db2001-db2009 are unused; decide what to do with them (probably decommission them).
Current state:
> No longer in use; used to contain private information
> depooled from mediawiki
> not present on puppet site.pp
> puppet keys revoked
> salt keys revoked
> pending to remove dns/install entries
>>! In T125827#2348537, @MoritzMuehlenhoff wrote:
> I noticed this ticket when checking for db servers without base::firewall enabled: Summarising:
> - db2008/db2009 were removed from mediawiki in https://gerrit.wikimedia.org/r/#/c/288945/, the change to remove them from site.pp is pending in https://gerrit.wikimedia.org/r/#/c/286172/
> - db2007 is currently used for tests by Daniel
> - db2006 is not present in site.pp, puppet or salt, but the box is currently still powered on. As such, it can probably simply be unracked and decomissioned.
> - db2001-db2005 are not present in site.pp, but are managed via puppet/salt. It's also listed in wmf-config
decom checklist:
db2001:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2002:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2003:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2004:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2005:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2006:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2007:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2008:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..
db2009:
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/heira/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare)
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked..