Compilation results for tcp-proxy5004.eqsin.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• File[/usr/local/bin/depool]
• Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
• File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
• File[/usr/local/bin/decommission]
• File[/etc/default/wikimedia-lvs-realserver]
• File[/usr/local/bin/ispooled]
• File[/lib/systemd/system/tcp-mss-clamper.service]
• File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
• Augeas[ipip60_manual]
• File[/lib/systemd/system/prometheus_ferm_mss.timer]
• Exec[ip addr add 127.0.0.42/32 dev ipip0]
• File[/etc/conftool/schema.yaml]
• File[/etc/conftool/json-schema/]
• File[/etc/etcd]
• Exec[ip link add name ipip0 type ipip external]
• Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
• Node[__node_regexp__tcp-proxy1-7001-9.codfwdrmrseqiadeqsinesamsmagruulsfo.]
• Exec[systemd daemon-reload for wmf_auto_restart_haproxy.service (wmf_auto_restart_haproxy.service)]
• File[/etc/ferm/conf.d/10_proxy_gerrit_ssh]
• File[/usr/local/bin/prometheus-lvs-realserver-mss]
• File[/usr/local/bin/pool]
• File[/usr/local/bin/drain]
• Service[wmf_auto_restart_haproxy.timer]
• File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
• File_line[rm_post-up_lo_clsact_lo]
• File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
• File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
• Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
• File[/etc/conftool/config.yaml]
• Exec[systemd daemon-reload for wmf_auto_restart_haproxy.timer (wmf_auto_restart_haproxy.timer)]
• Augeas[ipip0_add_up]
• File[/etc/conftool/local_services.yaml]
• File[/lib/systemd/system/wmf_auto_restart_haproxy.service]
• File[/var/log/prometheus_ferm_mss]
• File[/etc/ferm/conf.d/10_ipip]
• File[/var/log/wmf_auto_restart_haproxy]
• File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
• File[/etc/etcd/etcdrc]
• Exec[/usr/sbin/tc qdisc del dev ens13 clsact]
• File_line[auto_restart_file_presence_haproxy]
• Package[haproxy]
• File_line[rm_post-up_ens13_clsact_ens13]
• Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
• File[/etc/conftool]
• Augeas[ipip0_set_up]
• File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
• Augeas[ipip0_manual]
• Exec[/usr/sbin/tc qdisc del dev lo clsact]
• Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]
• File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
• Exec[ip link set up dev ipip0]
• Package[python3-conftool]
• File[/etc/poolcounter-backends.yaml]
• Package[python3-poolcounter]
• File[/usr/local/bin/safe-service-restart]
• File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
• File[/usr/local/sbin/restart-gerrit]
• File[/etc/logrotate.d/prometheus_ferm_mss]
• File[/etc/logrotate.d/wmf_auto_restart_haproxy]
• File[/usr/local/bin/depool-gerrit]
• Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
• File[/etc/update-motd.d/05-tcpproxy]
• Exec[ip link set up dev ipip60]
• File[/usr/local/bin/pool-gerrit]
• Augeas[ipip60_add_up]
• Exec[disable-rp-filter-ens13]
• File[/usr/local/bin/pooler-loop]
• Service[haproxy]
• Service[prometheus_ferm_mss.timer]
• Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
• File[/etc/ferm/conf.d/10_ip6ip6]
• File[/lib/systemd/system/prometheus_lvs_realserver_mss.timer]
• File[/usr/local/bin/prometheus-ferm-mss]
• Exec[ip link add name ipip60 type ip6tnl external]
• File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]
• File[/var/log/prometheus_lvs_realserver_mss]
• Exec[/usr/sbin/dpkg-reconfigure -p critical -f noninteractive wikimedia-lvs-realserver]
• Package[wikimedia-lvs-realserver]
• Service[prometheus_lvs_realserver_mss.timer]
• Exec[disable-rp-filter-ipip60]
• File[/etc/haproxy/haproxy.cfg]
• File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
• File[/lib/systemd/system/prometheus_ferm_mss.service]
• File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
• Augeas[ipip60_set_up]
• Service[tcp-mss-clamper]
• File[/etc/rsyslog.d/40-wmf-auto-restart-haproxy.conf]
• Exec[disable-rp-filter-ipip0]
• File[/root/.etcdrc]
• Package[tcp-mss-clamper]
• File[/lib/systemd/system/wmf_auto_restart_haproxy.timer]
• Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
• Augeas[ipip0_127.0.0.42/32]

Resources only in the old catalog

• File[/etc/update-motd.d/05-insetup--infrastructure-foundations-ferm]
• Node[__node_regexp__tcp-proxy50034.eqsin.]

Resources modified

• File[/etc/sysctl.d/51-ubuntu-defaults.conf]

  Content differences:

  --- /etc/sysctl.d/51-ubuntu-defaults.conf.orig
  +++ /etc/sysctl.d/51-ubuntu-defaults.conf
  @@ -4,7 +4,7 @@
   kernel.kptr_restrict = 1
   kernel.printk = 4 4 1 7
   kernel.yama.ptrace_scope = 1
  -net.ipv4.conf.all.rp_filter = 1
  -net.ipv4.conf.default.rp_filter = 1
  +net.ipv4.conf.all.rp_filter = 0
  +net.ipv4.conf.default.rp_filter = 0
   net.ipv4.tcp_syncookies = 1
   vm.mmap_min_addr = 65536

• Concat_fragment[main contacts]

  Content differences:

  --- main contacts.orig
  +++ main contacts
  @@ -1,3 +1,2 @@
   ---
  -role::insetup::infrastructure_foundations_ferm:
  -- Infrastructure Foundations
  +role::tcpproxy: []

• File[/var/lib/prometheus/node.d/role_owner.prom]

  Content differences:

  --- /var/lib/prometheus/node.d/role_owner.prom.orig
  +++ /var/lib/prometheus/node.d/role_owner.prom
  @@ -1,3 +1,3 @@
   # HELP role_owner The team owner of the server role
   # TYPE role_owner gauge
  -role_owner{team="infrastructure-foundations",role="insetup::infrastructure_foundations_ferm",cluster="insetup"} 1.0
  +role_owner{team="unknown",role="tcpproxy",cluster="misc"} 1.0

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Standard Diff
• Full Diff