Compilation results for pki2002.codfw.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	4897
Resources added:	107
Resources removed:	47
Resources modified:	8
Change percentage:	3.31%

Resources only in the new catalog

File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv6.nft]
File[/etc/nftables/sets/MLSTAGE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv6.nft]
File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv4.nft]
Exec[systemd daemon-reload for nftables.service (nftables)]
File[/etc/nftables/sets/FRACK_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv4.nft]
File[/etc/nftables/sets/MGMT_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/INTERNAL_ipv4.nft]
File[/etc/nftables/sets/FRACK_NETWORKS_ipv6.nft]
File[/etc/logrotate.d/prometheus-node-textfile-check-nft]
Service[prometheus-node-textfile-check-nft.timer]
File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv4.nft]
File[/etc/nftables/sets/MONITORING_HOSTS_ipv6.nft]
File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv6.nft]
File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv6.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft]
File[/etc/nftables/sets/CUMIN_MASTERS_ipv4.nft]
File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft]
File[/etc/nftables/sets/LINK_LOCAL_ipv6.nft]
File[/etc/nftables/forward]
File[/etc/nftables/input/10_csr_and_ocsp_responder.nft]
File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/NETWORK_INFRA_ipv4.nft]
File[/etc/nftables/prerouting]
File[/etc/nftables/main.nft]
File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv4.nft]
File[/etc/systemd/system/nftables.service.d]
File[/etc/nftables/sets/INSTALL_HOSTS_ipv6.nft]
File[/etc/nftables/sets/INTERNAL_ipv6.nft]
File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv6.nft]
File[/etc/nftables/sets/CACHES_ipv6.nft]
File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/MLSTAGE_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv4.nft]
File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft]
File[/etc/nftables/sets/BASTION_HOSTS_ipv6.nft]
File[/etc/nftables/input]
File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv4.nft]
File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/CACHES_ipv4.nft]
File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv6.nft]
File[/etc/nftables/]
File[/etc/nftables/input/10_multirootca tls termination.nft]
File[/var/log/prometheus-node-textfile-check-nft]
Package[nftables]
File[/etc/rsyslog.d/40-prometheus-node-textfile-check-nft.conf]
File[/etc/nftables/sets/CLOUD_PRIVATE_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv6.nft]
Exec[unmask_nftables.service]
File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/postrouting]
File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/input/10_ssh-from-bastion.nft]
File[/usr/local/bin/check-nft]
File[/etc/nftables/sets/LABSTORE_HOSTS_ipv4.nft]
File[/etc/nftables/sets/LABS_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft]
File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv6.nft]
File[/etc/systemd/system/nftables.service.d/puppet-override.conf]
File[/etc/nftables/sets/MGMT_NETWORKS_ipv4.nft]
File[/etc/nftables/100_base_puppet.nft]
File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv6.nft]
File[/etc/nftables/input/10_multirootca-tls-termination-for-cfssl-issuer-k8s-pods.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv6.nft]
File[/etc/nftables/sets/LINK_LOCAL_ipv4.nft]
File[/lib/systemd/system/prometheus-node-textfile-check-nft.timer]
File[/etc/nftables.conf]
File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv6.nft]
Service[nftables]
File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv4.nft]
Exec[systemd daemon-reload for prometheus-node-textfile-check-nft.timer (prometheus-node-textfile-check-nft.timer)]
File[/etc/nftables/sets/CLOUD_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv6.nft]
File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft]
File[/etc/nftables/sets/BASTION_HOSTS_ipv4.nft]
File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv6.nft]
File[/lib/systemd/system/prometheus-node-textfile-check-nft.service]
File[/etc/nftables/input/10_full-monitoring-metrics-access-udp.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv6.nft]
File[/etc/nftables/input/10_full-monitoring-metrics-access-tcp.nft]
File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft]
Exec[systemd daemon-reload for prometheus-node-textfile-check-nft.service (prometheus-node-textfile-check-nft.service)]
File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft]
File[/etc/nftables/sets]
File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft]
File[/etc/nftables/notrack]
File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/MONITORING_HOSTS_ipv4.nft]
File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv4.nft]
File[/etc/nftables/output]
File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv6.nft]
File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft]
File[/etc/nftables/sets/PRODUCTION_NETWORKS_ipv4.nft]
File[/etc/nftables/input/10_ssh-from-cumin-masters.nft]
File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv4.nft]
File[/etc/nftables/sets/MW_APPSERVER_NETWORKS_ipv4.nft]
File[/etc/nftables/sets/NETWORK_INFRA_ipv6.nft]
File[/etc/nftables/sets/CUMIN_MASTERS_ipv6.nft]
File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv6.nft]
File[/etc/nftables/sets/CLOUD_NETWORKS_ipv6.nft]

Resources only in the old catalog

File[/etc/ferm/conf.d/02_main]
File[/etc/rsyslog.d/40-ulogd.conf]
File[/etc/nagios/nrpe.d/check_ferm_active.cfg]
File[/etc/ferm/conf.d/10_full_monitoring_metrics_access_tcp]
Exec[systemd daemon-reload for wmf_auto_restart_ulogd2.timer (wmf_auto_restart_ulogd2.timer)]
File[/lib/systemd/system/nrpe2nodexp-ferm_active.service]
File[/etc/ferm/conf.d/01_drop-blocked-nets]
File[/etc/ferm/conf.d/99_dscp-default]
Exec[update_alternative_ip6tables]
File[/lib/systemd/system/nrpe2nodexp-ferm_active.timer]
File[/etc/ferm/conf.d/10_csr_and_ocsp_responder]
File[/etc/ferm/conf.d/10_ssh_from_bastion]
File_line[auto_restart_file_presence_ulogd2]
File[/var/log/wmf_auto_restart_ulogd2]
Package[ulogd2]
File[/etc/ferm/conf.d]
File[/lib/systemd/system/wmf_auto_restart_ulogd2.timer]
File[/etc/logrotate.d/wmf_auto_restart_ulogd2]
Service[ferm]
File[/usr/local/lib/nagios/plugins/check_ferm]
File[/etc/ferm/conf.d/10_full_monitoring_metrics_access_udp]
File[/etc/ferm/conf.d/10_multirootca_tls_termination_for_cfssl_issuer_k8s_pods]
Service[ulogd2]
Exec[systemd daemon-reload for ferm.service (ferm-ferm-service-status-restart)]
Exec[systemd daemon-reload for nrpe2nodexp-ferm_active.service (nrpe2nodexp-ferm_active.service)]
File[/var/log/ulogd]
File[/etc/ferm/conf.d/00_defs]
File[/etc/ulogd.conf]
File[/etc/default/ferm]
Service[wmf_auto_restart_ulogd2.timer]
File[/etc/systemd/system/ferm.service.d/ferm-service-status-restart.conf]
File[/etc/ferm/conf.d/98_log-everything]
File[/etc/ferm/conf.d/10_multirootca_tls_termination]
File[/etc/ferm/conf.d/98_filter_log_filter-bootp]
Exec[update_alternative_iptables]
File[/etc/ferm/ferm.conf]
Service[nrpe2nodexp-ferm_active.timer]
File[/etc/rsyslog.d/40-wmf-auto-restart-ulogd2.conf]
File[/etc/rsyslog.d/25-nrpe2nodexp-ferm-active.conf]
File[/etc/systemd/system/ferm.service.d]
File[/etc/sudoers.d/nrpe-check_ferm_active]
File[/etc/ferm/conf.d/10_ssh_from_cumin_masters]
File[/etc/logrotate.d/ulogd]
File[/etc/ferm/functions.conf]
Exec[systemd daemon-reload for nrpe2nodexp-ferm_active.timer (nrpe2nodexp-ferm_active.timer)]
File[/lib/systemd/system/wmf_auto_restart_ulogd2.service]
Exec[systemd daemon-reload for wmf_auto_restart_ulogd2.service (wmf_auto_restart_ulogd2.service)]

Resources modified

File[/etc/confd/templates/_etc_ferm_conf.d_00_defs_requestctl.tmpl]

Parameters differences:

--- File[/etc/confd/templates/_etc_ferm_conf.d_00_defs_requestctl.tmpl].orig
+++ File[/etc/confd/templates/_etc_ferm_conf.d_00_defs_requestctl.tmpl]

@@
-    ensure => present
+    ensure => absent

File[/etc/modules-load.d/conntrack.conf]

Parameters differences:

--- File[/etc/modules-load.d/conntrack.conf].orig
+++ File[/etc/modules-load.d/conntrack.conf]

@@
-    ensure => file
+    ensure => absent

Package[iptables]

Parameters differences:

--- Package[iptables].orig
+++ Package[iptables]

@@
-    ensure => installed
+    ensure => absent

File[/usr/local/sbin/ferm-status]

Parameters differences:

--- File[/usr/local/sbin/ferm-status].orig
+++ File[/usr/local/sbin/ferm-status]

@@
-    ensure => file
+    ensure => absent

File[/etc/ferm/conf.d/00_defs_requestctl]

Parameters differences:

--- File[/etc/ferm/conf.d/00_defs_requestctl].orig
+++ File[/etc/ferm/conf.d/00_defs_requestctl]

@@
-    ensure => file
+    ensure => absent

File[/etc/ferm]

Parameters differences:

--- File[/etc/ferm].orig
+++ File[/etc/ferm]

@@
-    ensure => directory
+    ensure => absent

File[/etc/confd/conf.d/_etc_ferm_conf.d_00_defs_requestctl.toml]

Parameters differences:

--- File[/etc/confd/conf.d/_etc_ferm_conf.d_00_defs_requestctl.toml].orig
+++ File[/etc/confd/conf.d/_etc_ferm_conf.d_00_defs_requestctl.toml]

@@
-    ensure => present
+    ensure => absent

Package[ferm]

Parameters differences:

--- Package[ferm].orig
+++ Package[ferm]

@@
-    ensure => installed
+    ensure => purged

Compilation results for pki2002.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources only in the old catalog

Resources modified

Relevant files