{"host": "deploy1003.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 16481, "only_in_self": [], "only_in_other": ["Ferm::Service[fundraising_data_uploader_sftp]", "File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]", "File[/etc/ssh/userkeys/fundraising-data-uploader]", "Firewall::Service[fundraising-data-uploader sftp]", "Group[fundraising-data-uploader]", "Ssh::Userkey[fundraising-data-uploader]", "User[fundraising-data-uploader]"], "resource_diffs": [{"resource": "Firewall::Service[fundraising-data-uploader sftp]", "parameters": "--- Firewall::Service[fundraising-data-uploader sftp].orig\n+++ Firewall::Service[fundraising-data-uploader sftp]\n\n+    prio     => 10\n+    notrack  => False\n+    ensure   => present\n+    src_sets => ['FRACK_NETWORKS']\n+    port     => 22\n+    proto    => tcp\n+    desc     => sftp access for FR Tech Donor Export role user\n"}, {"resource": "Admin::Group[deployment]", "parameters": "--- Admin::Group[deployment].orig\n+++ Admin::Group[deployment]\n\n@@\n-    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n+    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n"}, {"resource": "Ferm::Service[fundraising_data_uploader_sftp]", "parameters": "--- Ferm::Service[fundraising_data_uploader_sftp].orig\n+++ Ferm::Service[fundraising_data_uploader_sftp]\n\n+    prio     => 10\n+    notrack  => False\n+    ensure   => present\n+    src_sets => ['FRACK_NETWORKS']\n+    port     => 22\n+    proto    => tcp\n+    desc     => sftp access for FR Tech Donor Export role user\n"}, {"resource": "Class[Profile::Mediawiki::System_users]", "parameters": "--- Class[Profile::Mediawiki::System_users].orig\n+++ Class[Profile::Mediawiki::System_users]\n\n+    fundraising_data_uploader_user_ssh_key => ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>\n+    fundraising_data_uploader_user         => fundraising-data-uploader\n"}, {"resource": "Group[spiderpig]", "parameters": "--- Group[spiderpig].orig\n+++ Group[spiderpig]\n\n+    ensure => present\n"}, {"resource": "Ssh::Userkey[fundraising-data-uploader]", "parameters": "--- Ssh::Userkey[fundraising-data-uploader].orig\n+++ Ssh::Userkey[fundraising-data-uploader]\n\n+    ensure => present\n+    user   => fundraising-data-uploader\n"}, {"resource": "File[/etc/sudoers.d/deployment]", "content": "--- /etc/sudoers.d/deployment.orig\n+++ /etc/sudoers.d/deployment\n@@ -1,6 +1,6 @@\n # This file is managed by Puppet!\n \n-%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL\n+%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL\n %deployment ALL = NOPASSWD: /usr/sbin/apache2ctl\n %deployment ALL = NOPASSWD: /etc/init.d/apache2\n %deployment ALL = NOPASSWD: /usr/bin/renice"}, {"resource": "Exec[deployment_ensure_members]", "parameters": "--- Exec[deployment_ensure_members].orig\n+++ Exec[deployment_ensure_members]\n\n@@\n-    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]']\n+    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]', 'User[fundraising-data-uploader]']\n@@\n-    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig\n+    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader\n@@\n-    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig$\n+    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader$\n"}, {"resource": "Sudo::Group[deployment]", "parameters": "--- Sudo::Group[deployment].orig\n+++ Sudo::Group[deployment]\n\n@@\n-    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n+    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n"}, {"resource": "File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]", "content": "--- /etc/ferm/conf.d/10_fundraising_data_uploader_sftp.orig\n+++ /etc/ferm/conf.d/10_fundraising_data_uploader_sftp\n@@ -0,0 +1,6 @@\n+# Autogenerated by puppet. DO NOT EDIT BY HAND!