--- Class[Adduser].orig
+++ Class[Adduser]
@@
- before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[nginx-full]', 'Package[nginx-common]', 'Package[nfs-kernel-server]', 'Package[nfs-common]', 'Package[rpcbind]', 'Package[rsync]', 'Package[hadoop-client]', 'Package[libhdfs0]', 'Package[liblog4j-extras1.2-java]', 'Package[hadoop-hdfs-fuse]', 'Package[krb5-user]', 'Package[kstart]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[git-lfs]', 'Package[python3-venv]', 'Package[analytics/hdfs-tools/deploy]', 'Package[openjdk-8-jdk]']
+ before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[nginx-full]', 'Package[nginx-common]', 'Package[nfs-kernel-server]', 'Package[nfs-common]', 'Package[rpcbind]', 'Package[rsync]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-conftool]', 'Package[python3-poolcounter]', 'Package[tcp-mss-clamper]', 'Package[hadoop-client]', 'Package[libhdfs0]', 'Package[liblog4j-extras1.2-java]', 'Package[hadoop-hdfs-fuse]', 'Package[krb5-user]', 'Package[kstart]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[git-lfs]', 'Package[python3-venv]', 'Package[analytics/hdfs-tools/deploy]', 'Package[openjdk-8-jdk]']
Augeas[ipip0_manual]
- Parameters differences:
--- Augeas[ipip0_manual].orig
+++ Augeas[ipip0_manual]
+ changes => ["set auto[./1 = 'ipip0']/1 'ipip0'", "set iface[. = 'ipip0'] 'ipip0'", "set iface[. = 'ipip0']/family 'inet'", "set iface[. = 'ipip0']/method 'manual'"]
+ context => /files/etc/network/interfaces
+ incl => /etc/network/interfaces
+ lens => Interfaces.lns
- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status].orig
+++ Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
+ monitoring_enabled => False
+ restart => False
+ override => False
+ service_params => {}
+ unit_type => timer
+ migration_task => T407130
+ monitoring_critical => False
+ ensure => absent
+ require => Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
+ monitoring_contact_group => admins
- Service[prometheus_lvs_realserver_mss.timer]
- Parameters differences:
--- Service[prometheus_lvs_realserver_mss.timer].orig
+++ Service[prometheus_lvs_realserver_mss.timer]
+ enable => True
+ ensure => running
+ provider => systemd
- File[/etc/conftool/local_services.yaml]
- Parameters differences:
--- File[/etc/conftool/local_services.yaml].orig
+++ File[/etc/conftool/local_services.yaml]
+ group => root
+ owner => root
+ ensure => present
- Content differences:
--- /etc/conftool/local_services.yaml.orig
+++ /etc/conftool/local_services.yaml
@@ -0,0 +1,13 @@
+---
+dumps-https:
+ cluster: dumps
+ service: dumps-https
+ servers:
+ - pybal-high-traffic2-eqiad.wikimedia.org
+ port: 443
+dumps-rsync:
+ cluster: dumps
+ service: dumps-rsync
+ servers:
+ - pybal-high-traffic2-eqiad.wikimedia.org
+ port: 873
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Parameters differences:
--- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service].orig
+++ File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
+ mode => 0444
+ group => root
+ owner => root
+ ensure => absent
+ notify => Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
- Content differences:
--- /lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service.orig
+++ /lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=execution of nrpe2nodexp for the check_check_tcp-mss-clamper_status command.
