Compilation results for pki1001.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	4897
Resources added:	5
Resources removed:	2136
Resources modified:	21
Change percentage:	44.15%

Resources only in the new catalog

Class[Role::Insetup::Infrastructure_foundations_ferm]
Motd::Message[insetup::infrastructure_foundations_ferm]
File[/etc/update-motd.d/05-insetup--infrastructure-foundations-ferm]
Node[__node_regexp__pki1001.eqiad.]
Motd::Script[insetup::infrastructure_foundations_ferm]

Resources only in the old catalog

Logrotate::Conf[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_dse]
Rsyslog::Conf[cfssl-ocsprefresh-discovery2026]
Cfssl::Ocsp[mlserve_staging_front_proxy]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_discovery2026.service]
File[/lib/systemd/system/cfssl-ocsprefresh-debmonitor.service]
File[/var/log/wmf_auto_restart_apache2]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service]
Monitoring::Service[check_certificate_expiry_dse_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service)]
File[/srv/cfssl/bundles/discovery.pem]
File[/usr/local/bin/prometheus-check-zuul-certificate-expiry]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Cfssl::Csr[/etc/cfssl/csr/OCSP_mlserve_staging_pki1001_eqiad_wmnet.csr]
Systemd::Service[cfssl-ocsprefresh-wikikube_front_proxy]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer (nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer)]
File[/etc/cfssl/signers/aux/ca/aux.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve-staging.conf]
Exec[Generate cert OCSP_puppet_rsa_pki1001_eqiad_wmnet]
File[/var/log/cfssl-ocsprefresh-aux]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
Nrpe::Plugin[check_systemd_unit_status]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer]
File[/etc/cfssl/signers/aux/ca]
File[/etc/cfssl/ssl/ocsp]
Systemd::Timer::Job[cfssl-ocsprefresh-discovery]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_etcd.timer (nrpe2nodexp-check_certificate_expiry_etcd.timer)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service]
Rsyslog::Conf[cfssl-ocsprefresh-cloud_wmnet_ca]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_dse.cfg]
File[/etc/cfssl/signers/wikikube_front_proxy]
Service[apache-htcacheclean]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_discovery]
File[/etc/cfssl/signers/wikikube]
File[/etc/apache2/conf-enabled/00-defaults.conf]
Systemd::Timer[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Sudo::User[nrpe-check_check_certificate_expiry_aux]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_front_proxy.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery2026.timer]
Exec[Generate cert OCSP_wikikube_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/cfssl-ocspserve@dse.service]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_discovery2026]
File[/var/log/cfssl-ocsprefresh-wikikube]
File[/var/log/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Monitoring::Service[check_certificate_expiry_mlserve_staging_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-zuul.service (cfssl-ocsprefresh-zuul.service)]
Exec[Generate cert OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet]
File[/lib/systemd/system/cfssl-ocspserve@aux_front_proxy.service]
Service[nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer]
Cfssl::Csr[/etc/cfssl/csr/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.csr]
Package[python3-cryptography]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_pki1001_eqiad_wmnet.pem]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_puppet_rsa]
File_line[load_env_enabled]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_zuul]
Logrotate::Conf[cfssl-ocsprefresh-cloud_wmnet_ca]
Exec[Generate initial CRL for wikikube]
File[/etc/cfssl/signers/debmonitor]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer)]
File[/usr/local/bin/prometheus-check-wikikube_front_proxy-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-aux.service]
Systemd::Unit[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer]
Httpd::Conf[pki.discovery.wmnet]
Exec[create chained cert /etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.chain.pem]
Cfssl::Config[mlserve_staging]
Exec[systemd daemon-reload for cfssl-ocspserve@aux.service (cfssl-ocspserve@aux)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_dse]
Exec[renew certificate - OCSP_aux_front_proxy_pki1001_eqiad_wmnet]
Service[cfssl-ocsprefresh-wikikube_staging.timer]
Service[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer]
Prometheus::Blackbox::Check::Http[PKI_wikikube_front_proxy]
File[/lib/systemd/system/cfssl-ocspserve@wikikube.service]
Exec[Generate cert OCSP_discovery2026_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer]
Cfssl::Csr[/etc/cfssl/csr/puppet_rsa__pki_discovery_wmnet.csr]
Rsyslog::Conf[cfssl-ocsprefresh-dse]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer]
Systemd::Unit[cfssl-ocsprefresh-discovery2026.service]
Logrotate::Conf[cfssl-ocsprefresh-mlserve]
Sudo::User[nrpe-check_check_certificate_expiry_debmonitor]
File[/etc/logrotate.d/wmf_auto_restart_apache2]
Exec[Generate initial CRL for mlserve]
Prometheus::Alert::Rule[check_check_certificate_expiry_discovery_38e4dbcfd07ed60daf5bb89397abbe29]
File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
Sudo::User[nrpe_certificate_check_dse]
File[/etc/cfssl/signers/discovery/ca/discovery-key.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube.conf]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer)]
Systemd::Unit[cfssl-ocsprefresh-mlserve_staging.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer)]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service]
File[/var/log/cfssl-ocsprefresh-kafka]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve.timer]
Exec[Generate cert OCSP_aux_front_proxy_pki1001_eqiad_wmnet]
Exec[Generate cert OCSP_aux_front_proxy_pki1001_eqiad_wmnet refresh]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_dse_front_proxy.prom]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve_staging.service (cfssl-ocspserve@mlserve_staging)]
Exec[Generate initial CRL for cassandra]
Profile::Auto_restarts::Service[apache-htcacheclean]
File[/etc/cfssl/signers/wikikube_staging]
Sudo::User[nrpe_certificate_check_mlserve_front_proxy]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_mlserve]
File[/etc/apache2/env-enabled]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer)]
Exec[renew certificate - OCSP_etcd_pki1001_eqiad_wmnet]
Exec[ensure_present_mod_access_compat]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer (nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer)]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_kafka]
Service[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer]
Sudo::User[nrpe_certificate_check_wikikube_staging]
Systemd::Service[cfssl-ocsprefresh-mlserve_staging_front_proxy]
Cfssl::Csr[/etc/cfssl/csr/OCSP_puppet_rsa_pki1001_eqiad_wmnet.csr]
Systemd::Service[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Exec[renew certificate - OCSP_debmonitor_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-ocsprefresh-kafka.service (cfssl-ocsprefresh-kafka.service)]
Exec[renew certificate - OCSP_wikikube_pki1001_eqiad_wmnet]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_kafka]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_cassandra.cfg]
Systemd::Timer[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
File[/etc/cfssl/signers/wikikube_front_proxy/cfssl.conf]
Systemd::Service[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-puppet_rsa.timer (cfssl-ocsprefresh-puppet_rsa.timer)]
Systemd::Timer::Job[cfssl-ocsprefresh-wikikube_staging]
File[/etc/cfssl/signers/zuul]
Exec[Generate cert OCSP_dse_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/debmonitor/ca]
Systemd::Timer[cfssl-ocsprefresh-debmonitor]
File[/lib/systemd/system/cfssl-ocspserve@kafka.service]
Exec[Generate cert OCSP_etcd_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service (nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cassandra.timer (cfssl-ocsprefresh-cassandra.timer)]
Exec[renew certificate - OCSP_mlserve_pki1001_eqiad_wmnet]
File[/etc/apache2/sites-available/50-pki-discovery-wmnet.conf]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube.timer (cfssl-ocsprefresh-wikikube.timer)]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube_staging]
File[/etc/sudoers.d/nrpe_certificate_check_network_devices]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_etcd.service (nrpe2nodexp-check_certificate_expiry_etcd.service)]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_mlserve_staging_front_proxy]
Exec[Generate cert OCSP_mlserve_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery2026.service (nrpe2nodexp-check_certificate_expiry_discovery2026.service)]
Service[cfssl-ocspserve@mlserve_front_proxy]
Systemd::Service[cfssl-ocsprefresh-wikikube]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer]
Profile::Pki::Multirootca::Monitoring[mlserve_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-etcd.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery2026_pki1001_eqiad_wmnet.pem]
Systemd::Timer[wmf_auto_restart_apache-htcacheclean]
Service[nrpe2nodexp-check_certificate_expiry_discovery.timer]
File[/etc/cfssl/signers/mlserve_front_proxy/ca/mlserve_front_proxy-key.pem]
Profile::Pki::Multirootca::Monitoring[etcd]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_zuul]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_wikikube_staging_front_proxy]
File[/etc/cfssl/signers/debmonitor/ca/debmonitor-key.pem]
File[/usr/local/bin/prometheus-check-etcd-certificate-expiry]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-wikikube_staging_front_proxy.service]
File[/etc/cfssl/ocsp/dse_front_proxy.ocsp]
Logrotate::Conf[cfssl-ocsprefresh-mlserve_staging_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service]
File[/etc/cfssl/signers/syslog/ca/syslog.pem]
File[/var/log/cfssl-ocsprefresh-wikikube_staging_front_proxy]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-etcd.conf]
File[/etc/cfssl/signers/aux]
Cfssl::Cert[OCSP_syslog_pki1001_eqiad_wmnet]
Systemd::Override[apache2-after-network-online-target]
Cfssl::Ocsp[dse_front_proxy]
File[/etc/cfssl/signers/mlserve_front_proxy/ca]
Exec[Generate cert OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet refresh]
File[/etc/logrotate.d/cfssl-ocsprefresh-aux_front_proxy]
Rsyslog::Conf[cfssl-ocsprefresh-cassandra]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery_pki1001_eqiad_wmnet.pem]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_aux_front_proxy.prom]
Systemd::Timer[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer]
Systemd::Unit[cfssl-ocspserve@aux]
Class[Cfssl::Multirootca]
Cfssl::Csr[/etc/cfssl/csr/OCSP_zuul_pki1001_eqiad_wmnet.csr]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve_front_proxy]
Cfssl::Config[dse_front_proxy]
Sudo::User[nrpe-check_check_certificate_expiry_puppet_rsa]
Exec[renew certificate - OCSP_dse_pki1001_eqiad_wmnet]
Sudo::User[nrpe_certificate_check_zuul]
File[/lib/systemd/system/cfssl-ocsprefresh-etcd.timer]
Nrpe::Check[check_check_certificate_expiry_mlserve]
File[/lib/systemd/system/cfssl-ocsprefresh-debmonitor.timer]
Systemd::Service[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet-key.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve.conf]
Systemd::Timer::Job[cfssl-ocsprefresh-cloud_wmnet_ca]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_aux_front_proxy]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve]
Cfssl::Signer[aux_front_proxy]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_etcd.timer]
Systemd::Service[cfssl-ocsprefresh-dse]
File[/lib/systemd/system/cfssl-ocspserve@mlserve_staging_front_proxy.service]
Service[cfssl-ocspserve@discovery2026]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube_staging_front_proxy]
Cfssl::Cert[OCSP_puppet_rsa_pki1001_eqiad_wmnet]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_mlserve_staging]
Systemd::Timer[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
File[/etc/cfssl/signers/wikikube/cfssl.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_pki1001_eqiad_wmnet-key.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet-key.pem]
Exec[Generate cert OCSP_kafka_pki1001_eqiad_wmnet refresh]
Systemd::Syslog[cfssl-ocsprefresh-puppet_rsa]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube]
File[/srv/cfssl/bundles/Puppet_Internal_CA.pem.pem]
Exec[Generate cert OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet refresh]
Systemd::Syslog[cfssl-ocsprefresh-syslog]
File[/etc/sudoers.d/nrpe_certificate_check_puppet_rsa]
File[/etc/cfssl/signers/network_devices]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.conf]
Cfssl::Signer[etcd]
Httpd::Mod_conf[access_compat]
Service[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer]
Systemd::Unit[cfssl-ocspserve@mlserve]
Systemd::Service[cfssl-ocspserve@syslog]
Cfssl::Cert[OCSP_dse_pki1001_eqiad_wmnet]
Systemd::Unit[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer]
Nrpe::Check[check_check_certificate_expiry_debmonitor]
Systemd::Service[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
File[/etc/cfssl/csr/OCSP_mlserve_staging_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/cfssl-ocsprefresh-cassandra.timer]
Httpd::Site[pki.discovery.wmnet]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_discovery.service]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_puppet_rsa.prom]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet-key.pem]
File[/var/log/prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
Systemd::Unit[cfssl-multirootca]
Service[cfssl-gc-expired-certs.timer]
Exec[systemd daemon-reload for cfssl-multirootca.service (cfssl-multirootca)]
Class[Sslcert::Dhparam]
Exec[systemd daemon-reload for nrpe2nodexp-check_cfssl-multirootca_status.timer (nrpe2nodexp-check_cfssl-multirootca_status.timer)]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Systemd::Service[cfssl-ocspserve@discovery]
File[/etc/cfssl/signers/cloud_wmnet_ca/ca/cloud_wmnet_ca-key.pem]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-discovery.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_pki1001_eqiad_wmnet-key.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer]
Class[Profile::Pki::Multirootca]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_zuul.service]
Cfssl::Ocsp[kafka]
File[/etc/cfssl/ssl/ocsp/OCSP_debmonitor_pki1001_eqiad_wmnet-key.pem]
Sudo::User[nrpe_certificate_check_kafka]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_pki1001_eqiad_wmnet-key.pem]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy]
File[/etc/cfssl/signers/etcd/ca/etcd-key.pem]
Cfssl::Signer[wikikube]
Exec[renew certificate - OCSP_zuul_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet]
File[/etc/cfssl/signers/discovery/ca]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.csr]
Profile::Pki::Multirootca::Monitoring[aux]
Exec[Generate cert OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve_front_proxy]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube_staging.service (cfssl-ocspserve@wikikube_staging)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service]
Service[cfssl-ocspserve@network_devices]
Rsyslog::Conf[cfssl-ocsprefresh-syslog]
Cfssl::Csr[/etc/cfssl/csr/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
Cfssl::Config[wikikube_staging_front_proxy]
Service[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer]
Monitoring::Service[check_certificate_expiry_aux]
Cfssl::Cert[OCSP_mlserve_pki1001_eqiad_wmnet]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/var/log/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.pem]
Nrpe::Monitor_service[check_certificate_expiry_network_devices]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse_front_proxy.service (cfssl-ocsprefresh-dse_front_proxy.service)]
File[/etc/cfssl/signers/wikikube_staging/cfssl.conf]
File[/etc/apache2/conf-available/50-server-status.conf]
Prometheus::Blackbox::Check::Http[PKI_puppet_rsa]
Sudo::User[nrpe-check_check_certificate_expiry_cloud_wmnet_ca]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_discovery]
Sudo::User[nrpe_certificate_check_discovery]
Nrpe::Monitor_service[check_certificate_expiry_discovery2026]
File[/etc/apache2/ports.conf]
Systemd::Timer[cfssl-ocsprefresh-dse]
Rsyslog::Conf[wmf_auto_restart_apache-htcacheclean]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_front_proxy_pki1001_eqiad_wmnet-key.pem]
Nrpe::Check[check_check_certificate_expiry_aux_front_proxy]
Prometheus::Blackbox::Check::Http[PKI_kafka]
Service[cfssl-ocsprefresh-mlserve_staging_front_proxy.timer]
Systemd::Unit[cfssl-ocsprefresh-puppet_rsa.service]
File[/lib/systemd/system/cfssl-ocspserve@puppet_rsa.service]
File[/etc/cfssl/ocsp/wikikube_staging.ocsp]
Nrpe::Check[check_check_certificate_expiry_wikikube_staging]
File[/usr/local/bin/prometheus-check-discovery-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_kafka_pki1001_eqiad_wmnet.csr]
Systemd::Timer[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Systemd::Timer[cfssl-ocsprefresh-syslog]
Monitoring::Service[check_certificate_expiry_aux_front_proxy]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/etc/cfssl/signers/debmonitor/ca/debmonitor.pem]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_zuul.prom]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service (prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_puppet_rsa.service]
