{"host": "gerrit2003.wikimedia.org", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3444, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Class[Profile::Tlsproxy::Envoy]", "parameters": "--- Class[Profile::Tlsproxy::Envoy].orig\n+++ Class[Profile::Tlsproxy::Envoy]\n\n@@\n-    access_log => False\n+    access_log => True\n"}, {"resource": "File[/etc/envoy/listeners.d/00-tls_terminator_8443.yaml]", "content": "--- /etc/envoy/listeners.d/00-tls_terminator_8443.yaml.orig\n+++ /etc/envoy/listeners.d/00-tls_terminator_8443.yaml\n@@ -25,6 +25,18 @@\n       common_http_protocol_options:\n         idle_timeout: 125.0s\n       stream_idle_timeout: 1800.0s\n+      access_log:\n+      - name: envoy.file_access_log\n+        filter:\n+          status_code_filter:\n+            comparison:\n+              op: \"GE\"\n+              value:\n+                default_value: 500\n+                runtime_key: global_tls_min_log_code\n+        typed_config:\n+          \"@type\": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog\n+          path: \"/var/log/envoy/global_tls.log\"\n       route_config:\n         virtual_hosts:\n         - name: non_sni_port_443"}, {"resource": "Envoyproxy::Conf[tls_terminator_8443]"}, {"resource": "Envoyproxy::Listener[tls_terminator_8443]"}, {"resource": "Envoyproxy::Tls_terminator[8443]", "parameters": "--- Envoyproxy::Tls_terminator[8443].orig\n+++ Envoyproxy::Tls_terminator[8443]\n\n@@\n-    access_log => False\n+    access_log => True\n"}], "perc_changed": "0.15%"}, "core": {"total": 3444, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/envoy/listeners.d/00-tls_terminator_8443.yaml]", "content": "--- /etc/envoy/listeners.d/00-tls_terminator_8443.yaml.orig\n+++ /etc/envoy/listeners.d/00-tls_terminator_8443.yaml\n@@ -25,6 +25,18 @@\n       common_http_protocol_options:\n         idle_timeout: 125.0s\n       stream_idle_timeout: 1800.0s\n+      access_log:\n+      - name: envoy.file_access_log\n+        filter:\n+          status_code_filter:\n+            comparison:\n+              op: \"GE\"\n+              value:\n+                default_value: 500\n+                runtime_key: global_tls_min_log_code\n+        typed_config:\n+          \"@type\": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog\n+          path: \"/var/log/envoy/global_tls.log\"\n       route_config:\n         virtual_hosts:\n         - name: non_sni_port_443"}], "perc_changed": "0.03%"}, "main": {"total": 3444, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Envoyproxy::Listener[tls_terminator_8443]"}, {"resource": "Class[Profile::Tlsproxy::Envoy]", "parameters": "--- Class[Profile::Tlsproxy::Envoy].orig\n+++ Class[Profile::Tlsproxy::Envoy]\n\n@@\n-    access_log => False\n+    access_log => True\n"}, {"resource": "File[/etc/envoy/listeners.d/00-tls_terminator_8443.yaml]", "content": "--- /etc/envoy/listeners.d/00-tls_terminator_8443.yaml.orig\n+++ /etc/envoy/listeners.d/00-tls_terminator_8443.yaml\n@@ -25,6 +25,18 @@\n       common_http_protocol_options:\n         idle_timeout: 125.0s\n       stream_idle_timeout: 1800.0s\n+      access_log:\n+      - name: envoy.file_access_log\n+        filter:\n+          status_code_filter:\n+            comparison:\n+              op: \"GE\"\n+              value:\n+                default_value: 500\n+                runtime_key: global_tls_min_log_code\n+        typed_config:\n+          \"@type\": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog\n+          path: \"/var/log/envoy/global_tls.log\"\n       route_config:\n         virtual_hosts:\n         - name: non_sni_port_443"}, {"resource": "Envoyproxy::Tls_terminator[8443]", "parameters": "--- Envoyproxy::Tls_terminator[8443].orig\n+++ Envoyproxy::Tls_terminator[8443]\n\n@@\n-    access_log => False\n+    access_log => True\n"}, {"resource": "Envoyproxy::Conf[tls_terminator_8443]"}], "perc_changed": "0.15%"}}}