cp4001, cp4002, cp4003, cp4004 are ready for decom. They're switched to role::spare::system in puppet and have been freshly reinstalled in that role (no leftover services possible). These do need secure erase of drives to avoid leaking key material.
[x] - all system services confirmed offline from production use
[x] - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
[x] - remove system from all lvs/pybal active configuration
[x] - any service group puppet/hiera/dsh config removed
[x] - remove site.pp (replace with role::spare if system isn't shut down immediately during this process.)
START NON-INTERRUPPTABLE STEPS
[x] - disable puppet on host
[x] - remove all remaining puppet references (include role::spare) https://gerrit.wikimedia.org/r/366037
[x] - power down host
[x] - disable switch port
[x] - switch port assignment noted on this task (for later removal)
[x] - remove production dns entries
[x] - puppet node clean, puppet node deactivate, salt key removed
END NON-INTERRUPPTABLE STEPS
[x] - system disks wiped (by onsite)
[x] - swapped places with new cp systems, and now reside in rack with no cabling.
The remainder cannot happen until we are done with ALL the old CP systems to unrack them in a batch.
[] - system unracked and decommissioned (by onsite), update racktables with result
[] - switch port configration removed from switch once system is unracked.
[x] - mgmt dns entries removed. (systems are in rack, but with no power/network/mgmt connections, due to there being no storage in ulsfo and the office has no storage for us during the relocation.)