Compilation results for pki1001.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	4897
Resources added:	106
Resources removed:	1199
Resources modified:	11
Change percentage:	26.87%

Resources only in the new catalog

File[/lib/systemd/system/prometheus-node-textfile-check-nft.service]
File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv4.nft]
Exec[systemd daemon-reload for prometheus-node-textfile-check-nft.timer (prometheus-node-textfile-check-nft.timer)]
File[/etc/nftables/input/10_full-monitoring-metrics-access-udp.nft]
File[/etc/nftables/output]
File[/etc/nftables/sets/INTERNAL_ipv6.nft]
File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv6.nft]
File[/etc/nftables/postrouting]
File[/etc/nftables/sets/CLOUD_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft]
Exec[systemd daemon-reload for prometheus-node-textfile-check-nft.service (prometheus-node-textfile-check-nft.service)]
File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv4.nft]
File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MONITORING_HOSTS_ipv4.nft]
Exec[unmask_nftables.service]
File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft]
File[/etc/nftables/input/10_full-monitoring-metrics-access-tcp.nft]
File[/etc/nftables/100_base_puppet.nft]
File[/etc/systemd/system/nftables.service.d/puppet-override.conf]
File[/etc/nftables/sets/INTERNAL_ipv4.nft]
File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/CUMIN_MASTERS_ipv6.nft]
File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv4.nft]
File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/MLSTAGE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv6.nft]
File[/etc/nftables/sets/MLSTAGE_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/NETWORK_INFRA_ipv4.nft]
File[/etc/nftables/sets/NETWORK_INFRA_ipv6.nft]
File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv4.nft]
File[/etc/nftables/sets/LINK_LOCAL_ipv4.nft]
File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft]
File[/lib/systemd/system/prometheus-node-textfile-check-nft.timer]
File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/MONITORING_HOSTS_ipv6.nft]
File[/etc/nftables/sets/FRACK_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv6.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv6.nft]
File[/etc/nftables/sets/INSTALL_HOSTS_ipv6.nft]
File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft]
Exec[systemd daemon-reload for nftables.service (nftables)]
File[/etc/nftables/sets/LINK_LOCAL_ipv6.nft]
File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/CACHES_ipv4.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv6.nft]
File[/etc/nftables/sets]
File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv4.nft]
File[/etc/nftables/sets/LABSTORE_HOSTS_ipv4.nft]
File[/etc/logrotate.d/prometheus-node-textfile-check-nft]
File[/etc/nftables/forward]
File[/etc/nftables/sets/LABS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv6.nft]
File[/etc/update-motd.d/05-insetup--infrastructure-foundations-nftables]
File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft]
File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv4.nft]
Package[nftables]
File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft]
File[/etc/nftables/prerouting]
File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv6.nft]
File[/etc/nftables/notrack]
File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv6.nft]
File[/etc/nftables/sets/CLOUD_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/BASTION_HOSTS_ipv4.nft]
Node[__node_regexp__pki1001.eqiad.]
File[/etc/nftables/sets/BASTION_HOSTS_ipv6.nft]
File[/etc/nftables/sets/MGMT_NETWORKS_ipv6.nft]
File[/etc/nftables/]
File[/etc/nftables/input/10_ssh-from-cumin-masters.nft]
File[/etc/nftables/sets/CACHES_ipv6.nft]
File[/var/log/prometheus-node-textfile-check-nft]
File[/etc/nftables/sets/MGMT_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv6.nft]
File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv6.nft]
File[/etc/nftables/input/10_ssh-from-bastion.nft]
File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv4.nft]
File[/etc/nftables.conf]
File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv4.nft]
File[/etc/nftables/input]
File[/etc/rsyslog.d/40-prometheus-node-textfile-check-nft.conf]
File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv4.nft]
Service[nftables]
File[/usr/local/bin/check-nft]
File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv6.nft]
File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/FRACK_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft]
File[/etc/systemd/system/nftables.service.d]
File[/etc/nftables/main.nft]
File[/etc/nftables/sets/CUMIN_MASTERS_ipv4.nft]
File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv4.nft]
File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv6.nft]
Service[prometheus-node-textfile-check-nft.timer]
File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft]

Resources only in the old catalog

File[/usr/local/bin/prometheus-check-dse_front_proxy-certificate-expiry]
File[/usr/local/bin/prometheus-check-debmonitor-certificate-expiry]
File[/etc/logrotate.d/wmf_auto_restart_apache-htcacheclean]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-aux-front-proxy-certificate-expiry.conf]
Exec[Generate initial CRL for zuul]
Exec[renew certificate - OCSP_discovery_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/dse_front_proxy/cfssl.conf]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-staging-front-proxy-certificate-expiry.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_etcd.service (nrpe2nodexp-check_certificate_expiry_etcd.service)]
File[/etc/cfssl/signers/mlserve_staging/ca/mlserve_staging.pem]
File[/etc/cfssl/signers/mlserve/ca/mlserve-key.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery2026_pki1001_eqiad_wmnet-key.pem]
Exec[systemd daemon-reload for wmf_auto_restart_apache-htcacheclean.timer (wmf_auto_restart_apache-htcacheclean.timer)]
File[/etc/logrotate.d/cfssl-ocsprefresh-dse_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service (prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service)]
Service[cfssl-ocsprefresh-wikikube_front_proxy.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve.service (nrpe2nodexp-check_certificate_expiry_mlserve.service)]
File[/etc/cfssl/csr/OCSP_aux_pki1001_eqiad_wmnet.csr]
File[/var/log/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer (cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service]
File[/etc/cfssl/signers/network_devices/ca/network_devices.pem]
File[/etc/cfssl/signers/wikikube/ca/wikikube.pem]
Service[nrpe2nodexp-check_certificate_expiry_discovery2026.timer]
Service[cfssl-ocspserve@zuul]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer]
File[/var/log/cfssl-ocsprefresh-aux]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve.cfg]
File[/var/log/cfssl-ocsprefresh-debmonitor]
File[/lib/systemd/system/cfssl-ocspserve@cassandra.service]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve.service (cfssl-ocspserve@mlserve)]
File[/etc/cfssl/csr/OCSP_cassandra_pki1001_eqiad_wmnet.csr]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Service[cfssl-ocspserve@debmonitor]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse_front_proxy.service (cfssl-ocsprefresh-dse_front_proxy.service)]
File[/etc/systemd/system/ferm.service.d/ferm-service-status-restart.conf]
Service[cfssl-ocsprefresh-syslog.timer]
File[/etc/cfssl/signers/wikikube_staging/ca]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_front_proxy.service (cfssl-ocsprefresh-mlserve_front_proxy.service)]
File[/var/log/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
Exec[Generate cert OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet]
File[/srv/cfssl/bundles/kafka.pem]
Exec[Generate initial CRL for kafka]
File[/etc/cfssl/signers/discovery]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cassandra.service]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube-front-proxy.conf]
Exec[Generate initial CRL for debmonitor]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve_front_proxy.cfg]
File[/etc/cfssl/csr/OCSP_dse_pki1001_eqiad_wmnet.csr]
Service[cfssl-ocsprefresh-dse.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_kafka.timer (nrpe2nodexp-check_certificate_expiry_kafka.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-kafka.service]
File[/etc/cfssl/signers/mlserve]
File[/srv/cfssl]
Service[nrpe2nodexp-check_certificate_expiry_discovery.timer]
Service[cfssl-ocspserve@puppet_rsa]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve_front_proxy]
Exec[Generate cert OCSP_puppet_rsa_pki1001_eqiad_wmnet]
Service[cfssl-ocspserve@dse]
Service[cfssl-ocsprefresh-aux_front_proxy.timer]
Exec[Generate initial CRL for discovery]
File[/etc/cfssl/ssl/ocsp/OCSP_cassandra_pki1001_eqiad_wmnet-key.pem]
File[/lib/systemd/system/cfssl-ocspserve@etcd.service]
File[/var/log/prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
Exec[Generate cert OCSP_puppet_rsa_pki1001_eqiad_wmnet refresh]
File[/etc/cfssl/ssl/Wikimedia_Internal_Root_CA.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_zuul_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer]
File[/var/log/cfssl-ocsprefresh-wikikube_front_proxy]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve-staging.conf]
File[/lib/systemd/system/cfssl-ocspserve@debmonitor.service]
Exec[Generate cert OCSP_dse_pki1001_eqiad_wmnet refresh]
File[/etc/apache2/env-available]
File[/etc/cfssl/signers/mlserve/ca]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_front_proxy.service]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_front_proxy_pki1001_eqiad_wmnet-key.pem]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-cassandra.service]
File[/lib/systemd/system/cfssl-ocsprefresh-aux.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_front_proxy.timer (cfssl-ocsprefresh-wikikube_front_proxy.timer)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.conf]
File[/etc/ferm/conf.d/10_full_monitoring_metrics_access_tcp]
File[/lib/systemd/system/cfssl-ocsprefresh-cloud_wmnet_ca.service]
File[/etc/cfssl/signers/aux_front_proxy/ca]
File[/usr/local/bin/prometheus-check-mlserve-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service (nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cassandra.timer (cfssl-ocsprefresh-cassandra.timer)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_syslog_pki1001_eqiad_wmnet.pem]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.conf]
Service[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer]
File[/etc/cfssl/csr/OCSP_kafka_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/cfssl-ocsprefresh-puppet_rsa]
File[/lib/systemd/system/nrpe2nodexp-check_cfssl-multirootca_status.service]
Package[python3-pymysql]
Exec[Generate cert OCSP_network_devices_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer]
Exec[systemd daemon-reload for wmf_auto_restart_ulogd2.service (wmf_auto_restart_ulogd2.service)]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube.conf]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging.service]
Service[wmf_auto_restart_ulogd2.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-dse_front_proxy.service]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve_staging.service (cfssl-ocspserve@mlserve_staging)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_syslog.service (nrpe2nodexp-check_certificate_expiry_syslog.service)]
Service[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer]
File[/etc/cfssl/signers/wikikube/cfssl.conf]
File[/etc/cfssl/signers/debmonitor/ca]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-staging-certificate-expiry.conf]
File[/lib/systemd/system/cfssl-ocsprefresh-puppet_rsa.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-puppet-rsa.conf]
File[/etc/apache2/conf-enabled/00-defaults.conf]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-front-proxy-certificate-expiry.conf]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube_staging_front_proxy]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_puppet_rsa]
File[/etc/cfssl/ssl/ocsp/OCSP_cassandra_pki1001_eqiad_wmnet.csr]
File[/var/lib/prometheus/node.d/check_check_cfssl-multirootca_status.prom]
File[/etc/cfssl/signers/debmonitor/ca/debmonitor.pem]
Exec[Generate initial CRL for wikikube_staging]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_debmonitor.timer (nrpe2nodexp-check_certificate_expiry_debmonitor.timer)]
Service[cfssl-ocspserve@aux]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service (prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service)]
Service[cfssl-ocsprefresh-wikikube.timer]
File[/etc/cfssl/signers/cassandra/ca/cassandra-key.pem]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube_front_proxy]
Service[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_aux_front_proxy.prom]
File[/etc/sudoers.d/nrpe_certificate_check_network_devices]
Exec[renew certificate - OCSP_aux_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_puppet_rsa_pki1001_eqiad_wmnet.csr]
Service[cfssl-ocsprefresh-puppet_rsa.timer]
Exec[Generate cert OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet refresh]
File[/etc/cfssl/ssl/ocsp/OCSP_debmonitor_pki1001_eqiad_wmnet-key.pem]
Exec[update_alternative_ip6tables]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_aux.prom]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_aux]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_discovery.prom]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/signers/mlserve_front_proxy/ca/mlserve_front_proxy-key.pem]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-puppet-rsa.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery2026.timer (nrpe2nodexp-check_certificate_expiry_discovery2026.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging_front_proxy.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery_pki1001_eqiad_wmnet-key.pem]
File[/usr/local/bin/prometheus-check-kafka-certificate-expiry]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-discovery2026.conf]
File[/etc/ulogd.conf]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_discovery]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cloud_wmnet_ca.service (cfssl-ocsprefresh-cloud_wmnet_ca.service)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_etcd.prom]
File[/var/log/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube-staging.conf]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_front_proxy.timer (cfssl-ocsprefresh-mlserve_front_proxy.timer)]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_kafka]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service]
File[/usr/local/bin/prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Service[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_discovery2026.prom]
File[/etc/cfssl/ocsp/mlserve_staging.ocsp]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer]
File[/lib/systemd/system/nrpe2nodexp-ferm_active.timer]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-network-devices-certificate-expiry.conf]
File[/etc/cfssl/signers/puppet_rsa/cfssl.conf]
File[/lib/systemd/system/cfssl-ocspserve@mlserve_staging_front_proxy.service]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery2026_pki1001_eqiad_wmnet.csr]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_dse_front_proxy.prom]
Exec[update_alternative_iptables]
File[/lib/systemd/system/cfssl-ocsprefresh-dse.service]
File[/etc/cfssl/ssl/ocsp/OCSP_puppet_rsa_pki1001_eqiad_wmnet-key.pem]
File[/lib/systemd/system/cfssl-ocspserve@aux_front_proxy.service]
Service[nrpe2nodexp-check_certificate_expiry_aux.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_syslog.service]
File[/lib/systemd/system/cfssl-ocspserve@network_devices.service]
Service[ferm]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_kafka.prom]
File[/var/log/cfssl-ocsprefresh-aux_front_proxy]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube.prom]
File[/srv/cfssl/bundles/cassandra.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube.timer]
File[/etc/cfssl/multiroot.conf]
Service[cfssl-ocsprefresh-debmonitor.timer]
File[/etc/default/ferm]
File[/etc/cfssl/ssl/ocsp/OCSP_debmonitor_pki1001_eqiad_wmnet.pem]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube.service (cfssl-ocsprefresh-wikikube.service)]
File[/etc/cfssl/signers/dse/ca/dse.pem]
File[/lib/systemd/system/cfssl-ocspserve@mlserve.service]
