Compilation results for dse-k8s-ctrl2001.codfw.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 3103 |
|---|---|
| Resources added: | 103 |
| Resources removed: | 0 |
| Resources modified: | 110 |
| Change percentage: | 6.86% |
Resources only in the new catalog
- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- File_line[rm_post-up_ens13_clsact_ens13]
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- Rsyslog::Conf[prometheus_ferm_mss]
- Interface::Ip[ipip_ipv4 ipv4]
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- Ferm::Rule[ipip]
- Interface::Clsact[clsact_lo]
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- Interface::Manual[ipip_ipv6]
- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- Service[tcp-mss-clamper]
- Augeas[ipip60_manual]
- File[/var/log/prometheus_lvs_realserver_mss]
- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Logrotate::Conf[prometheus_ferm_mss]
- Systemd::Timer[prometheus_ferm_mss]
- File[/usr/local/bin/prometheus-ferm-mss]
- File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]
- Nrpe::Check[check_check_tcp-mss-clamper_status]
- Systemd::Timer::Job[prometheus_lvs_realserver_mss]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
- Systemd::Service[prometheus_ferm_mss]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]
- Monitoring::Service[check_tcp-mss-clamper_status]
- Exec[disable-rp-filter-ens13]
- File[/lib/systemd/system/prometheus_ferm_mss.timer]
- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f]
- File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
- Exec[disable-rp-filter-ipip60]
- File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
- Service[prometheus_lvs_realserver_mss.timer]
- Exec[disable-rp-filter-ipip0]
- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
- Exec[ip link set up dev ipip0]
- Systemd::Unit[prometheus_ferm_mss.timer]
- Service[prometheus_ferm_mss.timer]
- Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Augeas[ipip0_manual]
- Systemd::Timer[prometheus_lvs_realserver_mss]
- Interface::Manual[ipip_ipv4]
- Systemd::Service[tcp-mss-clamper]
- Nrpe::Monitor_service[check_tcp-mss-clamper_status]
- File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
- Ferm::Rule[clamp-mss-ipv6]
- Interface::Clsact[clsact_ens13]
- Augeas[ipip60_add_up]
- Systemd::Timer::Job[prometheus_ferm_mss]
- File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
- File[/lib/systemd/system/prometheus_ferm_mss.service]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Augeas[ipip0_add_up]
- Exec[ip addr add 127.0.0.42/32 dev ipip0]
- Systemd::Service[prometheus_lvs_realserver_mss]
- Ferm::Rule[clamp-mss-ipv4]
- File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Monitoring::Exported_nagios_service[dse-k8s-ctrl2001 check_tcp-mss-clamper_status]
- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
- Class[Profile::Lvs::Realserver::Ipip]
- Augeas[ipip0_set_up]
- Interface::Ipip[ipip_ipv4]
- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]
- Augeas[ipip60_set_up]
- Systemd::Syslog[prometheus_lvs_realserver_mss]
- Systemd::Monitor[tcp-mss-clamper]
- Exec[ip link add name ipip0 type ipip external]
- Interface::Post_up_command[clsact_ens13]
- Systemd::Unit[tcp-mss-clamper]
- Exec[ip link set up dev ipip60]
- Ferm::Rule[ip6ip6]
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
- Interface::Post_up_command[clsact_lo]
- File[/etc/logrotate.d/prometheus_ferm_mss]
- File[/var/log/prometheus_ferm_mss]
- Exec[/usr/sbin/tc qdisc del dev ens13 clsact]
- Package[tcp-mss-clamper]
- Sudo::User[nrpe-check_check_tcp-mss-clamper_status]
- File_line[rm_post-up_lo_clsact_lo]
- Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
- Exec[ip link add name ipip60 type ip6tnl external]
- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- Prometheus::Node_ferm_mss[ferm_clamped_ipport]
- Exec[/usr/sbin/tc qdisc del dev lo clsact]
- Systemd::Unit[prometheus_ferm_mss.service]
- Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status]
- Interface::Ipip[ipip_ipv6]
- Systemd::Unit[prometheus_lvs_realserver_mss.timer]
