These servers need a reboot for the L1TF vulnerabilities, they've all been upgraded to fixed kernels along with updated microcode. For labvirt/cloudvirt I'll create a separate ticket as more steps are necessary.
[] cloudcontrol1003.wikimedia.org (jessie)
[x] cloudcontrol1004.wikimedia.org (jessie)
[] cloudnet1003.eqiad.wmnet (jessie)
[] cloudnet1004.eqiad.wmnet (jessie)
[] cloudservices1003.wikimedia.org (jessie)
[x] cloudelastic1001.wikimedia.org (stretch) (spare)
[x] cloudelastic1002.wikimedia.org (stretch) (spare)
[x] cloudelastic1003.wikimedia.org (stretch) (spare)
[x] cloudelastic1004.wikimedia.org (stretch) (spare)
[x] labstore2001.codfw.wmnet (jessie) (spare)
[x] labstore2002.codfw.wmnet (jessie) (spare)
[x] labstore2003.codfw.wmnet (jessie)
[x] labstore2004.codfw.wmnet (jessie)
[] labcontrol1001.wikimedia.org (trusty 3.13)
[x] labcontrol1002.wikimedia.org (trusty 3.13)
[] labmon1001.eqiad.wmnet (jessie)
[x] labmon1002.eqiad.wmnet (jessie)
[] labnet1001.eqiad.wmnet (trusty 4.4)
[x] labnet1002.eqiad.wmnet (trusty 4.4)
[] labpuppetmaster1001.wikimedia.org (jessie)
[] labpuppetmaster1002.wikimedia.org (jessie)
[] labservices1001.wikimedia.org (trusty 3.13)
[x] labservices1002.wikimedia.org (trusty 3.13)
[] labstore1003.eqiad.wmnet (trusty 3.13) (replacement WIP, probably best to skip the reboot and directly move to the new replacement)
[] labsdb1004.eqiad.wmnet (jessie)
[] labsdb1005.eqiad.wmnet (jessie)
[] labsdb1006.eqiad.wmnet (stretch)
[] labsdb1007.eqiad.wmnet (stretch)
[] labstore1006.wikimedia.org (jessie)
[] labstore1007.wikimedia.org (jessie)
For these three I'm not sure whether they're maintained by DBAs or WMCS?
[] labsdb1009.eqiad.wmnet (stretch)
[] labsdb1010.eqiad.wmnet (stretch)
[] labsdb1011.eqiad.wmnet (stretch)