Service[nrpe2nodexp-check_certificate_expiry_wikikube.timer]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Exec[Generate cert OCSP_mlserve_staging_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service]
Service[nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer]
Exec[Generate cert OCSP_aux_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_Wikimedia_Internal_Root_CA_pki1001_eqiad_wmnet.pem]
File[/srv/cfssl/bundles/wikikube.pem]
File[/etc/cfssl/ocsp/puppet_rsa.ocsp]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/ca/mlserve_staging_front_proxy.pem]
File[/var/log/cfssl-ocsprefresh-mlserve_staging]
File[/var/log/cfssl-ocsprefresh-wikikube_staging]
File[/usr/local/sbin/cfssl-ocsprefresh]
Service[cfssl-gc-expired-certs.timer]
File[/var/log/cfssl-gc-expired-certs]
File[/etc/cfssl/signers/discovery2026/ca/discovery2026.pem]
File[/etc/ferm/conf.d/10_ssh_from_cumin_masters]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_debmonitor.prom]
File[/etc/apache2/mods-available/status.conf]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_debmonitor]
File[/var/log/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-kafka.conf]
Exec[systemd daemon-reload for cfssl-ocspserve@network_devices.service (cfssl-ocspserve@network_devices)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer)]
Service[cfssl-ocsprefresh-etcd.timer]
File[/etc/cfssl/signers/wikikube_front_proxy/ca/wikikube_front_proxy-key.pem]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-zuul.conf]
Exec[systemd daemon-reload for apache2.service (apache2-apache2-after-network-online-target)]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_pki1001_eqiad_wmnet-key.pem]
File[/etc/cfssl/ocsp/syslog.ocsp]
Service[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging.service (cfssl-ocsprefresh-mlserve_staging.service)]
File[/etc/apache2/mods-enabled/status.conf]
File[/usr/local/bin/prometheus-check-mlserve_front_proxy-certificate-expiry]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-cassandra.conf]
File[/etc/logrotate.d/wmf_auto_restart_apache2]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/cfssl-ocsprefresh-dse.timer]
Exec[renew certificate - OCSP_mlserve_staging_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-gc-expired-certs.timer (cfssl-gc-expired-certs.timer)]
File[/srv/cfssl/bundles/mlserve_front_proxy.pem]
Service[cfssl-ocspserve@wikikube_staging_front_proxy]
File[/etc/cfssl/signers/discovery/ca]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging_front_proxy.timer]
File[/etc/rsyslog.d/40-wmf-auto-restart-ulogd2.conf]
File[/etc/ferm/conf.d/98_filter_log_filter-bootp]
File[/etc/cfssl/signers/wikikube_front_proxy/cfssl.conf]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer)]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_discovery2026]
Exec[Generate initial CRL for wikikube]
File[/etc/cfssl/signers/mlserve_front_proxy/ca/mlserve_front_proxy.pem]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging.service]
File[/etc/cfssl/signers/debmonitor/cfssl.conf]
File[/etc/cfssl/signers/aux]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-etcd.conf]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve.service]
Exec[Generate cert OCSP_aux_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/dse/ca]
Exec[systemd daemon-reload for cfssl-ocsprefresh-network_devices.service (cfssl-ocsprefresh-network_devices.service)]
File[/etc/cfssl/signers/dse_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service)]
File[/etc/cfssl/csr/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/signers/syslog/ca/syslog.pem]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve_staging_front_proxy]
Exec[Generate cert OCSP_debmonitor_pki1001_eqiad_wmnet refresh]
File[/etc/cfssl/ocsp/zuul.ocsp]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service (prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service)]
Service[cfssl-ocsprefresh-cloud_wmnet_ca.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_pki1001_eqiad_wmnet.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer]
Service[cfssl-ocsprefresh-discovery.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service]
File[/etc/cfssl/signers/discovery/ca/discovery-key.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery.service]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-cloud-wmnet-ca-certificate-expiry.conf]
File[/etc/sudoers.d/nrpe-check_check_cfssl-multirootca_status]
File[/etc/cfssl/ssl/ocsp/OCSP_kafka_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/cfssl-ocsprefresh-cassandra]
File[/etc/ferm/conf.d/99_dscp-default]
Exec[Generate cert OCSP_discovery_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer)]
File[/etc/cfssl/db.conf.json]
File[/lib/systemd/system/cfssl-ocspserve@kafka.service]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_cassandra.cfg]
Exec[systemd daemon-reload for cfssl-ocsprefresh-etcd.service (cfssl-ocsprefresh-etcd.service)]
Exec[ensure_present_mod_headers]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-etcd.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service]
Service[cfssl-ocspserve@cloud_wmnet_ca]
File[/etc/cfssl/signers/aux_front_proxy/ca/aux_front_proxy.pem]
Service[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer)]
File[/lib/systemd/system/cfssl-ocspserve@cloud_wmnet_ca.service]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.pem]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube_front_proxy.cfg]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube_staging]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery2026.service]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve.timer]
File[/srv/cfssl/bundles/dse_front_proxy.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve-front-proxy.conf]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-discovery2026.conf]
Exec[systemd daemon-reload for cfssl-ocsprefresh-debmonitor.service (cfssl-ocsprefresh-debmonitor.service)]
File[/lib/systemd/system/cfssl-ocspserve@Wikimedia_Internal_Root_CA.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux.timer (nrpe2nodexp-check_certificate_expiry_aux.timer)]
File[/etc/cfssl/csr/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/signers/aux_front_proxy/cfssl.conf]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service]
File[/lib/systemd/system/cfssl-ocspserve@wikikube_staging_front_proxy.service]
File[/etc/cfssl/signers/cassandra/cfssl.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_zuul_pki1001_eqiad_wmnet-key.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service]
Exec[Generate initial CRL for wikikube_staging_front_proxy]
File[/etc/cfssl/csr/OCSP_mlserve_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ssl/ocsp/OCSP_etcd_pki1001_eqiad_wmnet-key.pem]
Package[links]
File[/etc/cfssl/ssl/ocsp/OCSP_kafka_pki1001_eqiad_wmnet-key.pem]
File[/etc/cfssl/ocsp/wikikube_staging.ocsp]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service]
Exec[Generate initial CRL for wikikube_front_proxy]
Service[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer]
File[/srv/cfssl/bundles/network_devices.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-Wikimedia-Internal-Root-CA.conf]
Exec[ensure_present_mod_ssl]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_dse.cfg]
Exec[renew certificate - OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet]
File[/etc/logrotate.d/cfssl-ocsprefresh-aux]
File[/etc/cfssl/csr/OCSP_syslog_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer)]
Exec[systemd daemon-reload for cfssl-ocspserve@syslog.service (cfssl-ocspserve@syslog)]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_pki1001_eqiad_wmnet-key.pem]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux.service (nrpe2nodexp-check_certificate_expiry_aux.service)]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve-staging-front-proxy.conf]
File[/etc/cfssl/signers/wikikube_staging/ca/wikikube_staging.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service]
File[/etc/apache2/sites-enabled/50-pki-discovery-wmnet.conf]
Exec[Generate cert OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/dse]
Exec[renew certificate - OCSP_syslog_pki1001_eqiad_wmnet]
File[/srv/cfssl/bundles/dse.pem]
File[/etc/cfssl/signers/etcd/cfssl.conf]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_kafka.service]
File[/var/log/cfssl-ocsprefresh-network_devices]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-dse_front_proxy.timer]
File[/etc/cfssl/signers/aux/ca/aux.pem]
File[/lib/systemd/system/cfssl-gc-expired-certs.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_discovery2026.cfg]
File[/etc/cfssl/signers/network_devices/ca]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery_pki1001_eqiad_wmnet.csr]
File[/etc/ferm/conf.d/10_full_monitoring_metrics_access_udp]
Service[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service (nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service)]
Exec[ensure_present_mod_filter]
File[/etc/cfssl/ssl/ocsp/OCSP_Wikimedia_Internal_Root_CA_pki1001_eqiad_wmnet-key.pem]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery.timer (cfssl-ocsprefresh-discovery.timer)]
File[/etc/cfssl/signers/cloud_wmnet_ca/ca/cloud_wmnet_ca-key.pem]
Exec[Generate cert OCSP_syslog_pki1001_eqiad_wmnet]
File[/etc/sudoers.d/nrpe_certificate_check_zuul]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service]
File[/etc/cfssl/csr/OCSP_zuul_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer (nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer)]
File[/srv/cfssl/bundles/wikikube_front_proxy.pem]
File[/etc/update-motd.d/05-pki--multirootca]
Exec[Generate initial CRL for etcd]
Service[cfssl-ocsprefresh-mlserve_front_proxy.timer]
Service[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
File[/etc/cfssl/ocsp/dse.ocsp]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service]
File[/lib/systemd/system/cfssl-ocspserve@syslog.service]
File[/lib/systemd/system/cfssl-ocsprefresh-syslog.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-etcd.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_pki1001_eqiad_wmnet-key.pem]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging_front_proxy.timer (cfssl-ocsprefresh-wikikube_staging_front_proxy.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-kafka.service (cfssl-ocsprefresh-kafka.service)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer)]
Service[nrpe2nodexp-check_certificate_expiry_syslog.timer]
Service[cfssl-ocsprefresh-dse_front_proxy.timer]
File[/etc/cfssl/csr/OCSP_puppet_rsa_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_syslog_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_etcd.timer (nrpe2nodexp-check_certificate_expiry_etcd.timer)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer)]
Exec[renew certificate - OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_pki1001_eqiad_wmnet-key.pem]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_debmonitor.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer)]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.chain.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/signers/dse_front_proxy/ca]
File[/usr/local/lib/nagios/plugins/check_ferm]
File[/lib/systemd/system/cfssl-ocspserve@dse.service]
Exec[Generate initial CRL for mlserve_front_proxy]
Exec[Generate initial CRL for aux]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery2026.service (nrpe2nodexp-check_certificate_expiry_discovery2026.service)]
Exec[ensure_present_mod_status]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_puppet_rsa.prom]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube_staging_front_proxy]
File[/srv/cfssl/bundles/Puppet_Internal_CA.pem.pem]
File[/etc/cfssl/ocsp/aux.ocsp]
Service[cfssl-ocsprefresh-mlserve.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_front_proxy.timer]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_debmonitor.cfg]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Service[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse.timer (cfssl-ocsprefresh-dse.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_cfssl-multirootca_status.service (nrpe2nodexp-check_cfssl-multirootca_status.service)]
File[/etc/rsyslog.d/40-wmf-auto-restart-apache2.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer]
File[/lib/systemd/system/wmf_auto_restart_ulogd2.timer]
Exec[systemd daemon-reload for cfssl-ocspserve@kafka.service (cfssl-ocspserve@kafka)]
Exec[renew certificate - OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet]
Service[cfssl-ocspserve@etcd]
File[/etc/ferm/functions.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_debmonitor.service (nrpe2nodexp-check_certificate_expiry_debmonitor.service)]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-puppet-rsa-certificate-expiry.conf]
File[/lib/systemd/system/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service]
File[/usr/local/bin/prometheus-check-wikikube-certificate-expiry]
Exec[Generate cert puppet_rsa__pki_discovery_wmnet]
File[/etc/cfssl/ocsp/wikikube.ocsp]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
Service[cfssl-ocspserve@wikikube_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service]
Exec[Generate initial CRL for dse]
Service[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer]
Exec[renew certificate - OCSP_wikikube_staging_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/cassandra/ca/cassandra.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-zuul.service]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube-staging-front-proxy.conf]
File[/etc/logrotate.d/cfssl-ocsprefresh-etcd]
Exec[Generate cert OCSP_aux_pki1001_eqiad_wmnet refresh]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve-staging.conf]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-aux.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet-key.pem]
File[/var/log/cfssl-ocsprefresh-kafka]
File[/lib/systemd/system/cfssl-ocspserve@puppet_rsa.service]
Exec[renew certificate - OCSP_aux_front_proxy_pki1001_eqiad_wmnet]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve-staging-front-proxy.conf]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service (prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service)]
File[/etc/apache2/conf-available/50-cfssl-issuer-k8s-pods-vhost-port.conf]
File[/etc/rsyslog.d/40-ulogd.conf]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve.prom]
Service[cfssl-ocspserve@mlserve_front_proxy]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-front-proxy-certificate-expiry.conf]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube_staging]
Exec[Generate cert OCSP_dse_front_proxy_pki1001_eqiad_wmnet]
File[/etc/sudoers.d/nrpe_certificate_check_syslog]
Exec[Generate cert OCSP_cassandra_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cassandra.timer]
File[/etc/cfssl/signers/etcd/ca/etcd.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service]
File[/etc/cfssl/ssl/ocsp/OCSP_network_devices_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube_front_proxy.service (cfssl-ocspserve@wikikube_front_proxy)]
Package[ulogd2]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cloud_wmnet_ca.timer (cfssl-ocsprefresh-cloud_wmnet_ca.timer)]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-syslog.conf]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery2026.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service]
Service[nrpe2nodexp-check_certificate_expiry_zuul.timer]
Package[python3-cryptography]
Exec[systemd daemon-reload for cfssl-ocsprefresh-puppet_rsa.timer (cfssl-ocsprefresh-puppet_rsa.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse_front_proxy.timer (cfssl-ocsprefresh-dse_front_proxy.timer)]
File[/etc/cfssl/signers/debmonitor]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve_staging]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-cassandra.conf]
Exec[Generate cert OCSP_cassandra_pki1001_eqiad_wmnet]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube_staging.cfg]
File[/etc/cfssl/signers/dse_front_proxy/ca/dse_front_proxy-key.pem]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube_front_proxy]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery.timer]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
File[/etc/cfssl/csr/puppet_rsa__pki_discovery_wmnet.csr]
File[/etc/cfssl/ocsp/discovery2026.ocsp]
File[/srv/cfssl/bundles/etcd.pem]
File[/lib/systemd/system/cfssl-ocspserve@discovery.service]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube.service]
Exec[systemd daemon-reload for cfssl-ocspserve@cassandra.service (cfssl-ocspserve@cassandra)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer)]
File[/srv/cfssl/bundles/discovery.pem]
File[/var/log/cfssl-ocsprefresh-etcd]
Exec[Generate initial CRL for cassandra]
Service[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer]
Exec[Generate cert OCSP_wikikube_pki1001_eqiad_wmnet refresh]
Service[cfssl-ocsprefresh-cassandra.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging.service (nrpe2nodexp-check_certificate_expiry_mlserve_staging.service)]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_etcd]
File[/var/log/cfssl-ocsprefresh-dse]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-cfssl-multirootca-status.conf]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging_front_proxy.service (cfssl-ocsprefresh-mlserve_staging_front_proxy.service)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-syslog.service (cfssl-ocsprefresh-syslog.service)]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.csr]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging.timer (cfssl-ocsprefresh-wikikube_staging.timer)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service]
File[/srv/cfssl/bundles/aux.pem]
Exec[Generate cert OCSP_syslog_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve.timer (cfssl-ocsprefresh-mlserve.timer)]
File[/etc/rsyslog.d/40-wmf-auto-restart-apache-htcacheclean.conf]
File[/lib/systemd/system/wmf_auto_restart_ulogd2.service]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube-staging-front-proxy.conf]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-debmonitor.conf]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-syslog.conf]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service)]
File[/etc/logrotate.d/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-cloud-wmnet-ca.conf]
File[/etc/cfssl/signers/network_devices/ca/network_devices-key.pem]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube.timer]
File[/etc/cfssl/signers/wikikube]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve_front_proxy.prom]
File[/etc/logrotate.d/cfssl-ocsprefresh-discovery]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/usr/local/sbin/cfssl-certs]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer (nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer)]
File[/etc/cfssl/ocsp/mlserve_staging_front_proxy.ocsp]
File[/etc/sudoers.d/nrpe_certificate_check_puppet_rsa]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-aux-front-proxy.conf]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/ca/wikikube_staging_front_proxy.pem]
File[/etc/cfssl/signers/zuul/ca]
File[/etc/cfssl/signers/discovery2026/ca/discovery2026-key.pem]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve_front_proxy.service (cfssl-ocspserve@mlserve_front_proxy)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux_front_proxy.timer (cfssl-ocsprefresh-aux_front_proxy.timer)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.pem]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.conf]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging_front_proxy.service]
File[/etc/ferm/ferm.conf]
File[/var/log/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Service[cfssl-ocspserve@mlserve_staging_front_proxy]
File[/etc/cfssl/db.conf]
File[/var/log/cfssl-ocsprefresh-mlserve_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-syslog.timer (cfssl-ocsprefresh-syslog.timer)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube_staging.prom]
Exec[Generate initial CRL for syslog]
File[/lib/systemd/system/cfssl-ocsprefresh-network_devices.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-zuul.service (cfssl-ocsprefresh-zuul.service)]
File[/etc/sudoers.d/nrpe_certificate_check_cloud_wmnet_ca]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/ca]
File[/srv/cfssl/bundles]
File[/etc/cfssl/signers/mlserve_staging]
Exec[Generate cert OCSP_mlserve_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service]
Exec[renew certificate - OCSP_wikikube_pki1001_eqiad_wmnet]
Exec[Generate initial CRL for aux_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery_pki1001_eqiad_wmnet.pem]
File[/srv/cfssl/bundles/debmonitor.pem]
File[/etc/sudoers.d/nrpe_certificate_check_aux]
Exec[systemd daemon-reload for cfssl-ocsprefresh-network_devices.timer (cfssl-ocsprefresh-network_devices.timer)]
Service[nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_cassandra_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet-key.pem]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery.service (nrpe2nodexp-check_certificate_expiry_discovery.service)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse.timer]
File[/etc/cfssl/signers/zuul/cfssl.conf]
Exec[Generate initial CRL for dse_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_pki1001_eqiad_wmnet.pem]
File[/srv/cfssl/bundles/discovery2026.pem]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_zuul.prom]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse.timer (nrpe2nodexp-check_certificate_expiry_dse.timer)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_cloud_wmnet_ca.prom]
File[/var/log/wmf_auto_restart_apache-htcacheclean]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service (prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service)]
File[/srv/cfssl/bundles/aux_front_proxy.pem]
Service[prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer]
File[/lib/systemd/system/cfssl-ocspserve@mlserve_front_proxy.service]
File[/etc/cfssl/ocsp/network_devices.ocsp]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_cloud_wmnet_ca]
File[/srv/cfssl/bundles/mlserve_staging.pem]
Service[cfssl-ocspserve@cassandra]
Exec[Generate cert OCSP_discovery_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_network_devices_pki1001_eqiad_wmnet.pem]
File[/etc/apache2/sites-available/50-pki-discovery-wmnet.conf]
File[/var/log/cfssl-ocsprefresh-wikikube_staging_front_proxy]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-zuul.conf]
File[/etc/logrotate.d/cfssl-ocsprefresh-kafka]
File[/etc/cfssl/signers/wikikube_staging/ca/wikikube_staging-key.pem]
File[/etc/cfssl/csr/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.csr]
File[/usr/local/bin/prometheus-check-wikikube_staging-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/signers/discovery2026/ca]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocspserve@cloud_wmnet_ca.service (cfssl-ocspserve@cloud_wmnet_ca)]
