Compilation results for cirrussearch2089.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• Exec[java__cacert_wmf:puppetca.pem]
• Systemd::Service[prometheus-wmf-elasticsearch-exporter-9200]
• File[/usr/local/bin/opensearch-disable-readahead.sh]
• Ferm::Service[opensearch-http-9200]
• File[/etc/nagios/nrpe.d/check_opensearch_unassigned_shard_check_9200.cfg]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer]
• Logrotate::Conf[wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• Nrpe::Check[check_opensearch_unassigned_shard_check_9600]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
• Profile::Prometheus::Wmf_elasticsearch_exporter[cirrussearch2089:9200]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet]
• File[/lib/systemd/system/prometheus-wmf-elasticsearch-exporter-9600.service]
• Service[prometheus-elasticsearch-exporter-9200]
• Systemd::Unit[nrpe2nodexp-opensearch_shard_size_check_9600.timer]
• Nrpe::Check[check_opensearch_unassigned_shard_check_9200]
• Class[Opensearch]
• Alternatives::Java[11]
• File[/etc/opensearch/instances]
• Systemd::Unit[wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer]
• Exec[systemd daemon-reload for prometheus-elasticsearch-exporter-9600.service (prometheus-elasticsearch-exporter-9600)]
• Prometheus::Alert::Rule[check_opensearch_shard_size_check_9600_6ce4fe694f5df8cba9e0032196c72747]
• Monitoring::Service[opensearch_unassigned_shard_check_9600]
• Systemd::Timer::Job[wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9600.service]
• File[/etc/logrotate.d/opensearch-disable-readahead-production-search-codfw]
• File[/var/log/opensearch/opensearch.log]
• File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shard-size-check-9600.conf]
• File[/etc/ssh/userkeys/ebernhardson]
• Exec[systemd daemon-reload for opensearch-production-search-psi-codfw-gc-log-cleanup.timer (opensearch-production-search-psi-codfw-gc-log-cleanup.timer)]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-elasticsearch-exporter-9600.conf]
• Service[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer]
• Ferm::Service[opensearch-inter-node-9700]
• Exec[systemd daemon-reload for opensearch-production-search-psi-codfw-gc-log-cleanup.service (opensearch-production-search-psi-codfw-gc-log-cleanup.service)]
• Monitoring::Service[opensearch_shards_9600]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9600.timer (nrpe2nodexp-opensearch_shard_size_check_9600.timer)]
• File[/var/log/opensearch/opensearch_index_indexing_slowlog.log]
• Systemd::Service[prometheus_lvs_realserver_mss]
• Systemd::Timer::Job[wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• Systemd::Service[opensearch-hot-threads-log]
• File[/etc/ssh/userkeys/pfischer]
• File[/lib/systemd/system/opensearch-disable-readahead.timer]
• Interface::Manual[ipip_ipv4]
• File[/usr/local/bin/prometheus-lvs-realserver-mss]
• File[/lib/systemd/system/clean_up_dlq.timer]
• Admin::User[dr0ptp4kt]
• Profile::Auto_restarts::Service[prometheus-wmf-elasticsearch-exporter-9200]
• Sudo::User[nrpe-check_opensearch_shard_size_check_9600]
• Systemd::Unit[nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer]
• Systemd::Unit[opensearch-hot-threads-log.timer]
• Systemd::Syslog[prometheus_lvs_realserver_mss]
• Systemd::Syslog[prometheus_ferm_mss]
• File[/etc/ferm/conf.d/10_opensearch-inter-node-9700]
• Elasticsearch::Tlsproxy[production-search-codfw]
• Nrpe::Check[check_opensearch_shards_9600]
• Exec[systemd daemon-reload for opensearch-production-search-codfw-gc-log-cleanup.service (opensearch-production-search-codfw-gc-log-cleanup.service)]
• Logrotate::Conf[opensearch-production-search-codfw-gc-log-cleanup]
• Systemd::Service[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• File[/var/log/opensearch-disable-readahead]
• File[/etc/ferm/conf.d/10_opensearch-inter-node-9300]
• Logstash::Output::Udp[gelf_relay]
• File[/etc/logrotate.d/opensearch]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer (nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer)]
• Exec[systemd daemon-reload for opensearch-hot-threads-log.timer (opensearch-hot-threads-log.timer)]
• Prometheus::Alert::Rule[check_opensearch_unassigned_shard_check_9600_8641ad857de0a06c2748b18ea2c135ab]
• Systemd::Syslog[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• Systemd::Unit[nrpe2nodexp-opensearch_unassigned_shard_check_9200.service]
• File[/usr/local/bin/ispooled]
• Service[prometheus-wmf-elasticsearch-exporter-9600]
• Monitoring::Service[check_tcp-mss-clamper_status]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer]
• Systemd::Unit[nrpe2nodexp-opensearch_shard_size_check_9200.timer]
• File[/etc/ssl/dhparam.pem]
• Service[logstash]
• Sudo::User[nrpe-check_opensearch_shards_9600]
• Package[logstash]
• Nrpe::Check[check_opensearch_shard_size_check_9200]
• File[/var/log/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• Logrotate::Conf[opensearch-production-search-psi-codfw-gc-log-cleanup]
• Systemd::Unit[clean_up_dlq.service]
• Systemd::Timer[nrpe2nodexp-opensearch_shards_9200]
• File_line[rm_eno12399np0_clsact_eno12399np0]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9600.timer]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9200.service]
• File[/etc/rsyslog.d/40-clean-up-dlq.conf]
• File[/etc/opensearch/production-search-codfw/log4j2.properties]
• Package[tcp-mss-clamper]
• File[/etc/update-motd.d/96-cluster-memberships]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer)]
• Nrpe::Check[check_opensearch_shard_size_check_9600]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service)]
• Class[Profile::Logstash::Gelf_relay]
• Class[Java]
• File[/etc/rsyslog.d/40-opensearch-production-search-codfw-gc-log-cleanup.conf]
• File[/etc/nagios/nrpe.d/check_opensearch_shards_9200.cfg]
• Elasticsearch::Tlsproxy[production-search-psi-codfw]
• Service[tcp-mss-clamper]
• File[/etc/conftool/config.yaml]
• File[/usr/local/bin/jheapdump]
• Rsyslog::Conf[nrpe2nodexp-opensearch_unassigned_shard_check_9200]
• File[/usr/lib/nagios/plugins/check_elasticsearch]
• Augeas[ipip60_set_up]
• Service[nrpe2nodexp-opensearch_shard_size_check_9200.timer]
• File[/etc/logrotate.d/nginx]
• Systemd::Service[tcp-mss-clamper]
• Nrpe::Check[check_opensearch_shards_9200]
• Systemd::Timer[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• File[/etc/apt/sources.list.d/wikimedia-opensearch-plugins.list]
• Systemd::Tmpfile[opensearch-production-search-psi-codfw]
• File[/etc/nginx/sites-available]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9600.service (nrpe2nodexp-opensearch_unassigned_shard_check_9600.service)]
• Systemd::Syslog[clean_up_dlq]
• Sudo::Group[elasticsearch-roots]
