See T13630. See PHI1331.
If you decommission hosts, you can currently disable bindings in Almanac but can't actually mark the device as disabled.
- Almanac devices should support a "Disabled"/"Archived"/"Decommissioned" status.
- This should have read/write API access.
- The service view should show a summary of devices with active bindings.
- The service view should probably hide disabled bindings and bindings to inactive devices by default, with hints "Show X more disabled bindings / bindings to disabled devices".
- Repositories and Drydock should not select bindings to disabled devices during operation.
Also:
- When a device is disabled, we shouldn't accept associated SSH keys from it any longer.