Exec[Generate cert OCSP_discovery2026_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-ocsprefresh-etcd.timer (cfssl-ocsprefresh-etcd.timer)]
File[/etc/cfssl/csr/OCSP_debmonitor_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_network_devices.timer (nrpe2nodexp-check_certificate_expiry_network_devices.timer)]
Exec[renew certificate - OCSP_dse_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery2026.timer (cfssl-ocsprefresh-discovery2026.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer]
File[/etc/cfssl/signers/mlserve_front_proxy/cfssl.conf]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.csr]
File[/lib/systemd/system/cfssl-ocspserve@wikikube_front_proxy.service]
File[/etc/cfssl/signers/mlserve_staging_front_proxy]
Service[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_front_proxy_pki1001_eqiad_wmnet-key.pem]
File[/etc/logrotate.d/cfssl-gc-expired-certs]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.conf]
File[/var/log/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Exec[renew certificate - OCSP_etcd_pki1001_eqiad_wmnet]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve_staging_front_proxy]
File[/etc/cfssl/signers/kafka/cfssl.conf]
Service[nrpe2nodexp-check_cfssl-multirootca_status.timer]
Exec[systemd daemon-reload for cfssl-ocspserve@aux.service (cfssl-ocspserve@aux)]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_aux.cfg]
Service[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer]
File[/usr/local/bin/prometheus-check-network_devices-certificate-expiry]
File[/etc/ssl/dhparam.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-network_devices.service]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_zuul]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer)]
File[/var/log/cfssl-ocsprefresh-cassandra]
File[/etc/cfssl/signers/cloud_wmnet_ca/ca]
Exec[Generate cert OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service)]
File[/etc/apache2/sites-available/00-dummy.conf]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_aux_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer)]
File[/etc/cfssl/signers/aux/ca/aux-key.pem]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube.service]
File[/lib/systemd/system/cfssl-ocspserve@wikikube.service]
File[/etc/cfssl/signers/discovery/ca/discovery.pem]
File[/lib/systemd/system/nrpe2nodexp-check_cfssl-multirootca_status.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging.timer (cfssl-ocsprefresh-mlserve_staging.timer)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer]
Exec[systemd daemon-reload for cfssl-ocspserve@zuul.service (cfssl-ocspserve@zuul)]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_front_proxy.timer]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_dse_front_proxy.cfg]
File[/usr/local/bin/prometheus-check-aux-certificate-expiry]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.chained.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_front_proxy.service]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve_staging_front_proxy.service (cfssl-ocspserve@mlserve_staging_front_proxy)]
File_line[auto_restart_file_presence_apache-htcacheclean]
File[/etc/cfssl/signers/wikikube_front_proxy/ca/wikikube_front_proxy.pem]
Exec[systemd daemon-reload for cfssl-ocspserve@puppet_rsa.service (cfssl-ocspserve@puppet_rsa)]
File_line[auto_restart_file_presence_apache2]
Exec[systemd daemon-reload for cfssl-ocspserve@aux_front_proxy.service (cfssl-ocspserve@aux_front_proxy)]
File[/var/log/wmf_auto_restart_ulogd2]
Exec[renew certificate - OCSP_network_devices_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/dse_front_proxy/ca/dse_front_proxy.pem]
Exec[Generate cert OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_etcd_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/cfssl-ocspserve@wikikube_staging.service]
File[/etc/cfssl/ocsp/discovery.ocsp]
File[/etc/cfssl/signers/mlserve_staging/cfssl.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cassandra.service (nrpe2nodexp-check_certificate_expiry_cassandra.service)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_puppet_rsa.service]
Exec[Generate cert OCSP_mlserve_staging_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/kafka/ca/kafka.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-aux_front_proxy.timer]
File[/etc/cfssl/signers/dse/ca/dse-key.pem]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_pki1001_eqiad_wmnet.csr]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve_staging]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube.timer (cfssl-ocsprefresh-wikikube.timer)]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube_staging_front_proxy]
File[/lib/systemd/system/cfssl-ocsprefresh-cassandra.timer]
File[/etc/rsyslog.d/40-cfssl-gc-expired-certs.conf]
Service[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer]
File[/lib/systemd/system/cfssl-ocspserve@dse_front_proxy.service]
Service[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_pki1001_eqiad_wmnet-key.pem]
Service[nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging_front_proxy.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube.timer (nrpe2nodexp-check_certificate_expiry_wikikube.timer)]
File[/etc/cfssl/signers/cloud_wmnet_ca/ca/cloud_wmnet_ca.pem]
File[/etc/apache2/sites-available]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service (prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer]
File[/etc/cfssl/csr/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.csr]
Service[apache2]
File[/etc/cfssl/signers/syslog/cfssl.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_pki1001_eqiad_wmnet.pem]
Exec[Generate cert OCSP_network_devices_pki1001_eqiad_wmnet]
File[/usr/local/bin/prometheus-check-syslog-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux.service]
Exec[renew certificate - OCSP_kafka_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/csr/OCSP_wikikube_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-aux.conf]
Package[apache2]
File[/etc/cfssl/signers/kafka]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/etc/cfssl/csr/OCSP_mlserve_staging_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/ulogd]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service)]
File[/etc/cfssl/signers/cloud_wmnet_ca]
File[/etc/cfssl/csr/OCSP_etcd_pki1001_eqiad_wmnet.csr]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve_staging.cfg]
File[/etc/cfssl/ocsp/dse_front_proxy.ocsp]
File[/etc/cfssl/signers/wikikube/ca]
File[/srv/cfssl/crl]
Exec[Generate cert OCSP_wikikube_staging_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/ca/mlserve_staging_front_proxy-key.pem]
File[/etc/cfssl/signers/kafka/ca/kafka-key.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_debmonitor_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ssl/ocsp/OCSP_syslog_pki1001_eqiad_wmnet-key.pem]
File[/etc/ferm/conf.d/02_main]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cassandra.timer (nrpe2nodexp-check_certificate_expiry_cassandra.timer)]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-dse.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube.service (nrpe2nodexp-check_certificate_expiry_wikikube.service)]
File[/etc/logrotate.d/cfssl-ocsprefresh-network_devices]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux.timer]
Exec[Generate cert OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer]
File[/etc/cfssl/signers/wikikube_front_proxy/ca]
Exec[Generate cert puppet_rsa__pki_discovery_wmnet refresh]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-puppet_rsa.service]
File[/etc/ferm/conf.d/98_log-everything]
File[/etc/cfssl/signers/aux/ca]
File[/usr/local/bin/prometheus-check-discovery-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_zuul.service]
Exec[Generate initial CRL for mlserve_staging]
File[/etc/cfssl/ocsp/wikikube_front_proxy.ocsp]
File[/usr/local/bin/prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service]
File[/etc/cfssl/signers/mlserve_staging/ca]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet-key.pem]
Exec[renew certificate - OCSP_debmonitor_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse.service (nrpe2nodexp-check_certificate_expiry_dse.service)]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube.service (cfssl-ocspserve@wikikube)]
File[/etc/cfssl/signers/aux/cfssl.conf]
File[/lib/systemd/system/nrpe2nodexp-ferm_active.service]
File[/etc/apache2/conf-available/50-server-status.conf]
Service[nrpe2nodexp-check_certificate_expiry_dse.timer]
File[/etc/sudoers.d/nrpe_certificate_check_discovery2026]
File[/usr/local/bin/prometheus-check-cassandra-certificate-expiry]
File[/etc/cfssl/signers/debmonitor/ca/debmonitor-key.pem]
File[/etc/sudoers.d/nrpe-check_ferm_active]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_cassandra.prom]
File[/etc/sudoers.d/nrpe_certificate_check_debmonitor]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.conf]
Exec[systemd daemon-reload for cfssl-ocspserve@etcd.service (cfssl-ocspserve@etcd)]
File[/var/log/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
File[/srv/cfssl/bundles/wikikube_staging.pem]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_aux_front_proxy.cfg]
File[/lib/systemd/system/cfssl-ocsprefresh-aux_front_proxy.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_network_devices.service (nrpe2nodexp-check_certificate_expiry_network_devices.service)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_network_devices.prom]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube_staging.service (cfssl-ocspserve@wikikube_staging)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer)]
File[/etc/cfssl/ssl/ocsp/OCSP_kafka_pki1001_eqiad_wmnet.pem]
Exec[Generate initial CRL for discovery2026]
Exec[systemd daemon-reload for nrpe2nodexp-ferm_active.service (nrpe2nodexp-ferm_active.service)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer)]
File[/etc/cfssl/signers/mlserve/ca/mlserve.pem]
Exec[systemd daemon-reload for cfssl-ocspserve@discovery2026.service (cfssl-ocspserve@discovery2026)]
File[/etc/cfssl/signers/wikikube/ca/wikikube-key.pem]
File[/etc/cfssl/signers/syslog/ca]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-aux.service]
File[/srv/cfssl/bundles/wikikube_staging_front_proxy.pem]
Service[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer]
Service[nrpe2nodexp-check_certificate_expiry_mlserve.timer]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-debmonitor.conf]
Service[cfssl-ocspserve@mlserve_staging]
Exec[Generate cert OCSP_dse_pki1001_eqiad_wmnet]
Service[cfssl-multirootca]
File[/var/log/cfssl-ocsprefresh-cloud_wmnet_ca]
File[/lib/systemd/system/cfssl-ocspserve@aux.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer)]
File[/lib/systemd/system/cfssl-ocspserve@mlserve_staging.service]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer]
File[/etc/cfssl/ocsp/debmonitor.ocsp]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_zuul.timer (nrpe2nodexp-check_certificate_expiry_zuul.timer)]
File[/etc/cfssl/signers/puppet_rsa]
File[/var/log/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service)]
Exec[Generate cert OCSP_dse_front_proxy_pki1001_eqiad_wmnet refresh]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_dse_front_proxy]
Exec[systemd daemon-reload for cfssl-ocspserve@dse_front_proxy.service (cfssl-ocspserve@dse_front_proxy)]
Exec[renew certificate - puppet_rsa__pki_discovery_wmnet]
File[/var/log/cfssl-ocsprefresh-mlserve]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_syslog.timer (nrpe2nodexp-check_certificate_expiry_syslog.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux.timer (cfssl-ocsprefresh-aux.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer (nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-syslog.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery2026.timer]
File[/etc/sudoers.d/nrpe_certificate_check_dse_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service]
File[/lib/systemd/system/cfssl-gc-expired-certs.service]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery2026.timer]
Exec[Generate cert OCSP_kafka_pki1001_eqiad_wmnet]
File[/etc/sudoers.d/nrpe_certificate_check_aux_front_proxy]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_kafka.cfg]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer (nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-ferm_active.timer (nrpe2nodexp-ferm_active.timer)]
File[/etc/ferm/conf.d/00_defs]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_debmonitor.timer]
File[/var/log/cfssl-ocsprefresh-zuul]
Exec[Generate cert puppet_rsa__pki_discovery_wmnet refresh on intermediate ca change]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
Exec[Generate cert OCSP_debmonitor_pki1001_eqiad_wmnet]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.conf]
File[/etc/cfssl/csr/OCSP_network_devices_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging.timer]
File[/etc/cfssl/ocsp/cloud_wmnet_ca.ocsp]
File[/etc/logrotate.d/cfssl-ocsprefresh-aux_front_proxy]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer)]
File[/etc/cfssl/signers/cloud_wmnet_ca/cfssl.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_zuul.service (nrpe2nodexp-check_certificate_expiry_zuul.service)]
File[/etc/cfssl/signers/discovery/cfssl.conf]
Service[prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer]
File[/usr/local/bin/prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-dse.conf]
File_line[load_env_enabled]
File[/etc/apache2/sites-enabled]
Service[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/cfssl.conf]
Service[nrpe2nodexp-ferm_active.timer]
Exec[systemd daemon-reload for ferm.service (ferm-ferm-service-status-restart)]
Exec[systemd daemon-reload for cfssl-ocspserve@discovery.service (cfssl-ocspserve@discovery)]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Service[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service (nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service)]
File[/etc/cfssl/ocsp/cassandra.ocsp]
Service[cfssl-ocsprefresh-mlserve_staging.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-dse-front-proxy.conf]
File[/etc/apache2/conf-enabled]
File[/lib/systemd/system/cfssl-multirootca.service]
Service[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-dse-front-proxy.conf]
Service[cfssl-ocspserve@syslog]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve.service]
File[/usr/local/bin/prometheus-check-puppet_rsa-certificate-expiry]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_discovery.cfg]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-etcd.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service (prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_syslog.prom]
File[/etc/cfssl/signers/cassandra/ca]
Service[nrpe2nodexp-check_certificate_expiry_kafka.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_kafka.service (nrpe2nodexp-check_certificate_expiry_kafka.service)]
Service[cfssl-ocspserve@aux_front_proxy]
Exec[Generate cert OCSP_aux_front_proxy_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service (prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service)]
File[/lib/systemd/system/wmf_auto_restart_apache-htcacheclean.service]
File[/var/log/cfssl-ocsprefresh-dse_front_proxy]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube.conf]
Exec[systemd daemon-reload for cfssl-ocspserve@debmonitor.service (cfssl-ocspserve@debmonitor)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_network_devices.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging.service (nrpe2nodexp-check_certificate_expiry_wikikube_staging.service)]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_syslog]
Exec[Generate cert OCSP_etcd_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux_front_proxy.service (cfssl-ocsprefresh-aux_front_proxy.service)]
Service[nrpe2nodexp-check_certificate_expiry_debmonitor.timer]
Service[cfssl-ocsprefresh-zuul.timer]
Service[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve]
Exec[systemd daemon-reload for cfssl-ocsprefresh-debmonitor.timer (cfssl-ocsprefresh-debmonitor.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service (cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service (nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service)]
File[/var/log/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube-front-proxy.conf]
Service[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer]
Exec[systemd daemon-reload for cfssl-ocspserve@Wikimedia_Internal_Root_CA.service (cfssl-ocspserve@Wikimedia_Internal_Root_CA)]
Service[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer]
File[/srv/cfssl/bundles/mlserve.pem]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_cassandra]
File[/etc/cfssl/ocsp/aux_front_proxy.ocsp]
File[/etc/systemd/system/ferm.service.d]
Exec[ensure_present_mod_proxy_http]
Service[nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging.service (cfssl-ocsprefresh-wikikube_staging.service)]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube.cfg]
Service[wmf_auto_restart_apache2.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_pki1001_eqiad_wmnet.csr]
Node[__node_regexp__pki10012.eqiad.]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service (nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Service[apache-htcacheclean]
File[/lib/systemd/system/cfssl-ocspserve@zuul.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service (nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer)]
Exec[Generate cert OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_syslog.timer]
File[/etc/systemd/system/apache2.service.d/apache2-after-network-online-target.conf]
File[/etc/cfssl/csr/OCSP_discovery_pki1001_eqiad_wmnet.csr]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_etcd.cfg]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse.service]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging_front_proxy.timer (cfssl-ocsprefresh-mlserve_staging_front_proxy.timer)]
Service[cfssl-ocspserve@mlserve]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-dse-front-proxy-certificate-expiry.conf]
Exec[Generate cert OCSP_mlserve_pki1001_eqiad_wmnet]
File[/var/log/prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet-key.pem]
File[/etc/apache2/conf-available]
File[/etc/cfssl/signers/syslog]
File[/etc/cfssl/signers/etcd]
File[/etc/apache2/conf-available/00-defaults.conf]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_dse]
File[/etc/cfssl/signers/network_devices/cfssl.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_puppet_rsa.service (nrpe2nodexp-check_certificate_expiry_puppet_rsa.service)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.conf]
Exec[create chained cert /etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.chain.pem]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service (nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service (prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service)]
File[/srv/cfssl/bundles/syslog.pem]
File[/etc/cfssl/signers/aux_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_pki1001_eqiad_wmnet.csr]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve]
File[/var/log/ulogd]
Service[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer]
Service[cfssl-ocsprefresh-kafka.timer]
File[/etc/ferm/conf.d/10_multirootca_tls_termination_for_cfssl_issuer_k8s_pods]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-dse-certificate-expiry.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_pki1001_eqiad_wmnet-key.pem]
File[/var/log/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery2026_pki1001_eqiad_wmnet.pem]
Exec[Generate cert OCSP_kafka_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube_front_proxy.prom]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery.service (cfssl-ocsprefresh-discovery.service)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery.service]
File[/lib/systemd/system/cfssl-ocsprefresh-debmonitor.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery2026.service (cfssl-ocsprefresh-discovery2026.service)]
File[/etc/cfssl/signers/discovery2026/cfssl.conf]
Exec[renew certificate - OCSP_dse_front_proxy_pki1001_eqiad_wmnet]
File[/usr/local/bin/prometheus-check-zuul-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer]
File[/lib/systemd/system/wmf_auto_restart_apache2.service]
File[/etc/cfssl/signers/syslog/ca/syslog-key.pem]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube_staging_front_proxy.service (cfssl-ocspserve@wikikube_staging_front_proxy)]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/ca]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve_staging_front_proxy.prom]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-discovery.conf]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service)]
File[/usr/local/bin/prometheus-check-mlserve_staging-certificate-expiry]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-kafka.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer)]
Service[cfssl-ocsprefresh-aux.timer]
Exec[Generate initial CRL for cloud_wmnet_ca]
File[/etc/cfssl/signers/etcd/ca/etcd-key.pem]
File[/etc/cfssl/csr/OCSP_wikikube_staging_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.pem]
Exec[systemd daemon-reload for wmf_auto_restart_apache-htcacheclean.service (wmf_auto_restart_apache-htcacheclean.service)]
File[/etc/apache2/conf-enabled/50-server-status.conf]
Exec[Generate cert OCSP_zuul_pki1001_eqiad_wmnet refresh]
Service[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve.conf]
File[/etc/logrotate.d/wmf_auto_restart_ulogd2]
File[/usr/local/bin/prometheus-check-etcd-certificate-expiry]
Exec[systemd daemon-reload for wmf_auto_restart_apache2.service (wmf_auto_restart_apache2.service)]
File[/etc/cfssl/csr/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service (prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service)]
Service[cfssl-ocspserve@wikikube]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve_staging.prom]
Service[ulogd2]
File[/etc/cfssl/signers/kafka/ca]
File[/var/log/cfssl-ocsprefresh-discovery2026]
File[/etc/cfssl/signers/zuul]
Exec[systemd daemon-reload for cfssl-gc-expired-certs.service (cfssl-gc-expired-certs.service)]
Augeas[Apache2 logs]
File[/etc/sudoers.d/nrpe_certificate_check_cassandra]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cassandra.service (cfssl-ocsprefresh-cassandra.service)]
File[/lib/systemd/system/wmf_auto_restart_apache-htcacheclean.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service)]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-aux-front-proxy.conf]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve.conf]
File[/var/log/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
File[/etc/cfssl/signers/wikikube_staging]
Service[cfssl-ocspserve@network_devices]
