Compilation results for cloudelastic1012.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	3717
Resources added:	12
Resources removed:	12
Resources modified:	44
Change percentage:	1.83%

Resources only in the new catalog

File[/usr/local/bin/depool-nginx]
Conftool::Scripts::Safe_service_restart[nginx]
File[/usr/local/sbin/restart-opensearch_2@production-search-eqiad]
File[/usr/local/sbin/restart-opensearch_2@production-search-omega-eqiad]
File[/usr/local/bin/pool-nginx]
Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-eqiad]
File[/usr/local/bin/depool-opensearch_2@production-search-omega-eqiad]
Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-omega-eqiad]
File[/usr/local/bin/pool-opensearch_2@production-search-omega-eqiad]
File[/usr/local/bin/depool-opensearch_2@production-search-eqiad]
File[/usr/local/sbin/restart-nginx]
File[/usr/local/bin/pool-opensearch_2@production-search-eqiad]

Resources only in the old catalog

File[/usr/local/bin/depool-opensearch_1@cloudelastic-chi-eqiad.service]
File[/usr/local/sbin/restart-opensearch_1@cloudelastic-psi-eqiad.service]
Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-psi-eqiad.service]
File[/usr/local/sbin/restart-opensearch_1@cloudelastic-omega-eqiad.service]
File[/usr/local/bin/depool-opensearch_1@cloudelastic-omega-eqiad.service]
File[/usr/local/bin/depool-opensearch_1@cloudelastic-psi-eqiad.service]
Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-chi-eqiad.service]
File[/usr/local/bin/pool-opensearch_1@cloudelastic-psi-eqiad.service]
File[/usr/local/sbin/restart-opensearch_1@cloudelastic-chi-eqiad.service]
File[/usr/local/bin/pool-opensearch_1@cloudelastic-omega-eqiad.service]
File[/usr/local/bin/pool-opensearch_1@cloudelastic-chi-eqiad.service]
Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-omega-eqiad.service]

Resources modified

File[/usr/local/bin/depool-nginx]

Parameters differences:

--- File[/usr/local/bin/depool-nginx].orig
+++ File[/usr/local/bin/depool-nginx]

+    ensure => present
+    group  => root
+    owner  => root
+    before => ['Service[nginx]']
+    mode   => 0555

Content differences:

--- /usr/local/bin/depool-nginx.orig
+++ /usr/local/bin/depool-nginx
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search-https search-omega-https --depool --retries 10 --wait 5

Class[Lvs::Realserver]

Parameters differences:

--- Class[Lvs::Realserver].orig
+++ Class[Lvs::Realserver]

@@
-    realserver_ips => ['208.80.154.241', '2620:0:861:ed1a::3:241']
+    realserver_ips => ['10.2.2.30']

Systemd::Timer::Job[prometheus_lvs_realserver_mss]

Parameters differences:

--- Systemd::Timer::Job[prometheus_lvs_realserver_mss].orig
+++ Systemd::Timer::Job[prometheus_lvs_realserver_mss]

@@
-    command => /usr/local/bin/prometheus-lvs-realserver-mss -o /var/lib/prometheus/node.d/lvs-realserver-mss.prom -e 208.80.154.241:9243 -e 208.80.154.241:9443 -e 208.80.154.241:9643 -e [2620:0:861:ed1a::3:241]:9243 -e [2620:0:861:ed1a::3:241]:9443 -e [2620:0:861:ed1a::3:241]:9643
+    command => /usr/local/bin/prometheus-lvs-realserver-mss -o /var/lib/prometheus/node.d/lvs-realserver-mss.prom -e 10.2.2.30:9200 -e 10.2.2.30:9243 -e 10.2.2.30:9443

File[/usr/local/sbin/restart-nginx]

Parameters differences:

--- File[/usr/local/sbin/restart-nginx].orig
+++ File[/usr/local/sbin/restart-nginx]