• File[/etc/logstash/log4j2.properties]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9200.service (nrpe2nodexp-opensearch_shard_size_check_9200.service)]
• Exec[systemd daemon-reload for opensearch-hot-threads-log.service (opensearch-hot-threads-log.service)]
• Exec[ip link set up dev ipip60]
• File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
• Systemd::Unit[nrpe2nodexp-opensearch_shard_size_check_9600.service]
• User[dcausse]
• Package[opensearch]
• Monitoring::Service[opensearch_shard_size_check_9600]
• Service[opensearch_1@production-search-psi-codfw]
• Systemd::Unit[opensearch-disable-readahead-production-search-codfw.service]
• Admin::Groupmembers[elasticsearch-roots]
• Augeas[ipip60_manual]
• Exec[apt_repository_wikimedia-opensearch]
• File[/home/pfischer]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.chained.pem]
• Java::Cacert[wmf:Wikimedia_Internal_Root_CA]
• Systemd::Timer[opensearch-production-search-psi-codfw-gc-log-cleanup]
• File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• Class[Profile::Lvs::Configuration]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer (wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer)]
• Logrotate::Conf[opensearch]
• Systemd::Timer::Job[nrpe2nodexp-opensearch_unassigned_shard_check_9600]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service (wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service)]
• Service[prometheus-wmf-elasticsearch-exporter-9200]
• File[/etc/conftool/schema.yaml]
• File[/etc/ferm/conf.d/10_opensearch-https-9643]
• Class[Conftool::Config]
• Profile::Auto_restarts::Service[prometheus-wmf-elasticsearch-exporter-9600]
• Rsyslog::Conf[opensearch-disable-readahead-production-search-psi-codfw]
• Logrotate::Conf[wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Exec[mask_nginx.service]
• Exec[elasticsearch-roots_ensure_members]
• Systemd::Syslog[opensearch-disable-readahead-production-search-codfw]
• Monitoring::Exported_nagios_service[cirrussearch2089 opensearch_unassigned_shard_check_9200]
• Etcd::Client::Config[/root/.etcdrc]
• File[/lib/systemd/system/prometheus-elasticsearch-exporter-9600.service]
• File[/etc/logstash/conf.d/10-input-gelf-gelf_relay.conf]
• File[/etc/ssh/userkeys/dcausse]
• File[/usr/local/bin/pool]
• Class[Conftool::Scripts]
• File[/etc/nginx/sites-available/production-search-psi-codfw]
• Interface::Ipip[ipip_ipv4]
• File[/etc/nginx/sites-enabled/production-search-psi-codfw]
• Exec[Refresh tmpfile opensearch-production-search-codfw]
• Admin::User[ebernhardson]
• Systemd::Service[wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9200.service (nrpe2nodexp-opensearch_unassigned_shard_check_9200.service)]
• Systemd::Unit[prometheus-wmf-elasticsearch-exporter-9600]
• Tlsproxy::Localssl[production-search-codfw]
• Exec[systemd daemon-reload for opensearch-production-search-codfw-gc-log-cleanup.timer (opensearch-production-search-codfw-gc-log-cleanup.timer)]
• File[/lib/systemd/system/logstash.service]
• Systemd::Unit[opensearch-production-search-psi-codfw-gc-log-cleanup.timer]
• Exec[systemd daemon-reload for opensearch-disable-readahead.service (opensearch-disable-readahead.service)]
• Profile::Prometheus::Elasticsearch_exporter[cirrussearch2089:9200]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-psi-codfw.service (opensearch-disable-readahead-production-search-psi-codfw.service)]
• File_line[auto_restart_file_presence_prometheus-wmf-elasticsearch-exporter-9200]
• Conftool::Scripts::Safe_service_restart[nginx]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Systemd::Timer[prometheus_ferm_mss]
• Exec[systemd daemon-reload for opensearch_1@.service (opensearch_1@.service)]
• Systemd::Service[nrpe2nodexp-opensearch_unassigned_shard_check_9600]
• File[/lib/systemd/system/opensearch-hot-threads-log.timer]
• Exec[systemd daemon-reload for clean_up_dlq.timer (clean_up_dlq.timer)]
• Service[wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer]
• Exec[renew certificate - discovery__cirrussearch2089_codfw_wmnet]
• Ferm::Service[opensearch-http-9600]
• Systemd::Timer[opensearch-disable-readahead]
• Systemd::Timer[nrpe2nodexp-opensearch_shard_size_check_9200]
• Systemd::Mask[nginx.service]
• Prometheus::Elasticsearch_exporter[localhost:9600]
• File[/var/log/clean_up_dlq]
• Systemd::Timer::Job[prometheus_lvs_realserver_mss]
• Prometheus::Alert::Rule[check_opensearch_shard_size_check_9200_ce424a305cb5464806cbf788bde4430a]
• Etcd::Client::Config[/etc/etcd/etcdrc]
• Systemd::Timer::Job[nrpe2nodexp-opensearch_shards_9600]
• Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_15c652bc7390794191321c22a2885d1f]
• Systemd::Syslog[opensearch-production-search-codfw-gc-log-cleanup]
• Rsyslog::Conf[nrpe2nodexp-opensearch_shard_size_check_9200]
• Systemd::Service[nrpe2nodexp-opensearch_unassigned_shard_check_9200]
• Sysctl::Parameters[TCP Fast Open]
• Package[wmf-opensearch-search-plugins]
• Systemd::Service[nrpe2nodexp-opensearch_shard_size_check_9200]
• Interface::Ip[ipip_ipv4 ipv4]
• Systemd::Service[opensearch-production-search-codfw-gc-log-cleanup]
• Class[Prometheus::Elasticsearch_exporter::Common]
• File[/var/log/wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Systemd::Syslog[wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• Logrotate::Conf[opensearch-disable-readahead]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer)]
• Admin::User[dcausse]
• Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
• Service[opensearch-hot-threads-log.timer]
• Systemd::Service[opensearch-production-search-psi-codfw-gc-log-cleanup]
• Conftool::Scripts::Safe_service_restart[opensearch_1@production-search-psi-codfw]
• Exec[systemd daemon-reload for prometheus-wmf-elasticsearch-exporter-9600.service (prometheus-wmf-elasticsearch-exporter-9600)]
• Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.csr]
• Systemd::Syslog[opensearch-disable-readahead-production-search-psi-codfw]
• File[/usr/local/bin/depool-nginx]
• Profile::Prometheus::Wmf_elasticsearch_exporter[cirrussearch2089:9600]
• Systemd::Unit[wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service]
• File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
• Systemd::Unit[prometheus_lvs_realserver_mss.timer]
• Class[Icinga::Elasticsearch::Base_plugin]
• Systemd::Timer::Job[opensearch-disable-readahead]
• Rsyslog::Conf[opensearch-disable-readahead-production-search-codfw]
• Service[prometheus-elasticsearch-exporter-9600]
• Package[nginx-light]
• Monitoring::Service[elasticsearch-https-production-search-psi-codfw]
• File[/etc/tmpfiles.d/opensearch-production-search-codfw.conf]
• Admin::Group[elasticsearch-roots]
• File[/usr/local/bin/cleanup-dlq]
• Monitoring::Service[elasticsearch-https-production-search-codfw]
• Systemd::Unit[opensearch-production-search-codfw-gc-log-cleanup.service]
