port assignment noted on this task (for later removal) [] - remove production dns entries [] - puppet node clean, puppet node deactivate, salt key removed END NON-INTERRUPPTABLE STEPS [] - system disks wiped (by onsite) [] - system unracked and decommissioned (by onsite), update racktables with result [] - switch port configration removed from switch once system is unracked..