- File[/usr/local/bin/prometheus-lvs-realserver-mss]
- Systemd::Unit[prometheus_lvs_realserver_mss.service]
- File[/etc/ferm/conf.d/10_ipip]
- File[/lib/systemd/system/tcp-mss-clamper.service]
- Systemd::Syslog[prometheus_ferm_mss]
- File[/etc/ferm/conf.d/10_ip6ip6]
- File[/lib/systemd/system/prometheus_lvs_realserver_mss.timer]
- Nrpe::Plugin[check_systemd_unit_status]
- Augeas[ipip0_127.0.0.42/32]
Resources modified
- Nrpe::Check[check_check_tcp-mss-clamper_status]
- Parameters differences:
--- Nrpe::Check[check_check_tcp-mss-clamper_status].orig +++ Nrpe::Check[check_check_tcp-mss-clamper_status] + ensure => absent + command => /usr/local/lib/nagios/plugins/check_systemd_unit_status tcp-mss-clamper + before => Monitoring::Service[check_tcp-mss-clamper_status]
- Augeas[ipip60_add_up]
- Parameters differences:
--- Augeas[ipip60_add_up].orig +++ Augeas[ipip60_add_up] + require => Interface::Manual[ipip_ipv6] + context => /files/etc/network/interfaces/*[. = 'ipip60' and ./family = 'inet6'] + onlyif => match up[. = 'ip link add name ipip60 type ip6tnl external'] size == 0 + incl => /etc/network/interfaces + lens => Interfaces.lns + changes => set up[last()+1] 'ip link add name ipip60 type ip6tnl external'
- Sysctl::Conffile[ubuntu defaults]
- Interface::Post_up_command[clsact_ens13]
- Parameters differences:
--- Interface::Post_up_command[clsact_ens13].orig +++ Interface::Post_up_command[clsact_ens13] + ensure => absent + command => /usr/sbin/tc qdisc add dev ens13 clsact + interface => ens13
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Parameters differences:
--- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service].orig +++ File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service] + owner => root + mode => 0444 + group => root + notify => Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)] + ensure => absent
- Content differences:
--- /lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service.orig +++ /lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service @@ -0,0 +1,11 @@ +[Unit] +Description=execution of nrpe2nodexp for the check_check_tcp-mss-clamper_status command. +Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + +[Service] +Type=oneshot +User=nagios + +Group=prometheus-node-exporter +SyslogIdentifier=nrpe2nodexp-check_tcp-mss-clamper_status +ExecStart=-/usr/local/bin/nrpe2nodexp --alert-rule-hash "295d6d5dd0a784bb9ba1d5983fd1894f" --timeout 10 --check-command "check_check_tcp-mss-clamper_status"
- Interface::Clsact[clsact_lo]
- Parameters differences:
--- Interface::Clsact[clsact_lo].orig +++ Interface::Clsact[clsact_lo] + ensure => absent + interface => lo
- Service[tcp-mss-clamper]
- Parameters differences:
--- Service[tcp-mss-clamper].orig +++ Service[tcp-mss-clamper] + enable => False + ensure => stopped + before => ['Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]']
- File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf].orig +++ File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf] + owner => root + mode => 0444 + group => root + notify => Service[rsyslog] + ensure => absent
- Content differences:
--- /etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf.orig +++ /etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf @@ -0,0 +1,10 @@ +# rsyslog.conf(5) configuration file for services. +# This file is managed by Puppet. +if $programname startswith "prometheus_lvs_realserver_mss" then { + action( + type="omfile" file="/var/log/prometheus_lvs_realserver_mss/syslog.log" + fileOwner="root" fileGroup="root" + fileCreateMode="0644" + ) + & stop +}- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]
- Parameters differences:
--- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)].orig +++ Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)] + refreshonly => True + command => /bin/systemctl daemon-reload