File[/lib/systemd/system/cfssl-ocsprefresh-aux_front_proxy.timer]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
File[/etc/cfssl/csr/OCSP_puppet_rsa_pki1001_eqiad_wmnet.csr]
File[/var/log/cfssl-ocsprefresh-wikikube_front_proxy]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service]
Cfssl::Ocsp[zuul]
File[/var/log/cfssl-ocsprefresh-aux_front_proxy]
Profile::Auto_restarts::Service[apache2]
File[/etc/cfssl/signers/cassandra/cfssl.conf]
File[/etc/cfssl/csr/OCSP_wikikube_staging_pki1001_eqiad_wmnet.csr]
Systemd::Timer::Job[cfssl-ocsprefresh-aux_front_proxy]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube.conf]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_kafka]
File[/srv/cfssl/bundles/zuul.pem]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.conf]
Exec[Generate initial CRL for zuul]
Logrotate::Conf[cfssl-ocsprefresh-aux_front_proxy]
Cfssl::Config[zuul]
Service[nrpe2nodexp-check_certificate_expiry_mlserve.timer]
Cfssl::Cert[OCSP_dse_front_proxy_pki1001_eqiad_wmnet]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-puppet-rsa.conf]
Systemd::Unit[cfssl-ocsprefresh-wikikube.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cassandra.service (cfssl-ocsprefresh-cassandra.service)]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocspserve@aux_front_proxy.service (cfssl-ocspserve@aux_front_proxy)]
Nrpe::Monitor_service[check_certificate_expiry_discovery]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer)]
Service[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer]
File[/etc/cfssl/signers/syslog/cfssl.conf]
File[/etc/sudoers.d/nrpe_certificate_check_debmonitor]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service)]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_etcd.cfg]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
Package[links]
File[/srv/cfssl/bundles/mlserve.pem]
Rsyslog::Conf[cfssl-ocsprefresh-wikikube_staging]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
Cfssl::Ocsp[mlserve]
File[/var/log/prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Systemd::Unit[wmf_auto_restart_apache2.service]
Systemd::Unit[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service]
Exec[renew certificate - OCSP_mlserve_staging_pki1001_eqiad_wmnet]
Systemd::Syslog[cfssl-ocsprefresh-wikikube_front_proxy]
File[/lib/systemd/system/cfssl-ocspserve@network_devices.service]
Service[cfssl-ocspserve@etcd]
File[/lib/systemd/system/cfssl-ocsprefresh-network_devices.timer]
File_line[auto_restart_file_presence_apache2]
File[/etc/cfssl/signers/dse/ca/dse-key.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-Wikimedia-Internal-Root-CA.conf]
Exec[Generate cert OCSP_wikikube_staging_pki1001_eqiad_wmnet]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube-front-proxy.conf]
Prometheus::Alert::Rule[check_check_certificate_expiry_discovery2026_bf2e3510cb63e5f05f545e816bab4edf]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_mlserve_staging]
Systemd::Timer[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
Exec[Generate initial CRL for dse_front_proxy]
Systemd::Timer[cfssl-ocsprefresh-etcd]
Systemd::Service[cfssl-ocsprefresh-puppet_rsa]
Nrpe::Monitor_service[check_certificate_expiry_dse]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_cloud_wmnet_ca.cfg]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service (prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service)]
File[/etc/logrotate.d/cfssl-ocsprefresh-wikikube_staging]
Profile::Pki::Multirootca::Monitoring[dse]
File[/usr/local/bin/prometheus-check-discovery2026-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_front_proxy.timer]
File[/etc/cfssl/ocsp/dse.ocsp]
Cfssl::Cert[OCSP_debmonitor_pki1001_eqiad_wmnet]
Prometheus::Blackbox::Check::Http[PKI_discovery2026]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-cloud-wmnet-ca.conf]
Systemd::Monitor[cfssl-multirootca]
Systemd::Unit[cfssl-ocspserve@cassandra]
Systemd::Unit[cfssl-ocspserve@network_devices]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_etcd]
Cfssl::Ocsp[puppet_rsa]
Systemd::Unit[cfssl-ocsprefresh-mlserve_front_proxy.service]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_debmonitor]
File[/lib/systemd/system/cfssl-ocsprefresh-dse_front_proxy.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery.timer]
Service[cfssl-multirootca]
Systemd::Syslog[cfssl-ocsprefresh-kafka]
Service[cfssl-ocspserve@dse_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-debmonitor.service (cfssl-ocsprefresh-debmonitor.service)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux.service (cfssl-ocsprefresh-aux.service)]
Service[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/cfssl.conf]
File[/usr/local/bin/prometheus-check-network_devices-certificate-expiry]
Cfssl::Signer[puppet_rsa]
Monitoring::Service[check_certificate_expiry_etcd]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service]
Logrotate::Conf[cfssl-ocsprefresh-dse]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_wikikube_staging]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_aux]
File[/etc/sudoers.d/nrpe_certificate_check_etcd]
Systemd::Service[cfssl-ocsprefresh-etcd]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/etc/cfssl/signers/discovery2026/ca/discovery2026.pem]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube_staging_front_proxy]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service]
Prometheus::Alert::Rule[check_check_certificate_expiry_wikikube_staging_front_proxy_e515778a769f523fb98a7f642670e011]
Exec[Generate cert OCSP_aux_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/cfssl-ocsprefresh-kafka.timer]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy]
Cfssl::Signer[discovery2026]
File[/etc/cfssl/signers/wikikube/ca/wikikube-key.pem]
Service[cfssl-ocsprefresh-network_devices.timer]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_wikikube_staging]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
File[/etc/cfssl/signers/kafka/cfssl.conf]
File[/etc/cfssl/signers/puppet_rsa/cfssl.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-syslog.conf]
File[/etc/apache2/conf-enabled/50-server-status.conf]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_wikikube]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-puppet-rsa.conf]
Systemd::Service[cfssl-ocspserve@aux]
File[/etc/cfssl/ssl/ocsp/OCSP_zuul_pki1001_eqiad_wmnet-key.pem]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube_staging_front_proxy.prom]
Systemd::Unit[cfssl-ocspserve@debmonitor]
File[/etc/cfssl/signers/discovery/ca/discovery.pem]
File[/srv/cfssl/bundles/mlserve_staging_front_proxy.pem]
Systemd::Timer::Job[cfssl-ocsprefresh-kafka]
Systemd::Unit[cfssl-ocsprefresh-network_devices.service]
Service[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer]
Systemd::Unit[cfssl-ocspserve@discovery2026]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Systemd::Timer::Job[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
Profile::Pki::Multirootca::Monitoring[cassandra]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_front_proxy.timer (cfssl-ocsprefresh-wikikube_front_proxy.timer)]
Cfssl::Csr[/etc/cfssl/csr/OCSP_discovery2026_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ssl/ocsp/OCSP_debmonitor_pki1001_eqiad_wmnet.csr]
Systemd::Syslog[cfssl-ocsprefresh-discovery2026]
Cfssl::Config[wikikube_staging]
Systemd::Timer[cfssl-ocsprefresh-dse_front_proxy]
File[/lib/systemd/system/cfssl-ocsprefresh-puppet_rsa.timer]
File[/etc/sudoers.d/nrpe-check_check_cfssl-multirootca_status]
Service[cfssl-ocspserve@mlserve_staging]
Httpd::Conf[server-status]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_mlserve]
File[/etc/cfssl/signers/aux/ca/aux-key.pem]
Exec[Generate cert OCSP_etcd_pki1001_eqiad_wmnet refresh]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
File[/lib/systemd/system/cfssl-ocspserve@wikikube_front_proxy.service]
Cfssl::Config[network_devices]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.service)]
Prometheus::Blackbox::Check::Http[PKI_mlserve_front_proxy]
Systemd::Timer[prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Exec[renew certificate - OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet]
Nrpe::Monitor_service[check_certificate_expiry_cloud_wmnet_ca]
File[/etc/cfssl/ocsp/wikikube_front_proxy.ocsp]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_network_devices.timer]
File[/etc/cfssl/ocsp/mlserve_front_proxy.ocsp]
File[/srv/cfssl/bundles/wikikube_front_proxy.pem]
File[/etc/logrotate.d/cfssl-ocsprefresh-kafka]
Exec[Generate cert puppet_rsa__pki_discovery_wmnet refresh on intermediate ca change]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_kafka.service]
File[/lib/systemd/system/cfssl-ocsprefresh-syslog.timer]
Exec[systemd daemon-reload for cfssl-gc-expired-certs.timer (cfssl-gc-expired-certs.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux_front_proxy.timer (cfssl-ocsprefresh-aux_front_proxy.timer)]
Systemd::Service[cfssl-ocspserve@dse]
File[/etc/cfssl/ssl/ocsp/OCSP_puppet_rsa_pki1001_eqiad_wmnet-key.pem]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_wikikube_staging]
Systemd::Unit[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service]
Profile::Pki::Multirootca::Monitoring[aux_front_proxy]
Cfssl::Csr[/etc/cfssl/csr/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.csr]
File[/etc/sudoers.d/nrpe_certificate_check_syslog]
Systemd::Service[prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-mlserve_staging_front_proxy.service]
Cfssl::Config[aux]
File[/usr/local/bin/prometheus-check-puppet_rsa-certificate-expiry]
Sudo::User[nrpe_certificate_check_cassandra]
Prometheus::Node_textfile[prometheus-check-cloud_wmnet_ca-certificate-expiry]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-cloud-wmnet-ca.conf]
Systemd::Syslog[cfssl-ocsprefresh-dse]
Systemd::Timer[prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer)]
File[/etc/cfssl/csr/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_aux]
File[/lib/systemd/system/cfssl-ocsprefresh-zuul.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer]
Prometheus::Alert::Rule[check_check_certificate_expiry_mlserve_staging_front_proxy_b194b5b9b6c9d6e05b9eed8dcfcc40cf]
File[/etc/cfssl/signers/mlserve/ca]
Service[cfssl-ocsprefresh-zuul.timer]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_syslog]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer)]
File[/etc/ferm/conf.d/10_multirootca_tls_termination]
File[/etc/sudoers.d/nrpe_certificate_check_cloud_wmnet_ca]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging_front_proxy.service]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service (nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service)]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube_staging]
Exec[Generate initial CRL for dse]
Exec[systemd daemon-reload for cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service (cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve.timer]
File[/var/log/cfssl-ocsprefresh-dse_front_proxy]
Exec[systemd daemon-reload for cfssl-gc-expired-certs.service (cfssl-gc-expired-certs.service)]
Systemd::Unit[cfssl-ocsprefresh-cassandra.service]
File[/etc/nagios/nrpe.d/check_check_cfssl-multirootca_status.cfg]
Sudo::User[nrpe-check_check_cfssl-multirootca_status]
Cfssl::Ocsp[wikikube_front_proxy]
File[/lib/systemd/system/cfssl-ocsprefresh-dse_front_proxy.service]
File[/etc/cfssl/signers/zuul/ca]
File[/etc/cfssl/ocsp/aux.ocsp]
File[/lib/systemd/system/cfssl-ocsprefresh-aux_front_proxy.service]
Sudo::User[nrpe-check_check_certificate_expiry_zuul]
Service[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer]
File[/etc/cfssl/signers/wikikube/ca/wikikube.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve.service]
File[/etc/cfssl/signers/cloud_wmnet_ca/ca/cloud_wmnet_ca.pem]
File[/etc/cfssl/signers/cloud_wmnet_ca/ca]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve.service (nrpe2nodexp-check_certificate_expiry_mlserve.service)]
File[/etc/cfssl/signers/etcd/cfssl.conf]
File[/etc/cfssl/ocsp/wikikube.ocsp]
Systemd::Service[cfssl-ocsprefresh-cassandra]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer)]
Nrpe::Monitor_service[check_certificate_expiry_cassandra]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer)]
Nrpe::Check[check_check_certificate_expiry_wikikube]
File[/etc/logrotate.d/cfssl-ocsprefresh-discovery]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service (prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service)]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube.timer]
Systemd::Service[cfssl-ocspserve@cassandra]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Unit[cfssl-ocsprefresh-kafka.timer]
Cfssl::Signer[wikikube_staging_front_proxy]
Exec[Generate cert OCSP_network_devices_pki1001_eqiad_wmnet]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_syslog]
Exec[ensure_present_mod_proxy_http]
File[/etc/cfssl/ocsp/mlserve.ocsp]
Prometheus::Blackbox::Check::Http[PKI_wikikube_staging_front_proxy]
Systemd::Service[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-mlserve_staging_front_proxy.timer]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_debmonitor.timer]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-puppet-rsa-certificate-expiry.conf]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery2026.timer (nrpe2nodexp-check_certificate_expiry_discovery2026.timer)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer)]
Profile::Pki::Multirootca::Monitoring[debmonitor]
File[/etc/sudoers.d/nrpe_certificate_check_cassandra]
Systemd::Timer[cfssl-ocsprefresh-network_devices]
Nrpe::Check[check_check_certificate_expiry_cassandra]
Service[cfssl-ocsprefresh-discovery.timer]
File[/etc/cfssl/signers/etcd]
Profile::Pki::Multirootca::Monitoring[puppet_rsa]
Service[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer]
Exec[Generate cert OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet]
Exec[Generate cert OCSP_mlserve_staging_pki1001_eqiad_wmnet refresh]
Prometheus::Alert::Rule[check_check_certificate_expiry_dse_front_proxy_2560f4f577ba169af651cf96bd5dc1ba]
File[/etc/cfssl/ocsp/puppet_rsa.ocsp]
Systemd::Timer::Job[cfssl-ocsprefresh-wikikube_staging_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer)]
Cfssl::Signer[cassandra]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_dse.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_front_proxy.service (cfssl-ocsprefresh-wikikube_front_proxy.service)]
Cfssl::Csr[/etc/cfssl/csr/OCSP_network_devices_pki1001_eqiad_wmnet.csr]
Logrotate::Conf[cfssl-ocsprefresh-wikikube_staging]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_aux]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube_staging.service]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Cfssl::Ocsp[cassandra]
Systemd::Unit[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_dse_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery2026_pki1001_eqiad_wmnet-key.pem]
File[/etc/sudoers.d/nrpe_certificate_check_kafka]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Logrotate::Conf[cfssl-ocsprefresh-discovery2026]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer)]
File[/etc/cfssl/ssl/ocsp/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.csr]
Systemd::Syslog[cfssl-ocsprefresh-discovery]
File[/etc/cfssl/csr/OCSP_kafka_pki1001_eqiad_wmnet.csr]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-staging-front-proxy-certificate-expiry.conf]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_aux_front_proxy]
Sudo::User[nrpe-check_check_certificate_expiry_wikikube]
File[/etc/cfssl/signers/mlserve_staging]
Exec[Generate cert OCSP_aux_pki1001_eqiad_wmnet]
Exec[renew certificate - OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer)]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_zuul.timer]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-cloud_wmnet_ca.timer]
Systemd::Timer::Job[cfssl-ocsprefresh-etcd]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer (nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer)]
Systemd::Unit[cfssl-ocsprefresh-discovery.service]
Nrpe::Check[check_check_certificate_expiry_discovery]
File[/etc/apache2/conf-available/50-cfssl-issuer-k8s-pods-vhost-port.conf]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
Exec[renew certificate - OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_wikikube]
File[/etc/logrotate.d/cfssl-ocsprefresh-dse_front_proxy]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve_staging]
Systemd::Unit[cfssl-ocsprefresh-network_devices.timer]
File[/etc/cfssl/signers/puppet_rsa/ca/puppet_rsa-key.pem]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_discovery.timer]
Systemd::Timer::Job[cfssl-ocsprefresh-wikikube_front_proxy]
Prometheus::Alert::Rule[check_check_certificate_expiry_wikikube_staging_f389c556cebfcfc345b3d6802f320045]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux.timer (nrpe2nodexp-check_certificate_expiry_aux.timer)]
Systemd::Unit[cfssl-ocspserve@dse]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.conf]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca]
Prometheus::Alert::Rule[check_check_certificate_expiry_etcd_c834f873297e445663ead81279c0b928]
Cfssl::Ocsp[mlserve_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service]
Systemd::Timer[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service]
Service[cfssl-ocsprefresh-kafka.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_kafka.timer (nrpe2nodexp-check_certificate_expiry_kafka.timer)]
