Compilation results for logstash1023.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	3353
Resources added:	13
Resources removed:	13
Resources modified:	5
Change percentage:	0.92%

Resources only in the new catalog

File[/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server.chained.pem]
Exec[Generate cert discovery2026__logstash_wikimedia_org_server refresh on intermediate ca change]
Cfssl::Cert[discovery2026__logstash_wikimedia_org_server]
File[/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server.pem]
Exec[Generate cert discovery2026__logstash_wikimedia_org_server]
File[/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server.csr]
File[/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server.chain.pem]
File[/etc/cfssl/csr/discovery2026__logstash_wikimedia_org_server.csr]
File[/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server-key.pem]
Cfssl::Csr[/etc/cfssl/csr/discovery2026__logstash_wikimedia_org_server.csr]
Exec[create chained cert /etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server.chain.pem]
Exec[renew certificate - discovery2026__logstash_wikimedia_org_server]
Exec[Generate cert discovery2026__logstash_wikimedia_org_server refresh]

Resources only in the old catalog

Cfssl::Cert[discovery__logstash_wikimedia_org_server]
Exec[Generate cert discovery__logstash_wikimedia_org_server refresh]
Exec[Generate cert discovery__logstash_wikimedia_org_server]
Exec[renew certificate - discovery__logstash_wikimedia_org_server]
File[/etc/cfssl/csr/discovery__logstash_wikimedia_org_server.csr]
Cfssl::Csr[/etc/cfssl/csr/discovery__logstash_wikimedia_org_server.csr]
File[/etc/envoy/ssl/discovery__logstash_wikimedia_org_server.chain.pem]
Exec[create chained cert /etc/envoy/ssl/discovery__logstash_wikimedia_org_server.chain.pem]
File[/etc/envoy/ssl/discovery__logstash_wikimedia_org_server.pem]
Exec[Generate cert discovery__logstash_wikimedia_org_server refresh on intermediate ca change]
File[/etc/envoy/ssl/discovery__logstash_wikimedia_org_server.csr]
File[/etc/envoy/ssl/discovery__logstash_wikimedia_org_server.chained.pem]
File[/etc/envoy/ssl/discovery__logstash_wikimedia_org_server-key.pem]

Resources modified

Envoyproxy::Conf[tls_terminator_443]
Envoyproxy::Listener[tls_terminator_443]

File[/etc/envoy/listeners.d/00-tls_terminator_443.yaml]

Content differences:

--- /etc/envoy/listeners.d/00-tls_terminator_443.yaml.orig
+++ /etc/envoy/listeners.d/00-tls_terminator_443.yaml
@@ -16,8 +16,8 @@
       '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
       common_tls_context:
         tls_certificates:
-        - certificate_chain: { filename: "/etc/envoy/ssl/discovery__logstash_wikimedia_org_server.chained.pem" }
-          private_key: { filename: "/etc/envoy/ssl/discovery__logstash_wikimedia_org_server-key.pem" }
+        - certificate_chain: { filename: "/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server.chained.pem" }
+          private_key: { filename: "/etc/envoy/ssl/discovery2026__logstash_wikimedia_org_server-key.pem" }
   filters:
   - name: envoy.http_connection_manager
     typed_config:

Class[Profile::Tlsproxy::Envoy]

Parameters differences:

--- Class[Profile::Tlsproxy::Envoy].orig
+++ Class[Profile::Tlsproxy::Envoy]

@@
-    cfssl_label => discovery
+    cfssl_label => discovery2026

Envoyproxy::Tls_terminator[443]