Compilation results for cephosd1001.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• File[/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.csr]
• Exec[create chained cert /etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.chain.pem]
• Exec[Generate cert discovery2026__rgw_eqiad_dpe_anycast_wmnet_server refresh]
• Exec[Generate cert discovery2026__rgw_eqiad_dpe_anycast_wmnet_server]
• File[/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server-key.pem]
• Cfssl::Csr[/etc/cfssl/csr/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.csr]
• File[/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.chain.pem]
• File[/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.pem]
• Exec[renew certificate - discovery2026__rgw_eqiad_dpe_anycast_wmnet_server]
• File[/etc/cfssl/csr/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.csr]
• Cfssl::Cert[discovery2026__rgw_eqiad_dpe_anycast_wmnet_server]
• File[/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.chained.pem]
• Exec[Generate cert discovery2026__rgw_eqiad_dpe_anycast_wmnet_server refresh on intermediate ca change]

Resources only in the old catalog

• Cfssl::Csr[/etc/cfssl/csr/discovery__rgw_eqiad_dpe_anycast_wmnet_server.csr]
• Exec[renew certificate - discovery__rgw_eqiad_dpe_anycast_wmnet_server]
• File[/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.pem]
• Exec[create chained cert /etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.chain.pem]
• File[/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.chained.pem]
• Exec[Generate cert discovery__rgw_eqiad_dpe_anycast_wmnet_server refresh on intermediate ca change]
• Cfssl::Cert[discovery__rgw_eqiad_dpe_anycast_wmnet_server]
• File[/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.csr]
• Exec[Generate cert discovery__rgw_eqiad_dpe_anycast_wmnet_server refresh]
• File[/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.chain.pem]
• Exec[Generate cert discovery__rgw_eqiad_dpe_anycast_wmnet_server]
• File[/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server-key.pem]
• File[/etc/cfssl/csr/discovery__rgw_eqiad_dpe_anycast_wmnet_server.csr]

Resources modified

• Envoyproxy::Conf[tls_terminator_443]

• File[/etc/envoy/listeners.d/00-tls_terminator_443.yaml]

  Content differences:

  --- /etc/envoy/listeners.d/00-tls_terminator_443.yaml.orig
  +++ /etc/envoy/listeners.d/00-tls_terminator_443.yaml
  @@ -16,8 +16,8 @@
         '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
         common_tls_context:
           tls_certificates:
  -        - certificate_chain: { filename: "/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.chained.pem" }
  -          private_key: { filename: "/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server-key.pem" }
  +        - certificate_chain: { filename: "/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.chained.pem" }
  +          private_key: { filename: "/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server-key.pem" }
     filters:
     - name: envoy.http_connection_manager
       typed_config:

• Class[Profile::Tlsproxy::Envoy]

  Parameters differences:

  --- Class[Profile::Tlsproxy::Envoy].orig
  +++ Class[Profile::Tlsproxy::Envoy]
  
  @@
  -    cfssl_label => discovery
  +    cfssl_label => discovery2026
  

• Envoyproxy::Tls_terminator[443]

  Parameters differences:

  --- Envoyproxy::Tls_terminator[443].orig
  +++ Envoyproxy::Tls_terminator[443]
  
  @@
  -    global_certs => [{'cert_path': '/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery__rgw_eqiad_dpe_anycast_wmnet_server-key.pem'}]
  +    global_certs => [{'cert_path': '/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server.chained.pem', 'key_path': '/etc/envoy/ssl/discovery2026__rgw_eqiad_dpe_anycast_wmnet_server-key.pem'}]
  

• Envoyproxy::Listener[tls_terminator_443]

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Full Diff