Update decomissioning script with necessary instruction

This also renames explicitely the script from swh-puppet-master-clean-certificate to
swh-puppet-master-decomission.

This uninstalls the old script to install the new one.

Related to T3027

site-modules/profile/manifests/puppet/master.pp

@@ -34,12 +34,16 @@ class profile::puppet::master {
     content => template('profile/puppet/swh-puppet-master-deploy.sh.erb'),
   }
 
-  file { '/usr/local/sbin/swh-puppet-master-clean-certificate':
+  file {'/usr/local/sbin/swh-puppet-master-clean-certificate':
+    ensure => absent,
+  }
+
+  file { '/usr/local/sbin/swh-puppet-master-decomission':
     ensure  => 'file',
     owner   => 'root',
     group   => 'root',
     mode    => '0755',
-    content => template('profile/puppet/swh-puppet-master-clean-certificate.sh.erb'),
+    content => template('profile/puppet/swh-puppet-master-decomission.sh.erb'),
   }
 
   profile::cron::d {'gzip-puppet-reports':

site-modules/profile/templates/puppet/swh-puppet-master-clean-certificate.sh.erb → site-modules/profile/templates/puppet/swh-puppet-master-decomission.sh.erb

@@ -8,6 +8,7 @@
 
 set -x
 
+puppet node deactivate $@
 puppet node clean $@
 puppet cert clean $@
 systemctl restart apache2

[Phabricator Migration user]

Some references in the commit message have been migrated:

• T3027 is now infra/sysadm-environment#3027