+    ensure => present
+    group  => root
+    owner  => root
+    before => ['Service[nginx]']
+    mode   => 0555

Content differences:

--- /usr/local/sbin/restart-nginx.orig
+++ /usr/local/sbin/restart-nginx
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search-https search-omega-https --services nginx --retries 10 --wait 5 --max-concurrency 5 $@

File[/usr/local/bin/pool-opensearch_2@production-search-eqiad]

Parameters differences:

--- File[/usr/local/bin/pool-opensearch_2@production-search-eqiad].orig
+++ File[/usr/local/bin/pool-opensearch_2@production-search-eqiad]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0555

Content differences:

--- /usr/local/bin/pool-opensearch_2@production-search-eqiad.orig
+++ /usr/local/bin/pool-opensearch_2@production-search-eqiad
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search search-https --pool --retries 10 --wait 5

File[/usr/local/bin/depool-opensearch_1@cloudelastic-psi-eqiad.service]

Parameters differences:

--- File[/usr/local/bin/depool-opensearch_1@cloudelastic-psi-eqiad.service].orig
+++ File[/usr/local/bin/depool-opensearch_1@cloudelastic-psi-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/bin/depool-opensearch_1@cloudelastic-psi-eqiad.service.orig
+++ /usr/local/bin/depool-opensearch_1@cloudelastic-psi-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-psi-https --depool --retries 10 --wait 5

File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]

Content differences:

--- /lib/systemd/system/prometheus_lvs_realserver_mss.service.orig
+++ /lib/systemd/system/prometheus_lvs_realserver_mss.service
@@ -5,4 +5,4 @@
 [Service]
 Type=oneshot
 User=root
-ExecStart=/usr/local/bin/prometheus-lvs-realserver-mss -o /var/lib/prometheus/node.d/lvs-realserver-mss.prom -e 208.80.154.241:9243 -e 208.80.154.241:9443 -e 208.80.154.241:9643 -e [2620:0:861:ed1a::3:241]:9243 -e [2620:0:861:ed1a::3:241]:9443 -e [2620:0:861:ed1a::3:241]:9643
+ExecStart=/usr/local/bin/prometheus-lvs-realserver-mss -o /var/lib/prometheus/node.d/lvs-realserver-mss.prom -e 10.2.2.30:9200 -e 10.2.2.30:9243 -e 10.2.2.30:9443

File[/etc/ferm/conf.d/10_clamp-mss-ipv4]

Content differences:

--- /etc/ferm/conf.d/10_clamp-mss-ipv4.orig
+++ /etc/ferm/conf.d/10_clamp-mss-ipv4
@@ -5,7 +5,7 @@
 domain (ip) {
 	table filter {
 		chain OUTPUT {
-			outerface (enp152s0f0np0 lo) saddr @ipfilter((208.80.154.241 2620:0:861:ed1a::3:241])) proto tcp sport (9243 9443 9643) tcp-flags (SYN) SYN TCPMSS set-mss 1440;
+			outerface (enp152s0f0np0 lo) saddr @ipfilter(10.2.2.30) proto tcp sport (9200 9243 9443) tcp-flags (SYN) SYN TCPMSS set-mss 1440;
 		}
 	}
 }

File[/usr/local/sbin/restart-opensearch_2@production-search-eqiad]

Parameters differences:

--- File[/usr/local/sbin/restart-opensearch_2@production-search-eqiad].orig
+++ File[/usr/local/sbin/restart-opensearch_2@production-search-eqiad]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0555

Content differences:

--- /usr/local/sbin/restart-opensearch_2@production-search-eqiad.orig
+++ /usr/local/sbin/restart-opensearch_2@production-search-eqiad
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search search-https --services opensearch_2@production-search-eqiad --retries 10 --wait 5 --max-concurrency 5 $@

File[/usr/local/bin/depool-opensearch_2@production-search-omega-eqiad]

Parameters differences:

