Compilation results for cirrussearch2089.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• Exec[java__cacert_wmf:puppetca.pem]
• File[/usr/local/bin/opensearch-disable-readahead.sh]
• File[/etc/nagios/nrpe.d/check_opensearch_unassigned_shard_check_9200.cfg]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet]
• File[/lib/systemd/system/prometheus-wmf-elasticsearch-exporter-9600.service]
• Service[prometheus-elasticsearch-exporter-9200]
• File[/etc/opensearch/instances]
• Exec[systemd daemon-reload for prometheus-elasticsearch-exporter-9600.service (prometheus-elasticsearch-exporter-9600)]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9600.service]
• File[/etc/logrotate.d/opensearch-disable-readahead-production-search-codfw]
• File[/var/log/opensearch/opensearch.log]
• File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shard-size-check-9600.conf]
• File[/etc/ssh/userkeys/ebernhardson]
• Exec[systemd daemon-reload for opensearch-production-search-psi-codfw-gc-log-cleanup.timer (opensearch-production-search-psi-codfw-gc-log-cleanup.timer)]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-elasticsearch-exporter-9600.conf]
• Service[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer]
• Exec[systemd daemon-reload for opensearch-production-search-psi-codfw-gc-log-cleanup.service (opensearch-production-search-psi-codfw-gc-log-cleanup.service)]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9600.timer (nrpe2nodexp-opensearch_shard_size_check_9600.timer)]
• File[/var/log/opensearch/opensearch_index_indexing_slowlog.log]
• File[/etc/ssh/userkeys/pfischer]
• File[/lib/systemd/system/opensearch-disable-readahead.timer]
• File[/usr/local/bin/prometheus-lvs-realserver-mss]
• File[/lib/systemd/system/clean_up_dlq.timer]
• File[/etc/ferm/conf.d/10_opensearch-inter-node-9700]
• Exec[systemd daemon-reload for opensearch-production-search-codfw-gc-log-cleanup.service (opensearch-production-search-codfw-gc-log-cleanup.service)]
• File[/var/log/opensearch-disable-readahead]
• File[/etc/ferm/conf.d/10_opensearch-inter-node-9300]
• File[/etc/logrotate.d/opensearch]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer (nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer)]
• Exec[systemd daemon-reload for opensearch-hot-threads-log.timer (opensearch-hot-threads-log.timer)]
• File[/usr/local/bin/ispooled]
• Service[prometheus-wmf-elasticsearch-exporter-9600]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer]
• File[/etc/ssl/dhparam.pem]
• Service[logstash]
• Package[logstash]
• File[/var/log/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• File_line[rm_eno12399np0_clsact_eno12399np0]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9600.timer]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9200.service]
• File[/etc/rsyslog.d/40-clean-up-dlq.conf]
• File[/etc/opensearch/production-search-codfw/log4j2.properties]
• Package[tcp-mss-clamper]
• File[/etc/update-motd.d/96-cluster-memberships]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer)]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service)]
• File[/etc/rsyslog.d/40-opensearch-production-search-codfw-gc-log-cleanup.conf]
• File[/etc/nagios/nrpe.d/check_opensearch_shards_9200.cfg]
• Service[tcp-mss-clamper]
• File[/etc/conftool/config.yaml]
• File[/usr/local/bin/jheapdump]
• File[/usr/lib/nagios/plugins/check_elasticsearch]
• Augeas[ipip60_set_up]
• Service[nrpe2nodexp-opensearch_shard_size_check_9200.timer]
• File[/etc/logrotate.d/nginx]
• File[/etc/apt/sources.list.d/wikimedia-opensearch-plugins.list]
• File[/etc/nginx/sites-available]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9600.service (nrpe2nodexp-opensearch_unassigned_shard_check_9600.service)]
• File[/etc/logstash/log4j2.properties]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9200.service (nrpe2nodexp-opensearch_shard_size_check_9200.service)]
• Exec[systemd daemon-reload for opensearch-hot-threads-log.service (opensearch-hot-threads-log.service)]
• Exec[ip link set up dev ipip60]
• File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
• User[dcausse]
• Package[opensearch]
• Service[opensearch_1@production-search-psi-codfw]
• Augeas[ipip60_manual]
• Exec[apt_repository_wikimedia-opensearch]
• File[/home/pfischer]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.chained.pem]