• File[/var/lib/nginx]
• Systemd::Tmpfile[opensearch-production-search-codfw]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service]
• Exec[symlink /etc/opensearch/production-search-codfw/sudachi]
• Class[Poolcounter::Client::Python]
• File[/var/log/opensearch-production-search-psi-codfw-gc-log-cleanup]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9200.timer (nrpe2nodexp-opensearch_shards_9200.timer)]
• File[/etc/opensearch/production-search-codfw/scripts]
• Package[logstash-old-name]
• Ssh::Userkey[dr0ptp4kt]
• Ssh::Userkey[pfischer]
• Rsyslog::Conf[opensearch-disable-readahead]
• Systemd::Service[opensearch-disable-readahead-production-search-psi-codfw]
• Systemd::Unit[opensearch-production-search-psi-codfw-gc-log-cleanup.service]
• Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
• Java::Package[openjdk-jdk-11]
• File[/srv/opensearch/production-search-codfw]
• File[/usr/local/bin/pool-opensearch_1@production-search-psi-codfw]
• Opensearch::Keystore[s3-credentials-user-production-search-psi-codfw]
• File[/usr/local/sbin/restart-opensearch_1@production-search-psi-codfw]
• Systemd::Service[nrpe2nodexp-opensearch_shard_size_check_9600]
• Systemd::Service[prometheus-elasticsearch-exporter-9200]
• Ferm::Service[opensearch-inter-node-9300]
• File[/lib/systemd/system/opensearch-production-search-codfw-gc-log-cleanup.service]
• Nrpe::Plugin[check_systemd_unit_status]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-codfw.service (opensearch-disable-readahead-production-search-codfw.service)]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-psi-codfw.timer]
• Exec[ip addr add 127.0.0.42/32 dev ipip0]
• Service[wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer]
• Systemd::Service[wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• Nrpe::Monitor_service[opensearch_shards_9200]
• File[/lib/systemd/system/tcp-mss-clamper.service]
• Class[Passwords::Etcd]
• Exec[unmask_nginx.service]
• Exec[systemd daemon-reload for opensearch-disable-readahead.timer (opensearch-disable-readahead.timer)]
• Systemd::Timer::Job[opensearch-disable-readahead-production-search-psi-codfw]
• File[/etc/apt/sources.list.d/wikimedia-opensearch.list]
• File[/etc/opensearch/production-search-psi-codfw/java-security.policy]
• Systemd::Unit[opensearch-disable-readahead-production-search-codfw.timer]
• File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
• Augeas[ipip0_add_up]
• Service[clean_up_dlq.timer]
• Exec[update_java_alternatives_11]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-wmf-elasticsearch-exporter-9600.conf]
• File[/usr/share/opensearch/plugins]
• Systemd::Service[nrpe2nodexp-opensearch_shards_9600]
• Service[opensearch_1@production-search-codfw]
• Systemd::Unit[clean_up_dlq.timer]
• Service[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer]
• Apt::Repository[wikimedia-opensearch]
• Exec[s3-credentials-user-production-search-psi-codfw]
• Class[Opensearch::Packages]
• Class[Profile::Opensearch::Server]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shard-size-check-9200.conf]
• Systemd::Timer[nrpe2nodexp-opensearch_shards_9600]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9200.timer]
• Class[Poolcounter::Client]
• User[pfischer]
• File[/etc/rsyslog.d/40-opensearch-disable-readahead.conf]
• Monitoring::Exported_nagios_service[cirrussearch2089 opensearch_shards_9200]
• File[/usr/local/sbin/restart-nginx]
• Systemd::Timer::Job[nrpe2nodexp-opensearch_shard_size_check_9600]
• Systemd::Timer::Job[opensearch-production-search-codfw-gc-log-cleanup]
• Systemd::Timer::Job[nrpe2nodexp-opensearch_unassigned_shard_check_9200]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet-key.pem]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
• File[/etc/ssh/userkeys/dr0ptp4kt]
• Rsyslog::Conf[wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• File[/usr/local/sbin/restart-opensearch_1@production-search-codfw]
• Systemd::Syslog[opensearch-production-search-psi-codfw-gc-log-cleanup]
• File[/etc/opensearch/production-search-psi-codfw/jvm.options]
• File_line[rm_lo_clsact_lo]
• Class[Profile::Tcp_fast_open]
• File[/lib/systemd/system/prometheus-elasticsearch-exporter-9200.service]
• Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]
• Systemd::Timer[prometheus_lvs_realserver_mss]
• Interface::Post_up_command[clsact_eno12399np0]
• Nrpe::Check[check_check_tcp-mss-clamper_status]
• File_line[auto_restart_file_presence_prometheus-wmf-elasticsearch-exporter-9600]
• Systemd::Unit[nrpe2nodexp-opensearch_shard_size_check_9200.service]
• Exec[apt_repository_wikimedia-opensearch-plugins]
• File[/etc/logrotate.d/opensearch-production-search-codfw-gc-log-cleanup]
• File[/usr/local/bin/pool-nginx]
• Systemd::Service[clean_up_dlq]
• Service[nrpe2nodexp-opensearch_shards_9200.timer]
• Systemd::Timer[nrpe2nodexp-opensearch_shard_size_check_9600]
• File[/usr/local/bin/opensearch_hot_threads_logger.py]
• File[/lib/systemd/system/opensearch_1@.service]
• Monitoring::Exported_nagios_service[cirrussearch2089 opensearch_shards_9600]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer (wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer)]
• Profile::Prometheus::Elasticsearch_exporter[cirrussearch2089:9600]
• File[/etc/nginx/sites-available/production-search-codfw]
• Systemd::Unit[wmf_auto_restart_prometheus-elasticsearch-exporter-9600.service]
• File[/etc/rsyslog.d/40-opensearch-disable-readahead-production-search-codfw.conf]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service (wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service)]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9600.service (nrpe2nodexp-opensearch_shards_9600.service)]
• File[/etc/sudoers.d/nrpe-check_opensearch_shard_size_check_9600]
• Profile::Auto_restarts::Service[prometheus-elasticsearch-exporter-9600]
• File[/etc/nagios/nrpe.d/check_opensearch_shard_size_check_9600.cfg]
• Exec[tlsproxy localssl default_server on ports [9243]]
• File[/etc/opensearch/production-search-psi-codfw/scripts]
• Service[prometheus-elasticsearch-exporter]
• Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]
• File[/etc/cfssl/csr/discovery__cirrussearch2089_codfw_wmnet.csr]
• Class[Profile::Lvs::Realserver::Ipip]
• Monitoring::Exported_nagios_service[cirrussearch2089 elasticsearch-https-production-search-codfw]
• Class[Wmflib::Service::Catalog]
• Systemd::Service[prometheus_ferm_mss]
• Systemd::Timer::Job[opensearch-disable-readahead-production-search-codfw]
• File[/lib/systemd/system/clean_up_dlq.service]
• File[/etc/conftool/json-schema/]
• File[/etc/sysctl.d/70-TCP-Fast-Open.conf]
• File[/etc/nagios/nrpe.d/check_opensearch_shard_size_check_9200.cfg]
• Rsyslog::Conf[opensearch-production-search-psi-codfw-gc-log-cleanup]