- File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_clamp-mss-ipv4].orig +++ File[/etc/ferm/conf.d/10_clamp-mss-ipv4] + owner => root + mode => 0400 + group => root + notify => Service[ferm] + ensure => absent + tag => ferm + require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_clamp-mss-ipv4.orig +++ /etc/ferm/conf.d/10_clamp-mss-ipv4 @@ -0,0 +1,11 @@ +# Autogenerated by puppet. DO NOT EDIT BY HAND! +# +# 10_clamp-mss-ipv4: + +domain (ip) { + table filter { + chain OUTPUT { + outerface (ens13 lo) saddr @ipfilter(()) proto tcp sport () tcp-flags (SYN) SYN TCPMSS set-mss 1440; + } + } +}- Augeas[ipip0_set_up]
- Parameters differences:
--- Augeas[ipip0_set_up].orig +++ Augeas[ipip0_set_up] + require => Augeas[ipip0_add_up] + context => /files/etc/network/interfaces/*[. = 'ipip0' and ./family = 'inet'] + onlyif => match up[. = 'ip link set up dev ipip0'] size == 0 + incl => /etc/network/interfaces + lens => Interfaces.lns + changes => set up[last()+1] 'ip link set up dev ipip0'
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Logrotate::Conf[prometheus_lvs_realserver_mss].orig +++ Logrotate::Conf[prometheus_lvs_realserver_mss] + ensure => absent
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- Parameters differences:
--- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg].orig +++ File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg] + owner => root + mode => 0444 + group => root + notify => Service[nagios-nrpe-server] + ensure => absent + tag => nrpe::check + require => Package[nagios-nrpe-server]
- Content differences:
--- /etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg.orig +++ /etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg @@ -0,0 +1,2 @@ +# File generated by puppet. DO NOT edit by hand +command[check_check_tcp-mss-clamper_status]=/usr/local/lib/nagios/plugins/check_systemd_unit_status tcp-mss-clamper
- Ferm::Rule[clamp-mss-ipv4]
- Parameters differences:
--- Ferm::Rule[clamp-mss-ipv4].orig +++ Ferm::Rule[clamp-mss-ipv4] + rule => outerface (ens13 lo) saddr @ipfilter(()) proto tcp sport () tcp-flags (SYN) SYN TCPMSS set-mss 1440; + table => filter + desc => + chain => OUTPUT + domain => (ip) + ensure => absent + prio => 10
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer].orig +++ Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer] + unit => nrpe2nodexp-check_tcp-mss-clamper_status.timer + override_filename => puppet-override.conf + override => False + ensure => absent + restart => False + require => ['Class[Systemd]']
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- Parameters differences:
--- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status].orig +++ File[/usr/local/lib/nagios/plugins/check_systemd_unit_status] + owner => root + source => puppet:///modules/systemd/check_systemd_unit_status + mode => 0555 + group => root + ensure => file + tag => nrpe::plugin + require => File[/usr/local/lib/nagios/plugins/]
- File[/etc/ferm/conf.d/10_ipip]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_ipip].orig +++ File[/etc/ferm/conf.d/10_ipip] + owner => root + mode => 0400 + group => root + notify => Service[ferm] + ensure => present + tag => ferm + require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_ipip.orig +++ /etc/ferm/conf.d/10_ipip @@ -0,0 +1,11 @@ +# Autogenerated by puppet. DO NOT EDIT BY HAND! +# +# 10_ipip: + +domain (ip) { + table filter { + chain INPUT { + saddr 172.16.0.0/12 proto ipencap ACCEPT; + } + } +}- File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
- Parameters differences:
--- File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status].orig +++ File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status] + owner => root + ensure => absent + group => root + require => Package[nagios-nrpe-server]
- Systemd::Service[tcp-mss-clamper]
- Parameters differences:
--- Systemd::Service[tcp-mss-clamper].orig +++ Systemd::Service[tcp-mss-clamper] + service_params => {} + override => False + monitoring_critical => False + monitoring_notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments + monitoring_contact_group => admins + monitoring_enabled => True + migration_task => T407130 + unit_type => service + ensure => absent + restart => False- Ferm::Rule[clamp-mss-ipv6]