• File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer (wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer)]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service (wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service)]
• Service[prometheus-wmf-elasticsearch-exporter-9200]
• File[/etc/conftool/schema.yaml]
• File[/etc/ferm/conf.d/10_opensearch-https-9643]
• Exec[mask_nginx.service]
• Exec[elasticsearch-roots_ensure_members]
• File[/lib/systemd/system/prometheus-elasticsearch-exporter-9600.service]
• File[/etc/logstash/conf.d/10-input-gelf-gelf_relay.conf]
• File[/etc/ssh/userkeys/dcausse]
• File[/usr/local/bin/pool]
• File[/etc/nginx/sites-available/production-search-psi-codfw]
• File[/etc/nginx/sites-enabled/production-search-psi-codfw]
• Exec[Refresh tmpfile opensearch-production-search-codfw]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9200.service (nrpe2nodexp-opensearch_unassigned_shard_check_9200.service)]
• Exec[systemd daemon-reload for opensearch-production-search-codfw-gc-log-cleanup.timer (opensearch-production-search-codfw-gc-log-cleanup.timer)]
• File[/lib/systemd/system/logstash.service]
• Exec[systemd daemon-reload for opensearch-disable-readahead.service (opensearch-disable-readahead.service)]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-psi-codfw.service (opensearch-disable-readahead-production-search-psi-codfw.service)]
• File_line[auto_restart_file_presence_prometheus-wmf-elasticsearch-exporter-9200]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Exec[systemd daemon-reload for opensearch_1@.service (opensearch_1@.service)]
• File[/lib/systemd/system/opensearch-hot-threads-log.timer]
• Exec[systemd daemon-reload for clean_up_dlq.timer (clean_up_dlq.timer)]
• Service[wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer]
• Exec[renew certificate - discovery__cirrussearch2089_codfw_wmnet]
• File[/var/log/clean_up_dlq]
• Package[wmf-opensearch-search-plugins]
• File[/var/log/wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer)]
• Service[opensearch-hot-threads-log.timer]
• Exec[systemd daemon-reload for prometheus-wmf-elasticsearch-exporter-9600.service (prometheus-wmf-elasticsearch-exporter-9600)]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.csr]
• File[/usr/local/bin/depool-nginx]
• File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
• Service[prometheus-elasticsearch-exporter-9600]
• Package[nginx-light]
• File[/etc/tmpfiles.d/opensearch-production-search-codfw.conf]
• File[/usr/local/bin/cleanup-dlq]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service]
• File[/var/lib/nginx]
• Exec[symlink /etc/opensearch/production-search-codfw/sudachi]
• File[/var/log/opensearch-production-search-psi-codfw-gc-log-cleanup]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9200.timer (nrpe2nodexp-opensearch_shards_9200.timer)]
• File[/etc/opensearch/production-search-codfw/scripts]
• Package[logstash-old-name]
• File[/srv/opensearch/production-search-codfw]
• File[/usr/local/bin/pool-opensearch_1@production-search-psi-codfw]
• File[/usr/local/sbin/restart-opensearch_1@production-search-psi-codfw]
• File[/lib/systemd/system/opensearch-production-search-codfw-gc-log-cleanup.service]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-codfw.service (opensearch-disable-readahead-production-search-codfw.service)]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-psi-codfw.timer]
• Exec[ip addr add 127.0.0.42/32 dev ipip0]
• Service[wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer]
• File[/lib/systemd/system/tcp-mss-clamper.service]
• Exec[unmask_nginx.service]
• Exec[systemd daemon-reload for opensearch-disable-readahead.timer (opensearch-disable-readahead.timer)]
• File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
• File[/etc/apt/sources.list.d/wikimedia-opensearch.list]
• File[/etc/opensearch/production-search-psi-codfw/java-security.policy]
• Augeas[ipip0_add_up]
• Service[clean_up_dlq.timer]
• Exec[update_java_alternatives_11]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-wmf-elasticsearch-exporter-9600.conf]
• File[/usr/share/opensearch/plugins]
• Service[opensearch_1@production-search-codfw]
• Service[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer]
• Exec[s3-credentials-user-production-search-psi-codfw]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shard-size-check-9200.conf]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer]
• User[pfischer]
• File[/etc/rsyslog.d/40-opensearch-disable-readahead.conf]
