Compilation results for deploy1003.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	16481
Resources added:	7
Resources removed:	0
Resources modified:	13
Change percentage:	0.12%

Resources only in the new catalog

File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]
Group[fundraising-data-uploader]
Ferm::Service[fundraising_data_uploader_sftp]
File[/etc/ssh/userkeys/fundraising-data-uploader]
User[fundraising-data-uploader]
Firewall::Service[fundraising-data-uploader sftp]
Ssh::Userkey[fundraising-data-uploader]

Resources modified

Firewall::Service[fundraising-data-uploader sftp]

Parameters differences:

--- Firewall::Service[fundraising-data-uploader sftp].orig
+++ Firewall::Service[fundraising-data-uploader sftp]

+    prio     => 10
+    notrack  => False
+    ensure   => present
+    src_sets => ['FRACK_NETWORKS']
+    port     => 22
+    proto    => tcp
+    desc     => sftp access for FR Tech Donor Export role user

Admin::Group[deployment]

Parameters differences:

--- Admin::Group[deployment].orig
+++ Admin::Group[deployment]

@@
-    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']
+    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']

Ferm::Service[fundraising_data_uploader_sftp]

Parameters differences:

--- Ferm::Service[fundraising_data_uploader_sftp].orig
+++ Ferm::Service[fundraising_data_uploader_sftp]

+    prio     => 10
+    notrack  => False
+    ensure   => present
+    src_sets => ['FRACK_NETWORKS']
+    port     => 22
+    proto    => tcp
+    desc     => sftp access for FR Tech Donor Export role user

Class[Profile::Mediawiki::System_users]

Parameters differences:

--- Class[Profile::Mediawiki::System_users].orig
+++ Class[Profile::Mediawiki::System_users]

+    fundraising_data_uploader_user_ssh_key => ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>
+    fundraising_data_uploader_user         => fundraising-data-uploader

Group[spiderpig]

Parameters differences:

--- Group[spiderpig].orig
+++ Group[spiderpig]

+    ensure => present

Ssh::Userkey[fundraising-data-uploader]

Parameters differences:

--- Ssh::Userkey[fundraising-data-uploader].orig
+++ Ssh::Userkey[fundraising-data-uploader]

+    ensure => present
+    user   => fundraising-data-uploader

File[/etc/sudoers.d/deployment]

Content differences:

--- /etc/sudoers.d/deployment.orig
+++ /etc/sudoers.d/deployment
@@ -1,6 +1,6 @@
 # This file is managed by Puppet!
 
-%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL
+%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL
 %deployment ALL = NOPASSWD: /usr/sbin/apache2ctl
 %deployment ALL = NOPASSWD: /etc/init.d/apache2
 %deployment ALL = NOPASSWD: /usr/bin/renice

Exec[deployment_ensure_members]

Parameters differences:

--- Exec[deployment_ensure_members].orig
+++ Exec[deployment_ensure_members]

@@
-    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]']
+    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]', 'User[fundraising-data-uploader]']
@@
-    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig
+    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader
@@
-    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig$
+    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader$

Sudo::Group[deployment]

Parameters differences:

--- Sudo::Group[deployment].orig
+++ Sudo::Group[deployment]

@@
-    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']
+    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']

File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]

Parameters differences:

--- File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp].orig
+++ File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]

+    group   => root
+    tag     => ferm
+    require => File[/etc/ferm/conf.d]
+    ensure  => present
+    mode    => 0400
+    notify  => Service[ferm]
+    owner   => root

Content differences:

--- /etc/ferm/conf.d/10_fundraising_data_uploader_sftp.orig
+++ /etc/ferm/conf.d/10_fundraising_data_uploader_sftp
@@ -0,0 +1,6 @@
+# Autogenerated by puppet. DO NOT EDIT BY HAND!
+#
+# sftp access for FR Tech Donor Export role user
+&R_SERVICE(tcp, 22, $FRACK_NETWORKS);
+
+

User[fundraising-data-uploader]

Parameters differences:

--- User[fundraising-data-uploader].orig
+++ User[fundraising-data-uploader]

+    ensure     => present
+    home       => /var/lib/fundraising-data-uploader
+    system     => True
+    uid        => 935
+    managehome => True
+    comment    => Receives data uploads from fr-tech for consumption by MediaWiki cron jobs
+    gid        => fundraising-data-uploader

File[/etc/ssh/userkeys/fundraising-data-uploader]

Parameters differences:

--- File[/etc/ssh/userkeys/fundraising-data-uploader].orig
+++ File[/etc/ssh/userkeys/fundraising-data-uploader]

+    group     => root
+    show_diff => False
+    ensure    => file
+    force     => True
+    mode      => 0444
+    owner     => root

Content differences:

--- /etc/ssh/userkeys/fundraising-data-uploader.orig
+++ /etc/ssh/userkeys/fundraising-data-uploader
@@ -0,0 +1 @@
+command="internal-sftp" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>

Group[fundraising-data-uploader]

Parameters differences:

--- Group[fundraising-data-uploader].orig
+++ Group[fundraising-data-uploader]

+    ensure => present
+    system => True
+    gid    => 935

Compilation results for deploy1003.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources modified

Relevant files