{"host": "zuul1001.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2970, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Exec[sslcert generate zookeeper_zuul_keystore.p12]", "parameters": "--- Exec[sslcert generate zookeeper_zuul_keystore.p12].orig\n+++ Exec[sslcert generate zookeeper_zuul_keystore.p12]\n\n@@\n-    command => /usr/bin/openssl pkcs12 -export -certfile /etc/zookeeper/zuul-tls/zuul_full_chain.pem -in /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem -inkey /etc/zookeeper/zuul-tls/zuul__zookeeper-key.pem -out /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -password 'pass:snakeoil'\n+    command => /usr/bin/openssl pkcs12 -export  -in /etc/ssl/localcerts/zookeeper_zuul_keystore.crt -inkey /etc/ssl/private/zookeeper_zuul_keystore.key -out /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -password 'pass:snakeoil'\n@@\n-    unless  => /usr/bin/test     \"$(/usr/bin/openssl x509 -in /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem)\" ==     \"$(/usr/bin/openssl pkcs12 -password 'pass:snakeoil' -in /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -clcerts -nokeys | openssl x509)\"\n+    unless  => /usr/bin/test     \"$(/usr/bin/openssl x509 -in /etc/ssl/localcerts/zookeeper_zuul_keystore.crt)\" ==     \"$(/usr/bin/openssl pkcs12 -password 'pass:snakeoil' -in /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -clcerts -nokeys | openssl x509)\"\n"}, {"resource": "Sslcert::X509_to_pkcs12[zookeeper_zuul_keystore]", "parameters": "--- Sslcert::X509_to_pkcs12[zookeeper_zuul_keystore].orig\n+++ Sslcert::X509_to_pkcs12[zookeeper_zuul_keystore]\n\n-    require     => Concat[/etc/zookeeper/zuul-tls/zuul_full_chain.pem]\n-    certfile    => /etc/zookeeper/zuul-tls/zuul_full_chain.pem\n@@\n-    private_key => /etc/zookeeper/zuul-tls/zuul__zookeeper-key.pem\n+    private_key => /etc/ssl/private/zookeeper_zuul_keystore.key\n@@\n-    public_key  => /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem\n+    public_key  => /etc/ssl/localcerts/zookeeper_zuul_keystore.crt\n"}], "perc_changed": "0.07%"}, "core": {"total": 2970, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Exec[sslcert generate zookeeper_zuul_keystore.p12]", "parameters": "--- Exec[sslcert generate zookeeper_zuul_keystore.p12].orig\n+++ Exec[sslcert generate zookeeper_zuul_keystore.p12]\n\n@@\n-    command => /usr/bin/openssl pkcs12 -export -certfile /etc/zookeeper/zuul-tls/zuul_full_chain.pem -in /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem -inkey /etc/zookeeper/zuul-tls/zuul__zookeeper-key.pem -out /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -password 'pass:snakeoil'\n+    command => /usr/bin/openssl pkcs12 -export  -in /etc/ssl/localcerts/zookeeper_zuul_keystore.crt -inkey /etc/ssl/private/zookeeper_zuul_keystore.key -out /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -password 'pass:snakeoil'\n@@\n-    unless  => /usr/bin/test     \"$(/usr/bin/openssl x509 -in /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem)\" ==     \"$(/usr/bin/openssl pkcs12 -password 'pass:snakeoil' -in /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -clcerts -nokeys | openssl x509)\"\n+    unless  => /usr/bin/test     \"$(/usr/bin/openssl x509 -in /etc/ssl/localcerts/zookeeper_zuul_keystore.crt)\" ==     \"$(/usr/bin/openssl pkcs12 -password 'pass:snakeoil' -in /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -clcerts -nokeys | openssl x509)\"\n"}], "perc_changed": "0.03%"}, "main": {"total": 2970, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Exec[sslcert generate zookeeper_zuul_keystore.p12]", "parameters": "--- Exec[sslcert generate zookeeper_zuul_keystore.p12].orig\n+++ Exec[sslcert generate zookeeper_zuul_keystore.p12]\n\n@@\n-    command => /usr/bin/openssl pkcs12 -export -certfile /etc/zookeeper/zuul-tls/zuul_full_chain.pem -in /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem -inkey /etc/zookeeper/zuul-tls/zuul__zookeeper-key.pem -out /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -password 'pass:snakeoil'\n+    command => /usr/bin/openssl pkcs12 -export  -in /etc/ssl/localcerts/zookeeper_zuul_keystore.crt -inkey /etc/ssl/private/zookeeper_zuul_keystore.key -out /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -password 'pass:snakeoil'\n@@\n-    unless  => /usr/bin/test     \"$(/usr/bin/openssl x509 -in /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem)\" ==     \"$(/usr/bin/openssl pkcs12 -password 'pass:snakeoil' -in /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -clcerts -nokeys | openssl x509)\"\n+    unless  => /usr/bin/test     \"$(/usr/bin/openssl x509 -in /etc/ssl/localcerts/zookeeper_zuul_keystore.crt)\" ==     \"$(/usr/bin/openssl pkcs12 -password 'pass:snakeoil' -in /etc/zookeeper/zuul-tls/zookeeper_zuul.keystore.p12 -clcerts -nokeys | openssl x509)\"\n"}, {"resource": "Sslcert::X509_to_pkcs12[zookeeper_zuul_keystore]", "parameters": "--- Sslcert::X509_to_pkcs12[zookeeper_zuul_keystore].orig\n+++ Sslcert::X509_to_pkcs12[zookeeper_zuul_keystore]\n\n-    require     => Concat[/etc/zookeeper/zuul-tls/zuul_full_chain.pem]\n-    certfile    => /etc/zookeeper/zuul-tls/zuul_full_chain.pem\n@@\n-    private_key => /etc/zookeeper/zuul-tls/zuul__zookeeper-key.pem\n+    private_key => /etc/ssl/private/zookeeper_zuul_keystore.key\n@@\n-    public_key  => /etc/zookeeper/zuul-tls/zuul__zookeeper.chained.pem\n+    public_key  => /etc/ssl/localcerts/zookeeper_zuul_keystore.crt\n"}], "perc_changed": "0.07%"}}}