• File[/usr/local/sbin/restart-nginx]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet-key.pem]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
• File[/etc/ssh/userkeys/dr0ptp4kt]
• File[/usr/local/sbin/restart-opensearch_1@production-search-codfw]
• File[/etc/opensearch/production-search-psi-codfw/jvm.options]
• File_line[rm_lo_clsact_lo]
• File[/lib/systemd/system/prometheus-elasticsearch-exporter-9200.service]
• File_line[auto_restart_file_presence_prometheus-wmf-elasticsearch-exporter-9600]
• Exec[apt_repository_wikimedia-opensearch-plugins]
• File[/etc/logrotate.d/opensearch-production-search-codfw-gc-log-cleanup]
• File[/usr/local/bin/pool-nginx]
• Service[nrpe2nodexp-opensearch_shards_9200.timer]
• File[/usr/local/bin/opensearch_hot_threads_logger.py]
• File[/lib/systemd/system/opensearch_1@.service]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer (wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer)]
• File[/etc/nginx/sites-available/production-search-codfw]
• File[/etc/rsyslog.d/40-opensearch-disable-readahead-production-search-codfw.conf]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service)]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9600.service (nrpe2nodexp-opensearch_shards_9600.service)]
• File[/etc/sudoers.d/nrpe-check_opensearch_shard_size_check_9600]
• File[/etc/nagios/nrpe.d/check_opensearch_shard_size_check_9600.cfg]
• Exec[tlsproxy localssl default_server on ports [9243]]
• File[/etc/opensearch/production-search-psi-codfw/scripts]
• Service[prometheus-elasticsearch-exporter]
• Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]
• File[/etc/cfssl/csr/discovery__cirrussearch2089_codfw_wmnet.csr]
• File[/lib/systemd/system/clean_up_dlq.service]
• File[/etc/conftool/json-schema/]
• File[/etc/sysctl.d/70-TCP-Fast-Open.conf]
• File[/etc/nagios/nrpe.d/check_opensearch_shard_size_check_9200.cfg]
• File[/usr/local/bin/drain]
• File[/etc/ferm/conf.d/10_ip6ip6]
• File[/etc/ferm/conf.d/10_opensearch-http-9600]
• Exec[tlsproxy localssl default_server on ports [9643]]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service]
• File[/srv/opensearch]
• Service[prometheus_ferm_mss.timer]
• File[/etc/logrotate.d/opensearch-production-search-psi-codfw-gc-log-cleanup]
• File[/etc/sudoers.d/nrpe-check_opensearch_shard_size_check_9200]
• File[/home/dcausse]
• Augeas[ipip60_add_up]
• Package[nginx-common]
• Exec[systemd reload for nginx systemd fragments]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-unassigned-shard-check-9200.conf]
• Package[prometheus-elasticsearch-exporter]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9200.service (nrpe2nodexp-opensearch_shards_9200.service)]
• Augeas[ipip0_set_up]
• Service[opensearch]
• User[ebernhardson]
• File[/usr/local/bin/depool]
• File[/etc/elasticsearch]
• File[/etc/ferm/conf.d/10_ipip]
• Node[__node_regexp__cirrussearch2061062069073074075076087088089090091111.codfw.]
• Exec[ip link add name ipip0 type ipip external]
• Service[opensearch-disable-readahead-production-search-psi-codfw.timer]
• File[/etc/systemd/system/nginx.service.d/numa.conf]
• Exec[nginx-reload]
• Package[openjdk-11-jdk]
• File[/etc/opensearch/production-search-psi-codfw/opensearch.yml]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-psi-codfw.service]
• File[/usr/lib/nagios/plugins/check_elasticsearch_unassigned_shards.py]
• Package[edac-utils]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9200.timer (nrpe2nodexp-opensearch_shard_size_check_9200.timer)]
• File[/etc/default/prometheus-elasticsearch-exporter]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer]
• File[/etc/opensearch/production-search-codfw/jvm.options]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9200.timer]
• File[/etc/tmpfiles.d/opensearch-production-search-psi-codfw.conf]
• File_line[auto_restart_file_presence_prometheus-elasticsearch-exporter-9200]
• File[/etc/sudoers.d/nrpe-check_opensearch_shards_9600]
• File[/lib/systemd/system/prometheus_lvs_realserver_mss.timer]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shards-9600.conf]
• File[/etc/nginx/conf.d]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-wmf-elasticsearch-exporter-9200.conf]
• File[/etc/sudoers.d/nrpe-check_opensearch_shards_9200]
• Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
• File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
• File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]
• File[/etc/logrotate.d/prometheus_ferm_mss]
• File[/etc/opensearch/production-search-psi-codfw]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-codfw.service]
• Service[nrpe2nodexp-opensearch_shard_size_check_9600.timer]
• File_line[auto_restart_file_presence_prometheus-elasticsearch-exporter-9600]
• Package[wikimedia-lvs-realserver]
• File[/etc/sudoers.d/elasticsearch-roots]
• Exec[systemd daemon-reload for prometheus-elasticsearch-exporter-9200.service (prometheus-elasticsearch-exporter-9200)]
• File[/etc/opensearch/production-search-psi-codfw/logging.yml]
• Package[opensearch-madvise]
• File[/etc/opensearch/production-search-psi-codfw/log4j2.properties]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service]
• File[/var/log/opensearch]
• File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
• Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
• Service[prometheus_lvs_realserver_mss.timer]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9600.service (nrpe2nodexp-opensearch_shard_size_check_9600.service)]
• Service[opensearch-production-search-psi-codfw-gc-log-cleanup.timer]
• File[/var/log/wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• File[/lib/systemd/system/opensearch-production-search-psi-codfw-gc-log-cleanup.timer]
• Exec[ip link add name ipip60 type ip6tnl external]
• Service[opensearch-production-search-codfw-gc-log-cleanup.timer]
• File[/etc/nginx]
• File[/srv/opensearch/production-search-psi-codfw]
• Service[opensearch-disable-readahead-production-search-codfw.timer]
• Service[nginx]
• Package[python3-conftool]
• Exec[/usr/sbin/dpkg-reconfigure -p critical -f noninteractive wikimedia-lvs-realserver]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service (wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service)]
• File[/usr/local/bin/prometheus-wmf-elasticsearch-exporter]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer]
• File[/etc/systemd/system/nginx.service.d/security.conf]
• File[/var/log/prometheus_ferm_mss]
• Exec[ip link set up dev ipip0]
• Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9200.service]
• File[/etc/opensearch/production-search-codfw]
• File[/etc/ferm/conf.d/10_opensearch-http-9200]
• File[/etc/logrotate.d/opensearch-disable-readahead]
• Exec[mask_default_prometheus_elasticsearch_exporter]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.pem]
• File[/etc/nginx/sites-enabled]
• Exec[create chained cert /etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.chain.pem]
• File[/etc/sudoers.d/nrpe-check_opensearch_unassigned_shard_check_9600]
• File[/etc/conftool/local_services.yaml]
• Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• File[/var/log/opensearch-disable-readahead-production-search-psi-codfw]
• File[/etc/default/opensearch]
• File[/etc/nagios/nrpe.d/check_opensearch_unassigned_shard_check_9600.cfg]
• Package[python3-poolcounter]
• Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
• File[/var/log/opensearch/opensearch_index_search_slowlog.log]
• File[/usr/lib/nagios/plugins/check_elasticsearch_shard_size.py]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-unassigned-shard-check-9600.conf]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9600.timer]
• File[/etc/opensearch/production-search-codfw/logging.yml]
• File[/root/.etcdrc]
• File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
• File[/etc/opensearch/production-search-codfw/opensearch.keystore]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9600.service]
• File[/etc/conftool]
• Service[opensearch-disable-readahead.timer]
• File[/usr/local/bin/safe-service-restart]
• Exec[udev_reload]
• Exec[Refresh tmpfile opensearch-production-search-psi-codfw]
• File[/etc/logrotate.d/clean_up_dlq]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9200.timer]
• File[/etc/opensearch_hot_threads.d]
• File[/usr/local/bin/pooler-loop]
• File[/etc/nginx/nginx.conf]
• Exec[Generate cert discovery__cirrussearch2089_codfw_wmnet refresh]
• File[/usr/local/bin/depool-opensearch_1@production-search-codfw]
• File[/etc/logrotate.d/opensearch-disable-readahead-production-search-psi-codfw]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9600.timer (nrpe2nodexp-opensearch_shards_9600.timer)]
• File[/etc/systemd/system/nginx.service.d]
• File[/lib/systemd/system/prometheus-wmf-elasticsearch-exporter-9200.service]
• Group[elasticsearch-roots]
• File[/etc/etcd]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-codfw.timer (opensearch-disable-readahead-production-search-codfw.timer)]
