Compilation results for deploy1003.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]
• Group[fundraising-data-uploader]
• Firewall::Service[fundraising-data-uploader sftp]
• File[/etc/ssh/userkeys/fundraising-data-uploader]
• User[fundraising-data-uploader]
• Ferm::Service[fundraising_data_uploader_sftp]
• Ssh::Userkey[fundraising-data-uploader]

Resources modified

• Group[spiderpig]

  Parameters differences:

  --- Group[spiderpig].orig
  +++ Group[spiderpig]
  
  +    ensure => present
  

• Sudo::Group[deployment]

  Parameters differences:

  --- Sudo::Group[deployment].orig
  +++ Sudo::Group[deployment]
  
  @@
  -    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']
  +    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']
  

• Class[Profile::Mediawiki::System_users]

  Parameters differences:

  --- Class[Profile::Mediawiki::System_users].orig
  +++ Class[Profile::Mediawiki::System_users]
  
  +    fundraising_data_uploader_user_ssh_key => ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>
  +    fundraising_data_uploader_user         => fundraising-data-uploader
  

• Exec[deployment_ensure_members]

  Parameters differences:

  --- Exec[deployment_ensure_members].orig
  +++ Exec[deployment_ensure_members]
  
  @@
  -    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]']
  +    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]', 'User[fundraising-data-uploader]']
  @@
  -    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig
  +    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader
  @@
  -    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig$
  +    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader$
  

• Admin::Group[deployment]

  Parameters differences:

  --- Admin::Group[deployment].orig
  +++ Admin::Group[deployment]
  
  @@
  -    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']
  +    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']
  

• File[/etc/sudoers.d/deployment]

  Content differences:

  --- /etc/sudoers.d/deployment.orig
  +++ /etc/sudoers.d/deployment
  @@ -1,6 +1,6 @@
   # This file is managed by Puppet!
   
  -%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL
  +%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL
   %deployment ALL = NOPASSWD: /usr/sbin/apache2ctl
   %deployment ALL = NOPASSWD: /etc/init.d/apache2
   %deployment ALL = NOPASSWD: /usr/bin/renice

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Full Diff