• File[/usr/local/bin/drain]
• Ssh::Userkey[ebernhardson]
• Class[Profile::Opensearch::Cirrus::Server]
• Ssh::Userkey[dcausse]
• File[/etc/ferm/conf.d/10_ip6ip6]
• Class[Sslcert::Dhparam]
• File[/etc/ferm/conf.d/10_opensearch-http-9600]
• Systemd::Unit[nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer]
• Exec[tlsproxy localssl default_server on ports [9643]]
• Class[Etcd::Client::Globalconfig]
• Interface::Clsact[clsact_eno12399np0]
• Logrotate::Conf[prometheus_lvs_realserver_mss]
• Rsyslog::Conf[clean_up_dlq]
• Systemd::Timer[opensearch-hot-threads-log]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service]
• File[/srv/opensearch]
• Service[prometheus_ferm_mss.timer]
• File[/etc/logrotate.d/opensearch-production-search-psi-codfw-gc-log-cleanup]
• Logrotate::Conf[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/etc/sudoers.d/nrpe-check_opensearch_shard_size_check_9200]
• Rsyslog::Conf[nrpe2nodexp-opensearch_unassigned_shard_check_9600]
• File[/home/dcausse]
• Augeas[ipip60_add_up]
• Package[nginx-common]
• Systemd::Service[opensearch-disable-readahead]
• Systemd::Unit[opensearch-hot-threads-log.service]
• Exec[systemd reload for nginx systemd fragments]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-unassigned-shard-check-9200.conf]
• Package[prometheus-elasticsearch-exporter]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9200.service (nrpe2nodexp-opensearch_shards_9200.service)]
• Augeas[ipip0_set_up]
• Service[opensearch]
• Monitoring::Exported_nagios_service[cirrussearch2089 elasticsearch-https-production-search-psi-codfw]
• Systemd::Syslog[opensearch-disable-readahead]
• Sudo::User[nrpe-check_opensearch_unassigned_shard_check_9200]
• Sysctl::Conffile[TCP Fast Open]
• Systemd::Service[opensearch-disable-readahead-production-search-codfw]
• User[ebernhardson]
• File[/usr/local/bin/depool]
• File[/etc/elasticsearch]
• File[/etc/ferm/conf.d/10_ipip]
• Node[__node_regexp__cirrussearch2061062069073074075076087088089090091111.codfw.]
• Exec[ip link add name ipip0 type ipip external]
• Service[opensearch-disable-readahead-production-search-psi-codfw.timer]
• File[/etc/systemd/system/nginx.service.d/numa.conf]
• Exec[nginx-reload]
• Package[openjdk-11-jdk]
• File[/etc/opensearch/production-search-psi-codfw/opensearch.yml]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-psi-codfw.service]
• File[/usr/lib/nagios/plugins/check_elasticsearch_unassigned_shards.py]
• Monitoring::Exported_nagios_service[cirrussearch2089 check_tcp-mss-clamper_status]
• Systemd::Timer::Job[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• Package[edac-utils]
• Monitoring::Exported_nagios_service[cirrussearch2089 opensearch_shard_size_check_9200]
• Monitoring::Service[opensearch_shard_size_check_9200]
• Nrpe::Monitor_service[opensearch_unassigned_shard_check_9200]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9200.timer (nrpe2nodexp-opensearch_shard_size_check_9200.timer)]
• Admin::Hashuser[dr0ptp4kt]
• File[/etc/default/prometheus-elasticsearch-exporter]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer]
• File[/etc/opensearch/production-search-codfw/jvm.options]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9200.timer]
• File[/etc/tmpfiles.d/opensearch-production-search-psi-codfw.conf]
• File_line[auto_restart_file_presence_prometheus-elasticsearch-exporter-9200]
• File[/etc/sudoers.d/nrpe-check_opensearch_shards_9600]
• File[/lib/systemd/system/prometheus_lvs_realserver_mss.timer]
• Systemd::Timer[wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shards-9600.conf]
• File[/etc/nginx/conf.d]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-wmf-elasticsearch-exporter-9200.conf]
• File[/etc/sudoers.d/nrpe-check_opensearch_shards_9200]
• Prometheus::Alert::Rule[check_opensearch_shards_9200_8cb398d9f4c08b77d96bfdab16485563]
• Class[Profile::Rsyslog::Udp_json_logback_compat]
• Opensearch::Instance[production-search-codfw]
• Logrotate::Rule[opensearch]
• Systemd::Unmask[nginx.service]
• Systemd::Timer[opensearch-disable-readahead-production-search-codfw]
• Systemd::Timer::Job[opensearch-hot-threads-log]
• Udev::Rule[opensearch-readahead]
• Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
• File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
• File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]
• Admin::User[pfischer]
• Systemd::Unit[prometheus-elasticsearch-exporter-9200]
• Nrpe::Monitor_service[opensearch_shard_size_check_9600]
• Motd::Script[cluster_memberships]
• File[/etc/opensearch/production-search-psi-codfw]
• File[/etc/logrotate.d/prometheus_ferm_mss]
• Prometheus::Wmf_elasticsearch_exporter[cirrussearch2089:9600]
• Systemd::Timer[nrpe2nodexp-opensearch_unassigned_shard_check_9600]
• Class[Role::Cirrus::Opensearch]
• Systemd::Unit[prometheus-wmf-elasticsearch-exporter-9200]
• Cfssl::Csr[/etc/cfssl/csr/discovery__cirrussearch2089_codfw_wmnet.csr]
• Systemd::Unit[nrpe2nodexp-opensearch_shards_9600.service]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-codfw.service]
• Service[nrpe2nodexp-opensearch_shard_size_check_9600.timer]
• File_line[auto_restart_file_presence_prometheus-elasticsearch-exporter-9600]
• Package[wikimedia-lvs-realserver]
• File[/etc/sudoers.d/elasticsearch-roots]
• Sudo::User[nrpe-check_check_tcp-mss-clamper_status]
• Exec[systemd daemon-reload for prometheus-elasticsearch-exporter-9200.service (prometheus-elasticsearch-exporter-9200)]
• File[/etc/opensearch/production-search-psi-codfw/logging.yml]
• Class[Nginx]
• Package[opensearch-madvise]
• Class[Wmflib::Service::Conftool]
• Systemd::Timer::Job[clean_up_dlq]
• Class[Profile::Java]
• Systemd::Service[prometheus-elasticsearch-exporter-9600]
• Class[Lvs::Realserver]
• File[/etc/opensearch/production-search-psi-codfw/log4j2.properties]
• Systemd::Unit[opensearch-disable-readahead-production-search-psi-codfw.service]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service]
• Systemd::Timer[opensearch-production-search-codfw-gc-log-cleanup]
• File[/var/log/opensearch]
• Nrpe::Monitor_service[opensearch_unassigned_shard_check_9600]
• Java::Cacert[wmf:puppetca.pem]
• Interface::Clsact[clsact_lo]
• Systemd::Service[nrpe2nodexp-opensearch_shards_9200]
• File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
• Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
• Service[prometheus_lvs_realserver_mss.timer]
• Logrotate::Conf[nginx]
• Systemd::Unit[nrpe2nodexp-opensearch_unassigned_shard_check_9600.service]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shard_size_check_9600.service (nrpe2nodexp-opensearch_shard_size_check_9600.service)]
• Sudo::User[nrpe-check_opensearch_shard_size_check_9200]
• Class[Java::Tools]
• Systemd::Timer::Job[nrpe2nodexp-opensearch_shards_9200]
