Compilation results for centrallog2002.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the old catalog

• File[/etc/cfssl/csr/syslog__centrallog2002_codfw_wmnet.csr]
• File[/etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chain.pem]
• File[/etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chained.pem]
• Exec[renew certificate - syslog__centrallog2002_codfw_wmnet]
• File[/etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.pem]
• File[/etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.csr]
• File[/etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet-key.pem]
• Cfssl::Csr[/etc/cfssl/csr/syslog__centrallog2002_codfw_wmnet.csr]
• Exec[Generate cert syslog__centrallog2002_codfw_wmnet]
• Exec[create chained cert /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chain.pem]
• Exec[Generate cert syslog__centrallog2002_codfw_wmnet refresh on intermediate ca change]
• Cfssl::Cert[syslog__centrallog2002_codfw_wmnet]
• File[/etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet]
• Exec[Generate cert syslog__centrallog2002_codfw_wmnet refresh]

Resources modified

• Class[Rsyslog::Receiver]

  Parameters differences:

  --- Class[Rsyslog::Receiver].orig
  +++ Class[Rsyslog::Receiver]
  
  -    ssl_provider => cfssl
  +    ca_file      => /etc/ssl/certs/wmf-ca-certificates.crt
  

• File[/lib/systemd/system/rsyslog-receiver-remedy.service]

  Content differences:

  --- /lib/systemd/system/rsyslog-receiver-remedy.service.orig
  +++ /lib/systemd/system/rsyslog-receiver-remedy.service
  @@ -5,4 +5,4 @@
   [Service]
   Type=oneshot
   User=root
  -ExecStart=/bin/sh -c "timeout 5s openssl s_client -connect localhost:6514 -cert_chain /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chained.pem -cert /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chained.pem -key /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet-key.pem -CAfile /etc/ssl/certs/wmf-ca-certificates.crt -quiet -no_ign_eof </dev/null || systemctl restart rsyslog-receiver"
  +ExecStart=/bin/sh -c "timeout 5s openssl s_client -connect localhost:6514 -cert_chain /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver.chained.pem -cert /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver.chained.pem -key /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver-key.pem -CAfile /etc/ssl/certs/wmf-ca-certificates.crt -quiet -no_ign_eof </dev/null || systemctl restart rsyslog-receiver"

• Class[Toil::Rsyslog_receiver_remedy]

  Parameters differences:

  --- Class[Toil::Rsyslog_receiver_remedy].orig
  +++ Class[Toil::Rsyslog_receiver_remedy]
  
  -    ssl_provider => cfssl
  +    ca_file      => /etc/ssl/certs/wmf-ca-certificates.crt
  +    cert_file    => /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver.chained.pem
  +    key_file     => /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver-key.pem
  

• Systemd::Timer::Job[rsyslog-receiver-remedy]

  Parameters differences:

  --- Systemd::Timer::Job[rsyslog-receiver-remedy].orig
  +++ Systemd::Timer::Job[rsyslog-receiver-remedy]
  
  @@
  -    command => /bin/sh -c "timeout 5s openssl s_client -connect localhost:6514 -cert_chain /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chained.pem -cert /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet.chained.pem -key /etc/cfssl/ssl/syslog__centrallog2002_codfw_wmnet/syslog__centrallog2002_codfw_wmnet-key.pem -CAfile /etc/ssl/certs/wmf-ca-certificates.crt -quiet -no_ign_eof </dev/null || systemctl restart rsyslog-receiver"
  +    command => /bin/sh -c "timeout 5s openssl s_client -connect localhost:6514 -cert_chain /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver.chained.pem -cert /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver.chained.pem -key /etc/cfssl/ssl/syslog__rsyslog-receiver/syslog__rsyslog-receiver-key.pem -CAfile /etc/ssl/certs/wmf-ca-certificates.crt -quiet -no_ign_eof </dev/null || systemctl restart rsyslog-receiver"
  

• Systemd::Unit[rsyslog-receiver-remedy.service]

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Full Diff