907190 - Shut down sheriffs.mozilla.org

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Product Delivery, task)

Description

[Peter Bengtsson [:peterbe]]

The site https://sheriffs.mozilla.org/ is deliberately obsoleted and won't be used. (if this ever changes, some big code changes will be needed and the code is on github)

Can you take down the site please? And any dev or stages instances too if they are running.

Comment 1

[Shyam Mani [:fox2mike]]

I think an SSL cert renewal is coming up soon as well, which can be skipped, if this is the case.

Comment 2

[Ed Morley [:emorley]]

Think this isn't in the right component; moving so we can get this actioned :-)

Comment 3

[Peter Radcliffe [:pir]]

The component was closer to correct before.

The first action here is to remove Zeus configs, which is webops. They're just overworked so low priority things aren't always going to happen quickly.

Comment 4

[Peter Radcliffe [:pir]]

Now that I think about it I could remove the external DNS and that would make this appear to be decommissioned. I'll remove these A records (but not the PTR) from inventory DNS configs:

Address Records
FQDN 		IP 	
sheriffs-dev.allizom.org 	A 	63.245.217.82 	Edit
sheriffs.allizom.org 	A 	63.245.217.83 	Edit
sheriffs.mozilla.org 	A 	63.245.217.63 	Edit
PTR Records
IP 		FQDN 	
63.245.217.63 	PTR 	sheriffs-generic.zlb.phx.mozilla.net

The Zeus configs will still need removing. Machines still need decommissioning, etc.

Comment 5

[Michal Purzynski [:michal`] (use NEEDINFO)]

The OpSec would kindly ask you to remember about any flows that might have been opened and is more than happy to help :) I only need some more information about the backend www/db/whatever hosts and will query Tufin.

Comment 6

[Peter Radcliffe [:pir]]

From a quick poke at Zeus it looks like the backends are the generic cluster: generic[1-5].webapp.phx1.mozilla.com. I'd assume any DB use was the generic db cluster also.

Comment 7

[Peter Radcliffe [:pir]]

I don't see any specific monitoring in Nagios for this, which also matches up with it being on the generic cluster.

Comment 8

[Peter Radcliffe [:pir]]

"Firefox can't find the server at sheriffs.mozilla.org"

As far as the world is concerned, this should now be down. Just some cleanup to go on the backend.

Comment 9

[Ed Morley [:emorley]]

That's great, thank you :-)
(Means I can close out bug 904043)

Comment 10

[Chris Turra [:cturra]]

sheriffs has been removed from zeus and zlb ip returned to the available pool in inventory. moving onto removing the application from the generic cluster.

Comment 11

[Chris Turra [:cturra]]

sheriffs no longer present on generic cluster. all that should be required at this point is to remove the databases from the generic db cluster (i will open another bug to track that). no netflows should need to be removed since this was all run on the generic cluster so shares netflows with a number of other services.

 [[e-mail]1 ~]$ curl -I localhost -H "Host: sheriffs.mozilla.org"
 HTTP/1.1 403 Forbidden
 Date: Tue, 15 Oct 2013 13:34:12 GMT
 Server: Apache
 X-Backend-Server: generic1.webapp.phx1.mozilla.com
 Strict-Transport-Security: max-age=15768000 ; includeSubDomains
 Content-Type: text/html; charset=iso-8859-1