--- File[/usr/local/bin/depool-opensearch_2@production-search-omega-eqiad].orig
+++ File[/usr/local/bin/depool-opensearch_2@production-search-omega-eqiad]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0555

Content differences:

--- /usr/local/bin/depool-opensearch_2@production-search-omega-eqiad.orig
+++ /usr/local/bin/depool-opensearch_2@production-search-omega-eqiad
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search-omega-https --depool --retries 10 --wait 5

File[/lib/systemd/system/tcp-mss-clamper.service]

Content differences:

--- /lib/systemd/system/tcp-mss-clamper.service.orig
+++ /lib/systemd/system/tcp-mss-clamper.service
@@ -7,5 +7,5 @@
 
 [Service]
 LimitMEMLOCK=infinity
-ExecStart=/usr/bin/tcp-mss-clamper --ipv4-mss 1440 --ipv6-mss 1400 -p :2200 -s "208.80.154.241:9243,208.80.154.241:9443,208.80.154.241:9643,[2620:0:861:ed1a::3:241]:9243,[2620:0:861:ed1a::3:241]:9443,[2620:0:861:ed1a::3:241]:9643" -i enp152s0f0np0,lo
+ExecStart=/usr/bin/tcp-mss-clamper --ipv4-mss 1440 --ipv6-mss 1400 -p :2200 -s "10.2.2.30:9200,10.2.2.30:9243,10.2.2.30:9443" -i enp152s0f0np0,lo
 Restart=on-failure

Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-chi-eqiad.service]

Parameters differences:

--- Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-chi-eqiad.service].orig
+++ Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-chi-eqiad.service]

-    lvs_pools       => ['cloudelastic-chi-https']
-    require         => ['Class[Conftool::Scripts]']
-    max_concurrency => 1

Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-omega-eqiad.service]

Parameters differences:

--- Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-omega-eqiad.service].orig
+++ Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-omega-eqiad.service]

-    lvs_pools       => ['cloudelastic-omega-https']
-    require         => ['Class[Conftool::Scripts]']
-    max_concurrency => 1

Systemd::Unit[prometheus_lvs_realserver_mss.service]

Class[Profile::Lvs::Realserver]

Parameters differences:

--- Class[Profile::Lvs::Realserver].orig
+++ Class[Profile::Lvs::Realserver]

@@
-    pools => {'cloudelastic-chi-https': {'services': ['opensearch_1@cloudelastic-chi-eqiad.service']}, 'cloudelastic-psi-https': {'services': ['opensearch_1@cloudelastic-psi-eqiad.service']}, 'cloudelastic-omega-https': {'services': ['opensearch_1@cloudelastic-omega-eqiad.service']}}
+    pools => {'search': {'services': ['opensearch_2@production-search-eqiad']}, 'search-https': {'services': ['nginx', 'opensearch_2@production-search-eqiad']}, 'search-omega-https': {'services': ['nginx', 'opensearch_2@production-search-omega-eqiad']}}

File[/usr/local/bin/pool-opensearch_1@cloudelastic-chi-eqiad.service]

Parameters differences:

--- File[/usr/local/bin/pool-opensearch_1@cloudelastic-chi-eqiad.service].orig
+++ File[/usr/local/bin/pool-opensearch_1@cloudelastic-chi-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/bin/pool-opensearch_1@cloudelastic-chi-eqiad.service.orig
+++ /usr/local/bin/pool-opensearch_1@cloudelastic-chi-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-chi-https --pool --retries 10 --wait 5

Ferm::Rule[clamp-mss-ipv6]

Parameters differences:

--- Ferm::Rule[clamp-mss-ipv6].orig
+++ Ferm::Rule[clamp-mss-ipv6]