• Service[opensearch-production-search-psi-codfw-gc-log-cleanup.timer]
• Systemd::Unit[opensearch-disable-readahead.service]
• File[/var/log/wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• File[/lib/systemd/system/opensearch-production-search-psi-codfw-gc-log-cleanup.timer]
• Exec[ip link add name ipip60 type ip6tnl external]
• Profile::Auto_restarts::Service[prometheus-elasticsearch-exporter-9200]
• Admin::Hashuser[ebernhardson]
• Service[opensearch-production-search-codfw-gc-log-cleanup.timer]
• Systemd::Unit[prometheus_ferm_mss.timer]
• Nrpe::Monitor_service[check_tcp-mss-clamper_status]
• Nginx::Site[production-search-psi-codfw]
• File[/etc/nginx]
• File[/srv/opensearch/production-search-psi-codfw]
• Service[opensearch-disable-readahead-production-search-codfw.timer]
• Service[nginx]
• Rsyslog::Conf[nrpe2nodexp-opensearch_shards_9200]
• Class[Profile::Opensearch::Monitoring::Base_checks]
• Package[python3-conftool]
• Exec[/usr/sbin/dpkg-reconfigure -p critical -f noninteractive wikimedia-lvs-realserver]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service (wmf_auto_restart_prometheus-elasticsearch-exporter-9200.service)]
• File[/usr/local/bin/prometheus-wmf-elasticsearch-exporter]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer]
• File[/etc/systemd/system/nginx.service.d/security.conf]
• Rsyslog::Conf[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/var/log/prometheus_ferm_mss]
• Exec[ip link set up dev ipip0]
• Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
• Nrpe::Monitor_service[opensearch_shard_size_check_9200]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9200.service]
• Systemd::Unit[opensearch_1@.service]
• File[/etc/opensearch/production-search-codfw]
• Prometheus::Node_ferm_mss[ferm_clamped_ipport]
• File[/etc/ferm/conf.d/10_opensearch-http-9200]
• Logrotate::Conf[opensearch-disable-readahead-production-search-psi-codfw]
• File[/etc/logrotate.d/opensearch-disable-readahead]
• Exec[mask_default_prometheus_elasticsearch_exporter]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.pem]
• File[/etc/nginx/sites-enabled]
• Exec[create chained cert /etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.chain.pem]
• Logrotate::Conf[prometheus_ferm_mss]
• File[/etc/sudoers.d/nrpe-check_opensearch_unassigned_shard_check_9600]
• File[/etc/conftool/local_services.yaml]
• Nginx::Site[production-search-codfw]
• Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• Ferm::Rule[clamp-mss-ipv4]
• File[/var/log/opensearch-disable-readahead-production-search-psi-codfw]
• Ferm::Service[opensearch-https-9243]
• File[/etc/default/opensearch]
• File[/etc/nagios/nrpe.d/check_opensearch_unassigned_shard_check_9600.cfg]
• Package[python3-poolcounter]
• Logrotate::Conf[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• File[/var/log/opensearch/opensearch_index_search_slowlog.log]
• Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
• Systemd::Unit[opensearch-disable-readahead-production-search-psi-codfw.timer]
• File[/usr/lib/nagios/plugins/check_elasticsearch_shard_size.py]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-unassigned-shard-check-9600.conf]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9600.timer]
• File[/etc/opensearch/production-search-codfw/logging.yml]
• Rsyslog::Conf[prometheus_ferm_mss]
• File[/root/.etcdrc]
• Class[Profile::Lvs::Realserver]
• File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
• Admin::Hashuser[pfischer]
• File[/etc/opensearch/production-search-codfw/opensearch.keystore]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9600.service]
• Systemd::Unit[prometheus_ferm_mss.service]
• File[/etc/conftool]
• Service[opensearch-disable-readahead.timer]
• File[/usr/local/bin/safe-service-restart]
• Exec[udev_reload]
• Class[Logstash]
• Motd::Script[cirrus::opensearch]
• Exec[Refresh tmpfile opensearch-production-search-psi-codfw]
• Logstash::Conf[output-udp-gelf_relay]
• Systemd::Timer::Job[nrpe2nodexp-opensearch_shard_size_check_9200]
• File[/etc/logrotate.d/clean_up_dlq]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9200.timer]
• File[/etc/opensearch_hot_threads.d]
• File[/usr/local/bin/pooler-loop]
• Monitoring::Service[opensearch_shards_9200]
• File[/etc/nginx/nginx.conf]
• Exec[Generate cert discovery__cirrussearch2089_codfw_wmnet refresh]
• File[/usr/local/bin/depool-opensearch_1@production-search-codfw]
• File[/etc/logrotate.d/opensearch-disable-readahead-production-search-psi-codfw]
• Systemd::Unit[opensearch-production-search-codfw-gc-log-cleanup.timer]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_shards_9600.timer (nrpe2nodexp-opensearch_shards_9600.timer)]
• Rsyslog::Conf[nrpe2nodexp-opensearch_shards_9600]
• Monitoring::Service[opensearch_unassigned_shard_check_9200]
• Prometheus::Wmf_elasticsearch_exporter[cirrussearch2089:9200]
• File[/etc/systemd/system/nginx.service.d]
• File[/lib/systemd/system/prometheus-wmf-elasticsearch-exporter-9200.service]
• Systemd::Unit[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.service]
• Group[elasticsearch-roots]
• File[/etc/etcd]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-codfw.timer (opensearch-disable-readahead-production-search-codfw.timer)]
• Exec[systemd daemon-reload for clean_up_dlq.service (clean_up_dlq.service)]
• Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• Rsyslog::Conf[prometheus_lvs_realserver_mss]
• Systemd::Timer[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• Ferm::Rule[ipip]
• Service[nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer]
• Exec[/usr/sbin/tc qdisc del dev eno12399np0 clsact]
• Systemd::Unit[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.timer]
• Class[Prometheus::Wmf_elasticsearch_exporter::Common]
• File[/usr/local/bin/logstash-config-test]
• Rsyslog::Conf[opensearch-production-search-codfw-gc-log-cleanup]
• Systemd::Timer::Job[prometheus_ferm_mss]
• Opensearch::Log::Hot_threads_cluster[production-search-codfw]
• Opensearch::Keystore[s3-credentials-user-production-search-codfw]
• Ferm::Service[opensearch-https-9643]
• Systemd::Timer::Job[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• Service[nrpe2nodexp-opensearch_shards_9600.timer]
• File[/etc/udev/rules.d/40-opensearch-readahead.rules]
• Systemd::Syslog[wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• File[/lib/systemd/system/opensearch-hot-threads-log.service]
• Exec[disable-rp-filter-eno12399np0]
• Admin::Hashgroup[elasticsearch-roots]
• Systemd::Syslog[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shards_9200.service]
• File[/usr/lib/nagios/plugins/check_elasticsearch.py]
• Rsyslog::Conf[wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• Class[Opensearch::Log::Hot_threads]
• Systemd::Service[prometheus-wmf-elasticsearch-exporter-9600]