- Parameters differences:
--- Ferm::Rule[clamp-mss-ipv6].orig +++ Ferm::Rule[clamp-mss-ipv6] + rule => outerface (ens13 lo) saddr @ipfilter(()) proto tcp sport () tcp-flags (SYN) SYN TCPMSS set-mss 1400; + table => filter + desc => + chain => OUTPUT + domain => (ip6) + ensure => absent + prio => 10
- Exec[/usr/sbin/tc qdisc del dev ens13 clsact]
- Parameters differences:
--- Exec[/usr/sbin/tc qdisc del dev ens13 clsact].orig +++ Exec[/usr/sbin/tc qdisc del dev ens13 clsact] + onlyif => /usr/sbin/tc qdisc show dev ens13 | grep -q clsact
- Exec[ip addr add 127.0.0.42/32 dev ipip0]
- Parameters differences:
--- Exec[ip addr add 127.0.0.42/32 dev ipip0].orig +++ Exec[ip addr add 127.0.0.42/32 dev ipip0] + returns => [0, 2] + path => /bin:/usr/bin + unless => ip address show ipip0 | grep -q 127.0.0.42/32
- Systemd::Syslog[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Systemd::Syslog[prometheus_lvs_realserver_mss].orig +++ Systemd::Syslog[prometheus_lvs_realserver_mss] + log_filename => syslog.log + base_dir => /var/log + owner => root + force_stop => True + group => root + ensure => absent + programname_comparison => startswith + readable_by => all
- Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status].orig +++ Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status] + timer_intervals => [{'start': 'OnUnitInactiveSec', 'interval': '5min'}, {'interval': '1s', 'start': 'OnActiveSec'}] + accuracy => 15sec + splay => 300 + ensure => absent + unit_name => nrpe2nodexp-check_tcp-mss-clamper_status.service + fixed_random_delay => True- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Parameters differences:
--- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer].orig +++ Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer] + enable => False + ensure => stopped + provider => systemd + before => ['Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]']
- Augeas[ipip0_127.0.0.42/32]
- Parameters differences:
--- Augeas[ipip0_127.0.0.42/32].orig +++ Augeas[ipip0_127.0.0.42/32] + context => /files/etc/network/interfaces/*[. = 'ipip0' and ./family = 'inet'] + onlyif => match up[. = 'ip addr add 127.0.0.42/32 dev ipip0'] size == 0 + incl => /etc/network/interfaces + lens => Interfaces.lns + changes => set up[last()+1] 'ip addr add 127.0.0.42/32 dev ipip0'
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- Parameters differences:
--- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom].orig +++ File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom] + owner => root + ensure => absent + group => root
- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf].orig +++ File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf] + owner => root + mode => 0444 + group => root + notify => Service[rsyslog] + ensure => absent
- Content differences:
--- /etc/rsyslog.d/40-prometheus-ferm-mss.conf.orig +++ /etc/rsyslog.d/40-prometheus-ferm-mss.conf @@ -0,0 +1,10 @@ +# rsyslog.conf(5) configuration file for services. +# This file is managed by Puppet. +if $programname startswith "prometheus_ferm_mss" then { + action( + type="omfile" file="/var/log/prometheus_ferm_mss/syslog.log" + fileOwner="root" fileGroup="root" + fileCreateMode="0644" + ) + & stop +}- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf].orig +++ File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf] + owner => root + mode => 0444 + group => root + notify => Service[rsyslog] + ensure => absent
- Content differences:
--- /etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf.orig +++ /etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: Apache-2.0 +if $programname contains "nrpe2nodexp-check_tcp-mss-clamper_status" then { + if ($msg contains "\"ecs.version\": \"1.7.0\"") then { + # Send logs to kafka + set $.log_outputs = "kafka ecs_170 local"; + } else { + # Filter out non-relevant nrpe2nodexp messages + stop + } +}- File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
- Parameters differences:
--- File[/etc/logrotate.d/prometheus_lvs_realserver_mss].orig +++ File[/etc/logrotate.d/prometheus_lvs_realserver_mss] + owner => root + mode => 0444 + ensure => absent + group => root
- Content differences:
--- /etc/logrotate.d/prometheus_lvs_realserver_mss.orig +++ /etc/logrotate.d/prometheus_lvs_realserver_mss @@ -0,0 +1,12 @@ +# logrotate(8) config for prometheus_lvs_realserver_mss + +/var/log/prometheus_lvs_realserver_mss/*.log { + daily + copytruncate + missingok + compress + delaycompress + notifempty + rotate 15 + size 256M +}- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status].orig +++ Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status] + service_params => {} + override => False + monitoring_critical => False + require => Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service] + monitoring_contact_group => admins + monitoring_enabled => False + migration_task => T407130 + unit_type => timer + ensure => absent + restart => False- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Rsyslog::Conf[prometheus_lvs_realserver_mss].orig +++ Rsyslog::Conf[prometheus_lvs_realserver_mss] + priority => 40 + ensure => absent + mode => 0444 + require => File[/var/log/prometheus_lvs_realserver_mss]
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Parameters differences:
--- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)].orig +++ Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)] + refreshonly => True + command => /bin/systemctl daemon-reload
- Augeas[ipip60_manual]
- Parameters differences:
--- Augeas[ipip60_manual].orig +++ Augeas[ipip60_manual] + incl => /etc/network/interfaces + context => /files/etc/network/interfaces + changes => ["set auto[./1 = 'ipip60']/1 'ipip60'", "set iface[. = 'ipip60'] 'ipip60'", "set iface[. = 'ipip60']/family 'inet6'", "set iface[. = 'ipip60']/method 'manual'"] + lens => Interfaces.lns
- Systemd::Unit[prometheus_lvs_realserver_mss.service]
- Parameters differences:
--- Systemd::Unit[prometheus_lvs_realserver_mss.service].orig +++ Systemd::Unit[prometheus_lvs_realserver_mss.service] + unit => prometheus_lvs_realserver_mss.service + override_filename => puppet-override.conf + override => False + ensure => absent + restart => False + require => ['Class[Systemd]']
- Nrpe::Plugin[check_systemd_unit_status]
- Parameters differences:
--- Nrpe::Plugin[check_systemd_unit_status].orig +++ Nrpe::Plugin[check_systemd_unit_status] + source => puppet:///modules/systemd/check_systemd_unit_status + ensure => present
- Systemd::Timer::Job[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Systemd::Timer::Job[prometheus_lvs_realserver_mss].orig +++ Systemd::Timer::Job[prometheus_lvs_realserver_mss] + logging_enabled => True + user => root + private_tmp => False + syslog_match_startswith => True + send_mail_to => root@dse-k8s-ctrl2001.codfw.wmnet + fixed_random_delay => False + send_mail => False + environment => {} + monitoring_enabled => False + logfile_basedir => /var/log + syslog_force_stop => True + logfile_name => syslog.log + monitoring_contact_groups => admins + success_exit_status => [] + ensure => absent + logfile_perms => all + send_mail_only_on_error => True + logfile_group => root + description => Regular job to collect MSS values of realserver endpoints + ignore_errors => False + command => /usr/local/bin/prometheus-lvs-realserver-mss -o /var/lib/prometheus/node.d/lvs-realserver-mss.prom -e + monitoring_notes_url => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + interval => {'start': 'OnCalendar', 'interval': 'minutely'}- Monitoring::Service[check_tcp-mss-clamper_status]
- Parameters differences:
--- Monitoring::Service[check_tcp-mss-clamper_status].orig +++ Monitoring::Service[check_tcp-mss-clamper_status] + critical => False + freshness => 36000 + retry_interval => 1 + description => Check unit status of tcp-mss-clamper + check_interval => 10 + host => dse-k8s-ctrl2001 + check_command => nrpe_check!check_check_tcp-mss-clamper_status!10 + retries => 2 + migration_task => T407130 + config_dir => /etc/nagios + contact_group => admins + ensure => absent + passive => False + notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments
- Exec[disable-rp-filter-ens13]
- Parameters differences:
--- Exec[disable-rp-filter-ens13].orig +++ Exec[disable-rp-filter-ens13] + command => /usr/sbin/sysctl -q net.ipv4.conf.ens13.rp_filter=0 + unless => /usr/sbin/sysctl -n net.ipv4.conf.ens13.rp_filter |grep -- '0'
- Class[Profile::Base]
- Parameters differences:
--- Class[Profile::Base].orig +++ Class[Profile::Base] @@ - rp_filter => True + rp_filter => {'all_rp_filter': 0, 'default_rp_filter': 1}- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status].orig +++ Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status] + logging_enabled => False + user => nagios + private_tmp => False + syslog_match_startswith => True + fixed_random_delay => True + send_mail_to => root@dse-k8s-ctrl2001.codfw.wmnet + send_mail => False + environment => {} + monitoring_enabled => False + logfile_basedir => /var/log + syslog_force_stop => True + group => prometheus-node-exporter + monitoring_contact_groups => admins + logfile_name => syslog.log + success_exit_status => [] + ensure => absent + logfile_perms => all + send_mail_only_on_error => True + logfile_group => root + description => execution of nrpe2nodexp for the check_check_tcp-mss-clamper_status command. + ignore_errors => True + command => /usr/local/bin/nrpe2nodexp --alert-rule-hash "295d6d5dd0a784bb9ba1d5983fd1894f" --timeout 10 --check-command "check_check_tcp-mss-clamper_status" + monitoring_notes_url => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + splay => 300 + interval => [{'start': 'OnUnitInactiveSec', 'interval': '5min'}] + syslog_identifier => nrpe2nodexp-check_tcp-mss-clamper_status- Exec[/usr/sbin/tc qdisc del dev lo clsact]
- Parameters differences:
--- Exec[/usr/sbin/tc qdisc del dev lo clsact].orig +++ Exec[/usr/sbin/tc qdisc del dev lo clsact] + onlyif => /usr/sbin/tc qdisc show dev lo | grep -q clsact
- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f]
- Parameters differences:
--- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f].orig +++ Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f] + logs => https://logstash.wikimedia.org/app/dashboards#/view/2d343ac0-6df8-11f0-8e08-7fab0da52b33?_g=(filters:!((query:(match_phrase:(event.module:check_check_tcp-mss-clamper_status))),(query:(match_phrase:(host.name:{{$labels.instance|stripPort}}))))) + severity => info + runbook => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments + summary => NRPE CHECK: Check unit status of tcp-mss-clamper + for => 11m + team => observability + def_label_whitelst => ['team', 'severity'] + instance => ops + description => NRPE CHECK: Check unit status of tcp-mss-clamper + expr => (nagios_nrpe_check_result{alert_rule_hash="295d6d5dd0a784bb9ba1d5983fd1894f",check_name="check_check_tcp-mss-clamper_status", status=~"(WARNING|CRITICAL)", severity=~"(warning|critical)"} > 0) * on (instance) group_left (team) role_owner + group => nrpechecks + dashboard => TODO + ensure => absent + alert_name => nrpe_Check_unit_status_of_tcp_mss_clamper + site => codfw- Exec[ip link set up dev ipip0]
- Parameters differences:
--- Exec[ip link set up dev ipip0].orig +++ Exec[ip link set up dev ipip0] + returns => [0, 2] + path => /bin:/usr/bin + unless => ip link show ipip0 | grep -q UP
- File[/lib/systemd/system/prometheus_ferm_mss.service]
- Parameters differences:
--- File[/lib/systemd/system/prometheus_ferm_mss.service].orig +++ File[/lib/systemd/system/prometheus_ferm_mss.service] + owner => root + mode => 0444 + group => root + notify => Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)] + ensure => absent
- Content differences:
--- /lib/systemd/system/prometheus_ferm_mss.service.orig +++ /lib/systemd/system/prometheus_ferm_mss.service @@ -0,0 +1,8 @@ +[Unit] +Description=Regular job to collect MSS values of ferm-based hosts +Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + +[Service] +Type=oneshot +User=root +ExecStart=/usr/local/bin/prometheus-ferm-mss -o /var/lib/prometheus/node.d/ferm-mss.prom -e