\n+#\n+# sftp access for FR Tech Donor Export role user\n+&R_SERVICE(tcp, 22, $FRACK_NETWORKS);\n+\n+", "parameters": "--- File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp].orig\n+++ File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]\n\n+    group   => root\n+    tag     => ferm\n+    require => File[/etc/ferm/conf.d]\n+    ensure  => present\n+    mode    => 0400\n+    notify  => Service[ferm]\n+    owner   => root\n"}, {"resource": "User[fundraising-data-uploader]", "parameters": "--- User[fundraising-data-uploader].orig\n+++ User[fundraising-data-uploader]\n\n+    ensure     => present\n+    home       => /var/lib/fundraising-data-uploader\n+    system     => True\n+    uid        => 935\n+    managehome => True\n+    comment    => Receives data uploads from fr-tech for consumption by MediaWiki cron jobs\n+    gid        => fundraising-data-uploader\n"}, {"resource": "File[/etc/ssh/userkeys/fundraising-data-uploader]", "content": "--- /etc/ssh/userkeys/fundraising-data-uploader.orig\n+++ /etc/ssh/userkeys/fundraising-data-uploader\n@@ -0,0 +1 @@\n+command=\"internal-sftp\" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>", "parameters": "--- File[/etc/ssh/userkeys/fundraising-data-uploader].orig\n+++ File[/etc/ssh/userkeys/fundraising-data-uploader]\n\n+    group     => root\n+    show_diff => False\n+    ensure    => file\n+    force     => True\n+    mode      => 0444\n+    owner     => root\n"}, {"resource": "Group[fundraising-data-uploader]", "parameters": "--- Group[fundraising-data-uploader].orig\n+++ Group[fundraising-data-uploader]\n\n+    ensure => present\n+    system => True\n+    gid    => 935\n"}], "perc_changed": "0.12%"}, "core": {"total": 16481, "only_in_self": [], "only_in_other": ["File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]", "File[/etc/ssh/userkeys/fundraising-data-uploader]", "Group[fundraising-data-uploader]", "User[fundraising-data-uploader]"], "resource_diffs": [{"resource": "File[/etc/sudoers.d/deployment]", "content": "--- /etc/sudoers.d/deployment.orig\n+++ /etc/sudoers.d/deployment\n@@ -1,6 +1,6 @@\n # This file is managed by Puppet!\n \n-%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL\n+%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL\n %deployment ALL = NOPASSWD: /usr/sbin/apache2ctl\n %deployment ALL = NOPASSWD: /etc/init.d/apache2\n %deployment ALL = NOPASSWD: /usr/bin/renice"}, {"resource": "Exec[deployment_ensure_members]", "parameters": "--- Exec[deployment_ensure_members].orig\n+++ Exec[deployment_ensure_members]\n\n@@\n-    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]']\n+    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]', 'User[fundraising-data-uploader]']\n@@\n-    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig\n+    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader\n@@\n-    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig$\n+    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader$\n"}, {"resource": "Group[spiderpig]", "parameters": "--- Group[spiderpig].orig\n+++ Group[spiderpig]\n\n+    ensure => present\n"}], "perc_changed": "0.04%"}, "main": {"total": 16481, "only_in_self": [], "only_in_other": ["Ferm::Service[fundraising_data_uploader_sftp]", "File[/etc/ferm/conf.d/10_fundraising_data_uploader_sftp]", "File[/etc/ssh/userkeys/fundraising-data-uploader]", "Firewall::Service[fundraising-data-uploader sftp]", "Group[fundraising-data-uploader]", "Ssh::Userkey[fundraising-data-uploader]", "User[fundraising-data-uploader]"], "resource_diffs": [{"resource": "File[/etc/sudoers.d/deployment]", "content": "--- /etc/sudoers.d/deployment.orig\n+++ /etc/sudoers.d/deployment\n@@ -1,6 +1,6 @@\n # This file is managed by Puppet!\n \n-%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL\n+%deployment ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL\n %deployment ALL = NOPASSWD: /usr/sbin/apache2ctl\n %deployment ALL = NOPASSWD: /etc/init.d/apache2\n %deployment ALL = NOPASSWD: /usr/bin/renice"}, {"resource": "Exec[deployment_ensure_members]", "parameters": "--- Exec[deployment_ensure_members].orig\n+++ Exec[deployment_ensure_members]\n\n@@\n-    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]']\n+    require => ['User[filippo]', 'User[bblack]', 'User[andrew]', 'User[oblivian]', 'User[mark]', 'User[ariel]', 'User[robh]', 'User[tstarling]', 'User[ori]', 'User[jmm]', 'User[jynus]', 'User[elukey]', 'User[gehel]', 'User[volans]', 'User[marostegui]', 'User[ayounsi]', 'User[herron]', 'User[vgutierrez]', 'User[jiji]', 'User[cwhite]', 'User[cdanis]', 'User[dzahn]', 'User[sukhe]', 'User[pt1979]', 'User[rzl]', 'User[hnowlan]', 'User[jayme]', 'User[ryankemper]', 'User[klausman]', 'User[dcaro]', 'User[legoktm]', 'User[cmooney]', 'User[jelto]', 'User[btullis]', 'User[mvernon]', 'User[ladsgroup]', 'User[aokoth]', 'User[jhathaway]', 'User[bking]', 'User[denisse]', 'User[slyngshede]', 'User[brett]', 'User[fnegri]', 'User[cgoubert]', 'User[eevans]', 'User[kamila]', 'User[fabfur]', 'User[taavi]', 'User[arnaudb]', 'User[brouberol]', 'User[swfrench]', 'User[cdobbins]', 'User[tappof]', 'User[jasmine]', 'User[fceratto]', 'User[dpogorzelski]', 'User[blake]', 'User[hashar]', 'User[thcipriani]', 'User[brennen]', 'User[dancy]', 'User[jhuneidi]', 'User[dduvall]', 'User[jnuche]', 'User[aklapper]', 'User[bd808]', 'User[bd808]', 'User[bvibber]', 'User[cscott]', 'User[ebernhardson]', 'User[gjg]', 'User[hoo]', 'User[trueg]', 'User[kartik]', 'User[krinkle]', 'User[milimetric]', 'User[mlitn]', 'User[nikerabbit]', 'User[reedy]', 'User[ssastry]', 'User[phedenskog]', 'User[tgr]', 'User[ejegg]', 'User[catrope]', 'User[joal]', 'User[rsilvola]', 'User[mforns]', 'User[dcausse]', 'User[addshore]', 'User[niharika29]', 'User[pmiazga]', 'User[jdrewniak]', 'User[sbisson]', 'User[jforrester]', 'User[mbsantos]', 'User[aaron]', 'User[sbassett]', 'User[tarrow]', 'User[lucaswerkmeister-wmde]', 'User[wmde-fisch]', 'User[mvolz]', 'User[cparle]', 'User[urbanecm]', 'User[awight]', 'User[jakob]', 'User[andrew-wmde]', 'User[mstyles]', 'User[phuedx]', 'User[samwilson]', 'User[dmaza]', 'User[tchanders]', 'User[wikigit]', 'User[arlolra]', 'User[chrisalbon]', 'User[annet]', 'User[jgiannelos]', 'User[kharlan]', 'User[stran]', 'User[sihe]', 'User[hmonroy]', 'User[derick]', 'User[egardner]', 'User[cjming]', 'User[saisuman]', 'User[mmartorana]', 'User[taavi]', 'User[bwang]', 'User[aikochou]', 'User[kevinbazira]', 'User[samtar]', 'User[pfischer]', 'User[kindrobot]', 'User[mfossati]', 'User[isaranto]', 'User[zabe]', 'User[sgimeno]', 'User[apine]', 'User[dmartin]', 'User[gengh]', 'User[fab]', 'User[dr0ptp4kt]', 'User[dani]', 'User[aqu]', 'User[sfaci]', 'User[damilare]', 'User[dreamyjazz]', 'User[wfan219]', 'User[tjones]', 'User[jsn]', 'User[ecarg]', 'User[amastilovic]', 'User[ebysans]', 'User[daphnesmit]', 'User[toyofuku]', 'User[ihurbain]', 'User[zoe]', 'User[bpirkle]', 'User[daniel]', 'User[gmodena]', 'User[tchin]', 'User[xcollazo]', 'User[sg912]', 'User[aude]', 'User[dbrant]', 'User[ammarpad]', 'User[gkyziridis]', 'User[kemayo]', 'User[arthurtaylor]', 'User[ozge]', 'User[bwojtowicz]', 'User[esanders]', 'User[jdlrobson]', 'User[kgraessle]', 'User[santhosh]', 'User[cmelo]', 'User[musikanimal]', 'User[mszwarc]', 'User[ebomani]', 'User[javiermonton]', 'User[a-pizzata]', 'User[seanleong-wmde]', 'User[itamar]', 'User[volker-e]', 'User[otto]', 'User[bearloga]', 'User[akhatun]', 'User[kareid]', 'User[pham]', 'User[alexsanford]', 'User[emc-wmf]', 'User[suecarmol]', 'User[mpostoronca]', 'User[mwbuilder]', 'User[mwpresync]', 'User[spiderpig]', 'User[fundraising-data-uploader]']\n@@\n-    