### codfw
- [] Depool codfw data-center
- [] Create keyspace snapshots
```
sudo cumin 'sessionstore2* ' 'c-foreach-nt snapshot -t 4x_upgrade-`date +%Y%m%d%H%I` -- sessions system system_auth system_distributed system_schema system_traces'
```
- [] Upgrade sessionstore2001.codfw.wmnet (merge [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/NNN | rNNN ]])
- [] Preflight
- [] `legacy_ssl_storage_port_enabled` is set `true`?
- [] `internode_encryption` is set to `all` (see: T337901)?
- [] `server_encryption_optional` is set `true`?
- [] Kask Ok (logs)?
- [] Logging works (local/remote)?
- [] Logged errors/warnings?
- [] Prometheus metrics?
- [] cqlsh works?
- [] nodetool works?
- [] Handles (generated) traffic Ok?
- [] Load
- [] Latency
- [] GC
- [] Upgrade sessionstore2002.codfw.wmnet (merge [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/NNN | rNNN ]])
- [] Upgrade sessionstore2003.codfw.wmnet (merge [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/NNN | rNNN ]])
- [] Generate traffic/load
```
ssh deploy2002.codfw.wmnet -- siege -f /home/eevans/T327954/urls.txt -i -c 64 -t 1H -d 0.1
```
- [] Cassandra memory/GC Ok?
- [] Load
- [] Latency
- [] Logged errors?
- [] Repool codfw data-center
- [] Logged errors/warnings?
- [] Handles traffic Ok?
### eqiad
- [] Depool eqiad data-center
- [] Create keyspace snapshots
```
sudo cumin 'sessionstore1*' 'c-foreach-nt snapshot -t 4x_upgrade-`date +%Y%m%d%H%I` -- sessions system system_auth system_distributed system_schema system_traces'
```
- [] Upgrade sessionstore1001.eqiad.wmnet (merge [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/NNN | rNNN ]])
- [] Upgrade sessionstore1002.eqiad.wmnet (merge [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/NNN | rNNN ]])
- [] Upgrade sessionstore1003.eqiad.wmnet (merge [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/NNN | rNNN ]])
### Post-upgrade
- [] Clear snapshots
```
c-foreach-nt clearsnapshot -t 4x_upgrade-YYYYMMDDHHMM
```
- [] Set `legacy_ssl_storage_port_enabled: false` (remove assignment)
- [] Set `server_encryption_optional: false` (remove assignment)