• File[/etc/logstash/jvm.options]
• File[/lib/systemd/system/opensearch-production-search-codfw-gc-log-cleanup.timer]
• File[/etc/opensearch/production-search-codfw/opensearch.yml]
• Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
• Systemd::Unit[nrpe2nodexp-opensearch_shards_9200.timer]
• File[/etc/opensearch_hot_threads.d/production-search-psi-codfw.yml]
• Systemd::Timer[clean_up_dlq]
• Rsyslog::Conf[udp_json_logback_compat]
• File[/etc/nginx/sites-enabled/production-search-codfw]
• File[/etc/opensearch/production-search-codfw/java-security.policy]
• Exec[systemd daemon-reload for opensearch-disable-readahead-production-search-psi-codfw.timer (opensearch-disable-readahead-production-search-psi-codfw.timer)]
• File[/etc/opensearch]
• Cfssl::Cert[discovery__cirrussearch2089_codfw_wmnet]
• File[/etc/sudoers.d/nrpe-check_opensearch_unassigned_shard_check_9200]
• Exec[disable-rp-filter-ipip0]
• Package[python3-requests]
• Service[nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-elasticsearch-exporter-9200.conf]
• Systemd::Service[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/etc/poolcounter-backends.yaml]
• File[/usr/local/bin/pool-opensearch_1@production-search-codfw]
• File[/etc/rsyslog.d/40-opensearch-production-search-psi-codfw-gc-log-cleanup.conf]
• File[/var/log/wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600]
• File[/var/log/prometheus_lvs_realserver_mss]
• File[/home/dr0ptp4kt]
• File[/etc/rsyslog.d/50-udp-json-logback-compat.conf]
• Exec[s3-credentials-user-production-search-codfw]
• Nrpe::Monitor_service[opensearch_shards_9600]
• File[/etc/cfssl/ssl/discovery__cirrussearch2089_codfw_wmnet/discovery__cirrussearch2089_codfw_wmnet.chain.pem]
• Logrotate::Conf[opensearch-disable-readahead-production-search-codfw]
• Systemd::Unit[tcp-mss-clamper]
• File[/lib/systemd/system/prometheus_ferm_mss.service]
• File[/var/log/opensearch-disable-readahead-production-search-codfw]
• Opensearch::Instance[production-search-psi-codfw]
• Exec[opensearch-create-keystore-production-search-psi-codfw]
• File[/etc/opensearch/production-search-psi-codfw/opensearch.keystore]
• File[/home/ebernhardson]
• Augeas[ipip0_127.0.0.42/32]
• Tlsproxy::Localssl[production-search-psi-codfw]
• Class[Profile::Conftool::Client]
• File[/etc/logstash/conf.d/README]
• Systemd::Unit[prometheus-elasticsearch-exporter-9600]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-elasticsearch-exporter-9600]
• File[/etc/nagios/nrpe.d/check_opensearch_shards_9600.cfg]
• Interface::Post_up_command[clsact_lo]
• File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
• File[/usr/local/bin/depool-opensearch_1@production-search-psi-codfw]
• File[/etc/rsyslog.d/25-nrpe2nodexp-opensearch-shards-9200.conf]
• File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
• Logrotate::Conf[clean_up_dlq]
• Systemd::Timer::Job[opensearch-production-search-psi-codfw-gc-log-cleanup]
• Augeas[ipip0_manual]
• Conftool::Scripts::Safe_service_restart[opensearch_1@production-search-codfw]
• Class[Profile::Tlsproxy::Instance]
• Systemd::Unit[prometheus_lvs_realserver_mss.service]
• Exec[Generate cert discovery__cirrussearch2089_codfw_wmnet]
• File[/lib/systemd/system/opensearch-disable-readahead.service]
• Class[Udev]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_shard_size_check_9600.service]
• File[/etc/default/logstash]
• Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status]
• Rsyslog::Conf[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200]
• Systemd::Unit[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9600.service]
• Exec[/usr/sbin/tc qdisc del dev lo clsact]
• Exec[disable-rp-filter-ipip60]
• File[/usr/local/bin/decommission]
• Prometheus::Elasticsearch_exporter[localhost:9200]
• Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
• File[/etc/rsyslog.d/40-opensearch-disable-readahead-production-search-psi-codfw.conf]
• Admin::Hashuser[dcausse]
• Motd::Message[cirrus::opensearch]
• User[dr0ptp4kt]
• File[/etc/default/wikimedia-lvs-realserver]
• Mount[/var/lib/nginx]
• File[/etc/ferm/conf.d/10_opensearch-https-9243]
• File[/usr/local/bin/prometheus-ferm-mss]
• Systemd::Unit[nrpe2nodexp-opensearch_shards_9200.service]
• Logstash::Input::Gelf[gelf_relay]
• Sudo::User[nrpe-check_opensearch_unassigned_shard_check_9600]
• Ferm::Rule[ip6ip6]
• Exec[systemd daemon-reload for nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer (nrpe2nodexp-opensearch_unassigned_shard_check_9200.timer)]
• Monitoring::Exported_nagios_service[cirrussearch2089 opensearch_shard_size_check_9600]
• Interface::Ipip[ipip_ipv6]
• File[/var/log/opensearch-production-search-codfw-gc-log-cleanup]
• Exec[symlink /etc/opensearch/production-search-psi-codfw/sudachi]
• Systemd::Timer[nrpe2nodexp-opensearch_unassigned_shard_check_9200]
• Systemd::Monitor[tcp-mss-clamper]
• Systemd::Unit[opensearch-disable-readahead.timer]
• File[/lib/systemd/system/opensearch-production-search-psi-codfw-gc-log-cleanup.service]
• Apt::Repository[wikimedia-opensearch-plugins]
• Ferm::Rule[clamp-mss-ipv6]
• File[/etc/update-motd.d/05-cirrus--opensearch]
• File[/lib/systemd/system/opensearch-disable-readahead-production-search-codfw.timer]
• File[/etc/logstash/conf.d/90-output-udp-gelf_relay.conf]
• File[/etc/etcd/etcdrc]
• Systemd::Unit[wmf_auto_restart_prometheus-elasticsearch-exporter-9600.timer]
• Logstash::Conf[input-gelf-gelf_relay]
• Systemd::Timer[wmf_auto_restart_prometheus-elasticsearch-exporter-9200]
• Systemd::Timer[opensearch-disable-readahead-production-search-psi-codfw]
• Opensearch::Log::Hot_threads_cluster[production-search-psi-codfw]
• File[/etc/opensearch_hot_threads.d/production-search-codfw.yml]
• File[/lib/systemd/system/prometheus_ferm_mss.timer]
• Systemd::Unit[wmf_auto_restart_prometheus-wmf-elasticsearch-exporter-9200.timer]
• Interface::Manual[ipip_ipv6]
• Exec[opensearch-create-keystore-production-search-codfw]
• Prometheus::Alert::Rule[check_opensearch_unassigned_shard_check_9200_f98d7b74d9467ea0aa193a52c18e30ab]
• File[/etc/logstash/logstash.yml]
• Exec[systemd daemon-reload for prometheus-wmf-elasticsearch-exporter-9200.service (prometheus-wmf-elasticsearch-exporter-9200)]
• File[/lib/systemd/system/nrpe2nodexp-opensearch_unassigned_shard_check_9600.timer]
• Systemd::Unit[nrpe2nodexp-opensearch_shards_9600.timer]
• Monitoring::Exported_nagios_service[cirrussearch2089 opensearch_unassigned_shard_check_9600]
• Exec[stop-default-nginx]
• Prometheus::Alert::Rule[check_opensearch_shards_9600_7811fe11f3315f2bd38a6e6de0f1b6b0]
• File_line[opensearch_bin_bashrc]
• Sudo::User[nrpe-check_opensearch_shards_9200]
• Rsyslog::Conf[nrpe2nodexp-opensearch_shard_size_check_9600]
• Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]

Resources only in the old catalog

• File[/etc/update-motd.d/05-insetup--data-platform-ferm]
• Node[__node_regexp__cirrussearch2089.codfw.]
• Motd::Message[insetup::data_platform_ferm]
• Motd::Script[insetup::data_platform_ferm]
• Class[Role::Insetup::Data_platform_ferm]

Resources modified

• Class[Cumin::Selector]

  Parameters differences:

  --- Class[Cumin::Selector].orig
  +++ Class[Cumin::Selector]
  
  @@
  -    cluster => insetup
  +    cluster => elasticsearch
  

• Class[Admin]

  Parameters differences:

  --- Class[Admin].orig
  +++ Class[Admin]
  
  @@
  -    groups => []
  +    groups => ['elasticsearch-roots']
  

• Class[Adduser]

  Parameters differences:

  --- Class[Adduser].orig
  +++ Class[Adduser]
  
  @@
  -    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[bind9-dnsutils]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[python3-click]', 'Package[python3-box]', 'Package[initramfs-tools]', 'Package[confd]', 'Package[python3-toml]']
  +    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[bind9-dnsutils]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-conftool]', 'Package[python3-poolcounter]', 'Package[tcp-mss-clamper]', 'Package[edac-utils]', 'Package[opensearch]', 'Package[python3-requests]', 'Package[wmf-opensearch-search-plugins]', 'Package[opensearch-madvise]', 'Package[logstash]', 'Package[logstash-old-name]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[python3-click]', 'Package[python3-box]', 'Package[initramfs-tools]', 'Package[confd]', 'Package[python3-toml]', 'Package[openjdk-11-jdk]', 'Package[prometheus-elasticsearch-exporter]', 'Package[nginx-light]', 'Package[nginx-common]']
  

• Class[Profile::Apt]

  Parameters differences:

  --- Class[Profile::Apt].orig
  +++ Class[Profile::Apt]
  
  @@
  -    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[bind9-dnsutils]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[python3-click]', 'Package[python3-box]', 'Package[initramfs-tools]', 'Package[confd]', 'Package[python3-toml]']
  +    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[bind9-dnsutils]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-conftool]', 'Package[python3-poolcounter]', 'Package[tcp-mss-clamper]', 'Package[edac-utils]', 'Package[opensearch]', 'Package[python3-requests]', 'Package[wmf-opensearch-search-plugins]', 'Package[opensearch-madvise]', 'Package[logstash]', 'Package[logstash-old-name]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[python3-click]', 'Package[python3-box]', 'Package[initramfs-tools]', 'Package[confd]', 'Package[python3-toml]', 'Package[openjdk-11-jdk]', 'Package[prometheus-elasticsearch-exporter]', 'Package[nginx-light]', 'Package[nginx-common]']
  

• Sysctl::Conffile[ubuntu defaults]

• Exec[apt-get update]

  Parameters differences:

  --- Exec[apt-get update].orig
  +++ Exec[apt-get update]
  
  +    before => ['Class[Opensearch]']
  

• Concat_fragment[main contacts]

  Content differences:

  --- main contacts.orig
  +++ main contacts
  @@ -1,3 +1,3 @@
   ---
  -role::insetup::data_platform_ferm:
  -- Data Platform
  +role::cirrus::opensearch:
  +- Search Platform

• Sysctl::Parameters[ubuntu defaults]

  Parameters differences:

  --- Sysctl::Parameters[ubuntu defaults].orig
  +++ Sysctl::Parameters[ubuntu defaults]
  
  @@
  -    values => {'kernel.printk': [4, 4, 1, 7], 'kernel.kptr_restrict': 1, 'net.ipv4.conf.default.rp_filter': '1', 'net.ipv4.conf.all.rp_filter': '1', 'net.ipv4.tcp_syncookies': 1, 'kernel.yama.ptrace_scope': 1, 'fs.protected_hardlinks': 1, 'fs.protected_symlinks': 1, 'vm.mmap_min_addr': 65536}
  +    values => {'kernel.printk': [4, 4, 1, 7], 'kernel.kptr_restrict': 1, 'net.ipv4.conf.default.rp_filter': '0', 'net.ipv4.conf.all.rp_filter': '0', 'net.ipv4.tcp_syncookies': 1, 'kernel.yama.ptrace_scope': 1, 'fs.protected_hardlinks': 1, 'fs.protected_symlinks': 1, 'vm.mmap_min_addr': 65536}
  

• Class[Monitoring]

  Parameters differences:

  --- Class[Monitoring].orig
  +++ Class[Monitoring]
  
  @@
  -    nagios_group          => insetup_codfw
  +    nagios_group          => elasticsearch_codfw
  @@
  -    notifications_enabled => False
  +    notifications_enabled => True
  @@
  -    cluster               => insetup
  +    cluster               => elasticsearch
  @@
  -    contact_group         => admins
  +    contact_group         => team-data-platform,team-discovery
  

• File[/etc/apt/sources.list]

  Parameters differences:

  --- File[/etc/apt/sources.list].orig
  +++ File[/etc/apt/sources.list]
  
  @@
  -    before => ['Exec[apt_repository_wikimedia]', 'Exec[apt_repository_wikimedia-private]', 'Exec[apt_repository_debian-debug]', 'Exec[apt_repository_component-puppet7-apt.wikimedia.org-wikimedia-bullseye-wikimedia]']
  +    before => ['Exec[apt_repository_wikimedia]', 'Exec[apt_repository_wikimedia-private]', 'Exec[apt_repository_debian-debug]', 'Exec[apt_repository_wikimedia-opensearch]', 'Exec[apt_repository_wikimedia-opensearch-plugins]', 'Exec[apt_repository_component-puppet7-apt.wikimedia.org-wikimedia-bullseye-wikimedia]']
  

• Concat::Fragment[main contacts]

• File[/etc/sysctl.d/10-ubuntu-defaults.conf]

  Content differences:

  --- /etc/sysctl.d/10-ubuntu-defaults.conf.orig
  +++ /etc/sysctl.d/10-ubuntu-defaults.conf
  @@ -4,7 +4,7 @@
   kernel.kptr_restrict = 1
   kernel.printk = 4 4 1 7
   kernel.yama.ptrace_scope = 1
  -net.ipv4.conf.all.rp_filter = 1
  -net.ipv4.conf.default.rp_filter = 1
  +net.ipv4.conf.all.rp_filter = 0
  +net.ipv4.conf.default.rp_filter = 0
   net.ipv4.tcp_syncookies = 1
   vm.mmap_min_addr = 65536

• Monitoring::Exported_nagios_service[cirrussearch2089 raid_broadcom_raid]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[cirrussearch2089 raid_broadcom_raid].orig
  +++ Monitoring::Exported_nagios_service[cirrussearch2089 raid_broadcom_raid]
  
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    servicegroups         => insetup_codfw
  +    servicegroups         => elasticsearch_codfw
  @@
  -    contact_groups        => admins
  +    contact_groups        => team-data-platform,team-discovery
  

• Monitoring::Service[raid_md]

  Parameters differences:

  --- Monitoring::Service[raid_md].orig
  +++ Monitoring::Service[raid_md]
  
  @@
  -    contact_group => admins
  +    contact_group => team-data-platform,team-discovery
  

• Monitoring::Service[disk_space]

  Parameters differences:

  --- Monitoring::Service[disk_space].orig
  +++ Monitoring::Service[disk_space]
  
  @@
  -    contact_group => admins
  +    contact_group => team-data-platform,team-discovery
  