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Parameters differences:
--- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer].orig +++ File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer] + owner => root + mode => 0444 + group => root + notify => Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)] + ensure => absent
- Content differences:
--- /lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer.orig +++ /lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer @@ -0,0 +1,14 @@ +[Unit] +Description=Periodic execution of nrpe2nodexp-check_tcp-mss-clamper_status.service + +[Timer] +Unit=nrpe2nodexp-check_tcp-mss-clamper_status.service +# Accuracy sets the maximum time interval around the execution time we want to allow +AccuracySec=15sec +OnUnitInactiveSec=5min +OnActiveSec=1s +RandomizedDelaySec=300 +FixedRandomDelay=true + +[Install] +WantedBy=multi-user.target
- Interface::Post_up_command[clsact_lo]
- Parameters differences:
--- Interface::Post_up_command[clsact_lo].orig +++ Interface::Post_up_command[clsact_lo] + ensure => absent + command => /usr/sbin/tc qdisc add dev lo clsact + interface => lo
- File[/var/log/prometheus_ferm_mss]
- Parameters differences:
--- File[/var/log/prometheus_ferm_mss].orig +++ File[/var/log/prometheus_ferm_mss] + owner => root + backup => False + mode => 0755 + group => root + ensure => absent + force => True
- Systemd::Unit[tcp-mss-clamper]
- Parameters differences:
--- Systemd::Unit[tcp-mss-clamper].orig +++ Systemd::Unit[tcp-mss-clamper] + unit => tcp-mss-clamper + override_filename => puppet-override.conf + override => False + ensure => absent + restart => False + require => ['Class[Systemd]']
- Rsyslog::Conf[prometheus_ferm_mss]
- Parameters differences:
--- Rsyslog::Conf[prometheus_ferm_mss].orig +++ Rsyslog::Conf[prometheus_ferm_mss] + priority => 40 + ensure => absent + mode => 0444 + require => File[/var/log/prometheus_ferm_mss]
- Exec[disable-rp-filter-ipip60]
- Parameters differences:
--- Exec[disable-rp-filter-ipip60].orig +++ Exec[disable-rp-filter-ipip60] + unless => /usr/sbin/sysctl -n net.ipv4.conf.ipip60.rp_filter |grep -- '0' + command => /usr/sbin/sysctl -q net.ipv4.conf.ipip60.rp_filter=0 + require => Interface::Ipip[ipip_ipv6]
- Systemd::Timer::Job[prometheus_ferm_mss]
- Parameters differences:
- Systemd::Timer::Job[prometheus_ferm_mss]
- Exec[disable-rp-filter-ipip60]
- Rsyslog::Conf[prometheus_ferm_mss]
- Systemd::Unit[tcp-mss-clamper]
- File[/var/log/prometheus_ferm_mss]
- Content differences:
- Content differences:
- File[/lib/systemd/system/prometheus_ferm_mss.service]
- Exec[ip link set up dev ipip0]
- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f]
- Exec[/usr/sbin/tc qdisc del dev lo clsact]
- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- Class[Profile::Base]
- Exec[disable-rp-filter-ens13]
- Monitoring::Service[check_tcp-mss-clamper_status]
- Systemd::Timer::Job[prometheus_lvs_realserver_mss]
- Nrpe::Plugin[check_systemd_unit_status]
- Systemd::Unit[prometheus_lvs_realserver_mss.service]
- Augeas[ipip60_manual]
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Content differences:
- Content differences:
- Content differences:
- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- Augeas[ipip0_127.0.0.42/32]
- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status]
- Systemd::Syslog[prometheus_lvs_realserver_mss]
- Exec[ip addr add 127.0.0.42/32 dev ipip0]
- Exec[/usr/sbin/tc qdisc del dev ens13 clsact]
- Ferm::Rule[clamp-mss-ipv6]
- Systemd::Service[tcp-mss-clamper]
- Content differences:
- File[/etc/ferm/conf.d/10_ipip]
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Content differences:
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- Content differences:
- File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
- Content differences:
- File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
- Service[tcp-mss-clamper]
- Content differences:
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Sysctl::Conffile[ubuntu defaults]
- Augeas[ipip60_add_up]
- Parameters differences: