Compilation results for deploy1003.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	16482
Resources added:	19
Resources removed:	0
Resources modified:	18
Change percentage:	0.22%

Resources only in the new catalog

Systemd::Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
Class[Profile::Kubernetes::Deployment_server::Monitoring]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]
File[/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer)]
Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]
Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
Prometheus::Node_textfile[prometheus-check-k8s-opensearch-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]
Systemd::Timer[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
File[/usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Resources modified

Systemd::Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Systemd::Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Systemd::Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    service_params           => {}
+    ensure                   => present
+    unit_type                => timer
+    migration_task           => T407130
+    monitoring_contact_group => admins
+    monitoring_critical      => False
+    monitoring_enabled       => False
+    override                 => False
+    restart                  => False
+    require                  => Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]

Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]

Parameters differences:

--- Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer].orig
+++ Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]

+    provider => systemd
+    ensure   => running
+    enable   => True

Logrotate::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Logrotate::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Logrotate::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    ensure => present

Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]

Parameters differences:

--- Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer].orig
+++ Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]

+    override_filename => puppet-override.conf
+    ensure            => present
+    override          => False
+    require           => ['Class[Systemd]']
+    restart           => False
+    unit              => prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer

File[/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- File[/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ File[/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    backup => False
+    owner  => root
+    group  => root
+    mode   => 0755
+    ensure => directory
+    force  => True

Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    monitoring_contact_groups => admins
+    success_exit_status       => []
+    logfile_group             => root
+    ensure                    => present
+    user                      => root
+    logfile_perms             => all
+    send_mail_to              => root@deploy1003.eqiad.wmnet
+    description               => Systemd timer to gather node metrics for prometheus-check-k8s-opensearch-certificate-expiry
+    environment               => {}
+    send_mail_only_on_error   => True
+    interval                  => {'start': 'OnCalendar', 'interval': '*:00:00'}
+    command                   => /usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry --outfile /var/lib/prometheus/node.d/opensearch-certificate-expiry.prom
+    syslog_match_startswith   => True
+    private_tmp               => False
+    fixed_random_delay        => False
+    logfile_basedir           => /var/log
+    logging_enabled           => True
+    logfile_name              => syslog.log
+    ignore_errors             => False
+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+    send_mail                 => False
+    syslog_force_stop         => True
+    monitoring_enabled        => False

File[/usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- File[/usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ File[/usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry]

+    owner  => root
+    source => puppet:///modules/profile/kubernetes/deployment_server/check_k8s_opensearch_certificate_expiry.py
+    group  => root
+    mode   => 0555
+    ensure => present

Rsyslog::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Rsyslog::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Rsyslog::Conf[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    priority => 40
+    ensure   => present
+    mode     => 0444
+    require  => File[/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]

Parameters differences:

--- Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service].orig
+++ Systemd::Unit[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]

+    override_filename => puppet-override.conf
+    ensure            => present
+    override          => False
+    require           => ['Class[Systemd]']
+    restart           => False
+    unit              => prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service

Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service)]

Parameters differences:

--- Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service)].orig
+++ Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service)]

+    refreshonly => True
+    command     => /bin/systemctl daemon-reload

Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer)].orig
+++ Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer)]

+    refreshonly => True
+    before      => ['Service[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]']
+    command     => /bin/systemctl daemon-reload

Prometheus::Node_textfile[prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Prometheus::Node_textfile[prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Prometheus::Node_textfile[prometheus-check-k8s-opensearch-certificate-expiry]

+    interval       => *:00:00
+    extra_packages => ['python3-prometheus-client']
+    environment    => {}
+    run_cmd        => /usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry --outfile /var/lib/prometheus/node.d/opensearch-certificate-expiry.prom
+    ensure         => present
+    user           => root

File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]

Parameters differences:

--- File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service].orig
+++ File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service]

+    owner  => root
+    notify => Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service)]
+    group  => root
+    mode   => 0444
+    ensure => present

Content differences:

--- /lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service.orig
+++ /lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Systemd timer to gather node metrics for prometheus-check-k8s-opensearch-certificate-expiry
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=root
+ExecStart=/usr/local/bin/prometheus-check-k8s-opensearch-certificate-expiry --outfile /var/lib/prometheus/node.d/opensearch-certificate-expiry.prom

File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.conf]

Parameters differences:

--- File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.conf].orig
+++ File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.conf]

+    owner  => root
+    notify => Service[rsyslog]
+    group  => root
+    mode   => 0444
+    ensure => present

Content differences:

--- /etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.conf.orig
+++ /etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry" then {
+    action(
+        type="omfile" file="/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry/syslog.log"
+        fileOwner="root" fileGroup="root"
+        fileCreateMode="0644"
+    )
+    & stop
+}

File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0444

Content differences:

--- /etc/logrotate.d/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.orig
+++ /etc/logrotate.d/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry
@@ -0,0 +1,12 @@
+# logrotate(8) config for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry
+
+/var/log/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry/*.log {
+    daily
+    copytruncate
+    missingok
+    compress
+    delaycompress
+    notifempty
+    rotate 15
+    size 256M
+}

Systemd::Syslog[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Systemd::Syslog[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Systemd::Syslog[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    owner                  => root
+    base_dir               => /var/log
+    force_stop             => True
+    ensure                 => present
+    readable_by            => all
+    group                  => root
+    log_filename           => syslog.log
+    programname_comparison => startswith

File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]

Parameters differences:

--- File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer].orig
+++ File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer]

+    owner  => root
+    notify => Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer)]
+    group  => root
+    mode   => 0444
+    ensure => present

Content differences:

--- /lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer.orig
+++ /lib/systemd/system/prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service
+
+[Timer]
+Unit=prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=*:00:00
+RandomizedDelaySec=0
+
+[Install]
+WantedBy=multi-user.target

Systemd::Timer[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

Parameters differences:

--- Systemd::Timer[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry].orig
+++ Systemd::Timer[prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry]

+    accuracy           => 15sec
+    splay              => 0
+    unit_name          => prometheus-node-textfile-prometheus-check-k8s-opensearch-certificate-expiry.service
+    timer_intervals    => [{'start': 'OnCalendar', 'interval': '*:00:00'}]
+    fixed_random_delay => False
+    ensure             => present

Compilation results for deploy1003.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources modified

Relevant files