@@
-    rule => outerface (enp152s0f0np0 lo) saddr @ipfilter((208.80.154.241 2620:0:861:ed1a::3:241])) proto tcp sport (9243 9443 9643) tcp-flags (SYN) SYN TCPMSS set-mss 1400;
+    rule => outerface (enp152s0f0np0 lo) saddr @ipfilter(10.2.2.30) proto tcp sport (9200 9243 9443) tcp-flags (SYN) SYN TCPMSS set-mss 1400;

File[/usr/local/bin/pool-nginx]

Parameters differences:

--- File[/usr/local/bin/pool-nginx].orig
+++ File[/usr/local/bin/pool-nginx]

+    ensure => present
+    group  => root
+    owner  => root
+    before => ['Service[nginx]']
+    mode   => 0555

Content differences:

--- /usr/local/bin/pool-nginx.orig
+++ /usr/local/bin/pool-nginx
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search-https search-omega-https --pool --retries 10 --wait 5

Systemd::Unit[tcp-mss-clamper]

File[/usr/local/sbin/restart-opensearch_1@cloudelastic-omega-eqiad.service]

Parameters differences:

--- File[/usr/local/sbin/restart-opensearch_1@cloudelastic-omega-eqiad.service].orig
+++ File[/usr/local/sbin/restart-opensearch_1@cloudelastic-omega-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/sbin/restart-opensearch_1@cloudelastic-omega-eqiad.service.orig
+++ /usr/local/sbin/restart-opensearch_1@cloudelastic-omega-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-omega-https --services opensearch_1@cloudelastic-omega-eqiad.service --retries 10 --wait 5 --max-concurrency 1 $@

Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]

Parameters differences:

--- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport].orig
+++ Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]

@@
-    clamped_ipport => ['208.80.154.241:9243', '208.80.154.241:9443', '208.80.154.241:9643', '[2620:0:861:ed1a::3:241]:9243', '[2620:0:861:ed1a::3:241]:9443', '[2620:0:861:ed1a::3:241]:9643']
+    clamped_ipport => ['10.2.2.30:9200', '10.2.2.30:9243', '10.2.2.30:9443']

Systemd::Timer::Job[prometheus_ferm_mss]

Parameters differences:

--- Systemd::Timer::Job[prometheus_ferm_mss].orig
+++ Systemd::Timer::Job[prometheus_ferm_mss]

@@
-    command => /usr/local/bin/prometheus-ferm-mss -o /var/lib/prometheus/node.d/ferm-mss.prom -e 208.80.154.241:9243 -e 208.80.154.241:9443 -e 208.80.154.241:9643 -e [2620:0:861:ed1a::3:241]:9243 -e [2620:0:861:ed1a::3:241]:9443 -e [2620:0:861:ed1a::3:241]:9643
+    command => /usr/local/bin/prometheus-ferm-mss -o /var/lib/prometheus/node.d/ferm-mss.prom -e 10.2.2.30:9200 -e 10.2.2.30:9243 -e 10.2.2.30:9443

File[/usr/local/bin/pool-opensearch_2@production-search-omega-eqiad]

Parameters differences:

--- File[/usr/local/bin/pool-opensearch_2@production-search-omega-eqiad].orig
+++ File[/usr/local/bin/pool-opensearch_2@production-search-omega-eqiad]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0555

Content differences:

--- /usr/local/bin/pool-opensearch_2@production-search-omega-eqiad.orig
+++ /usr/local/bin/pool-opensearch_2@production-search-omega-eqiad
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search-omega-https --pool --retries 10 --wait 5

Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-eqiad]

Parameters differences:

--- Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-eqiad].orig
+++ Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-eqiad]

+    lvs_pools       => ['search', 'search-https']
+    require         => ['Class[Conftool::Scripts]']
+    max_concurrency => 5

File[/usr/local/bin/depool-opensearch_1@cloudelastic-omega-eqiad.service]

Parameters differences:

--- File[/usr/local/bin/depool-opensearch_1@cloudelastic-omega-eqiad.service].orig
+++ File[/usr/local/bin/depool-opensearch_1@cloudelastic-omega-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/bin/depool-opensearch_1@cloudelastic-omega-eqiad.service.orig
+++ /usr/local/bin/depool-opensearch_1@cloudelastic-omega-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-omega-https --depool --retries 10 --wait 5