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig\n+    command => /usr/bin/gpasswd deployment -M filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader\n@@\n-    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig$\n+    unless  => getent group deployment | xargs test -z || getent group deployment | cut -d ':' -f 4 | grep -E ^filippo,bblack,andrew,oblivian,mark,ariel,robh,tstarling,ori,jmm,jynus,elukey,gehel,volans,marostegui,ayounsi,herron,vgutierrez,jiji,cwhite,cdanis,dzahn,sukhe,pt1979,rzl,hnowlan,jayme,ryankemper,klausman,dcaro,legoktm,cmooney,jelto,btullis,mvernon,ladsgroup,aokoth,jhathaway,bking,denisse,slyngshede,brett,fnegri,cgoubert,eevans,kamila,fabfur,taavi,arnaudb,brouberol,swfrench,cdobbins,tappof,jasmine,fceratto,dpogorzelski,blake,hashar,thcipriani,brennen,dancy,jhuneidi,dduvall,jnuche,aklapper,bd808,bd808,bvibber,cscott,ebernhardson,gjg,hoo,trueg,kartik,krinkle,milimetric,mlitn,nikerabbit,reedy,ssastry,phedenskog,tgr,ejegg,catrope,joal,rsilvola,mforns,dcausse,addshore,niharika29,pmiazga,jdrewniak,sbisson,jforrester,mbsantos,aaron,sbassett,tarrow,lucaswerkmeister-wmde,wmde-fisch,mvolz,cparle,urbanecm,awight,jakob,andrew-wmde,mstyles,phuedx,samwilson,dmaza,tchanders,wikigit,arlolra,chrisalbon,annet,jgiannelos,kharlan,stran,sihe,hmonroy,derick,egardner,cjming,saisuman,mmartorana,taavi,bwang,aikochou,kevinbazira,samtar,pfischer,kindrobot,mfossati,isaranto,zabe,sgimeno,apine,dmartin,gengh,fab,dr0ptp4kt,dani,aqu,sfaci,damilare,dreamyjazz,wfan219,tjones,jsn,ecarg,amastilovic,ebysans,daphnesmit,toyofuku,ihurbain,zoe,bpirkle,daniel,gmodena,tchin,xcollazo,sg912,aude,dbrant,ammarpad,gkyziridis,kemayo,arthurtaylor,ozge,bwojtowicz,esanders,jdlrobson,kgraessle,santhosh,cmelo,musikanimal,mszwarc,ebomani,javiermonton,a-pizzata,seanleong-wmde,itamar,volker-e,otto,bearloga,akhatun,kareid,pham,alexsanford,emc-wmf,suecarmol,mpostoronca,mwbuilder,mwpresync,spiderpig,fundraising-data-uploader$\n"}, {"resource": "Sudo::Group[deployment]", "parameters": "--- Sudo::Group[deployment].orig\n+++ Sudo::Group[deployment]\n\n@@\n-    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n+    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n"}, {"resource": "Admin::Group[deployment]", "parameters": "--- Admin::Group[deployment].orig\n+++ Admin::Group[deployment]\n\n@@\n-    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n+    privileges => ['ALL = (www-data,mwdeploy,scap,mwpresync,spiderpig,fundraising-data-uploader) NOPASSWD: ALL', 'ALL = NOPASSWD: /usr/sbin/apache2ctl', 'ALL = NOPASSWD: /etc/init.d/apache2', 'ALL = NOPASSWD: /usr/bin/renice', 'ALL = NOPASSWD: /usr/local/sbin/fix-staging-perms', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-jobrunner -ef', 'ALL = NOPASSWD: /bin/systemctl start spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl stop spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl restart spiderpig-apiserver', 'ALL = NOPASSWD: /bin/systemctl status spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver', 'ALL = NOPASSWD: /bin/journalctl -u spiderpig-apiserver -ef', 'ALL = NOPASSWD: /bin/systemctl restart mw-experimental-mediawiki-image-update.service', 'ALL = NOPASSWD: /bin/bash -c /usr/local/sbin/restart-php7.4-fpm', 'ALL = NOPASSWD: /usr/local/sbin/restart-php-fpm-all']\n"}, {"resource": "Class[Profile::Mediawiki::System_users]", "parameters": "--- Class[Profile::Mediawiki::System_users].orig\n+++ Class[Profile::Mediawiki::System_users]\n\n+    fundraising_data_uploader_user_ssh_key => ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>\n+    fundraising_data_uploader_user         => fundraising-data-uploader\n"}, {"resource": "Group[spiderpig]", "parameters": "--- Group[spiderpig].orig\n+++ Group[spiderpig]\n\n+    ensure => present\n"}], "perc_changed": "0.08%"}}}