These servers need a reboot for the L1TF vulnerabilities, they've all been upgraded to fixed kernels along with updated microcode. For labvirt/cloudvirt I'll create a separate ticket as more steps are necessary.
[] cloudcontrol1003.wikimedia.org (jessie)
[x] cloudcontrol1004.wikimedia.org (jessie)
[x] cloudnet1003.eqiad.wmnet (jessie)
[x] cloudnet1004.eqiad.wmnet (jessie)
[] cloudservices1003.wikimedia.org (jessie)
[x] cloudelastic1001.wikimedia.org (stretch) (spare)
[x] cloudelastic1002.wikimedia.org (stretch) (spare)
[x] cloudelastic1003.wikimedia.org (stretch) (spare)
[x] cloudelastic1004.wikimedia.org (stretch) (spare)
[x] labstore2001.codfw.wmnet (jessie) (spare)
[x] labstore2002.codfw.wmnet (jessie) (spare)
[x] labstore2003.codfw.wmnet (jessie)
[x] labstore2004.codfw.wmnet (jessie)
[] labcontrol1001.wikimedia.org (trusty 3.13)
[x] labcontrol1002.wikimedia.org (trusty 3.13)
[x] labmon1001.eqiad.wmnet (jessie)
[x] labmon1002.eqiad.wmnet (jessie)
[] labnet1001.eqiad.wmnet (trusty 4.4)
[x] labnet1002.eqiad.wmnet (trusty 4.4)
[] labpuppetmaster1001.wikimedia.org (jessie)
[] labpuppetmaster1002.wikimedia.org (jessie)
[] labservices1001.wikimedia.org (trusty 3.13)
[x] labservices1002.wikimedia.org (trusty 3.13)
[] labstore1003.eqiad.wmnet (trusty 3.13) (replacement WIP, probably best to skip the reboot and directly move to the new replacement)
[] labstore1006.wikimedia.org (jessie)
[] labstore1007.wikimedia.org (jessie)
(labsdbXXXX servers in subtasks for additional coordination with other folks)