• Exec[systemd daemon-reload for clean_up_dlq.service (clean_up_dlq.service)]
• Service[nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer]
• Exec[/usr/sbin/tc qdisc del dev eno12399np0 clsact]
• File[/usr/local/bin/logstash-config-test]
• Service[nrpe2nodexp-opensearch_shards_9600.timer]
• File[/etc/udev/rules.d/40-opensearch-readahead.rules]
• File[/lib/systemd/system/opensearch-hot-threads-log.service]
• Exec[disable-rp-filter-eno12399np0]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9200.service]
• File[/usr/lib/nagios/plugins/check_elasticsearch.py]
• File[/etc/logstash/jvm.options]
• File[/lib/systemd/system/opensearch-production-search-codfw-gc-log-cleanup.timer]
• File[/etc/opensearch/production-search-codfw/opensearch.yml]
• Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
• File[/etc/opensearch_hot_threads.d/production-search-psi-codfw.yml]
• File[/etc/nginx/sites-enabled/production-search-codfw]
• File[/etc/opensearch/production-search-codfw/java-security.policy]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-psi-codfw.timer (opensearch-disable-readahead-production-search-psi-codfw.timer)]
• File[/etc/opensearch]
• File[/etc/sudoers.d/nrpe-check_opensearch_unassigned_shard_check_9200]
• Exec[disable-rp-filter-ipip0]
• Package[python3-requests]
• Service[nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-elasticsearch-exporter-9200.conf]
• File[/etc/poolcounter-backends.yaml]
• File[/usr/local/bin/pool-opensearch_1@production-search-codfw]
• File[/etc/rsyslog.d/40-opensearch-production-search-psi-codfw-gc-log-cleanup.conf]
• File[/var/log/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/var/log/prometheus_lvs_realserver_mss]
• File[/home/dr0ptp4kt]
• File[/etc/rsyslog.d/50-udp-json-logback-compat.conf]
• Exec[s3-credentials-user-production-search-codfw]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.chain.pem]
• File[/lib/systemd/system/prometheus_ferm_mss.service]
• File[/var/log/opensearch-disable-readahead-production-search-codfw]
• Exec[opensearch-create-keystore-production-search-psi-codfw]
• File[/etc/opensearch/production-search-psi-codfw/opensearch.keystore]
• File[/home/ebernhardson]
• Augeas[ipip0_127.0.0.42/32]
• File[/etc/logstash/conf.d/README]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• File[/etc/nagios/nrpe.d/check_opensearch_shards_9600.cfg]
• File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
• File[/usr/local/bin/depool-opensearch_1@production-search-psi-codfw]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shards-9200.conf]
• File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
• Augeas[ipip0_manual]
• File[/lib/systemd/system/opensearch-disable-readahead.service]
• Exec[Generate cert discovery__cirrussearch2089_codfw_wmnet]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9600.service]
• File[/etc/default/logstash]
• Exec[/usr/sbin/tc qdisc del dev lo clsact]
• Exec[disable-rp-filter-ipip60]
• File[/usr/local/bin/decommission]
• Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
• File[/etc/rsyslog.d/40-opensearch-disable-readahead-production-search-psi-codfw.conf]
• User[dr0ptp4kt]
• File[/etc/default/wikimedia-lvs-realserver]
• Mount[/var/lib/nginx]
• File[/etc/ferm/conf.d/10_opensearch-https-9243]
• File[/usr/local/bin/prometheus-ferm-mss]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer (nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer)]
• File[/var/log/opensearch-production-search-codfw-gc-log-cleanup]
• Exec[symlink /etc/opensearch/production-search-psi-codfw/sudachi]
• File[/lib/systemd/system/opensearch-production-search-psi-codfw-gc-log-cleanup.service]
• File[/etc/update-motd.d/05-cirrus--opensearch]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-codfw.timer]
• File[/etc/logstash/conf.d/90-output-udp-gelf_relay.conf]
• File[/etc/etcd/etcdrc]
• File[/etc/opensearch_hot_threads.d/production-search-codfw.yml]
• File[/lib/systemd/system/prometheus_ferm_mss.timer]
• Exec[opensearch-create-keystore-production-search-codfw]
• File[/etc/logstash/logstash.yml]
• Exec[systemd daemon-reload for prometheus-wmf-elasticsearch-exporter-9200.service (prometheus-wmf-elasticsearch-exporter-9200)]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer]
• Exec[stop-default-nginx]
• File_line[opensearch_bin_bashrc]
• Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]

