Compilation results for deploy1003.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	17015
Resources added:	26
Resources removed:	26
Resources modified:	5
Change percentage:	0.33%

Resources only in the new catalog

File[/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.csr]
Exec[Generate cert discovery2026__spiderpig_wikimedia_org_server]
File[/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.pem]
Cfssl::Csr[/etc/cfssl/csr/discovery2026__deployment_eqiad_wmnet_server.csr]
File[/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.pem]
File[/etc/cfssl/csr/discovery2026__spiderpig_wikimedia_org_server.csr]
Exec[Generate cert discovery2026__spiderpig_wikimedia_org_server refresh]
Exec[Generate cert discovery2026__deployment_eqiad_wmnet_server refresh on intermediate ca change]
Exec[create chained cert /etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.chain.pem]
Exec[Generate cert discovery2026__spiderpig_wikimedia_org_server refresh on intermediate ca change]
Exec[renew certificate - discovery2026__deployment_eqiad_wmnet_server]
File[/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server-key.pem]
File[/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server-key.pem]
File[/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.csr]
Cfssl::Cert[discovery2026__deployment_eqiad_wmnet_server]
Exec[create chained cert /etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.chain.pem]
Cfssl::Csr[/etc/cfssl/csr/discovery2026__spiderpig_wikimedia_org_server.csr]
File[/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.chain.pem]
File[/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.chained.pem]
File[/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.chained.pem]
Exec[renew certificate - discovery2026__spiderpig_wikimedia_org_server]
Exec[Generate cert discovery2026__deployment_eqiad_wmnet_server]
File[/etc/cfssl/csr/discovery2026__deployment_eqiad_wmnet_server.csr]
File[/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.chain.pem]
Cfssl::Cert[discovery2026__spiderpig_wikimedia_org_server]
Exec[Generate cert discovery2026__deployment_eqiad_wmnet_server refresh]

Resources only in the old catalog

File[/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.pem]
File[/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server-key.pem]
Cfssl::Csr[/etc/cfssl/csr/discovery__deployment_eqiad_wmnet_server.csr]
Exec[Generate cert discovery__spiderpig_wikimedia_org_server]
File[/etc/cfssl/csr/discovery__deployment_eqiad_wmnet_server.csr]
File[/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.chained.pem]
Exec[create chained cert /etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.chain.pem]
Exec[Generate cert discovery__spiderpig_wikimedia_org_server refresh on intermediate ca change]
Exec[renew certificate - discovery__deployment_eqiad_wmnet_server]
Cfssl::Cert[discovery__deployment_eqiad_wmnet_server]
File[/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.chain.pem]
File[/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.csr]
Exec[Generate cert discovery__deployment_eqiad_wmnet_server refresh]
File[/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.csr]
Exec[Generate cert discovery__deployment_eqiad_wmnet_server refresh on intermediate ca change]
Exec[Generate cert discovery__deployment_eqiad_wmnet_server]
Exec[renew certificate - discovery__spiderpig_wikimedia_org_server]
File[/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.chained.pem]
Cfssl::Cert[discovery__spiderpig_wikimedia_org_server]
File[/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.chain.pem]
Cfssl::Csr[/etc/cfssl/csr/discovery__spiderpig_wikimedia_org_server.csr]
File[/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server-key.pem]
Exec[Generate cert discovery__spiderpig_wikimedia_org_server refresh]
File[/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.pem]
Exec[create chained cert /etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.chain.pem]
File[/etc/cfssl/csr/discovery__spiderpig_wikimedia_org_server.csr]

Resources modified

File[/etc/envoy/listeners.d/00-tls_terminator_443.yaml]

Content differences:

--- /etc/envoy/listeners.d/00-tls_terminator_443.yaml.orig
+++ /etc/envoy/listeners.d/00-tls_terminator_443.yaml
@@ -16,8 +16,8 @@
       '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
       common_tls_context:
         tls_certificates:
-        - certificate_chain: { filename: "/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.chained.pem" }
-          private_key: { filename: "/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server-key.pem" }
+        - certificate_chain: { filename: "/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.chained.pem" }
+          private_key: { filename: "/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server-key.pem" }
   filters:
   - name: envoy.http_connection_manager
     typed_config:
@@ -58,8 +58,8 @@
       '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
       common_tls_context:
         tls_certificates:
-        - certificate_chain: { filename: "/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.chained.pem" }
-          private_key: { filename: "/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server-key.pem" }
+        - certificate_chain: { filename: "/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.chained.pem" }
+          private_key: { filename: "/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server-key.pem" }
   filters:
   - name: envoy.http_connection_manager
     typed_config:

Envoyproxy::Conf[tls_terminator_443]
Envoyproxy::Listener[tls_terminator_443]

Envoyproxy::Tls_terminator[443]

Parameters differences:

--- Envoyproxy::Tls_terminator[443].orig
+++ Envoyproxy::Tls_terminator[443]

@@
-    upstreams    => [{'server_names': ['spiderpig.wikimedia.org'], 'certificates': [{'cert_path': '/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery__spiderpig_wikimedia_org_server-key.pem'}], 'upstream': {'port': 9000, 'addr': 'deploy1003.eqiad.wmnet'}}]
+    upstreams    => [{'server_names': ['spiderpig.wikimedia.org'], 'certificates': [{'cert_path': '/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery2026__spiderpig_wikimedia_org_server-key.pem'}], 'upstream': {'port': 9000, 'addr': 'deploy1003.eqiad.wmnet'}}]
@@
-    global_certs => [{'cert_path': '/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery__deployment_eqiad_wmnet_server-key.pem'}]
+    global_certs => [{'cert_path': '/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery2026__deployment_eqiad_wmnet_server-key.pem'}]

Class[Profile::Tlsproxy::Envoy]