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=nagios
+
+Group=prometheus-node-exporter
+SyslogIdentifier=nrpe2nodexp-check_tcp-mss-clamper_status
+ExecStart=-/usr/local/bin/nrpe2nodexp --alert-rule-hash "295d6d5dd0a784bb9ba1d5983fd1894f" --timeout 10 --check-command "check_check_tcp-mss-clamper_status"
- Service[prometheus_ferm_mss.timer]
- Parameters differences:
--- Service[prometheus_ferm_mss.timer].orig
+++ Service[prometheus_ferm_mss.timer]
+ enable => True
+ ensure => running
+ provider => systemd
- Systemd::Service[prometheus_ferm_mss]
- Parameters differences:
--- Systemd::Service[prometheus_ferm_mss].orig
+++ Systemd::Service[prometheus_ferm_mss]
+ monitoring_enabled => False
+ restart => False
+ override => False
+ service_params => {}
+ unit_type => timer
+ migration_task => T407130
+ monitoring_critical => False
+ ensure => present
+ require => Systemd::Unit[prometheus_ferm_mss.service]
+ monitoring_contact_group => admins
- Interface::Ip[ipip_ipv4 ipv4]
- Parameters differences:
--- Interface::Ip[ipip_ipv4 ipv4].orig
+++ Interface::Ip[ipip_ipv4 ipv4]
+ address => 127.0.0.42
+ prefixlen => 32
+ ensure => present
+ interface => ipip0
+ require => Augeas[ipip0_set_up]
- Augeas[ipip60_manual]
- Parameters differences:
--- Augeas[ipip60_manual].orig
+++ Augeas[ipip60_manual]
+ changes => ["set auto[./1 = 'ipip60']/1 'ipip60'", "set iface[. = 'ipip60'] 'ipip60'", "set iface[. = 'ipip60']/family 'inet6'", "set iface[. = 'ipip60']/method 'manual'"]
+ context => /files/etc/network/interfaces
+ incl => /etc/network/interfaces
+ lens => Interfaces.lns
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Parameters differences:
--- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)].orig
+++ Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
+ command => /bin/systemctl daemon-reload
+ refreshonly => True
- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf].orig
+++ File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
+ mode => 0444
+ group => root
+ owner => root
+ ensure => present
+ notify => Service[rsyslog]
- Content differences:
--- /etc/rsyslog.d/40-prometheus-ferm-mss.conf.orig
+++ /etc/rsyslog.d/40-prometheus-ferm-mss.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "prometheus_ferm_mss" then {
+ action(
+ type="omfile" file="/var/log/prometheus_ferm_mss/syslog.log"
+ fileOwner="root" fileGroup="root"
+ fileCreateMode="0644"
+ )
+ & stop
+}
- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Rsyslog::Conf[prometheus_lvs_realserver_mss].orig
+++ Rsyslog::Conf[prometheus_lvs_realserver_mss]
+ priority => 40
+ mode => 0444
+ ensure => present
+ require => File[/var/log/prometheus_lvs_realserver_mss]
- Interface::Manual[ipip_ipv4]
- Parameters differences:
--- Interface::Manual[ipip_ipv4].orig
+++ Interface::Manual[ipip_ipv4]
+ family => inet
+ ensure => present
+ interface => ipip0
+ hotplug => False
- Class[Base::Sysctl]
- Parameters differences:
--- Class[Base::Sysctl].orig
+++ Class[Base::Sysctl]
@@
- all_rp_filter => 1
+ all_rp_filter => 0
@@
- default_rp_filter => 1
+ default_rp_filter => 0
- Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
- Parameters differences:
--- Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)].orig
+++ Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
+ command => /bin/systemctl daemon-reload
+ refreshonly => True
- Class[Lvs::Realserver]
- Parameters differences:
--- Class[Lvs::Realserver].orig
+++ Class[Lvs::Realserver]
+ realserver_ips => ['208.80.154.242', '2620:0:861:ed1a::3:242']
- File[/usr/local/bin/depool-nginx]
- Parameters differences:
--- File[/usr/local/bin/depool-nginx].orig
+++ File[/usr/local/bin/depool-nginx]
+ mode => 0555
+ group => root
+ owner => root
+ ensure => present
+ notify => ['Service[nginx]']
- Content differences:
--- /usr/local/bin/depool-nginx.orig
+++ /usr/local/bin/depool-nginx
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools dumps-https --depool --retries 10 --wait 5
- File[/usr/local/bin/pool]
- Parameters differences:
--- File[/usr/local/bin/pool].orig
+++ File[/usr/local/bin/pool]
+ mode => 0555
+ source => puppet:///modules/conftool/conftool-simple-command.sh
+ group => root
+ owner => root
+ ensure => present
+ notify => ['Service[nginx]']
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service].orig
+++ Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
+ override_filename => puppet-override.conf
+ unit => nrpe2nodexp-check_tcp-mss-clamper_status.service
+ override => False
+ restart => False
+ ensure => absent
+ require => ['Class[Systemd]']
- Class[Poolcounter::Client]
- Parameters differences:
--- Class[Poolcounter::Client].orig
+++ Class[Poolcounter::Client]
+ ensure => present
+ backends => [{'label': 'pc1', 'fqdn': 'poolcounter1006.eqiad.wmnet'}, {'label': 'pc2', 'fqdn': 'poolcounter1007.eqiad.wmnet'}]
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- Parameters differences:
--- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg].orig
+++ File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
+ mode => 0444
+ tag => nrpe::check
+ group => root
+ owner => root
+ ensure => absent
+ require => Package[nagios-nrpe-server]
+ notify => Service[nagios-nrpe-server]
- Content differences:
--- /etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg.orig
+++ /etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg
@@ -0,0 +1,2 @@
+# File generated by puppet. DO NOT edit by hand
+command[check_check_tcp-mss-clamper_status]=/usr/local/lib/nagios/plugins/check_systemd_unit_status tcp-mss-clamper
- Ferm::Rule[clamp-mss-ipv4]
- Parameters differences:
--- Ferm::Rule[clamp-mss-ipv4].orig
+++ Ferm::Rule[clamp-mss-ipv4]
+ desc =>
+ table => filter
+ chain => OUTPUT
+ rule => outerface (enp94s0f0np0 lo) saddr @ipfilter((208.80.154.242 2620:0:861:ed1a::3:242])) proto tcp sport (443 873) tcp-flags (SYN) SYN TCPMSS set-mss 1440;
+ ensure => present
+ domain => (ip)
+ prio => 10
- Systemd::Monitor[tcp-mss-clamper]
- Parameters differences:
--- Systemd::Monitor[tcp-mss-clamper].orig
+++ Systemd::Monitor[tcp-mss-clamper]
+ critical => False
+ migration_task => T407130
+ notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments
+ check_interval => 10
+ contact_group => admins
+ ensure => absent
+ retries => 2
- File[/usr/local/bin/depool]
- Parameters differences:
--- File[/usr/local/bin/depool].orig
+++ File[/usr/local/bin/depool]
+ mode => 0555
+ source => puppet:///modules/conftool/conftool-simple-command.sh
+ group => root
+ owner => root
+ ensure => present
+ notify => ['Service[nginx]']
- Augeas[ipip0_127.0.0.42/32]
- Parameters differences:
--- Augeas[ipip0_127.0.0.42/32].orig
+++ Augeas[ipip0_127.0.0.42/32]
+ changes => set up[last()+1] 'ip addr add 127.0.0.42/32 dev ipip0'
+ context => /files/etc/network/interfaces/*[. = 'ipip0' and ./family = 'inet']
+ lens => Interfaces.lns
+ onlyif => match up[. = 'ip addr add 127.0.0.42/32 dev ipip0'] size == 0
+ incl => /etc/network/interfaces
- Package[tcp-mss-clamper]
- Parameters differences:
--- Package[tcp-mss-clamper].orig
+++ Package[tcp-mss-clamper]
+ ensure => absent
+ provider => apt
- Service[tcp-mss-clamper]
- Parameters differences:
--- Service[tcp-mss-clamper].orig
+++ Service[tcp-mss-clamper]
+ enable => False
+ ensure => stopped
+ before => ['Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]']
- Etcd::Client::Config[/etc/etcd/etcdrc]
- Parameters differences:
--- Etcd::Client::Config[/etc/etcd/etcdrc].orig
+++ Etcd::Client::Config[/etc/etcd/etcdrc]
+ world_readable => True
+ group => root
+ owner => root
+ ensure => present
+ settings => {'host': None, 'port': None, 'srv_domain': 'conftool.eqiad.wmnet', 'ca_cert': '/etc/ssl/certs/wmf-ca-certificates.crt', 'protocol': 'https', 'allow_reconnect': True}
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer].orig
+++ Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
+ override_filename => puppet-override.conf
+ restart => False
+ ensure => absent
+ override => False
+ unit => nrpe2nodexp-check_tcp-mss-clamper_status.timer
+ require => ['Class[Systemd]']
- Systemd::Service[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Systemd::Service[prometheus_lvs_realserver_mss].orig
+++ Systemd::Service[prometheus_lvs_realserver_mss]
+ monitoring_enabled => False
+ restart => False
+ override => False
+ service_params => {}
+ unit_type => timer
+ migration_task => T407130
+ monitoring_critical => False
+ ensure => present
+ require => Systemd::Unit[prometheus_lvs_realserver_mss.service]
+ monitoring_contact_group => admins
- File[/etc/etcd]
- Parameters differences:
--- File[/etc/etcd].orig
+++ File[/etc/etcd]
+ mode => 0755
+ owner => root
+ ensure => directory
+ group => root
- Exec[ip link set up dev ipip0]
- Parameters differences:
--- Exec[ip link set up dev ipip0].orig
+++ Exec[ip link set up dev ipip0]
+ returns => [0, 2]
+ path => /bin:/usr/bin
+ unless => ip link show ipip0 | grep -q UP
- Exec[ip addr add 127.0.0.42/32 dev ipip0]
- Parameters differences:
--- Exec[ip addr add 127.0.0.42/32 dev ipip0].orig
+++ Exec[ip addr add 127.0.0.42/32 dev ipip0]
+ returns => [0, 2]
+ path => /bin:/usr/bin
+ unless => ip address show ipip0 | grep -q 127.0.0.42/32
- Monitoring::Service[check_tcp-mss-clamper_status]
- Parameters differences:
--- Monitoring::Service[check_tcp-mss-clamper_status].orig
+++ Monitoring::Service[check_tcp-mss-clamper_status]
+ critical => False
+ retry_interval => 1
+ config_dir => /etc/nagios
+ description => Check unit status of tcp-mss-clamper
+ host => clouddumps1002
+ check_interval => 10
+ contact_group => admins
+ passive => False
+ check_command => nrpe_check!check_check_tcp-mss-clamper_status!10
+ migration_task => T407130
+ freshness => 36000
+ notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments
+ ensure => absent
+ retries => 2
- File[/etc/conftool/config.yaml]
- Parameters differences:
--- File[/etc/conftool/config.yaml].orig
+++ File[/etc/conftool/config.yaml]
+ group => root
+ owner => root
+ mode => 0444
+ ensure => present
- Content differences:
--- /etc/conftool/config.yaml.orig
+++ /etc/conftool/config.yaml
@@ -0,0 +1,14 @@
+---
+hosts: []
+tcpircbot_host: icinga.wikimedia.org
+tcpircbot_port: 9200
+driver_options:
+ allow_reconnect: true
+ suppress_san_warnings: false
+namespace: "/conftool"
+extensions_config:
+ reqconfig:
+ haproxy_reserved_slots:
+ - 0
+ varnish_acl_ipblocks: []
+conftool2git_address: puppetserver1003.eqiad.wmnet:1312
- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status].orig
+++ Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
+ priority => 25
+ mode => 0444
+ ensure => absent
- File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_clamp-mss-ipv6].orig
+++ File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
+ mode => 0400
+ tag => ferm
+ group => root
+ owner => root
+ ensure => present
+ require => File[/etc/ferm/conf.d]
+ notify => Service[ferm]
- Content differences:
--- /etc/ferm/conf.d/10_clamp-mss-ipv6.orig
+++ /etc/ferm/conf.d/10_clamp-mss-ipv6
@@ -0,0 +1,11 @@
+# Autogenerated by puppet. DO NOT EDIT BY HAND!
+#
+# 10_clamp-mss-ipv6:
+
+domain (ip6) {
+ table filter {
+ chain OUTPUT {
+ outerface (enp94s0f0np0 lo) saddr @ipfilter((208.80.154.242 2620:0:861:ed1a::3:242])) proto tcp sport (443 873) tcp-flags (SYN) SYN TCPMSS set-mss 1400;
+ }
+ }
+}
- Nrpe::Monitor_service[check_tcp-mss-clamper_status]
- Parameters differences:
--- Nrpe::Monitor_service[check_tcp-mss-clamper_status].orig
+++ Nrpe::Monitor_service[check_tcp-mss-clamper_status]
+ nrpe_command => /usr/local/lib/nagios/plugins/check_systemd_unit_status tcp-mss-clamper
+ critical => False
+ retry_interval => 1
+ description => Check unit status of tcp-mss-clamper
+ enable_nrpe2nodexp => False
+ check_interval => 10
+ contact_group => admins
+ timeout => 10
+ migration_task => T407130
+ nrpe2nodexp_parse_perf_data => False
+ enable_icinga_check => True
+ alertmanager_team => observability
+ notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments
+ ensure => absent
+ retries => 2
- File[/etc/logrotate.d/prometheus_ferm_mss]
- Parameters differences:
--- File[/etc/logrotate.d/prometheus_ferm_mss].orig
+++ File[/etc/logrotate.d/prometheus_ferm_mss]
+ group => root
+ owner => root
+ mode => 0444
+ ensure => present
- Content differences:
--- /etc/logrotate.d/prometheus_ferm_mss.orig
+++ /etc/logrotate.d/prometheus_ferm_mss
@@ -0,0 +1,12 @@
+# logrotate(8) config for prometheus_ferm_mss
+
+/var/log/prometheus_ferm_mss/*.log {
+ daily
+ copytruncate
+ missingok
+ compress
+ delaycompress
+ notifempty
+ rotate 15
+ size 256M
+}
- Exec[ip link set up dev ipip60]
- Parameters differences:
--- Exec[ip link set up dev ipip60].orig
+++ Exec[ip link set up dev ipip60]
+ returns => [0, 2]
+ path => /bin:/usr/bin
+ unless => ip link show ipip60 | grep -q UP
- File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]