Service[wmf_auto_restart_apache-htcacheclean.timer]
Rsyslog::Conf[cfssl-gc-expired-certs]
Systemd::Timer::Job[cfssl-gc-expired-certs]
File[/etc/cfssl/ocsp/syslog.ocsp]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery.timer (cfssl-ocsprefresh-discovery.timer)]
Systemd::Timer[cfssl-ocsprefresh-kafka]
Monitoring::Service[check_certificate_expiry_zuul]
Service[cfssl-ocsprefresh-debmonitor.timer]
File[/etc/cfssl/signers/puppet_rsa/ca]
Prometheus::Blackbox::Check::Http[PKI_mlserve_staging]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_puppet_rsa.service (nrpe2nodexp-check_certificate_expiry_puppet_rsa.service)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery2026.timer (cfssl-ocsprefresh-discovery2026.timer)]
Prometheus::Blackbox::Check::Http[PKI_discovery]
Systemd::Timer::Job[cfssl-ocsprefresh-mlserve]
Prometheus::Node_textfile[prometheus-check-mlserve_front_proxy-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service]
Exec[ensure_present_mod_filter]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse_front_proxy.timer (cfssl-ocsprefresh-dse_front_proxy.timer)]
File[/etc/logrotate.d/cfssl-ocsprefresh-discovery2026]
Exec[systemd daemon-reload for cfssl-ocspserve@network_devices.service (cfssl-ocspserve@network_devices)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service (prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service)]
Systemd::Timer[cfssl-ocsprefresh-wikikube_staging]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/cfssl.conf]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-kafka.conf]
Service[nrpe2nodexp-check_cfssl-multirootca_status.timer]
File[/etc/cfssl/signers/wikikube_front_proxy/ca]
Exec[systemd daemon-reload for cfssl-ocspserve@debmonitor.service (cfssl-ocspserve@debmonitor)]
File[/lib/systemd/system/cfssl-ocsprefresh-syslog.service]
Nrpe::Monitor_service[check_certificate_expiry_aux_front_proxy]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.conf]
Systemd::Unit[wmf_auto_restart_apache2.timer]
Service[nrpe2nodexp-check_certificate_expiry_wikikube.timer]
Systemd::Unit[cfssl-ocspserve@dse_front_proxy]
Exec[renew certificate - OCSP_wikikube_staging_pki1001_eqiad_wmnet]
Cfssl::Csr[/etc/cfssl/csr/OCSP_debmonitor_pki1001_eqiad_wmnet.csr]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.conf]
File[/etc/cfssl/csr/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_zuul.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_puppet_rsa_pki1001_eqiad_wmnet.pem]
Exec[Generate initial CRL for cloud_wmnet_ca]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_syslog.timer]
Service[prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_pki1001_eqiad_wmnet.pem]
File[/srv/cfssl/bundles/mlserve_staging.pem]
Exec[Generate initial CRL for discovery]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_network_devices.timer (nrpe2nodexp-check_certificate_expiry_network_devices.timer)]
Service[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer]
File[/usr/local/bin/prometheus-check-aux_front_proxy-certificate-expiry]
File[/var/log/cfssl-ocsprefresh-cloud_wmnet_ca]
File[/etc/cfssl/csr/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.csr]
Profile::Pki::Multirootca::Monitoring[dse_front_proxy]
File[/lib/systemd/system/cfssl-ocsprefresh-cloud_wmnet_ca.service]
File[/lib/systemd/system/cfssl-ocspserve@dse_front_proxy.service]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/etc/cfssl/ocsp/discovery2026.ocsp]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service (nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer]
Sudo::User[nrpe_certificate_check_mlserve_staging]
Exec[Generate cert puppet_rsa__pki_discovery_wmnet refresh]
Cfssl::Signer[aux]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging.service (cfssl-ocsprefresh-mlserve_staging.service)]
Systemd::Unit[cfssl-ocsprefresh-syslog.service]
File[/etc/cfssl/signers/syslog/ca/syslog-key.pem]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_wikikube_staging]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service]
File[/var/log/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
Nrpe::Check[check_check_certificate_expiry_dse_front_proxy]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve_front_proxy.prom]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_etcd]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.service]
File[/etc/cfssl/ssl/ocsp/OCSP_Wikimedia_Internal_Root_CA_pki1001_eqiad_wmnet.pem]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer)]
File[/etc/logrotate.d/cfssl-ocsprefresh-cloud_wmnet_ca]
Cfssl::Ocsp[aux]
Systemd::Syslog[cfssl-ocsprefresh-cloud_wmnet_ca]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging_front_proxy.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging.service (nrpe2nodexp-check_certificate_expiry_mlserve_staging.service)]
Prometheus::Blackbox::Check::Http[PKI_syslog]
Exec[systemd daemon-reload for apache2.service (apache2-apache2-after-network-online-target)]
Sudo::User[nrpe-check_check_certificate_expiry_mlserve_staging_front_proxy]
Systemd::Service[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-network_devices.timer (cfssl-ocsprefresh-network_devices.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery2026.service (cfssl-ocsprefresh-discovery2026.service)]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-network-devices.conf]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-dse.conf]
File[/srv/cfssl/bundles/etcd.pem]
Rsyslog::Conf[cfssl-ocsprefresh-mlserve_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer)]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-syslog.conf]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_network_devices.timer]
Systemd::Unit[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_cassandra_pki1001_eqiad_wmnet-key.pem]
Systemd::Service[cfssl-ocspserve@kafka]
Systemd::Unit[cfssl-ocsprefresh-etcd.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service (nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service)]
File[/etc/cfssl/ocsp/zuul.ocsp]
Exec[Generate cert OCSP_syslog_pki1001_eqiad_wmnet]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_debmonitor]
Systemd::Service[prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Nrpe::Monitor_service[check_certificate_expiry_mlserve_front_proxy]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_zuul]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_puppet_rsa]
Exec[systemd daemon-reload for cfssl-ocspserve@puppet_rsa.service (cfssl-ocspserve@puppet_rsa)]
File[/etc/cfssl/signers/mlserve_front_proxy]
File[/etc/cfssl/signers/wikikube_front_proxy/ca/wikikube_front_proxy.pem]
File[/lib/systemd/system/cfssl-ocspserve@zuul.service]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy]
File[/lib/systemd/system/cfssl-multirootca.service]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer]
Sudo::User[nrpe_certificate_check_mlserve_staging_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_network_devices_pki1001_eqiad_wmnet-key.pem]
Exec[systemd daemon-reload for cfssl-ocspserve@dse.service (cfssl-ocspserve@dse)]
File[/srv/cfssl/bundles/aux_front_proxy.pem]
File[/var/log/cfssl-ocsprefresh-wikikube_staging]
File[/etc/cfssl/signers/discovery2026/ca/discovery2026-key.pem]
Exec[Generate initial CRL for wikikube_front_proxy]
Rsyslog::Conf[cfssl-ocsprefresh-aux_front_proxy]
Sudo::User[nrpe_certificate_check_wikikube_staging_front_proxy]
Service[cfssl-ocspserve@wikikube_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service (prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service)]
File[/etc/apache2/mods-enabled/status.conf]
Logrotate::Conf[wmf_auto_restart_apache-htcacheclean]
Logrotate::Conf[cfssl-ocsprefresh-aux]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_cassandra]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_discovery]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve_staging.cfg]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_aux]
Systemd::Unit[cfssl-ocspserve@aux_front_proxy]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-discovery2026.timer]
File[/etc/cfssl/signers/network_devices/ca/network_devices-key.pem]
Prometheus::Node_textfile[prometheus-check-syslog-certificate-expiry]
Nrpe::Check[check_check_certificate_expiry_cloud_wmnet_ca]
File[/srv/cfssl/bundles/puppet_rsa.pem]
Nrpe::Monitor_service[check_certificate_expiry_wikikube_front_proxy]
File[/etc/cfssl/signers/network_devices/ca]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_mlserve]
File[/etc/cfssl/csr/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.csr]
Prometheus::Alert::Rule[check_check_certificate_expiry_mlserve_staging_7cff186656c3cabbca85b5b57d0c8679]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube.timer]
Node[__node_regexp__pki10012.eqiad.]
Systemd::Syslog[cfssl-ocsprefresh-wikikube_staging_front_proxy]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve.cfg]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_cassandra]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service]
File[/etc/cfssl/csr/OCSP_discovery_pki1001_eqiad_wmnet.csr]
File[/etc/sudoers.d/nrpe_certificate_check_aux]
File[/usr/local/bin/prometheus-check-dse_front_proxy-certificate-expiry]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_dse]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Sudo::User[nrpe-check_check_certificate_expiry_discovery2026]
Service[nrpe2nodexp-check_certificate_expiry_etcd.timer]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_puppet_rsa.cfg]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service]
File[/etc/apache2/conf-available]
Sudo::User[nrpe_certificate_check_network_devices]
Nrpe::Check[check_check_certificate_expiry_mlserve_staging_front_proxy]
File[/usr/local/bin/prometheus-check-aux-certificate-expiry]
Service[cfssl-ocspserve@cloud_wmnet_ca]
File[/srv/cfssl/bundles/debmonitor.pem]
Profile::Pki::Multirootca::Monitoring[wikikube]
File[/etc/cfssl/ocsp/cassandra.ocsp]
File[/etc/cfssl/ssl/ocsp/OCSP_network_devices_pki1001_eqiad_wmnet.pem]
Exec[Generate cert OCSP_discovery_pki1001_eqiad_wmnet]
Cfssl::Config[syslog]
File[/etc/cfssl/signers/debmonitor/cfssl.conf]
Exec[systemd daemon-reload for cfssl-ocspserve@zuul.service (cfssl-ocspserve@zuul)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-staging-certificate-expiry.conf]
Service[cfssl-ocspserve@syslog]
Service[cfssl-ocspserve@wikikube_staging_front_proxy]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Systemd::Service[cfssl-ocspserve@puppet_rsa]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy]
File[/var/log/cfssl-ocsprefresh-puppet_rsa]
Cfssl::Csr[/etc/cfssl/csr/OCSP_wikikube_staging_pki1001_eqiad_wmnet.csr]
Cfssl::Csr[/etc/cfssl/csr/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_debmonitor]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_puppet_rsa.service]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-zuul.conf]
Prometheus::Node_textfile[prometheus-check-cassandra-certificate-expiry]
Exec[Generate cert OCSP_debmonitor_pki1001_eqiad_wmnet refresh]
Logrotate::Conf[cfssl-ocsprefresh-syslog]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube.prom]
Motd::Message[pki::multirootca]
Nrpe::Monitor_service[check_certificate_expiry_mlserve_staging_front_proxy]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve_front_proxy.cfg]
Cfssl::Config[etcd]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_discovery]
Systemd::Service[cfssl-ocsprefresh-discovery]
Profile::Pki::Multirootca::Monitoring[mlserve]
Motd::Script[pki::multirootca]
Cfssl::Csr[/etc/cfssl/csr/OCSP_kafka_pki1001_eqiad_wmnet.csr]
Cfssl::Cert[OCSP_aux_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/mlserve/cfssl.conf]
Exec[systemd daemon-reload for cfssl-ocsprefresh-network_devices.service (cfssl-ocsprefresh-network_devices.service)]
Profile::Pki::Multirootca::Monitoring[wikikube_staging_front_proxy]
Systemd::Syslog[cfssl-ocsprefresh-mlserve_staging_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service]
Systemd::Unit[cfssl-ocspserve@wikikube_staging_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer]
File[/usr/local/bin/prometheus-check-kafka-certificate-expiry]
File[/etc/rsyslog.d/40-wmf-auto-restart-apache2.conf]
Exec[Generate initial CRL for mlserve_staging]
File[/etc/cfssl/signers/zuul/ca/zuul.pem]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_cassandra]
File[/etc/cfssl/csr/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_syslog]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery_pki1001_eqiad_wmnet-key.pem]
Systemd::Service[cfssl-ocsprefresh-debmonitor]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_mlserve_staging]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_wikikube_staging]
Cfssl::Cert[OCSP_wikikube_staging_pki1001_eqiad_wmnet]
Exec[Generate initial CRL for aux]
Exec[systemd daemon-reload for wmf_auto_restart_apache-htcacheclean.service (wmf_auto_restart_apache-htcacheclean.service)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.conf]
Rsyslog::Conf[nrpe2nodexp-check_cfssl-multirootca_status]
Service[cfssl-ocspserve@zuul]
File[/var/log/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/lib/systemd/system/cfssl-gc-expired-certs.service]
Exec[systemd daemon-reload for wmf_auto_restart_apache2.service (wmf_auto_restart_apache2.service)]
File[/etc/cfssl/signers/discovery2026]
Systemd::Unit[cfssl-ocsprefresh-dse_front_proxy.timer]
Monitoring::Service[check_cfssl-multirootca_status]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Prometheus::Blackbox::Check::Http[PKI_network_devices]
Cfssl::Cert[OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet]
Sudo::User[nrpe-check_check_certificate_expiry_syslog]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_zuul.cfg]
File[/etc/cfssl/ssl/ocsp/OCSP_syslog_pki1001_eqiad_wmnet.pem]
Prometheus::Alert::Rule[check_check_certificate_expiry_wikikube_d2a76a31e44e204e2d4788a2698d0e6c]
File[/etc/logrotate.d/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
File[/etc/cfssl/signers/discovery]
File[/etc/update-motd.d/05-pki--multirootca]
File[/lib/systemd/system/cfssl-ocspserve@wikikube_staging.service]
Systemd::Unit[cfssl-ocsprefresh-debmonitor.timer]
Cfssl::Csr[/etc/cfssl/csr/OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet.csr]
Prometheus::Blackbox::Check::Http[PKI_mlserve_staging_front_proxy]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-cassandra.conf]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube_front_proxy.cfg]
Firewall::Service[csr_and_ocsp_responder]
File[/usr/local/bin/apache-status]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube.timer (nrpe2nodexp-check_certificate_expiry_wikikube.timer)]
Systemd::Service[cfssl-multirootca]
Systemd::Timer[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
File[/srv/cfssl/crl]
File[/etc/cfssl/ocsp/cloud_wmnet_ca.ocsp]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve.timer (cfssl-ocsprefresh-mlserve.timer)]
Systemd::Service[cfssl-ocspserve@mlserve_staging]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer)]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_pki1001_eqiad_wmnet-key.pem]
Prometheus::Blackbox::Check::Http[PKI_aux_front_proxy]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cassandra.service (nrpe2nodexp-check_certificate_expiry_cassandra.service)]
Systemd::Timer[cfssl-ocsprefresh-puppet_rsa]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer)]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_dse_front_proxy]
Cfssl::Cert[OCSP_mlserve_staging_pki1001_eqiad_wmnet]
Exec[Generate initial CRL for wikikube_staging_front_proxy]
Systemd::Syslog[wmf_auto_restart_apache-htcacheclean]
Systemd::Unit[apache2-apache2-after-network-online-target]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer]
Systemd::Timer[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Exec[Generate cert OCSP_zuul_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-ocsprefresh-puppet_rsa.service (cfssl-ocsprefresh-puppet_rsa.service)]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse.service (cfssl-ocsprefresh-dse.service)]
Exec[renew certificate - OCSP_puppet_rsa_pki1001_eqiad_wmnet]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging.service]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve_staging.prom]
Sudo::User[nrpe-check_check_certificate_expiry_discovery]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.chained.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_dse_front_proxy.cfg]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve_staging]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_front_proxy.service]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse.service (nrpe2nodexp-check_certificate_expiry_dse.service)]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/etc/cfssl/signers/dse/cfssl.conf]
Cfssl::Signer[mlserve_staging]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube.service (nrpe2nodexp-check_certificate_expiry_wikikube.service)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_aux.cfg]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging_front_proxy.service (cfssl-ocsprefresh-wikikube_staging_front_proxy.service)]
File[/var/log/cfssl-ocsprefresh-mlserve_front_proxy]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Prometheus::Blackbox::Check::Http[PKI_wikikube]
Exec[systemd daemon-reload for cfssl-ocsprefresh-etcd.service (cfssl-ocsprefresh-etcd.service)]
Systemd::Unit[cfssl-ocsprefresh-dse.service]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-debmonitor.conf]
Rsyslog::Conf[cfssl-ocsprefresh-aux]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
Exec[Generate cert OCSP_debmonitor_pki1001_eqiad_wmnet]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_mlserve]
File[/var/log/cfssl-ocsprefresh-mlserve]
Cfssl::Ocsp[network_devices]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer]
Nrpe::Check[check_check_certificate_expiry_zuul]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
File[/usr/local/bin/prometheus-check-mlserve_staging-certificate-expiry]
File[/etc/cfssl/signers/cassandra/ca/cassandra.pem]
Systemd::Service[cfssl-ocsprefresh-aux_front_proxy]
Systemd::Timer::Job[cfssl-ocsprefresh-mlserve_staging]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery.timer (nrpe2nodexp-check_certificate_expiry_discovery.timer)]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube-staging-front-proxy.conf]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_network_devices.cfg]
File[/etc/cfssl/signers/etcd/ca]
Class[Role::Pki::Multirootca]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.pem]
Systemd::Timer[cfssl-ocsprefresh-discovery]
File[/usr/local/bin/prometheus-check-wikikube-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocspserve@discovery2026.service (cfssl-ocspserve@discovery2026)]
Cfssl::Signer[mlserve]
File[/lib/systemd/system/cfssl-ocspserve@cloud_wmnet_ca.service]
Exec[systemd daemon-reload for cfssl-ocspserve@etcd.service (cfssl-ocspserve@etcd)]
File[/var/log/cfssl-ocsprefresh-cassandra]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_network_devices]
Ferm::Service[multirootca_tls_termination]
Systemd::Unit[cfssl-ocsprefresh-mlserve_front_proxy.timer]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_debmonitor]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve-front-proxy.conf]
Service[nrpe2nodexp-check_certificate_expiry_syslog.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/cfssl-ocsprefresh-debmonitor]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_etcd.service]
Systemd::Service[cfssl-ocsprefresh-zuul]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service (prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.service)]
Systemd::Timer[cfssl-ocsprefresh-aux_front_proxy]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_etcd]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Service[cfssl-ocspserve@puppet_rsa]
Cfssl::Cert[OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve-front-proxy.conf]
Rsyslog::Conf[cfssl-ocsprefresh-mlserve_staging]
File[/srv/cfssl/bundles/discovery2026.pem]
Cfssl::Config[kafka]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service (prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer]
Systemd::Timer[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-wikikube_staging_front_proxy.timer]
Systemd::Unit[cfssl-ocsprefresh-syslog.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_zuul.service]
File[/lib/systemd/system/cfssl-gc-expired-certs.timer]
Systemd::Unit[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer]
File[/var/log/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
Sudo::User[nrpe-check_check_certificate_expiry_mlserve_front_proxy]
Nrpe::Monitor_service[check_cfssl-multirootca_status]
Prometheus::Node_textfile[prometheus-check-kafka-certificate-expiry]
Cfssl::Config[aux_front_proxy]
Systemd::Syslog[cfssl-ocsprefresh-mlserve_staging]
Service[cfssl-ocsprefresh-wikikube.timer]
Service[nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer]
Cfssl::Cert[OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet]
Nrpe::Monitor_service[check_certificate_expiry_puppet_rsa]
File[/lib/systemd/system/cfssl-ocspserve@debmonitor.service]
Cfssl::Signer[discovery]
Systemd::Service[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/etc/cfssl/db.conf.json]
Systemd::Service[wmf_auto_restart_apache-htcacheclean]
File[/etc/cfssl/ssl/ocsp/OCSP_kafka_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/signers/discovery2026/ca]
Systemd::Timer[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/var/log/cfssl-ocsprefresh-etcd]
Service[cfssl-ocspserve@aux]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube.service (cfssl-ocspserve@wikikube)]
Systemd::Timer::Job[cfssl-ocsprefresh-zuul]
Nrpe::Monitor_service[check_certificate_expiry_debmonitor]
Systemd::Syslog[cfssl-gc-expired-certs]
Monitoring::Service[check_certificate_expiry_puppet_rsa]
File[/srv/cfssl/bundles]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-kafka.conf]
File[/etc/logrotate.d/cfssl-ocsprefresh-syslog]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_network_devices]
Systemd::Unit[cfssl-ocsprefresh-wikikube_front_proxy.timer]
File[/etc/cfssl/ocsp/mlserve_staging_front_proxy.ocsp]
File[/etc/apache2/env-available]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_debmonitor.timer]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-cassandra.timer]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Rsyslog::Conf[cfssl-ocsprefresh-wikikube]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_cassandra.prom]
Systemd::Service[cfssl-ocsprefresh-aux]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve.service (cfssl-ocspserve@mlserve)]
Systemd::Syslog[cfssl-ocsprefresh-mlserve]
Rsyslog::Conf[cfssl-ocsprefresh-wikikube_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_kafka.service (nrpe2nodexp-check_certificate_expiry_kafka.service)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service]
Cfssl::Config[debmonitor]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer]
File[/usr/local/bin/prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_kafka.service]
Nrpe::Check[check_check_certificate_expiry_discovery2026]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_zuul.timer (nrpe2nodexp-check_certificate_expiry_zuul.timer)]
Exec[systemd daemon-reload for cfssl-ocspserve@cassandra.service (cfssl-ocspserve@cassandra)]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer]
Systemd::Syslog[cfssl-ocsprefresh-aux]
Logrotate::Conf[cfssl-ocsprefresh-debmonitor]
Prometheus::Alert::Rule[check_check_certificate_expiry_cassandra_f5e260f525c48c963fb2e6c86a0d5d63]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_pki1001_eqiad_wmnet.csr]
Systemd::Timer[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Nrpe::Check[check_check_cfssl-multirootca_status]
Systemd::Service[cfssl-ocsprefresh-network_devices]
Exec[Generate cert OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet refresh]
File[/etc/cfssl/ssl/Wikimedia_Internal_Root_CA.pem]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cassandra.service]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-discovery2026.conf]
Service[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer]
Service[nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer]
Cfssl::Ocsp[cloud_wmnet_ca]
File[/etc/apache2/conf-enabled]
Prometheus::Alert::Rule[check_check_certificate_expiry_dse_4384c5ebc49e03dbe331e279fac3f393]
Systemd::Unit[cfssl-ocsprefresh-cloud_wmnet_ca.service]
Cfssl::Ocsp[wikikube_staging]
File[/etc/ssl/dhparam.pem]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_cassandra]
File[/etc/cfssl/signers/puppet_rsa]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_syslog.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service (prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service)]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.pem]
Exec[Generate cert OCSP_dse_pki1001_eqiad_wmnet]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_mlserve_front_proxy]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_wikikube]
Cfssl::Csr[/etc/cfssl/csr/OCSP_wikikube_pki1001_eqiad_wmnet.csr]
Prometheus::Node_textfile[prometheus-check-aux-certificate-expiry]
Exec[Generate cert puppet_rsa__pki_discovery_wmnet]
Exec[systemd daemon-reload for cfssl-ocsprefresh-etcd.timer (cfssl-ocsprefresh-etcd.timer)]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube_staging_front_proxy.cfg]
File[/etc/sudoers.d/nrpe_certificate_check_discovery2026]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery2026_pki1001_eqiad_wmnet.csr]
Exec[systemd daemon-reload for cfssl-ocsprefresh-syslog.timer (cfssl-ocsprefresh-syslog.timer)]
Systemd::Unit[cfssl-ocspserve@discovery]
Systemd::Service[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Systemd::Service[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Systemd::Syslog[cfssl-ocsprefresh-dse_front_proxy]
Cfssl::Config[mlserve_staging_front_proxy]
File[/etc/cfssl/ocsp/debmonitor.ocsp]
Systemd::Timer[cfssl-ocsprefresh-mlserve_staging]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_kafka.prom]
File[/etc/cfssl/ssl/ocsp/OCSP_etcd_pki1001_eqiad_wmnet.pem]
Systemd::Unit[cfssl-ocsprefresh-discovery.timer]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/ca/wikikube_staging_front_proxy-key.pem]
File[/etc/cfssl/signers/dse_front_proxy/cfssl.conf]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_network_devices.prom]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service]
Nrpe::Monitor_service[check_certificate_expiry_mlserve]
Prometheus::Node_textfile[prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Logrotate::Conf[cfssl-ocsprefresh-network_devices]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_network_devices.service (nrpe2nodexp-check_certificate_expiry_network_devices.service)]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_discovery2026.timer]
Prometheus::Node_textfile[prometheus-check-etcd-certificate-expiry]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_kafka]
File[/etc/cfssl/ssl/ocsp/OCSP_zuul_pki1001_eqiad_wmnet.pem]
Monitoring::Service[check_certificate_expiry_wikikube]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_dse_front_proxy]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service]
Service[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve.timer]
Httpd::Conf[defaults]
Service[cfssl-ocspserve@kafka]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
Systemd::Timer[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
File[/etc/logrotate.d/cfssl-ocsprefresh-network_devices]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_debmonitor.cfg]
File[/etc/cfssl/signers/cloud_wmnet_ca/cfssl.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_zuul_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/db.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux_front_proxy.service (cfssl-ocsprefresh-aux_front_proxy.service)]
Logrotate::Conf[cfssl-ocsprefresh-etcd]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-mlserve-staging-front-proxy.conf]
File[/etc/cfssl/signers/dse/ca/dse.pem]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_debmonitor]
Cfssl::Signer[zuul]
Cfssl::Config[wikikube]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_aux]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.service]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-dse-certificate-expiry.conf]
Prometheus::Alert::Rule[check_check_certificate_expiry_puppet_rsa_c1b324b3d8ac107f8d7483b4017f5edf]
Prometheus::Blackbox::Check::Http[PKI_mlserve]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-staging-certificate-expiry.conf]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_aux_front_proxy]
File[/etc/cfssl/signers/wikikube_front_proxy/ca/wikikube_front_proxy-key.pem]
Systemd::Timer[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.csr]
File[/etc/cfssl/csr/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.csr]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
Systemd::Service[cfssl-ocsprefresh-mlserve_staging]
File[/etc/logrotate.d/cfssl-ocsprefresh-cassandra]
Service[nrpe2nodexp-check_certificate_expiry_cassandra.timer]
Cfssl::Signer[wikikube_front_proxy]
Systemd::Timer[wmf_auto_restart_apache2]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/ca/mlserve_staging_front_proxy.pem]
Exec[ensure_present_mod_ssl]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging.service (nrpe2nodexp-check_certificate_expiry_wikikube_staging.service)]
Sudo::User[nrpe-check_check_certificate_expiry_wikikube_front_proxy]
Service[nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cassandra.timer]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve_staging_front_proxy]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-dse-front-proxy.conf]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube_front_proxy.prom]
Monitoring::Exported_nagios_service[pki1001 check_cfssl-multirootca_status]
Systemd::Service[cfssl-ocspserve@wikikube]
Nrpe::Monitor_service[check_certificate_expiry_kafka]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.conf]
File[/etc/logrotate.d/cfssl-ocsprefresh-aux]
File[/var/lib/prometheus/node.d/check_check_cfssl-multirootca_status.prom]
File[/etc/cfssl/signers/aux_front_proxy/ca/aux_front_proxy-key.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-cassandra.conf]
File[/etc/apache2/mods-available/status.conf]
Service[cfssl-ocspserve@debmonitor]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_etcd.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery2026.service]
Cfssl::Ocsp[debmonitor]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet.pem]
Exec[Generate cert OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet]
Cfssl::Signer[wikikube_staging]
Systemd::Syslog[cfssl-ocsprefresh-zuul]
Rsyslog::Conf[cfssl-ocsprefresh-wikikube_staging_front_proxy]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
File[/etc/cfssl/signers/wikikube_staging/ca/wikikube_staging.pem]
Systemd::Timer[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/etc/apache2/sites-available]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_dse]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca]
Systemd::Service[cfssl-ocspserve@debmonitor]
Cfssl::Cert[OCSP_network_devices_pki1001_eqiad_wmnet]
File[/etc/cfssl/signers/kafka/ca]
File[/etc/cfssl/ocsp/network_devices.ocsp]
Service[cfssl-ocsprefresh-wikikube_front_proxy.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet-key.pem]
Systemd::Unit[prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_puppet_rsa]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube]
Exec[renew certificate - OCSP_syslog_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_syslog_pki1001_eqiad_wmnet.csr]
Nrpe::Monitor_service[check_certificate_expiry_wikikube_staging]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_discovery.prom]
Service[cfssl-ocspserve@Wikimedia_Internal_Root_CA]
Logrotate::Conf[cfssl-ocsprefresh-wikikube_front_proxy]
File[/etc/cfssl/signers/dse_front_proxy]
Service[nrpe2nodexp-check_certificate_expiry_debmonitor.timer]
Service[cfssl-ocsprefresh-dse.timer]
Systemd::Service[cfssl-ocspserve@etcd]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-dse.timer]
Prometheus::Blackbox::Check::Http[PKI_zuul]
Exec[Generate cert OCSP_puppet_rsa_pki1001_eqiad_wmnet refresh]
File[/var/log/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
Cfssl::Ocsp[mlserve_staging]
Nrpe::Monitor_service[check_certificate_expiry_aux]
File[/etc/cfssl/signers/dse_front_proxy/ca/dse_front_proxy.pem]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_zuul]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer]
Systemd::Service[cfssl-ocspserve@mlserve_staging_front_proxy]
File[/etc/cfssl/signers/mlserve/ca/mlserve-key.pem]
Systemd::Unit[cfssl-ocsprefresh-wikikube.service]
File[/srv/cfssl/bundles/dse.pem]
File[/etc/apache2/conf-enabled/50-cfssl-issuer-k8s-pods-vhost-port.conf]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.pem]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_debmonitor.timer (nrpe2nodexp-check_certificate_expiry_debmonitor.timer)]
Monitoring::Service[check_certificate_expiry_mlserve_staging]
File[/etc/logrotate.d/wmf_auto_restart_apache-htcacheclean]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_mlserve_staging]
Exec[renew certificate - OCSP_dse_front_proxy_pki1001_eqiad_wmnet]
Prometheus::Alert::Rule[check_check_certificate_expiry_aux_front_proxy_99cf4f8f014e8fd527800abcc213f494]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube_front_proxy.service (cfssl-ocspserve@wikikube_front_proxy)]
Logrotate::Conf[cfssl-ocsprefresh-zuul]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_kafka]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube.cfg]
Systemd::Timer::Job[cfssl-ocsprefresh-wikikube]
Service[apache2]
Exec[Generate cert OCSP_wikikube_pki1001_eqiad_wmnet]
Systemd::Unit[cfssl-ocspserve@mlserve_front_proxy]
Systemd::Service[cfssl-ocsprefresh-cloud_wmnet_ca]
Systemd::Timer::Job[cfssl-ocsprefresh-aux]
Logrotate::Conf[cfssl-ocsprefresh-dse_front_proxy]
Nrpe::Monitor_service[check_certificate_expiry_mlserve_staging]
Systemd::Timer[cfssl-ocsprefresh-mlserve]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_cloud_wmnet_ca]
File[/etc/cfssl/ssl/ocsp/OCSP_cassandra_pki1001_eqiad_wmnet.pem]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging_front_proxy.timer (cfssl-ocsprefresh-mlserve_staging_front_proxy.timer)]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_cassandra]
File[/lib/systemd/system/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer]
Monitoring::Service[check_certificate_expiry_wikikube_staging_front_proxy]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube-staging-front-proxy.conf]
File_line[auto_restart_file_presence_apache-htcacheclean]
File[/srv/cfssl/bundles/wikikube_staging_front_proxy.pem]
Exec[Generate initial CRL for debmonitor]
Service[cfssl-ocspserve@wikikube]
File[/lib/systemd/system/cfssl-ocspserve@discovery2026.service]
File[/srv/cfssl/bundles/mlserve_front_proxy.pem]
Systemd::Service[cfssl-ocspserve@cloud_wmnet_ca]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_staging_pki1001_eqiad_wmnet.csr]
Firewall::Service[multirootca tls termination]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.timer]
Profile::Pki::Multirootca::Monitoring[discovery]
Systemd::Unit[cfssl-ocsprefresh-wikikube_front_proxy.service]
File[/etc/logrotate.d/cfssl-ocsprefresh-dse]
Systemd::Unit[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.service]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_discovery2026.prom]
Prometheus::Node_textfile[prometheus-check-discovery-certificate-expiry]
File[/etc/cfssl/signers/cassandra/ca]
Cfssl::Ocsp[wikikube]
Prometheus::Node_textfile[prometheus-check-discovery2026-certificate-expiry]
Systemd::Unit[cfssl-ocspserve@etcd]
File[/etc/cfssl/signers/discovery/cfssl.conf]
Exec[Generate cert OCSP_discovery2026_pki1001_eqiad_wmnet]
Prometheus::Node_textfile[prometheus-check-dse_front_proxy-certificate-expiry]
Sudo::User[nrpe-check_check_certificate_expiry_mlserve]
Sudo::User[nrpe-check_check_certificate_expiry_dse]
File[/etc/cfssl/csr/OCSP_debmonitor_pki1001_eqiad_wmnet.csr]
File[/usr/local/bin/prometheus-check-cassandra-certificate-expiry]
Cfssl::Signer[dse]
Package[apache2]
Cfssl::Csr[/etc/cfssl/csr/OCSP_dse_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/ocsp/etcd.ocsp]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_etcd]
File[/lib/systemd/system/cfssl-ocsprefresh-dse.service]
Prometheus::Node_textfile[prometheus-check-dse-certificate-expiry]
Service[prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_network_devices_pki1001_eqiad_wmnet.csr]
Systemd::Syslog[cfssl-ocsprefresh-wikikube]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-debmonitor.timer (cfssl-ocsprefresh-debmonitor.timer)]
File[/etc/cfssl/signers/wikikube_staging/ca]
File[/lib/systemd/system/cfssl-ocsprefresh-aux.service]
Nrpe::Check[check_check_certificate_expiry_aux]
Exec[renew certificate - OCSP_network_devices_pki1001_eqiad_wmnet]
File[/etc/apache2/sites-available/00-dummy.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Unit[cfssl-ocspserve@wikikube]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer]
Monitoring::Service[check_certificate_expiry_mlserve_front_proxy]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_syslog]
File[/etc/cfssl/ssl/ocsp/OCSP_discovery_pki1001_eqiad_wmnet.csr]
Systemd::Unit[cfssl-ocsprefresh-mlserve_staging.service]
File[/var/log/prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
Systemd::Service[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve_staging_front_proxy]
File[/usr/local/bin/prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging.service (cfssl-ocsprefresh-wikikube_staging.service)]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_kafka.timer]
Httpd::Mod_conf[ssl]
Systemd::Unit[cfssl-ocspserve@Wikimedia_Internal_Root_CA]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_puppet_rsa]
Service[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service)]
Cfssl::Ocsp[discovery]
Nrpe::Check[check_check_certificate_expiry_dse]
Prometheus::Alert::Rule[check_check_certificate_expiry_cloud_wmnet_ca_f87f54115f2f782169eed72541c30a1e]
Systemd::Timer::Job[cfssl-ocsprefresh-dse]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_dse.timer (nrpe2nodexp-check_certificate_expiry_dse.timer)]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/etc/cfssl/signers/kafka/ca/kafka.pem]
Sudo::User[nrpe_certificate_check_debmonitor]
Systemd::Unit[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.timer]
Service[cfssl-ocsprefresh-mlserve.timer]
Httpd::Mod_conf[proxy_http]
File[/srv/cfssl/bundles/kafka.pem]
Cfssl::Ocsp[etcd]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
Exec[Generate initial CRL for aux_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer)]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.conf]
File[/etc/cfssl/csr/OCSP_wikikube_pki1001_eqiad_wmnet.csr]
Prometheus::Node_textfile[prometheus-check-wikikube-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service (nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service)]
File[/etc/cfssl/signers/discovery2026/cfssl.conf]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve_staging_front_proxy.prom]
Systemd::Unit[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.service]
Exec[systemd daemon-reload for cfssl-ocsprefresh-discovery.service (cfssl-ocsprefresh-discovery.service)]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.conf]
Profile::Pki::Multirootca::Monitoring[network_devices]
File[/etc/cfssl/csr/OCSP_zuul_pki1001_eqiad_wmnet.csr]
Systemd::Timer[cfssl-ocsprefresh-discovery2026]
Cfssl::Ocsp[syslog]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse.service]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
Systemd::Timer[cfssl-ocsprefresh-wikikube_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-puppet_rsa.timer]
Systemd::Unit[cfssl-ocspserve@zuul]
Service[cfssl-ocsprefresh-cassandra.timer]
Prometheus::Node_textfile[prometheus-check-puppet_rsa-certificate-expiry]
File[/lib/systemd/system/cfssl-ocspserve@wikikube_staging_front_proxy.service]
Exec[Generate initial CRL for discovery2026]
Sudo::User[nrpe-check_check_certificate_expiry_kafka]
Service[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer]
File[/lib/systemd/system/cfssl-ocspserve@discovery.service]
Service[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.timer]
Cfssl::Cert[OCSP_aux_pki1001_eqiad_wmnet]
Systemd::Unit[cfssl-ocspserve@mlserve_staging]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Cfssl::Cert[OCSP_cassandra_pki1001_eqiad_wmnet]
Exec[Generate cert OCSP_discovery_pki1001_eqiad_wmnet refresh]
Sudo::User[nrpe-check_check_certificate_expiry_dse_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging.timer (cfssl-ocsprefresh-wikikube_staging.timer)]
Cfssl::Config[wikikube_front_proxy]
Exec[Generate initial CRL for mlserve_front_proxy]
Prometheus::Node_textfile[prometheus-check-mlserve-certificate-expiry]
Systemd::Timer[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
Systemd::Service[cfssl-ocspserve@Wikimedia_Internal_Root_CA]
File[/etc/sudoers.d/nrpe_certificate_check_aux_front_proxy]
File[/etc/cfssl/ocsp/wikikube_staging_front_proxy.ocsp]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service (nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service)]
Systemd::Unit[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry.service]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_mlserve.prom]
Service[nrpe2nodexp-check_certificate_expiry_aux.timer]
File[/lib/systemd/system/nrpe2nodexp-check_cfssl-multirootca_status.service]
Rsyslog::Conf[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
File[/etc/sudoers.d/nrpe_certificate_check_wikikube_staging_front_proxy]
Service[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.timer]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca]
Exec[systemd daemon-reload for cfssl-ocsprefresh-zuul.timer (cfssl-ocsprefresh-zuul.timer)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_etcd.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse-certificate-expiry.service]
Service[prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy]
Systemd::Unit[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer]
Systemd::Unit[nrpe2nodexp-check_cfssl-multirootca_status.service]
Nrpe::Check[check_check_certificate_expiry_puppet_rsa]
Systemd::Service[cfssl-ocsprefresh-kafka]
Sudo::User[nrpe_certificate_check_dse_front_proxy]
Cfssl::Db[multirootca-db]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_debmonitor]
File[/lib/systemd/system/wmf_auto_restart_apache-htcacheclean.service]
Systemd::Unit[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service]
Exec[Generate cert OCSP_wikikube_staging_front_proxy_pki1001_eqiad_wmnet]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer]
Package[python3-pymysql]
File[/etc/logrotate.d/cfssl-ocsprefresh-zuul]
Exec[renew certificate - OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_etcd_pki1001_eqiad_wmnet-key.pem]
Prometheus::Alert::Rule[check_check_certificate_expiry_network_devices_21dac3775d059b8c991626e2ca33f951]
File[/var/log/cfssl-ocsprefresh-discovery]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube_front_proxy]
Logrotate::Conf[cfssl-ocsprefresh-mlserve_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_front_proxy.timer (cfssl-ocsprefresh-mlserve_front_proxy.timer)]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_front_proxy.service (cfssl-ocsprefresh-mlserve_front_proxy.service)]
Monitoring::Service[check_certificate_expiry_kafka]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_discovery2026]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_zuul.service (nrpe2nodexp-check_certificate_expiry_zuul.service)]
File[/var/log/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-staging-front-proxy-certificate-expiry.conf]
File[/etc/sudoers.d/nrpe_certificate_check_zuul]
File[/etc/cfssl/signers/cloud_wmnet_ca]
Systemd::Service[cfssl-ocsprefresh-syslog]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Monitoring::Service[check_certificate_expiry_cassandra]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
Nrpe::Check[check_check_certificate_expiry_mlserve_front_proxy]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_dse_front_proxy]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve_staging.timer]
File[/etc/apache2/sites-enabled/00-dummy.conf]
Cfssl::Csr[/etc/cfssl/csr/OCSP_aux_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux.service]
Systemd::Syslog[cfssl-ocsprefresh-etcd]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_discovery2026]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/ca]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-network-devices.conf]
Prometheus::Alert::Rule[check_check_certificate_expiry_kafka_22922fd6bc2d570e018cbe5ccd8d1727]
Service[nrpe2nodexp-check_certificate_expiry_discovery2026.timer]
Cfssl::Csr[/etc/cfssl/csr/OCSP_etcd_pki1001_eqiad_wmnet.csr]
Sudo::User[nrpe-check_check_certificate_expiry_cassandra]
Monitoring::Service[check_certificate_expiry_network_devices]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_staging_pki1001_eqiad_wmnet.pem]
Systemd::Service[cfssl-ocsprefresh-discovery2026]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube.service]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/ca]
File[/srv/cfssl]
Nrpe::Monitor_service[check_certificate_expiry_wikikube_staging_front_proxy]
Exec[systemd daemon-reload for wmf_auto_restart_apache2.timer (wmf_auto_restart_apache2.timer)]
File[/etc/cfssl/signers/wikikube_staging/ca/wikikube_staging-key.pem]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_syslog.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging.timer (cfssl-ocsprefresh-mlserve_staging.timer)]
File[/usr/local/bin/prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_aux_front_proxy]
Systemd::Syslog[cfssl-ocsprefresh-wikikube_staging]
Augeas[Apache2 logs]
Systemd::Timer::Job[cfssl-ocsprefresh-network_devices]
File[/var/log/prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_network_devices]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.service)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_cloud_wmnet_ca.prom]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_syslog.timer (nrpe2nodexp-check_certificate_expiry_syslog.timer)]
File[/etc/cfssl/signers/mlserve_staging/ca/mlserve_staging.pem]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging_front_proxy.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_front_proxy_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/signers/syslog]
Rsyslog::Conf[cfssl-ocsprefresh-mlserve]
Httpd::Site[dummy]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
Service[nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer]
File[/etc/cfssl/ocsp/Wikimedia_Internal_Root_CA.ocsp]
File[/srv/cfssl/bundles/aux.pem]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_discovery]
Service[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_wikikube_front_proxy]
Systemd::Timer[nrpe2nodexp-check_cfssl-multirootca_status]
Service[wmf_auto_restart_apache2.timer]
File[/etc/logrotate.d/cfssl-ocsprefresh-puppet_rsa]
Prometheus::Blackbox::Check::Http[PKI_cassandra]
File[/etc/cfssl/signers/dse_front_proxy/ca/dse_front_proxy-key.pem]
File[/var/log/cfssl-ocsprefresh-network_devices]
File[/lib/systemd/system/cfssl-ocsprefresh-aux.timer]
File[/etc/cfssl/signers/aux_front_proxy/ca/aux_front_proxy.pem]
Exec[renew certificate - OCSP_aux_pki1001_eqiad_wmnet]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Sudo::User[nrpe_certificate_check_aux]
Profile::Pki::Multirootca::Monitoring[mlserve_staging_front_proxy]
Rsyslog::Conf[cfssl-ocsprefresh-network_devices]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve.service (cfssl-ocsprefresh-mlserve.service)]
Systemd::Syslog[cfssl-ocsprefresh-cassandra]
Systemd::Unit[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.service]
Systemd::Service[cfssl-gc-expired-certs]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube-front-proxy.conf]
Systemd::Unit[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_syslog]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve]
Nrpe::Monitor_service[check_certificate_expiry_dse_front_proxy]
File[/lib/systemd/system/cfssl-ocspserve@etcd.service]
Logrotate::Conf[cfssl-ocsprefresh-wikikube_staging_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-cloud_wmnet_ca.timer]
Exec[Generate cert OCSP_cassandra_pki1001_eqiad_wmnet]
Exec[Generate cert OCSP_network_devices_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer)]
Systemd::Timer::Job[cfssl-ocsprefresh-puppet_rsa]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_pki1001_eqiad_wmnet-key.pem]
Prometheus::Alert::Rule[check_check_certificate_expiry_mlserve_bfd2f7c6497e1da6323bef48d24f9e8e]
File[/etc/cfssl/signers/aux_front_proxy/ca]
File[/etc/cfssl/signers/wikikube_staging_front_proxy/ca/wikikube_staging_front_proxy.pem]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_network_devices]
Service[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.timer]
File[/var/log/cfssl-gc-expired-certs]
Profile::Pki::Multirootca::Monitoring[syslog]
Exec[systemd daemon-reload for cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer (cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer)]
Sudo::User[nrpe-check_check_certificate_expiry_wikikube_staging_front_proxy]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service]
Exec[Generate initial CRL for etcd]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Exec[systemd daemon-reload for wmf_auto_restart_apache-htcacheclean.timer (wmf_auto_restart_apache-htcacheclean.timer)]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_syslog.service (nrpe2nodexp-check_certificate_expiry_syslog.service)]
Logrotate::Conf[cfssl-ocsprefresh-wikikube]
File[/lib/systemd/system/cfssl-ocsprefresh-zuul.timer]
File[/srv/cfssl/bundles/cassandra.pem]
Exec[Generate initial CRL for wikikube_staging]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_syslog.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service]
Nrpe::Monitor_service[check_certificate_expiry_etcd]
Systemd::Timer[cfssl-ocsprefresh-zuul]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_debmonitor.service]
File[/etc/cfssl/csr/OCSP_etcd_pki1001_eqiad_wmnet.csr]
Service[cfssl-ocsprefresh-aux.timer]
File[/etc/sudoers.d/nrpe_certificate_check_discovery]
Exec[Generate cert OCSP_mlserve_pki1001_eqiad_wmnet]
Exec[Generate cert OCSP_dse_front_proxy_pki1001_eqiad_wmnet refresh]
Exec[systemd daemon-reload for cfssl-ocsprefresh-kafka.timer (cfssl-ocsprefresh-kafka.timer)]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer]
Service[cfssl-ocspserve@wikikube_staging]
Cfssl::Config[dse]
File[/etc/cfssl/signers/mlserve_front_proxy/cfssl.conf]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
Sudo::User[nrpe-check_check_certificate_expiry_network_devices]
Logrotate::Conf[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.timer]
File[/lib/systemd/system/cfssl-ocsprefresh-dse.timer]
File[/etc/cfssl/signers/network_devices/ca/network_devices.pem]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_cassandra.timer]
Exec[Generate cert OCSP_cassandra_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer]
Systemd::Timer::Job[cfssl-ocsprefresh-cassandra]
File[/etc/cfssl/csr/OCSP_mlserve_pki1001_eqiad_wmnet.csr]
Service[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry.timer]
Service[cfssl-ocspserve@aux_front_proxy]
File[/lib/systemd/system/cfssl-ocspserve@mlserve_staging.service]
Cfssl::Signer[network_devices]
Prometheus::Alert::Rule[check_check_certificate_expiry_zuul_373325faaa689f3e9b058d91d4eb6cdb]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_etcd]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_aux]
Exec[Generate cert OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet refresh]
Sudo::User[nrpe-check_check_certificate_expiry_wikikube_staging]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service]
Systemd::Unit[cfssl-ocsprefresh-zuul.timer]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Service[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer]
