{"host": "logging-sd1001.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3087, "only_in_self": [], "only_in_other": ["Cfssl::Cert[INVALID__logging-sd1001_eqiad_wmnet]", "Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet]", "Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet]", "File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl]"], "resource_diffs": [{"resource": "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]", "parameters": "--- Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change].orig\n+++ Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]\n\n+    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/logging-sd1001.eqiad.wmnet.pem -label INVALID  /etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet\n\n+    require     => Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]\n+    subscribe   => File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]\n+    refreshonly => True\n+    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "Opensearch::Instance[production-elk7-eqiad]", "parameters": "--- Opensearch::Instance[production-elk7-eqiad].orig\n+++ Opensearch::Instance[production-elk7-eqiad]\n\n+    security_plugin_certificates => {'cert': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem', 'key': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem', 'chain': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem', 'chained': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem'}\n"}, {"resource": "Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "parameters": "--- Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr].orig\n+++ Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]\n\n+    hosts       => []\n+    ensure      => present\n+    common_name => logging-sd1001.eqiad.wmnet\n+    names       => []\n+    key         => {'algo': 'ecdsa', 'size': 256}\n"}, {"resource": "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet]", "parameters": "--- Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet].orig\n+++ Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet]\n\n+    unless      => /usr/bin/test \"$(/usr/bin/openssl x509 -in /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem -noout -pubkey 2>&1)\" == \"$(/usr/bin/openssl pkey -pubout -in /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem 2>&1)\"\n\n+    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/logging-sd1001.eqiad.wmnet.pem -label INVALID  /etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet\n\n+    require     => Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]\n+    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet]", "parameters": "--- Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet].orig\n+++ Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet]\n\n+    unless      => /usr/bin/openssl x509 -in /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem -checkend 952200\n+    command     => /usr/bin/cfssl sign -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/logging-sd1001.eqiad.wmnet.pem -label INVALID  /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet\n\n+    require     => Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet]\n+    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem]", "parameters": "--- File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem].orig\n+++ File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem]\n\n+    group     => opensearch\n+    owner     => opensearch\n+    ensure    => file\n+    backup    => False\n+    mode      => 0440\n+    show_diff => False\n"}, {"resource": "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem]", "parameters": "--- File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem].orig\n+++ File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem]\n\n+    group   => opensearch\n+    owner   => opensearch\n+    ensure  => file\n+    require => Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]\n"}, {"resource": "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "parameters": "--- File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem].orig\n+++ File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]\n\n+    group  => opensearch\n+    owner  => opensearch\n+    ensure => file\n+    source => puppet:///modules/profile/pki/intermediates/INVALID-cert.pem\n+    mode   => 0440\n"}, {"resource": "Class[Opensearch]", "parameters": "--- Class[Opensearch].orig\n+++ Class[Opensearch]\n\n@@\n-    instances => {'default': {'http_port': 9200, 'transport_tcp_port': 9300, 'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': True, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}, 'cluster_name': 'production-elk7-eqiad', 'unicast_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet'], 'cluster_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1023.eqiad.wmnet', 'logstash1024.eqiad.wmnet', 'logstash1025.eqiad.wmnet', 'logstash1030.eqiad.wmnet', 'logstash1031.eqiad.wmnet', 'logstash1032.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet']}}\n+    instances => {'default': {'security_plugin_certificates': {'cert': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem', 'key': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem', 'chain': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem', 'chained': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem'}, 'http_port': 9200, 'transport_tcp_port': 9300, 'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': True, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}, 'cluster_name': 'production-elk7-eqiad', 'unicast_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet'], 'cluster_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1023.eqiad.wmnet', 'logstash1024.eqiad.wmnet', 'logstash1025.eqiad.wmnet', 'logstash1030.eqiad.wmnet', 'logstash1031.eqiad.wmnet', 'logstash1032.