Class[Profile::Lvs::Realserver::Ipip]

Parameters differences:

--- Class[Profile::Lvs::Realserver::Ipip].orig
+++ Class[Profile::Lvs::Realserver::Ipip]

@@
-    pools => {'cloudelastic-chi-https': {'services': ['opensearch_1@cloudelastic-chi-eqiad.service']}, 'cloudelastic-psi-https': {'services': ['opensearch_1@cloudelastic-psi-eqiad.service']}, 'cloudelastic-omega-https': {'services': ['opensearch_1@cloudelastic-omega-eqiad.service']}}
+    pools => {'search': {'services': ['opensearch_2@production-search-eqiad']}, 'search-https': {'services': ['nginx', 'opensearch_2@production-search-eqiad']}, 'search-omega-https': {'services': ['nginx', 'opensearch_2@production-search-omega-eqiad']}}

File[/usr/local/sbin/restart-opensearch_1@cloudelastic-chi-eqiad.service]

Parameters differences:

--- File[/usr/local/sbin/restart-opensearch_1@cloudelastic-chi-eqiad.service].orig
+++ File[/usr/local/sbin/restart-opensearch_1@cloudelastic-chi-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/sbin/restart-opensearch_1@cloudelastic-chi-eqiad.service.orig
+++ /usr/local/sbin/restart-opensearch_1@cloudelastic-chi-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-chi-https --services opensearch_1@cloudelastic-chi-eqiad.service --retries 10 --wait 5 --max-concurrency 1 $@

File[/usr/local/bin/depool-opensearch_1@cloudelastic-chi-eqiad.service]

Parameters differences:

--- File[/usr/local/bin/depool-opensearch_1@cloudelastic-chi-eqiad.service].orig
+++ File[/usr/local/bin/depool-opensearch_1@cloudelastic-chi-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/bin/depool-opensearch_1@cloudelastic-chi-eqiad.service.orig
+++ /usr/local/bin/depool-opensearch_1@cloudelastic-chi-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-chi-https --depool --retries 10 --wait 5

File[/lib/systemd/system/prometheus_ferm_mss.service]

Content differences:

--- /lib/systemd/system/prometheus_ferm_mss.service.orig
+++ /lib/systemd/system/prometheus_ferm_mss.service
@@ -5,4 +5,4 @@
 [Service]
 Type=oneshot
 User=root
-ExecStart=/usr/local/bin/prometheus-ferm-mss -o /var/lib/prometheus/node.d/ferm-mss.prom -e 208.80.154.241:9243 -e 208.80.154.241:9443 -e 208.80.154.241:9643 -e [2620:0:861:ed1a::3:241]:9243 -e [2620:0:861:ed1a::3:241]:9443 -e [2620:0:861:ed1a::3:241]:9643
+ExecStart=/usr/local/bin/prometheus-ferm-mss -o /var/lib/prometheus/node.d/ferm-mss.prom -e 10.2.2.30:9200 -e 10.2.2.30:9243 -e 10.2.2.30:9443

File[/etc/default/wikimedia-lvs-realserver]

Content differences:

--- /etc/default/wikimedia-lvs-realserver.orig
+++ /etc/default/wikimedia-lvs-realserver
@@ -7,4 +7,4 @@
 
 # LVS service IPs to be bound to the loopback interface,
 # separate using spaces
-LVS_SERVICE_IPS="208.80.154.241 2620:0:861:ed1a::3:241"
+LVS_SERVICE_IPS="10.2.2.30"

File[/etc/conftool/local_services.yaml]

Content differences:

--- /etc/conftool/local_services.yaml.orig
+++ /etc/conftool/local_services.yaml
@@ -1,19 +1,19 @@
 ---
-cloudelastic-chi-https:
-  cluster: cloudelastic
-  service: cloudelastic-chi-ssl
+search:
+  cluster: elasticsearch
+  service: elasticsearch
   servers:
-  - pybal-high-traffic2-eqiad.wikimedia.org
+  - pybal-low-traffic.svc.eqiad.wmnet
+  port: 9200
+search-https:
+  cluster: elasticsearch
+  service: elasticsearch-ssl
+  servers:
+  - pybal-low-traffic.svc.eqiad.wmnet
   port: 9243
-cloudelastic-omega-https:
-  cluster: cloudelastic
-  service: cloudelastic-omega-ssl
+search-omega-https:
+  cluster: elasticsearch
+  service: elasticsearch-omega-ssl
   servers:
-  - pybal-high-traffic2-eqiad.wikimedia.org
+  - pybal-low-traffic.svc.eqiad.wmnet
   port: 9443
-cloudelastic-psi-https:
-  cluster: cloudelastic
-  service: cloudelastic-psi-ssl
-  servers:
-  - pybal-high-traffic2-eqiad.wikimedia.org
-  port: 9643

File[/usr/local/bin/pool-opensearch_1@cloudelastic-omega-eqiad.service]

Parameters differences:

--- File[/usr/local/bin/pool-opensearch_1@cloudelastic-omega-eqiad.service].orig
+++ File[/usr/local/bin/pool-opensearch_1@cloudelastic-omega-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/bin/pool-opensearch_1@cloudelastic-omega-eqiad.service.orig
+++ /usr/local/bin/pool-opensearch_1@cloudelastic-omega-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-omega-https --pool --retries 10 --wait 5

Ferm::Rule[clamp-mss-ipv4]

Parameters differences:

--- Ferm::Rule[clamp-mss-ipv4].orig
+++ Ferm::Rule[clamp-mss-ipv4]

@@
-    rule => outerface (enp152s0f0np0 lo) saddr @ipfilter((208.80.154.241 2620:0:861:ed1a::3:241])) proto tcp sport (9243 9443 9643) tcp-flags (SYN) SYN TCPMSS set-mss 1440;
+    rule => outerface (enp152s0f0np0 lo) saddr @ipfilter(10.2.2.30) proto tcp sport (9200 9243 9443) tcp-flags (SYN) SYN TCPMSS set-mss 1440;

File[/etc/ferm/conf.d/10_clamp-mss-ipv6]

Content differences:

--- /etc/ferm/conf.d/10_clamp-mss-ipv6.orig
+++ /etc/ferm/conf.d/10_clamp-mss-ipv6
@@ -5,7 +5,7 @@
 domain (ip6) {
 	table filter {
 		chain OUTPUT {
-			outerface (enp152s0f0np0 lo) saddr @ipfilter((208.80.154.241 2620:0:861:ed1a::3:241])) proto tcp sport (9243 9443 9643) tcp-flags (SYN) SYN TCPMSS set-mss 1400;
+			outerface (enp152s0f0np0 lo) saddr @ipfilter(10.2.2.30) proto tcp sport (9200 9243 9443) tcp-flags (SYN) SYN TCPMSS set-mss 1400;
 		}
 	}
 }

Systemd::Unit[prometheus_ferm_mss.service]

Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-omega-eqiad]

Parameters differences:

--- Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-omega-eqiad].orig
+++ Conftool::Scripts::Safe_service_restart[opensearch_2@production-search-omega-eqiad]

+    lvs_pools       => ['search-omega-https']
+    require         => ['Class[Conftool::Scripts]']
+    max_concurrency => 5

File[/usr/local/sbin/restart-opensearch_2@production-search-omega-eqiad]

Parameters differences:

--- File[/usr/local/sbin/restart-opensearch_2@production-search-omega-eqiad].orig
+++ File[/usr/local/sbin/restart-opensearch_2@production-search-omega-eqiad]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0555