Monitoring::Service[check_certificate_expiry_cloud_wmnet_ca]
Prometheus::Node_textfile[prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_discovery2026]
Cfssl::Config[discovery2026]
Exec[renew certificate - OCSP_kafka_pki1001_eqiad_wmnet]
File[/lib/systemd/system/cfssl-ocspserve@syslog.service]
Exec[systemd daemon-reload for cfssl-ocspserve@dse_front_proxy.service (cfssl-ocspserve@dse_front_proxy)]
Systemd::Timer::Job[cfssl-ocsprefresh-dse_front_proxy]
Logrotate::Conf[cfssl-ocsprefresh-mlserve_staging]
Systemd::Unit[cfssl-ocsprefresh-wikikube_staging.service]
Service[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry.timer]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.service]
Rsyslog::Conf[cfssl-ocsprefresh-etcd]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_etcd.prom]
Service[nrpe2nodexp-check_certificate_expiry_kafka.timer]
Rsyslog::Conf[cfssl-ocsprefresh-discovery]
Systemd::Timer::Job[cfssl-ocsprefresh-debmonitor]
Prometheus::Node_textfile[prometheus-check-wikikube_staging-certificate-expiry]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_discovery2026]
Systemd::Unit[cfssl-ocsprefresh-debmonitor.service]
Cfssl::Signer[dse_front_proxy]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_wikikube]
Systemd::Service[cfssl-ocspserve@discovery2026]
Systemd::Unit[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer]
Exec[Generate initial CRL for mlserve_staging_front_proxy]
File[/usr/local/sbin/cfssl-ocsprefresh]
File[/etc/cfssl/signers/aux_front_proxy/cfssl.conf]
Profile::Pki::Multirootca::Monitoring[cloud_wmnet_ca]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve.service]
Sudo::User[nrpe_certificate_check_wikikube]
Service[cfssl-ocsprefresh-mlserve_front_proxy.timer]
File[/etc/cfssl/multiroot.conf]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-wikikube-front-proxy-certificate-expiry.conf]
File[/etc/rsyslog.d/40-wmf-auto-restart-apache-htcacheclean.conf]
Systemd::Unit[cfssl-ocsprefresh-aux.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse_front_proxy.service]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
Monitoring::Service[check_certificate_expiry_syslog]
File[/etc/cfssl/signers/mlserve/ca/mlserve.pem]
Systemd::Unit[cfssl-ocsprefresh-aux_front_proxy.service]
Prometheus::Blackbox::Check::Http[PKI_wikikube_staging]
Systemd::Unit[cfssl-ocsprefresh-kafka.service]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca.service]
Exec[Generate initial CRL for network_devices]
File[/etc/cfssl/signers/mlserve_staging_front_proxy]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy]
Systemd::Service[cfssl-ocspserve@zuul]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer)]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service]
Systemd::Timer[cfssl-ocsprefresh-aux]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy]
Systemd::Unit[cfssl-ocspserve@puppet_rsa]
Prometheus::Blackbox::Check::Http[PKI_etcd]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_dse]
Systemd::Unit[nrpe2nodexp-check_cfssl-multirootca_status.timer]
File[/var/log/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging.timer]
Cfssl::Config[cassandra]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_mlserve_staging_front_proxy.cfg]
File[/etc/sudoers.d/nrpe_certificate_check_dse_front_proxy]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_cassandra]
File[/etc/cfssl/signers/dse/ca]
Systemd::Service[cfssl-ocspserve@dse_front_proxy]
Exec[Generate cert OCSP_kafka_pki1001_eqiad_wmnet]
Systemd::Timer[cfssl-gc-expired-certs]
Cfssl::Signer[mlserve_staging_front_proxy]
Systemd::Service[cfssl-ocspserve@aux_front_proxy]
Systemd::Service[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
Logrotate::Conf[cfssl-ocsprefresh-cassandra]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cloud_wmnet_ca.service (cfssl-ocsprefresh-cloud_wmnet_ca.service)]
File[/lib/systemd/system/cfssl-ocspserve@aux.service]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service]
Cfssl::Signer[debmonitor]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.service)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_debmonitor.prom]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_front_proxy_pki1001_eqiad_wmnet-key.pem]
Prometheus::Node_textfile[prometheus-check-mlserve_staging-certificate-expiry]
Systemd::Unit[cfssl-gc-expired-certs.service]
Nrpe::Check[check_check_certificate_expiry_wikikube_staging_front_proxy]
File[/var/log/cfssl-ocsprefresh-mlserve_staging_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service (prometheus-node-textfile-prometheus-check-etcd-certificate-expiry.service)]
Systemd::Timer[cfssl-ocsprefresh-cloud_wmnet_ca]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-cloud_wmnet_ca.timer (cfssl-ocsprefresh-cloud_wmnet_ca.timer)]
Systemd::Service[cfssl-ocsprefresh-wikikube_staging_front_proxy]
Systemd::Timer[cfssl-ocsprefresh-mlserve_staging_front_proxy]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-network-devices-certificate-expiry.conf]
File[/etc/cfssl/signers/wikikube_staging_front_proxy]
Ferm::Service[csr_and_ocsp_responder]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer]
File[/lib/systemd/system/cfssl-ocspserve@Wikimedia_Internal_Root_CA.service]
Exec[renew certificate - puppet_rsa__pki_discovery_wmnet]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_discovery2026]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-aux.conf]
File[/etc/cfssl/signers/zuul/ca/zuul-key.pem]
File[/etc/cfssl/csr/OCSP_aux_pki1001_eqiad_wmnet.csr]
File[/etc/cfssl/signers/puppet_rsa/ca/puppet_rsa.pem]
File[/lib/systemd/system/cfssl-ocspserve@mlserve_front_proxy.service]
Sudo::User[nrpe-check_check_certificate_expiry_etcd]
Exec[systemd daemon-reload for cfssl-ocsprefresh-syslog.service (cfssl-ocsprefresh-syslog.service)]
Cfssl::Ocsp[dse]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_aux.timer]
Systemd::Timer[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
Systemd::Timer[prometheus-node-textfile-prometheus-check-debmonitor-certificate-expiry]
Systemd::Service[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Prometheus::Alert::Rule[check_check_certificate_expiry_wikikube_front_proxy_4d759acaf0fd7dd3abaa03dc4565aef6]
Systemd::Unit[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service]
File[/etc/cfssl/signers/etcd/ca/etcd.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_pki1001_eqiad_wmnet-key.pem]
Exec[Generate initial CRL for syslog]
Logrotate::Conf[cfssl-gc-expired-certs]
Prometheus::Node_textfile[prometheus-check-wikikube_front_proxy-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.timer)]
File[/usr/local/bin/prometheus-check-wikikube_staging-certificate-expiry]
File[/srv/cfssl/bundles/cloud_wmnet_ca.pem]
File[/var/log/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
Prometheus::Blackbox::Check::Http[PKI_cloud_wmnet_ca]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-wikikube-staging.conf]
Exec[Generate initial CRL for kafka]
Nrpe::Monitor_service[check_certificate_expiry_zuul]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux.service (nrpe2nodexp-check_certificate_expiry_aux.service)]
Cfssl::Csr[/etc/cfssl/csr/OCSP_aux_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging_front_proxy.timer]
Logrotate::Conf[cfssl-ocsprefresh-discovery]
File[/var/log/cfssl-ocsprefresh-zuul]
File[/etc/cfssl/ssl/ocsp/OCSP_etcd_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/cfssl-ocsprefresh-network_devices.service]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_puppet_rsa]
Systemd::Syslog[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
Nrpe::Check[check_check_certificate_expiry_syslog]
File[/lib/systemd/system/cfssl-ocsprefresh-kafka.service]
Service[cfssl-ocsprefresh-cloud_wmnet_ca.timer]
Systemd::Timer[cfssl-ocsprefresh-wikikube]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-discovery.conf]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service (nrpe2nodexp-check_certificate_expiry_aux_front_proxy.service)]
File[/etc/cfssl/signers/kafka]
Prometheus::Node_textfile[prometheus-check-network_devices-certificate-expiry]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-dse-front-proxy.conf]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.service]
File[/srv/cfssl/bundles/network_devices.pem]
File[/etc/cfssl/ssl/ocsp/OCSP_cassandra_pki1001_eqiad_wmnet.csr]
Systemd::Unit[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for cfssl-ocspserve@discovery.service (cfssl-ocspserve@discovery)]
File[/etc/cfssl/signers/mlserve_staging_front_proxy/ca/mlserve_staging_front_proxy-key.pem]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_mlserve_staging]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse.timer]
Systemd::Service[prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-wikikube-staging.conf]
Exec[systemd daemon-reload for cfssl-ocspserve@Wikimedia_Internal_Root_CA.service (cfssl-ocspserve@Wikimedia_Internal_Root_CA)]
Httpd::Conf[cfssl-issuer-k8s-pods-vhost-port]
Class[Httpd]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_wikikube_staging.cfg]
Cfssl::Ocsp[wikikube_staging_front_proxy]
Systemd::Syslog[cfssl-ocsprefresh-debmonitor]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-etcd.conf]
Cfssl::Ocsp[Wikimedia_Internal_Root_CA]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-etcd-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery2026.service]
File[/etc/sudoers.d/nrpe_certificate_check_mlserve]
Service[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.timer]
Systemd::Timer::Job[nrpe2nodexp-check_cfssl-multirootca_status]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer)]
Service[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry.timer]
File[/etc/logrotate.d/cfssl-gc-expired-certs]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer (nrpe2nodexp-check_certificate_expiry_mlserve_front_proxy.timer)]
Service[cfssl-ocsprefresh-syslog.timer]
Service[cfssl-ocsprefresh-discovery2026.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-dse.conf]
Systemd::Unit[cfssl-ocspserve@syslog]
File[/etc/cfssl/signers/zuul/cfssl.conf]
Systemd::Service[cfssl-ocspserve@wikikube_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-mlserve.timer]
Service[cfssl-ocsprefresh-mlserve_staging.timer]
File[/srv/cfssl/bundles/syslog.pem]
Prometheus::Blackbox::Check::Http[PKI_dse]
File[/etc/cfssl/ocsp/kafka.ocsp]
Rsyslog::Conf[cfssl-ocsprefresh-dse_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-wikikube_staging.timer]
Systemd::Unit[wmf_auto_restart_apache-htcacheclean.service]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube.service]
Systemd::Service[cfssl-ocspserve@mlserve]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_cloud_wmnet_ca]
Exec[Generate cert OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet refresh]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry.timer]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.service]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
File[/etc/cfssl/csr/puppet_rsa__pki_discovery_wmnet.csr]
Systemd::Timer[cfssl-ocsprefresh-cassandra]
Sudo::User[nrpe_certificate_check_discovery2026]
File[/usr/local/bin/prometheus-check-syslog-certificate-expiry]
File[/etc/cfssl/ocsp/aux_front_proxy.ocsp]
Systemd::Service[cfssl-ocspserve@mlserve_front_proxy]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service (prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.service)]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_staging_front_proxy.timer]
Exec[Generate cert OCSP_syslog_pki1001_eqiad_wmnet refresh]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-kafka-certificate-expiry]
Cfssl::Csr[/etc/cfssl/csr/OCSP_cassandra_pki1001_eqiad_wmnet.csr]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve-staging-front-proxy.conf]
Systemd::Service[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
File[/srv/cfssl/bundles/dse_front_proxy.pem]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_kafka]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
File[/etc/cfssl/signers/mlserve_front_proxy/ca/mlserve_front_proxy.pem]
Systemd::Service[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
Systemd::Syslog[wmf_auto_restart_apache2]
Systemd::Service[cfssl-ocsprefresh-mlserve_front_proxy]
Sudo::User[nrpe-check_check_certificate_expiry_mlserve_staging]
File[/etc/cfssl/signers/aux_front_proxy]
Exec[Generate cert OCSP_mlserve_staging_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service (prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service)]
File[/var/log/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
File[/etc/ssl/localcerts/multiroot_ca.pem]
File[/lib/systemd/system/cfssl-ocspserve@mlserve.service]
Systemd::Unit[cfssl-ocspserve@wikikube_staging]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux.timer]
Prometheus::Alert::Rule[check_check_certificate_expiry_debmonitor_224e2ac3574a9ce482218106d95a2931]
File[/etc/apache2/conf-available/00-defaults.conf]
Exec[apache2_test_config_and_restart]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocsprefresh-aux.timer (cfssl-ocsprefresh-aux.timer)]
Systemd::Service[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
File[/etc/cfssl/signers/kafka/ca/kafka-key.pem]
Prometheus::Alert::Rule[check_check_cfssl-multirootca_status_52832284a5fb8b8ea6f55bb6271912c9]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
Logrotate::Conf[wmf_auto_restart_apache2]
Cfssl::Ocsp[discovery2026]
Prometheus::Node_textfile[prometheus-check-zuul-certificate-expiry]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_aux.service]
Systemd::Unit[cfssl-ocspserve@mlserve_staging_front_proxy]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry.service]
Sudo::User[nrpe_certificate_check_aux_front_proxy]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_cloud_wmnet_ca]
File[/lib/systemd/system/cfssl-ocspserve@cassandra.service]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.timer)]
Httpd::Mod_conf[status]
Prometheus::Node_textfile[prometheus-check-aux_front_proxy-certificate-expiry]
Cfssl::Config[mlserve]
Systemd::Unit[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service]
File[/var/log/cfssl-ocsprefresh-dse]
Exec[systemd daemon-reload for nrpe2nodexp-check_cfssl-multirootca_status.service (nrpe2nodexp-check_cfssl-multirootca_status.service)]
Nrpe::Monitor_service[check_certificate_expiry_syslog]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_wikikube]
Service[prometheus-node-textfile-prometheus-check-mlserve_front_proxy-certificate-expiry.timer]
Exec[Generate cert OCSP_zuul_pki1001_eqiad_wmnet refresh]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_syslog.prom]
Systemd::Service[cfssl-ocsprefresh-wikikube_staging]
File[/usr/local/bin/prometheus-check-mlserve_front_proxy-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-cloud-wmnet-ca-certificate-expiry.conf]
Systemd::Service[cfssl-ocsprefresh-dse_front_proxy]
Exec[systemd daemon-reload for cfssl-ocspserve@kafka.service (cfssl-ocspserve@kafka)]
File[/usr/local/sbin/cfssl-certs]
Service[cfssl-ocsprefresh-wikikube_staging_front_proxy.timer]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-aux-front-proxy-certificate-expiry.conf]
Cfssl::Cert[OCSP_discovery_pki1001_eqiad_wmnet]
File[/usr/local/bin/prometheus-check-debmonitor-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-etcd.service]
File[/var/log/cfssl-ocsprefresh-mlserve_staging]
Firewall::Service[multirootca-tls-termination-for-cfssl-issuer-k8s-pods]
Systemd::Syslog[cfssl-ocsprefresh-network_devices]
Systemd::Unit[cfssl-ocspserve@kafka]
Cfssl::Ocsp[aux_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_puppet_rsa_pki1001_eqiad_wmnet.csr]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve_front_proxy.service (cfssl-ocspserve@mlserve_front_proxy)]
Systemd::Service[nrpe2nodexp-check_cfssl-multirootca_status]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging.timer]
Prometheus::Blackbox::Check::Http[PKI_aux]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_aux.prom]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-aux-certificate-expiry.conf]
Cfssl::Csr[/etc/cfssl/csr/OCSP_mlserve_pki1001_eqiad_wmnet.csr]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_zuul]
Cfssl::Signer[mlserve_front_proxy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service (prometheus-node-textfile-prometheus-check-kafka-certificate-expiry.service)]
Systemd::Unit[cfssl-ocspserve@wikikube_front_proxy]
Sudo::User[nrpe_certificate_check_cloud_wmnet_ca]
Nrpe::Monitor_service[check_certificate_expiry_wikikube]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux-certificate-expiry.timer]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Monitoring::Service[check_certificate_expiry_mlserve]
Cfssl::Cert[OCSP_etcd_pki1001_eqiad_wmnet]
File[/lib/systemd/system/wmf_auto_restart_apache2.service]
Systemd::Service[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
Systemd::Service[cfssl-ocspserve@wikikube_staging_front_proxy]
File[/etc/cfssl/csr/OCSP_syslog_pki1001_eqiad_wmnet.csr]
Monitoring::Service[check_certificate_expiry_wikikube_staging]
Rsyslog::Conf[cfssl-ocsprefresh-debmonitor]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-aux-certificate-expiry]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer (nrpe2nodexp-check_certificate_expiry_wikikube_staging.timer)]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_pki1001_eqiad_wmnet.csr]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_discovery2026.cfg]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-dse_front_proxy-certificate-expiry]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry.conf]
Systemd::Service[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_discovery.service (nrpe2nodexp-check_certificate_expiry_discovery.service)]
Sudo::User[nrpe_certificate_check_etcd]
File[/lib/systemd/system/cfssl-ocsprefresh-cassandra.service]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-dse-front-proxy-certificate-expiry.conf]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_front_proxy_pki1001_eqiad_wmnet.csr]
Cfssl::Cert[OCSP_discovery2026_pki1001_eqiad_wmnet]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_debmonitor.service (nrpe2nodexp-check_certificate_expiry_debmonitor.service)]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service)]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_dse.prom]
Systemd::Timer[prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
Systemd::Timer::Job[cfssl-ocsprefresh-mlserve_staging_front_proxy]
Cfssl::Csr[/etc/cfssl/csr/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.csr]
Systemd::Service[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
Cfssl::Config[mlserve_front_proxy]
Cfssl::Signer[kafka]
File[/etc/cfssl/ssl/ocsp/OCSP_wikikube_pki1001_eqiad_wmnet.pem]
File[/etc/cfssl/signers/mlserve]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_wikikube]
File[/usr/local/bin/prometheus-check-dse-certificate-expiry]
File[/etc/sudoers.d/nrpe_certificate_check_dse]
Rsyslog::Conf[cfssl-ocsprefresh-mlserve_staging_front_proxy]
Profile::Pki::Multirootca::Monitoring[wikikube_staging]
Ferm::Service[multirootca_tls_termination_for_cfssl_issuer_k8s_pods]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_kafka.cfg]
File[/etc/cfssl/ssl/ocsp/OCSP_dse_pki1001_eqiad_wmnet.csr]
Exec[renew certificate - OCSP_discovery_pki1001_eqiad_wmnet]
Httpd::Conf[dummy]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service (prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service)]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube_staging.service]
Systemd::Unit[cfssl-ocspserve@cloud_wmnet_ca]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_puppet_rsa.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer (prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer)]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_etcd]
Profile::Pki::Multirootca::Monitoring[discovery2026]
File[/etc/cfssl/signers/wikikube/ca]
File[/lib/systemd/system/wmf_auto_restart_apache2.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve.service]
Cfssl::Cert[OCSP_zuul_pki1001_eqiad_wmnet]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_network_devices.service]
File[/lib/systemd/system/wmf_auto_restart_apache-htcacheclean.timer]
Service[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_dse.service]
Exec[Generate initial CRL for puppet_rsa]
File[/etc/cfssl/ssl/puppet_rsa__pki_discovery_wmnet/puppet_rsa__pki_discovery_wmnet.chain.pem]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-zuul.conf]
File[/lib/systemd/system/cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service]
Systemd::Unit[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.service]
Cfssl::Signer[cloud_wmnet_ca]
File[/usr/local/bin/prometheus-check-mlserve-certificate-expiry]
Logrotate::Conf[cfssl-ocsprefresh-kafka]
Systemd::Service[wmf_auto_restart_apache2]
Service[cfssl-ocsprefresh-aux_front_proxy.timer]
File[/srv/cfssl/bundles/wikikube_staging.pem]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/etc/systemd/system/apache2.service.d/apache2-after-network-online-target.conf]
Service[cfssl-ocspserve@dse]
Systemd::Service[cfssl-ocspserve@wikikube_staging]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_cassandra.service]
Systemd::Timer::Job[cfssl-ocsprefresh-syslog]
File[/var/log/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
Profile::Pki::Multirootca::Monitoring[kafka]
Cfssl::Config[puppet_rsa]
Nrpe::Check[check_check_certificate_expiry_etcd]
Systemd::Unit[cfssl-ocsprefresh-mlserve.service]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_debmonitor.service]
Systemd::Timer[cfssl-ocsprefresh-mlserve_front_proxy]
Systemd::Unit[cfssl-ocsprefresh-aux_front_proxy.timer]
File[/etc/cfssl/signers/network_devices/cfssl.conf]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.service]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/etc/cfssl/csr/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet.csr]
File[/var/log/cfssl-ocsprefresh-debmonitor]
Systemd::Unit[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA.timer]
Exec[systemd daemon-reload for cfssl-ocspserve@wikikube_staging_front_proxy.service (cfssl-ocspserve@wikikube_staging_front_proxy)]
Systemd::Service[cfssl-ocsprefresh-mlserve]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry]
Service[nrpe2nodexp-check_certificate_expiry_network_devices.timer]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet-key.pem]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_discovery.cfg]
Service[nrpe2nodexp-check_certificate_expiry_zuul.timer]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-mlserve-certificate-expiry]
File[/var/log/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_aux_pki1001_eqiad_wmnet.pem]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-debmonitor.conf]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-zuul-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-puppet_rsa-certificate-expiry.service]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.service]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube.service (cfssl-ocsprefresh-wikikube.service)]
Rsyslog::Conf[cfssl-ocsprefresh-zuul]
Exec[renew certificate - OCSP_discovery2026_pki1001_eqiad_wmnet]
Exec[systemd daemon-reload for cfssl-ocspserve@syslog.service (cfssl-ocspserve@syslog)]
Systemd::Service[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Cfssl::Config[cloud_wmnet_ca]
File[/etc/cfssl/ssl/ocsp/OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet.pem]
Monitoring::Service[check_certificate_expiry_debmonitor]
File[/etc/cfssl/signers/mlserve_staging/ca/mlserve_staging-key.pem]
File[/etc/cfssl/ocsp/discovery.ocsp]
Httpd::Mod_conf[headers]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube_staging_front_proxy.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_mlserve_staging.service]
File[/etc/cfssl/ssl/ocsp/OCSP_cloud_wmnet_ca_pki1001_eqiad_wmnet-key.pem]
File[/etc/cfssl/signers/syslog/ca]
Service[cfssl-ocsprefresh-dse_front_proxy.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-wikikube_staging_front_proxy.timer (cfssl-ocsprefresh-wikikube_staging_front_proxy.timer)]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-dse-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-wikikube.service]
Nrpe::Check[check_check_certificate_expiry_mlserve_staging]
Systemd::Unit[prometheus-node-textfile-prometheus-check-aux-certificate-expiry.service]
Cfssl::Cert[OCSP_mlserve_staging_front_proxy_pki1001_eqiad_wmnet]
Systemd::Timer::Job[cfssl-ocsprefresh-mlserve_front_proxy]
File[/etc/cfssl/csr/OCSP_network_devices_pki1001_eqiad_wmnet.csr]
Sudo::User[nrpe_certificate_check_mlserve]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_puppet_rsa]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_aux_front_proxy]
File[/etc/cfssl/ssl/ocsp/OCSP_debmonitor_pki1001_eqiad_wmnet.pem]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
Service[cfssl-ocspserve@cassandra]
Monitoring::Service[check_certificate_expiry_discovery2026]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry]
Sudo::User[nrpe_certificate_check_wikikube_front_proxy]
Rsyslog::Conf[nrpe2nodexp-check_certificate_expiry_dse_front_proxy]
Service[cfssl-ocsprefresh-etcd.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.service]
Systemd::Unit[prometheus-node-textfile-prometheus-check-mlserve_staging-certificate-expiry.timer]
Systemd::Service[nrpe2nodexp-check_certificate_expiry_syslog]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_aux_front_proxy.cfg]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_wikikube_front_proxy.timer]
File[/etc/cfssl/csr/OCSP_dse_pki1001_eqiad_wmnet.csr]
Profile::Pki::Multirootca::Monitoring[mlserve_staging]
Systemd::Unit[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service]
File[/etc/cfssl/signers/mlserve_staging/ca]
File[/var/log/prometheus-node-textfile-prometheus-check-cassandra-certificate-expiry]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.timer]
Sudo::User[nrpe_certificate_check_puppet_rsa]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_network_devices]
Exec[Generate cert OCSP_dse_pki1001_eqiad_wmnet refresh]
Systemd::Timer[cfssl-ocsprefresh-wikikube_staging_front_proxy]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_network_devices]
Systemd::Syslog[cfssl-ocsprefresh-aux_front_proxy]
Cfssl::Cert[OCSP_wikikube_pki1001_eqiad_wmnet]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-aux.conf]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve-staging.conf]
Rsyslog::Conf[cfssl-ocsprefresh-kafka]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_aux_front_proxy.timer]
File[/etc/cfssl/signers/aux/cfssl.conf]
File[/etc/ferm/conf.d/10_multirootca_tls_termination_for_cfssl_issuer_k8s_pods]
Exec[renew certificate - OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet]
Prometheus::Node_textfile[prometheus-check-debmonitor-certificate-expiry]
Sudo::User[nrpe-check_check_certificate_expiry_aux_front_proxy]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_mlserve]
Service[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry.timer]
Service[cfssl-ocspserve@discovery]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_mlserve_staging]
Prometheus::Alert::Rule[check_check_certificate_expiry_mlserve_front_proxy_9d6dd05c8e5e1bb294462d932b24bd1a]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-zuul-certificate-expiry.timer]
Systemd::Unit[wmf_auto_restart_apache-htcacheclean.timer]
File[/etc/cfssl/ocsp/mlserve_staging.ocsp]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_network_devices.service]
Logrotate::Conf[cfssl-ocsprefresh-puppet_rsa]
File[/etc/cfssl/signers/cassandra/ca/cassandra-key.pem]
Prometheus::Blackbox::Check::Http[PKI_dse_front_proxy]
Exec[systemd daemon-reload for cfssl-ocspserve@mlserve_staging_front_proxy.service (cfssl-ocspserve@mlserve_staging_front_proxy)]
Monitoring::Service[check_certificate_expiry_wikikube_front_proxy]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_aux_front_proxy]
Logrotate::Conf[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Systemd::Timer[cfssl-ocsprefresh-Wikimedia_Internal_Root_CA]
Monitoring::Service[check_certificate_expiry_dse]
Systemd::Unit[prometheus-node-textfile-prometheus-check-wikikube_staging-certificate-expiry.timer]
File[/etc/rsyslog.d/40-cfssl-ocsprefresh-aux-front-proxy.conf]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-dse-certificate-expiry.timer]
Profile::Pki::Multirootca::Monitoring[zuul]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service (prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry.service)]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_discovery.service]
Systemd::Timer::Job[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
Systemd::Unit[nrpe2nodexp-check_certificate_expiry_mlserve_staging.service]
Systemd::Timer[prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/etc/cfssl/ssl/ocsp/OCSP_kafka_pki1001_eqiad_wmnet-key.pem]
Cfssl::Config[discovery]
Cfssl::Csr[/etc/cfssl/csr/OCSP_syslog_pki1001_eqiad_wmnet.csr]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-mlserve_staging_front_proxy-certificate-expiry.timer]
Rsyslog::Conf[wmf_auto_restart_apache2]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve_staging_front_proxy]
Systemd::Timer::Job[cfssl-ocsprefresh-discovery2026]
Cfssl::Cert[OCSP_kafka_pki1001_eqiad_wmnet]
Monitoring::Service[check_certificate_expiry_discovery]
Service[cfssl-ocspserve@mlserve]
Profile::Pki::Multirootca::Monitoring[wikikube_front_proxy]
Exec[systemd daemon-reload for cfssl-ocsprefresh-mlserve_staging_front_proxy.service (cfssl-ocsprefresh-mlserve_staging_front_proxy.service)]
File[/etc/nagios/nrpe.d/check_check_certificate_expiry_syslog.cfg]
Cfssl::Signer[syslog]
Prometheus::Blackbox::Check::Http[PKI_debmonitor]
File[/etc/cfssl/signers/cassandra]
Service[cfssl-ocsprefresh-puppet_rsa.timer]
File[/etc/cfssl/signers/dse]
Systemd::Service[prometheus-node-textfile-prometheus-check-discovery2026-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_kafka.timer]
Exec[systemd daemon-reload for prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service (prometheus-node-textfile-prometheus-check-wikikube_staging_front_proxy-certificate-expiry.service)]
File[/etc/cfssl/signers/mlserve_staging/cfssl.conf]
Systemd::Unit[cfssl-gc-expired-certs.timer]
Exec[systemd daemon-reload for cfssl-ocsprefresh-dse.timer (cfssl-ocsprefresh-dse.timer)]
File[/lib/systemd/system/cfssl-ocsprefresh-puppet_rsa.service]
File[/srv/cfssl/bundles/wikikube.pem]
File[/var/log/cfssl-ocsprefresh-syslog]
Sudo::User[nrpe_certificate_check_syslog]
Cfssl::Csr[/etc/cfssl/csr/OCSP_discovery_pki1001_eqiad_wmnet.csr]
Nrpe::Check[check_check_certificate_expiry_wikikube_front_proxy]
File[/etc/apache2/sites-enabled]
File[/etc/logrotate.d/prometheus-node-textfile-prometheus-check-syslog-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_cfssl-multirootca_status.timer]
File[/etc/cfssl/csr/OCSP_discovery2026_pki1001_eqiad_wmnet.csr]
Exec[Generate cert OCSP_wikikube_staging_pki1001_eqiad_wmnet refresh]
Nrpe::Check[check_check_certificate_expiry_kafka]
Systemd::Timer[nrpe2nodexp-check_certificate_expiry_zuul]
Cfssl::Cert[OCSP_mlserve_front_proxy_pki1001_eqiad_wmnet]
File[/etc/cfssl/csr/OCSP_cassandra_pki1001_eqiad_wmnet.csr]
Service[cfssl-ocspserve@mlserve_staging_front_proxy]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_mlserve.timer (nrpe2nodexp-check_certificate_expiry_mlserve.timer)]
File[/etc/apache2/sites-enabled/50-pki-discovery-wmnet.conf]
Systemd::Syslog[prometheus-node-textfile-prometheus-check-cloud_wmnet_ca-certificate-expiry]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery2026.timer]
Rsyslog::Conf[cfssl-ocsprefresh-puppet_rsa]
Exec[ensure_present_mod_headers]
File[/etc/logrotate.d/cfssl-ocsprefresh-etcd]
Systemd::Timer::Job[wmf_auto_restart_apache-htcacheclean]
Prometheus::Alert::Rule[check_check_certificate_expiry_syslog_e3b9b989d5062ce2d267023dfe42fcd8]
Nrpe::Check[check_check_certificate_expiry_network_devices]
Monitoring::Exported_nagios_service[pki1001 check_certificate_expiry_dse]
File[/lib/systemd/system/cfssl-ocsprefresh-mlserve_front_proxy.timer]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-mlserve.conf]
Exec[ensure_present_mod_status]
File[/etc/rsyslog.d/40-cfssl-gc-expired-certs.conf]
Systemd::Service[cfssl-ocspserve@network_devices]
File[/etc/ferm/conf.d/10_csr_and_ocsp_responder]
Exec[renew certificate - OCSP_cassandra_pki1001_eqiad_wmnet]
File[/etc/cfssl/ssl/ocsp/OCSP_Wikimedia_Internal_Root_CA_pki1001_eqiad_wmnet-key.pem]
File[/var/log/cfssl-ocsprefresh-discovery2026]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-wikikube-certificate-expiry]
Systemd::Timer::Job[wmf_auto_restart_apache2]
Exec[systemd daemon-reload for cfssl-ocspserve@cloud_wmnet_ca.service (cfssl-ocspserve@cloud_wmnet_ca)]
Httpd::Mod_conf[filter]
File[/var/lib/prometheus/node.d/check_check_certificate_expiry_wikikube_staging.prom]
File[/etc/cfssl/ssl/ocsp/OCSP_syslog_pki1001_eqiad_wmnet-key.pem]
Service[nrpe2nodexp-check_certificate_expiry_dse.timer]
Cfssl::Cert[puppet_rsa__pki_discovery_wmnet]
Exec[systemd daemon-reload for nrpe2nodexp-check_certificate_expiry_cassandra.timer (nrpe2nodexp-check_certificate_expiry_cassandra.timer)]
File[/etc/logrotate.d/cfssl-ocsprefresh-mlserve_front_proxy]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-aux-front-proxy.conf]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry]
Systemd::Unit[cfssl-ocsprefresh-dse_front_proxy.service]
Systemd::Timer[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Systemd::Service[prometheus-node-textfile-prometheus-check-discovery-certificate-expiry]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_dse_front_proxy.timer]
File[/lib/systemd/system/nrpe2nodexp-check_certificate_expiry_wikikube.timer]
File[/lib/systemd/system/prometheus-node-textfile-prometheus-check-aux_front_proxy-certificate-expiry.service]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-certificate-expiry-discovery2026.conf]
File[/lib/systemd/system/cfssl-ocsprefresh-discovery.service]
File[/var/log/prometheus-node-textfile-prometheus-check-wikikube_front_proxy-certificate-expiry]
File[/etc/cfssl/signers/dse_front_proxy/ca]
File[/etc/sudoers.d/nrpe-check_check_certificate_expiry_discovery]
Rsyslog::Conf[prometheus-node-textfile-prometheus-check-network_devices-certificate-expiry]
Systemd::Timer::Job[nrpe2nodexp-check_certificate_expiry_dse_front_proxy]
File[/etc/rsyslog.d/40-prometheus-node-textfile-prometheus-check-mlserve-front-proxy-certificate-expiry.conf]
Systemd::Syslog[cfssl-ocsprefresh-mlserve_front_proxy]
File[/var/log/wmf_auto_restart_apache-htcacheclean]
Systemd::Unit[cfssl-ocsprefresh-zuul.service]
Prometheus::Alert::Rule[check_check_certificate_expiry_aux_f7dfe9e2cd77303dfae7ae11c5c56d90]
File[/etc/rsyslog.d/25-nrpe2nodexp-check-cfssl-multirootca-status.conf]