Service[nrpe2nodexp-check_certificate_expiry_etcd.timer]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_network_devices]
File[/etc/cfssl/csr/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_pki1001_eqiad_wmnet.pem]
Exec[systemd daemon-reload for cfssl-ocsprefresh-zuul.timer (cfssl-ocsprefresh-zuul.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging.timer]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve_staging]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service)]
File[/etc/ferm/conf.d/10_multirootca_tls_termination]
File[/srv/cfssl/bundles/zuul.pem]
Service[cfssl-ocspserve@discovery2026]
File[/etc/cfssl/signers/aux_front_proxy/ca/aux_front_proxy-key.pem]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/cfssl/ocsp/mlserve_front_proxy.ocsp]
File[/etc/cfssl/signers/wikikube_staging/cfssl.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service (prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service)]
Service[cfssl-ocspserve@Wikimedia_Internal_Root_CA]
File[/lib/systemd/system/wmf_auto_restart_apache2.timer]
Exec[renew certificate - OCSP_puppet_rsa_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/discovery2026]
File[/etc/ferm/conf.d/01_drop-blocked-nets]
Exec[renew certificate - OCSP_mlserve_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service (prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service)]
File[/etc/cfssl/signers/mlserve_staging/ca/mlserve_staging-key.pem]
Service[cfssl-ocspserve@wikikube_staging]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_dse.prom]
File[/etc/logrotate.d/cfssl-ocsprefresh-debmonitor]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.conf]
File[/etc/ferm/conf.d]
File[/etc/nagios/nrpe.d/check_ferm_active.cfg]
File[/var/log/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
File[/etc/cfssl/signers/zuul/ca/zuul-key.pem]
File[/etc/logrotate.d/cfssl-ocsprefresh-discovery2026]
File[/etc/rsyslog.d/25-nrpe2nodexp-ferm-active.conf]
File[/etc/cfssl/signers/wikikube_staging_front_proxy]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Service[cfssl-ocsprefresh-wikikube_staging.timer]
File[/etc/cfssl/signers/cassandra]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/apache2/ports.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery.timer (nrpe2nodexp-check_certificate_expiry_discovery.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-cloud_wmnet_ca.timer]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve_staging_front_proxy.cfg]
Exec[Generate initial CRL for puppet_rsa]
Service[wmf_auto_restart_apache-htcacheclean.timer]
File[/usr/local/bin/prometheus-check-wikikube_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse.service (cfssl-ocsprefresh-dse.service)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve.service (cfssl-ocsprefresh-mlserve.service)]
Exec[Generate cert OCSP_discovery2026_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_zuul.timer]
File[/etc/ssl/localcerts/multiroot_ca.pem]
File[/etc/cfssl/signers/zuul/ca/zuul.pem]
Exec[Generate cert OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet refresh]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-network-devices.conf]
Exec[systemd daemon-reload for wmf_auto_restart_apache2.timer (wmf_auto_restart_apache2.timer)]
Exec[renew certificate - OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_network_devices_pki1001_eqiad_wmnet-key.pem]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve_staging_front_proxy]
File[/etc/sudoers.d/nrpe_certificate_check_dse]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve_front_proxy]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
File[/usr/local/bin/apache-status]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet-key.pem]
File[/etc/cfssl/signers/wikikube_front_proxy]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube-staging.conf]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve-front-proxy.conf]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_puppet_rsa.cfg]
File[/etc/cfssl/ssl/ocsp/OCSP_etcd_pki1001_eqiad_wmnet.pem]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux.service (cfssl-ocsprefresh-aux.service)]
File[/var/log/cfssl-ocsprefresh-puppet_rsa]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve]
Service[cfssl-ocsprefresh-discovery2026.timer]
Service[nrpe2nodexp-check_certificate_expiry_cassandra.timer]
Service[cfssl-ocspserve@kafka]
File[/etc/logrotate.d/cfssl-ocsprefresh-syslog]
Exec[Generate initial CRL for mlserve]
Exec[Generate cert OCSP_wikikube_pki1001_eqiad_wmnet]
File[/etc/ferm/conf.d/10_csr_and_ocsp_responder]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
File[/var/log/cfssl-ocsprefresh-discovery]
File[/etc/sudoers.d/nrpe_certificate_check_kafka]
Exec[systemd daemon-reload for cfssl-ocsprefresh-puppet_rsa.service (cfssl-ocsprefresh-puppet_rsa.service)]
File[/lib/systemd/system/cfssl-ocsprefresh-zuul.timer]
Exec[renew certificate - OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/network_devices]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-cloud-wmnet-ca.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.pem]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube_staging_front_proxy.cfg]
File[/var/log/cfssl-ocsprefresh-wikikube]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.conf]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_cloud_wmnet_ca.cfg]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_pki1001_eqiad_wmnet.pem]
File[/srv/cfssl/bundles/cloud_wmnet_ca.pem]
Exec[Generate cert OCSP_etcd_pki1001_eqiad_wmnet refresh]
Service[nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube_staging_front_proxy.prom]
File[/etc/cfssl/csr/OCSP_discovery2026_pki1001_eqiad_wmnet.csr]
Service[cfssl-ocsprefresh-network_devices.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_kafka.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging.service]
File[/etc/cfssl/ocsp/etcd.ocsp]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube_staging]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/ca/wikikube_staging_front_proxy-key.pem]
File[/etc/cfssl/ocsp/kafka.ocsp]
File[/etc/cfssl/signers/puppet_rsa/ca/puppet_rsa-key.pem]
Exec[Generate cert OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet refresh]
File[/var/log/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/var/log/cfssl-ocsprefresh-syslog]
Service[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer]
File[/etc/logrotate.d/cfssl-ocsprefresh-zuul]
Exec[systemd daemon-reload for cfssl-ocspserve@dse.service (cfssl-ocspserve@dse)]
File[/etc/apache2/env-enabled]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-kafka.conf]
File[/usr/local/bin/prometheus-check-discovery2026-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-debmonitor.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer)]
File[/srv/cfssl/bundles/mlserve_staging_front_proxy.pem]
Exec[Generate initial CRL for mlserve_staging_front_proxy]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/cfssl.conf]
Service[cfssl-ocsprefresh-wikikube_staging_front_proxy.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_puppet_rsa_pki1001_eqiad_wmnet.pem]
Exec[apache2_test_config_and_restart]
Service[nrpe2nodexp-check_certificate_expiry_network_devices.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer)]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-discovery.conf]
File[/srv/cfssl/bundles/puppet_rsa.pem]
File[/etc/logrotate.d/cfssl-ocsprefresh-dse]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_syslog.cfg]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/signers/mlserve_front_proxy/ca]
File[/etc/cfssl/ocsp/Wikimedia_Internal_Root_CA.ocsp]
File[/usr/local/bin/prometheus-check-dse-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-kafka.timer (cfssl-ocsprefresh-kafka.timer)]
Exec[renew certificate - OCSP_zuul_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/puppet_rsa/ca]
File[/etc/cfssl/signers/etcd/ca]
Exec[renew certificate - OCSP_cassandra_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/mlserve_front_proxy]
File[/var/log/wmf_auto_restart_apache2]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_etcd.service]
Exec[renew certificate - OCSP_discovery2026_pki1001_eqiad_wmnet]
File[/etc/cfssl/ocsp/wikikube_staging_front_proxy.ocsp]
File[/etc/cfssl/csr/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.csr]
Service[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
File[/etc/sudoers.d/nrpe_certificate_check_etcd]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service (prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service)]
File[/etc/cfssl/signers/mlserve/cfssl.conf]
File[/usr/local/bin/prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/etc/cfssl/signers/dse/cfssl.conf]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging_front_proxy.service (cfssl-ocsprefresh-wikikube_staging_front_proxy.service)]
Service[cfssl-ocspserve@discovery]
File[/etc/cfssl/signers/puppet_rsa/ca/puppet_rsa.pem]
File_line[auto_restart_file_presence_ulogd2]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_zuul.cfg]
Exec[systemd daemon-reload for wmf_auto_restart_ulogd2.timer (wmf_auto_restart_ulogd2.timer)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-aux-certificate-expiry.conf]
File[/etc/apache2/conf-enabled/50-cfssl-issuer-k8s-pods-vhost-port.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve.timer (nrpe2nodexp-check_certificate_expiry_mlserve.timer)]
File[/etc/apache2/sites-enabled/00-dummy.conf]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
Exec[Generate cert OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet]
Exec[Generate initial CRL for network_devices]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service]
Exec[Generate cert OCSP_zuul_pki1001_eqiad_wmnet]
File[/var/log/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet-key.pem]
File[/etc/logrotate.d/cfssl-ocsprefresh-cloud_wmnet_ca]
Exec[systemd daemon-reload for cfssl-multirootca.service (cfssl-multirootca)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-staging-certificate-expiry.conf]
File[/etc/cfssl/ocsp/mlserve.ocsp]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_network_devices.cfg]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_etcd.timer]
Service[cfssl-ocspserve@dse_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_front_proxy.service (cfssl-ocsprefresh-wikikube_front_proxy.service)]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_pki1001_eqiad_wmnet.csr]
Exec[Generate cert OCSP_wikikube_staging_pki1001_eqiad_wmnet refresh]
File[/etc/sudoers.d/nrpe_certificate_check_discovery]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_network_devices.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/cfssl-ocspserve@discovery2026.service]
File[/etc/cfssl/ssl/ocsp/OCSP_zuul_pki1001_eqiad_wmnet.pem]
File[/etc/ferm/conf.d/10_ssh_from_bastion]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-staging-front-proxy-certificate-expiry.conf]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-network-devices.conf]
File[/etc/nagios/nrpe.d/check_check_cfssl-multirootca_status.cfg]
Exec[ensure_present_mod_access_compat]
File[/etc/cfssl/ssl/ocsp]
Exec[systemd daemon-reload for nrpe2nodexp-check_cfssl-multirootca_status.timer (nrpe2nodexp-check_cfssl-multirootca_status.timer)]
File[/var/log/cfssl-ocsprefresh-mlserve_staging_front_proxy]
Service[cfssl-ocsprefresh-mlserve_staging_front_proxy.timer]