• Monitoring::Service[raid_broadcom_raid]

  Parameters differences:

  --- Monitoring::Service[raid_broadcom_raid].orig
  +++ Monitoring::Service[raid_broadcom_raid]
  
  @@
  -    contact_group => admins
  +    contact_group => team-data-platform,team-discovery
  

• File[/var/lib/prometheus/node.d/role_owner.prom]

  Content differences:

  --- /var/lib/prometheus/node.d/role_owner.prom.orig
  +++ /var/lib/prometheus/node.d/role_owner.prom
  @@ -1,3 +1,3 @@
   # HELP role_owner The team owner of the server role
   # TYPE role_owner gauge
  -role_owner{team="data-platform",role="insetup::data_platform_ferm",cluster="insetup"} 1.0
  +role_owner{team="search-platform",role="cirrus::opensearch",cluster="elasticsearch"} 1.0

• Monitoring::Exported_nagios_service[cirrussearch2089 cpu_microcode_status]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[cirrussearch2089 cpu_microcode_status].orig
  +++ Monitoring::Exported_nagios_service[cirrussearch2089 cpu_microcode_status]
  
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    servicegroups         => insetup_codfw
  +    servicegroups         => elasticsearch_codfw
  

• Class[Profile::Base::Production]

  Parameters differences:

  --- Class[Profile::Base::Production].orig
  +++ Class[Profile::Base::Production]
  
  @@
  -    role_description => Host being setup by Data Platform SREs
  +    role_description => OpenSearch cirrus
  

• Monitoring::Exported_nagios_service[cirrussearch2089 disk_space]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[cirrussearch2089 disk_space].orig
  +++ Monitoring::Exported_nagios_service[cirrussearch2089 disk_space]
  
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    servicegroups         => insetup_codfw
  +    servicegroups         => elasticsearch_codfw
  @@
  -    contact_groups        => admins
  +    contact_groups        => team-data-platform,team-discovery
  

• Nrpe::Monitor_service[raid_md]

  Parameters differences:

  --- Nrpe::Monitor_service[raid_md].orig
  +++ Nrpe::Monitor_service[raid_md]
  
  @@
  -    contact_group => admins
  +    contact_group => team-data-platform,team-discovery
  

• File[/etc/nagios/nrpe.d/check_disk_space.cfg]

  Content differences:

  --- /etc/nagios/nrpe.d/check_disk_space.cfg.orig
  +++ /etc/nagios/nrpe.d/check_disk_space.cfg
  @@ -1,2 +1,2 @@
   # File generated by puppet. DO NOT edit by hand
  -command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs
  +command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" --exclude-type=tracefs

• Class[Profile::Contacts]

  Parameters differences:

  --- Class[Profile::Contacts].orig
  +++ Class[Profile::Contacts]
  
  @@
  -    cluster       => insetup
  +    cluster       => elasticsearch
  @@
  -    role_contacts => ['Data Platform']
  +    role_contacts => ['Search Platform']
  

• Class[Profile::Base]

  Parameters differences:

  --- Class[Profile::Base].orig
  +++ Class[Profile::Base]
  
  @@
  -    enable_rp_filter => True
  +    enable_rp_filter => False
  @@
  -    cluster          => insetup
  +    cluster          => elasticsearch
  

• Class[Profile::Admin]

  Parameters differences:

  --- Class[Profile::Admin].orig
  +++ Class[Profile::Admin]
  
  @@
  -    groups => []
  +    groups => ['elasticsearch-roots']
  

• Nrpe::Check[check_disk_space]

  Parameters differences:

  --- Nrpe::Check[check_disk_space].orig
  +++ Nrpe::Check[check_disk_space]
  
  @@
  -    command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs
  +    command => /usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" --exclude-type=tracefs
  

• Monitoring::Exported_nagios_service[cirrussearch2089 ferm_active]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[cirrussearch2089 ferm_active].orig
  +++ Monitoring::Exported_nagios_service[cirrussearch2089 ferm_active]
  
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    servicegroups         => insetup_codfw
  +    servicegroups         => elasticsearch_codfw
  

• Nrpe::Monitor_service[raid_broadcom_raid]

  Parameters differences:

  --- Nrpe::Monitor_service[raid_broadcom_raid].orig
  +++ Nrpe::Monitor_service[raid_broadcom_raid]
  
  @@
  -    contact_group => admins
  +    contact_group => team-data-platform,team-discovery
  

• Class[Base::Sysctl]

  Parameters differences:

  --- Class[Base::Sysctl].orig
  +++ Class[Base::Sysctl]
  
  @@
  -    enable_rp_filter => True
  +    enable_rp_filter => False
  

• Class[Profile::Monitoring]

  Parameters differences:

  --- Class[Profile::Monitoring].orig
  +++ Class[Profile::Monitoring]
  
  @@
  -    nrpe_check_disk_options => -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs
  +    nrpe_check_disk_options => -w 15% -c 10% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" --exclude-type=tracefs
  @@
  -    nagios_group            => insetup_codfw
  +    nagios_group            => elasticsearch_codfw
  @@
  -    notifications_enabled   => False
  +    notifications_enabled   => True
  @@
  -    cluster                 => insetup
  +    cluster                 => elasticsearch
  @@
  -    contact_group           => admins
  +    contact_group           => team-data-platform,team-discovery
  

• Class[Profile::Cumin::Target]

  Parameters differences:

  --- Class[Profile::Cumin::Target].orig
  +++ Class[Profile::Cumin::Target]
  
  @@
  -    cluster => insetup
  +    cluster => elasticsearch
  

• Monitoring::Exported_nagios_service[cirrussearch2089 ssh]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[cirrussearch2089 ssh].orig
  +++ Monitoring::Exported_nagios_service[cirrussearch2089 ssh]
  
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    servicegroups         => insetup_codfw
  +    servicegroups         => elasticsearch_codfw
  @@
  -    contact_groups        => admins
  +    contact_groups        => team-data-platform,team-discovery
  

• Monitoring::Exported_nagios_service[cirrussearch2089 raid_md]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[cirrussearch2089 raid_md].orig
  +++ Monitoring::Exported_nagios_service[cirrussearch2089 raid_md]
  
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    servicegroups         => insetup_codfw
  +    servicegroups         => elasticsearch_codfw
  @@
  -    contact_groups        => admins
  +    contact_groups        => team-data-platform,team-discovery
  

• Nrpe::Monitor_service[disk_space]

  Parameters differences:

  --- Nrpe::Monitor_service[disk_space].orig
  +++ Nrpe::Monitor_service[disk_space]
  
  @@
  -    contact_group => admins
  +    contact_group => team-data-platform,team-discovery
  @@
  -    nrpe_command  => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs
  +    nrpe_command  => /usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" --exclude-type=tracefs
  

• Monitoring::Exported_nagios_host[cirrussearch2089]

  Parameters differences:

  --- Monitoring::Exported_nagios_host[cirrussearch2089].orig
  +++ Monitoring::Exported_nagios_host[cirrussearch2089]
  
  @@
  -    hostgroups            => insetup_codfw,lsw1-a4-codfw
  +    hostgroups            => elasticsearch_codfw,lsw1-a4-codfw
  @@
  -    notifications_enabled => 0
  +    notifications_enabled => 1
  @@
  -    contact_groups        => admins
  +    contact_groups        => team-data-platform,team-discovery
  

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Full Diff