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet']}}\n"}, {"resource": "Class[Profile::Opensearch::Server]", "parameters": "--- Class[Profile::Opensearch::Server].orig\n+++ Class[Profile::Opensearch::Server]\n\n+    pki_intermediate_name => INVALID\n"}, {"resource": "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem]", "parameters": "--- File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem].orig\n+++ File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem]\n\n+    group  => opensearch\n+    owner  => opensearch\n+    ensure => file\n+    mode   => 0440\n"}, {"resource": "File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "content": "--- /etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr.orig\n+++ /etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr\n@@ -0,0 +1,13 @@\n+{\n+  \"CN\": \"logging-sd1001.eqiad.wmnet\",\n+  \"hosts\": [\n+    \"logging-sd1001.eqiad.wmnet\"\n+  ],\n+  \"key\": {\n+    \"algo\": \"ecdsa\",\n+    \"size\": 256\n+  },\n+  \"names\": [\n+\n+  ]\n+}", "parameters": "--- File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr].orig\n+++ File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]\n\n+    group  => root\n+    owner  => root\n+    ensure => file\n+    mode   => 0400\n"}, {"resource": "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr]", "parameters": "--- File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr].orig\n+++ File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr]\n\n+    group  => opensearch\n+    owner  => opensearch\n+    ensure => file\n+    mode   => 0440\n"}, {"resource": "Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "parameters": "--- Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem].orig\n+++ Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]\n\n+    unless    => /usr/bin/test \"$(/bin/cat /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem | sha512sum)\" == \"$(/bin/cat /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem | sha512sum)\"\n\n+    command   => /bin/cat /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem > /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem\n+    subscribe => ['Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet]', 'File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]', 'File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem]']\n+    require   => Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]\n"}, {"resource": "File[/etc/opensearch/production-elk7-eqiad/ssl]", "parameters": "--- File[/etc/opensearch/production-elk7-eqiad/ssl].orig\n+++ File[/etc/opensearch/production-elk7-eqiad/ssl]\n\n+    group   => opensearch\n+    owner   => opensearch\n+    ensure  => directory\n+    recurse => True\n+    mode    => 0740\n"}, {"resource": "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh]", "parameters": "--- Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh].orig\n+++ Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh]\n\n+    subscribe   => File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]\n+    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/logging-sd1001.eqiad.wmnet.pem -label INVALID  /etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet\n\n+    refreshonly => True\n+    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "Cfssl::Cert[INVALID__logging-sd1001_eqiad_wmnet]", "parameters": "--- Cfssl::Cert[INVALID__logging-sd1001_eqiad_wmnet].orig\n+++ Cfssl::Cert[INVALID__logging-sd1001_eqiad_wmnet]\n\n+    common_name     => logging-sd1001.eqiad.wmnet\n+    auto_renew      => True\n+    before_services => []\n+    key             => {'algo': 'ecdsa', 'size': 256}\n+    label           => INVALID\n+    owner           => opensearch\n+    notify_services => []\n+    provide_chain   => True\n+    names           => []\n+    group           => opensearch\n+    outdir          => /etc/opensearch/production-elk7-eqiad/ssl\n+    renew_seconds   => 952200\n+    environment     => ['GODEBUG=x509ignoreCN=0']\n+    hosts           => []\n+    ensure          => present\n+    mode            => 0740\n"}], "perc_changed": "1.00%"}, "core": {"total": 3087, "only_in_self": [], "only_in_other": ["Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet]", "Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet]", "File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl]"], "resource_diffs": [], "perc_changed": "0.39%"}, "main": {"total": 3087, "only_in_self": [], "only_in_other": ["Cfssl::Cert[INVALID__logging-sd1001_eqiad_wmnet]", "Cfssl::Csr[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet refresh]", "Exec[Generate cert INVALID__logging-sd1001_eqiad_wmnet]", "Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "Exec[renew certificate - INVALID__logging-sd1001_eqiad_wmnet]", "File[/etc/cfssl/csr/INVALID__logging-sd1001_eqiad_wmnet.csr]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.csr]", "File[/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem]", "File[/etc/opensearch/production-elk7-eqiad/ssl]"], "resource_diffs": [{"resource": "Opensearch::Instance[production-elk7-eqiad]", "parameters": "--- Opensearch::Instance[production-elk7-eqiad].orig\n+++ Opensearch::Instance[production-elk7-eqiad]\n\n+    security_plugin_certificates => {'cert': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem', 'key': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem', 'chain': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem', 'chained': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem'}\n"}, {"resource": "Class[Opensearch]", "parameters": "--- Class[Opensearch].orig\n+++ Class[Opensearch]\n\n@@\n-    instances => {'default': {'http_port': 9200, 'transport_tcp_port': 9300, 'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': True, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}, 'cluster_name': 'production-elk7-eqiad', 'unicast_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet'], 'cluster_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1023.eqiad.wmnet', 'logstash1024.eqiad.wmnet', 'logstash1025.eqiad.wmnet', 'logstash1030.eqiad.wmnet', 'logstash1031.eqiad.wmnet', 'logstash1032.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet']}}\n+    instances => {'default': {'security_plugin_certificates': {'cert': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.pem', 'key': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet-key.pem', 'chain': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chain.pem', 'chained': '/etc/opensearch/production-elk7-eqiad/ssl/INVALID__logging-sd1001_eqiad_wmnet.chained.pem'}, 'http_port': 9200, 'transport_tcp_port': 9300, 'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': True, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}, 'cluster_name': 'production-elk7-eqiad', 'unicast_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet'], 'cluster_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1023.eqiad.wmnet', 'logstash1024.eqiad.wmnet', 'logstash1025.eqiad.wmnet', 'logstash1030.eqiad.wmnet', 'logstash1031.eqiad.wmnet', 'logstash1032.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet']}}\n"}, {"resource": "Class[Profile::Opensearch::Server]", "parameters": "--- Class[Profile::Opensearch::Server].orig\n+++ Class[Profile::Opensearch::Server]\n\n+    pki_intermediate_name => INVALID\n"}], "perc_changed": "0.55%"}}}