Resources modified

File[/var/lib/prometheus/node.d/role_owner.prom]

Content differences:

--- /var/lib/prometheus/node.d/role_owner.prom.orig
+++ /var/lib/prometheus/node.d/role_owner.prom
@@ -1,3 +1,3 @@
 # HELP role_owner The team owner of the server role
 # TYPE role_owner gauge
-role_owner{team="infrastructure-foundations",role="pki::multirootca",cluster="pki"} 1.0
+role_owner{team="infrastructure-foundations",role="insetup::infrastructure_foundations_nftables",cluster="insetup"} 1.0

Concat_fragment[main contacts]

Content differences:

--- main contacts.orig
+++ main contacts
@@ -1,3 +1,3 @@
 ---
-role::pki::multirootca:
+role::insetup::infrastructure_foundations_nftables:
 - Infrastructure Foundations

File[/etc/confd/templates/_etc_ferm_conf.d_00_defs_requestctl.tmpl]

Parameters differences:

--- File[/etc/confd/templates/_etc_ferm_conf.d_00_defs_requestctl.tmpl].orig
+++ File[/etc/confd/templates/_etc_ferm_conf.d_00_defs_requestctl.tmpl]

@@
-    ensure => present
+    ensure => absent

Package[iptables]

Parameters differences:

--- Package[iptables].orig
+++ Package[iptables]

@@
-    ensure => installed
+    ensure => absent

File[/usr/local/sbin/ferm-status]

Parameters differences:

--- File[/usr/local/sbin/ferm-status].orig
+++ File[/usr/local/sbin/ferm-status]

@@
-    ensure => file
+    ensure => absent

Concat_fragment[main]

Content differences:

--- main.orig
+++ main
@@ -14,7 +14,6 @@
 [agent]
 use_srv_records = true
 srv_domain = eqiad.wmnet
-dns_alt_names = pki.discovery.wmnet
 daemonize = false
 http_connect_timeout = 60
 http_read_timeout = 960

File[/etc/ferm]

Parameters differences:

--- File[/etc/ferm].orig
+++ File[/etc/ferm]

@@
-    ensure => directory
+    ensure => absent

File[/etc/ferm/conf.d/00_defs_requestctl]

Parameters differences:

--- File[/etc/ferm/conf.d/00_defs_requestctl].orig
+++ File[/etc/ferm/conf.d/00_defs_requestctl]

@@
-    ensure => file
+    ensure => absent

File[/etc/confd/conf.d/_etc_ferm_conf.d_00_defs_requestctl.toml]

Parameters differences:

--- File[/etc/confd/conf.d/_etc_ferm_conf.d_00_defs_requestctl.toml].orig
+++ File[/etc/confd/conf.d/_etc_ferm_conf.d_00_defs_requestctl.toml]

@@
-    ensure => present
+    ensure => absent

File[/etc/modules-load.d/conntrack.conf]

Parameters differences:

--- File[/etc/modules-load.d/conntrack.conf].orig
+++ File[/etc/modules-load.d/conntrack.conf]

@@
-    ensure => file
+    ensure => absent

Package[ferm]

Parameters differences:

--- Package[ferm].orig
+++ Package[ferm]

@@
-    ensure => installed
+    ensure => purged

Compilation results for pki1001.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources only in the old catalog

Resources modified

Relevant files