Resources only in the old catalog

• File[/etc/update-motd.d/05-insetup--data-platform-ferm]
• Node[__node_regexp__cirrussearch2089.codfw.]

Resources modified

• Exec[apt-get update]

  Parameters differences:

  --- Exec[apt-get update].orig
  +++ Exec[apt-get update]
  
  +    before => ['Class[Opensearch]']
  

• Concat_fragment[main contacts]

  Content differences:

  --- main contacts.orig
  +++ main contacts
  @@ -1,3 +1,3 @@
   ---
  -role::insetup::data_platform_ferm:
  -- Data Platform
  +role::cirrus::opensearch:
  +- Search Platform

• File[/etc/apt/sources.list]

  Parameters differences:

  --- File[/etc/apt/sources.list].orig
  +++ File[/etc/apt/sources.list]
  
  @@
  -    before => ['Exec[apt_repository_wikimedia]', 'Exec[apt_repository_wikimedia-private]', 'Exec[apt_repository_debian-debug]', 'Exec[apt_repository_component-puppet7-apt.wikimedia.org-wikimedia-bullseye-wikimedia]']
  +    before => ['Exec[apt_repository_wikimedia]', 'Exec[apt_repository_wikimedia-private]', 'Exec[apt_repository_debian-debug]', 'Exec[apt_repository_wikimedia-opensearch]', 'Exec[apt_repository_wikimedia-opensearch-plugins]', 'Exec[apt_repository_component-puppet7-apt.wikimedia.org-wikimedia-bullseye-wikimedia]']
  

• File[/etc/sysctl.d/10-ubuntu-defaults.conf]

  Content differences:

  --- /etc/sysctl.d/10-ubuntu-defaults.conf.orig
  +++ /etc/sysctl.d/10-ubuntu-defaults.conf
  @@ -4,7 +4,7 @@
   kernel.kptr_restrict = 1
   kernel.printk = 4 4 1 7
   kernel.yama.ptrace_scope = 1
  -net.ipv4.conf.all.rp_filter = 1
  -net.ipv4.conf.default.rp_filter = 1
  +net.ipv4.conf.all.rp_filter = 0
  +net.ipv4.conf.default.rp_filter = 0
   net.ipv4.tcp_syncookies = 1
   vm.mmap_min_addr = 65536

• File[/var/lib/prometheus/node.d/role_owner.prom]

  Content differences:

  --- /var/lib/prometheus/node.d/role_owner.prom.orig
  +++ /var/lib/prometheus/node.d/role_owner.prom
  @@ -1,3 +1,3 @@
   # HELP role_owner The team owner of the server role
   # TYPE role_owner gauge
  -role_owner{team="data-platform",role="insetup::data_platform_ferm",cluster="insetup"} 1.0
  +role_owner{team="search-platform",role="cirrus::opensearch",cluster="elasticsearch"} 1.0

• File[/etc/nagios/nrpe.d/check_disk_space.cfg]

  Content differences:

  --- /etc/nagios/nrpe.d/check_disk_space.cfg.orig
  +++ /etc/nagios/nrpe.d/check_disk_space.cfg
  @@ -1,2 +1,2 @@
   # File generated by puppet. DO NOT edit by hand
  -command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs
  +command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" --exclude-type=tracefs

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Standard Diff
• Full Diff