Resources modified

Monitoring::Exported_nagios_host[pki1001]

Parameters differences:

--- Monitoring::Exported_nagios_host[pki1001].orig
+++ Monitoring::Exported_nagios_host[pki1001]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    hostgroups            => pki_eqiad,asw2-a-eqiad
+    hostgroups            => insetup_eqiad,asw2-a-eqiad

Monitoring::Exported_nagios_service[pki1001 ssh]

Parameters differences:

--- Monitoring::Exported_nagios_service[pki1001 ssh].orig
+++ Monitoring::Exported_nagios_service[pki1001 ssh]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => pki_eqiad
+    servicegroups         => insetup_eqiad

Class[Profile::Cumin::Target]

Parameters differences:

--- Class[Profile::Cumin::Target].orig
+++ Class[Profile::Cumin::Target]

@@
-    cluster => pki
+    cluster => insetup

Class[Puppet::Agent]

Parameters differences:

--- Class[Puppet::Agent].orig
+++ Class[Puppet::Agent]

@@
-    dns_alt_names => ['pki.discovery.wmnet']
+    dns_alt_names => []

Class[Profile::Base::Production]

Parameters differences:

--- Class[Profile::Base::Production].orig
+++ Class[Profile::Base::Production]

@@
-    role_description => PKI server
+    role_description => Host being setup by Infrastructure Foundations SREs with ferm

Class[Monitoring]

Parameters differences:

--- Class[Monitoring].orig
+++ Class[Monitoring]

@@
-    notifications_enabled => True
+    notifications_enabled => False
@@
-    cluster               => pki
+    cluster               => insetup
@@
-    nagios_group          => pki_eqiad
+    nagios_group          => insetup_eqiad

Concat::Fragment[main]

Class[Profile::Monitoring]

Parameters differences:

--- Class[Profile::Monitoring].orig
+++ Class[Profile::Monitoring]

@@
-    notifications_enabled => True
+    notifications_enabled => False
@@
-    cluster               => pki
+    cluster               => insetup
@@
-    nagios_group          => pki_eqiad
+    nagios_group          => insetup_eqiad

Class[Adduser]

Parameters differences:

--- Class[Adduser].orig
+++ Class[Adduser]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[atop]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[apache2]', 'Package[links]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[python3-pymysql]', 'Package[python3-cryptography]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[atop]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']

Concat_fragment[main]

Content differences:

--- main.orig
+++ main
@@ -14,7 +14,6 @@
 [agent]
 use_srv_records = true
 srv_domain = eqiad.wmnet
-dns_alt_names = pki.discovery.wmnet
 daemonize = false
 http_connect_timeout = 60
 http_read_timeout = 960

Class[Profile::Apt]

Parameters differences:

--- Class[Profile::Apt].orig
+++ Class[Profile::Apt]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[atop]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[apache2]', 'Package[links]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[python3-pymysql]', 'Package[python3-cryptography]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[quickstack]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[atop]', 'Package[libpython2.7]', 'Package[libpython2.7-dev]', 'Package[libpython2.7-minimal]', 'Package[python2.7]', 'Package[libpython2.7-stdlib]', 'Package[python2.7-dev]', 'Package[python2.7-minimal]', 'Package[python2.7-dbg]', 'Package[python2.7-doc]', 'Package[python2.7-examples]', 'Package[libpython2.7-testsuite]', 'Package[intel-microcode]', 'Package[rasdaemon]', 'Package[libsnmp30]', 'Package[libdns-export1104]', 'Package[libdns1104]', 'Package[libisc-export1100]', 'Package[libisc1100]', 'Package[multiarch-support]', 'Package[libjson-c3]', 'Package[libpython3.7]', 'Package[libpython3.7-minimal]', 'Package[libpython3.7-stdlib]', 'Package[python3.7]', 'Package[python3.7-minimal]', 'Package[libevent-2.1-6]', 'Package[libwireshark11]', 'Package[libwiretap8]', 'Package[libwsutil9]', 'Package[libwscodecs2]', 'Package[libperl5.28]', 'Package[libmpdec2]', 'Package[perl-modules-5.28]', 'Package[libhogweed4]', 'Package[libnettle6]', 'Package[libprocps7]', 'Package[libip6tc0]', 'Package[libip4tc0]', 'Package[libiptc0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[ruby-sys-filesystem]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']

Class[Profile::Contacts]

Parameters differences:

--- Class[Profile::Contacts].orig
+++ Class[Profile::Contacts]

@@
-    cluster => pki
+    cluster => insetup

Concat::Fragment[main contacts]

Monitoring::Exported_nagios_service[pki1001 ferm_active]

Parameters differences:

--- Monitoring::Exported_nagios_service[pki1001 ferm_active].orig
+++ Monitoring::Exported_nagios_service[pki1001 ferm_active]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => pki_eqiad
+    servicegroups         => insetup_eqiad

Monitoring::Exported_nagios_service[pki1001 disk_space]

Parameters differences:

--- Monitoring::Exported_nagios_service[pki1001 disk_space].orig
+++ Monitoring::Exported_nagios_service[pki1001 disk_space]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => pki_eqiad
+    servicegroups         => insetup_eqiad

Class[Profile::Puppet::Agent]

Parameters differences:

--- Class[Profile::Puppet::Agent].orig
+++ Class[Profile::Puppet::Agent]

@@
-    dns_alt_names => ['pki.discovery.wmnet']
+    dns_alt_names => []

Class[Cumin::Selector]

Parameters differences:

--- Class[Cumin::Selector].orig
+++ Class[Cumin::Selector]

@@
-    cluster => pki
+    cluster => insetup

File[/var/lib/prometheus/node.d/role_owner.prom]

Content differences:

--- /var/lib/prometheus/node.d/role_owner.prom.orig
+++ /var/lib/prometheus/node.d/role_owner.prom
@@ -1,3 +1,3 @@
 # HELP role_owner The team owner of the server role
 # TYPE role_owner gauge
-role_owner{team="infrastructure-foundations",role="pki::multirootca",cluster="pki"} 1.0
+role_owner{team="infrastructure-foundations",role="insetup::infrastructure_foundations_ferm",cluster="insetup"} 1.0

Concat_fragment[main contacts]

Content differences:

--- main contacts.orig
+++ main contacts
@@ -1,3 +1,3 @@
 ---
-role::pki::multirootca:
+role::insetup::infrastructure_foundations_ferm:
 - Infrastructure Foundations

Class[Profile::Base]

Parameters differences:

--- Class[Profile::Base].orig
+++ Class[Profile::Base]

@@
-    cluster => pki
+    cluster => insetup

Monitoring::Exported_nagios_service[pki1001 raid_md]

Parameters differences:

--- Monitoring::Exported_nagios_service[pki1001 raid_md].orig
+++ Monitoring::Exported_nagios_service[pki1001 raid_md]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => pki_eqiad
+    servicegroups         => insetup_eqiad

Compilation results for pki1001.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources only in the old catalog

Resources modified

Relevant files