Content differences:

--- /usr/local/sbin/restart-opensearch_2@production-search-omega-eqiad.orig
+++ /usr/local/sbin/restart-opensearch_2@production-search-omega-eqiad
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search-omega-https --services opensearch_2@production-search-omega-eqiad --retries 10 --wait 5 --max-concurrency 5 $@

File[/usr/local/sbin/restart-opensearch_1@cloudelastic-psi-eqiad.service]

Parameters differences:

--- File[/usr/local/sbin/restart-opensearch_1@cloudelastic-psi-eqiad.service].orig
+++ File[/usr/local/sbin/restart-opensearch_1@cloudelastic-psi-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/sbin/restart-opensearch_1@cloudelastic-psi-eqiad.service.orig
+++ /usr/local/sbin/restart-opensearch_1@cloudelastic-psi-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-psi-https --services opensearch_1@cloudelastic-psi-eqiad.service --retries 10 --wait 5 --max-concurrency 1 $@

Conftool::Scripts::Safe_service_restart[nginx]

Parameters differences:

--- Conftool::Scripts::Safe_service_restart[nginx].orig
+++ Conftool::Scripts::Safe_service_restart[nginx]

+    lvs_pools       => ['search-https', 'search-omega-https']
+    require         => ['Class[Conftool::Scripts]']
+    max_concurrency => 5

File[/usr/local/bin/depool-opensearch_2@production-search-eqiad]

Parameters differences:

--- File[/usr/local/bin/depool-opensearch_2@production-search-eqiad].orig
+++ File[/usr/local/bin/depool-opensearch_2@production-search-eqiad]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0555

Content differences:

--- /usr/local/bin/depool-opensearch_2@production-search-eqiad.orig
+++ /usr/local/bin/depool-opensearch_2@production-search-eqiad
@@ -0,0 +1,2 @@
+#!/bin/bash
+/usr/local/bin/safe-service-restart --pools search search-https --depool --retries 10 --wait 5

Systemd::Service[tcp-mss-clamper]

Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-psi-eqiad.service]

Parameters differences:

--- Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-psi-eqiad.service].orig
+++ Conftool::Scripts::Safe_service_restart[opensearch_1@cloudelastic-psi-eqiad.service]

-    lvs_pools       => ['cloudelastic-psi-https']
-    require         => ['Class[Conftool::Scripts]']
-    max_concurrency => 1

Prometheus::Node_ferm_mss[ferm_clamped_ipport]

Parameters differences:

--- Prometheus::Node_ferm_mss[ferm_clamped_ipport].orig
+++ Prometheus::Node_ferm_mss[ferm_clamped_ipport]

@@
-    clamped_ipport => ['208.80.154.241:9243', '208.80.154.241:9443', '208.80.154.241:9643', '[2620:0:861:ed1a::3:241]:9243', '[2620:0:861:ed1a::3:241]:9443', '[2620:0:861:ed1a::3:241]:9643']
+    clamped_ipport => ['10.2.2.30:9200', '10.2.2.30:9243', '10.2.2.30:9443']

File[/usr/local/bin/pool-opensearch_1@cloudelastic-psi-eqiad.service]

Parameters differences:

--- File[/usr/local/bin/pool-opensearch_1@cloudelastic-psi-eqiad.service].orig
+++ File[/usr/local/bin/pool-opensearch_1@cloudelastic-psi-eqiad.service]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0555

Content differences:

--- /usr/local/bin/pool-opensearch_1@cloudelastic-psi-eqiad.service.orig
+++ /usr/local/bin/pool-opensearch_1@cloudelastic-psi-eqiad.service
@@ -1,2 +0,0 @@
-#!/bin/bash
-/usr/local/bin/safe-service-restart --pools cloudelastic-psi-https --pool --retries 10 --wait 5

Compilation results for cloudelastic1012.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources only in the old catalog

Resources modified

Relevant files