Compilation results for cloudcontrol1011.eqiad.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 4085 |
|---|---|
| Resources added: | 47 |
| Resources removed: | 21 |
| Resources modified: | 74 |
| Change percentage: | 3.48% |
Resources only in the new catalog
- Class[Profile::Zookeeper::Monitoring::Server]
- File[/var/lib/zookeeper/myid]
- File[/var/log/zookeeper-cleanup]
- File[/etc/prometheus]
- File[/etc/zookeeper/conf/zoo.cfg]
- Alternatives::Java[21]
- Java::Cacert[wmf:puppetca.pem]
- Rsyslog::Conf[zookeeper-cleanup]
- Package[openjdk-21-jdk]
- Systemd::Timer::Job[zookeeper-cleanup]
- File[/etc/zookeeper/conf/myid]
- Package[prometheus-jmx-exporter]
- Systemd::Service[zookeeper-cleanup]
- Logrotate::Conf[zookeeper-cleanup]
- Class[Profile::Zookeeper::Server]
- Firewall::Service[zookeeper]
- Systemd::Syslog[zookeeper-cleanup]
- Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]
- File[/lib/systemd/system/zookeeper-cleanup.service]
- Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)]
- Java::Cacert[wmf:Wikimedia_Internal_Root_CA]
- Class[Zookeeper]
- Service[zookeeper-cleanup.timer]
- Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011]
- File[/etc/default/zookeeper]
- Package[zookeeper]
- Class[Java]
- Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]
- File[/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml]
- Systemd::Unit[zookeeper-cleanup.service]
- File[/etc/ferm/conf.d/10_zookeeper]
- Package[zookeeperd]
- Exec[java__cacert_wmf:puppetca.pem]
- File[/etc/zookeeper/conf/log4j.properties]
- File[/etc/rsyslog.d/40-zookeeper-cleanup.conf]
- Exec[update_java_alternatives_21]
- Service[zookeeper]
- Systemd::Timer[zookeeper-cleanup]
- Ferm::Service[zookeeper]
- File[/lib/systemd/system/zookeeper-cleanup.timer]
- File[/var/lib/zookeeper]
- Systemd::Unit[zookeeper-cleanup.timer]
- Class[Zookeeper::Server]
- Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011]
- File[/etc/logrotate.d/zookeeper-cleanup]
- Class[Profile::Java]
- Java::Package[openjdk-jdk-21]
Resources only in the old catalog
- File[/etc/rsyslog.d/20-mcrouter.conf]
- Class[Mcrouter]
- File[/etc/systemd/system/mcrouter.service.d/puppet-override.conf]
- Logrotate::Rule[mcrouter]
- Ferm::Rule[skip_mcrouter_designate_conntrack_out]
- Exec[systemd daemon-reload for mcrouter.service (mcrouter)]
- Ferm::Service[mcrouter]
- File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out]
- File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in]
- Logrotate::Conf[mcrouter]
- File[/etc/default/mcrouter]
- Service[mcrouter]
- File[/etc/logrotate.d/mcrouter]
- Rsyslog::Conf[mcrouter]
- File[/etc/systemd/system/mcrouter.service.d]
- Package[mcrouter]
- Ferm::Rule[skip_mcrouter_designate_conntrack_in]
- File[/etc/mcrouter/config.json]
- Systemd::Service[mcrouter]
- Systemd::Unit[mcrouter]
- File[/etc/ferm/conf.d/10_mcrouter]
Resources modified
- Exec[systemd daemon-reload for mcrouter.service (mcrouter)]
- Parameters differences:
--- Exec[systemd daemon-reload for mcrouter.service (mcrouter)].orig +++ Exec[systemd daemon-reload for mcrouter.service (mcrouter)] - command => /bin/systemctl daemon-reload - refreshonly => True - before => ['Service[mcrouter]']
- File[/etc/default/zookeeper]
- Parameters differences:
--- File[/etc/default/zookeeper].orig +++ File[/etc/default/zookeeper] + require => Package[zookeeperd] + owner => root + group => root
- Content differences:
--- /etc/default/zookeeper.orig +++ /etc/default/zookeeper @@ -0,0 +1,6 @@ +# Note: This file is managed by Puppet. + +# Enable JMX connections on port 9998 +JMXLOCALONLY=false +JAVA_OPTS="-Xms1g -Xmx1g -javaagent:/usr/share/java/prometheus/jmx_prometheus_javaagent.jar=10.64.151.8:12181:/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml -Dcom.sun.management.jmxremote.port=9998 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false" +JAVA=/usr/lib/jvm/java-21-openjdk-amd64/bin/java
- Java::Package[openjdk-jdk-21]
- Parameters differences:
--- Java::Package[openjdk-jdk-21].orig +++ Java::Package[openjdk-jdk-21] + package_info => {'version': '21', 'variant': 'jdk'} + egd_source => /dev/random + hardened_tls => False- Ferm::Service[zookeeper]
- Parameters differences:
--- Ferm::Service[zookeeper].orig +++ Ferm::Service[zookeeper] + proto => tcp + ensure => present + prio => 10 + desc => + port => [2181, 2182, 2183] + unrestricted_access => False + notrack => False + srange => ['cloudcontrol1006.private.eqiad.wikimedia.cloud', 'cloudcontrol1007.private.eqiad.wikimedia.cloud', 'cloudcontrol1011.private.eqiad.wikimedia.cloud']
- Logrotate::Rule[mcrouter]
- Parameters differences:
--- Logrotate::Rule[mcrouter].orig +++ Logrotate::Rule[mcrouter] - post_rotate => ['service rsyslog rotate >/dev/null 2>&1 || true'] - ensure => present - compress => True - copy_truncate => False - not_if_empty => True - frequency => daily - missing_ok => True - date_yesterday => False - file_glob => /var/log/mcrouter.log - rotate => 7 - no_create => False - date_ext => False
- File[/etc/zookeeper/conf/log4j.properties]
- Parameters differences:
--- File[/etc/zookeeper/conf/log4j.properties].orig +++ File[/etc/zookeeper/conf/log4j.properties] + require => Package[zookeeperd] + owner => root + group => root
- Content differences:
--- /etc/zookeeper/conf/log4j.properties.orig +++ /etc/zookeeper/conf/log4j.properties @@ -0,0 +1,31 @@ +# Note: This file is managed by Puppet. + +# +# ZooKeeper Logging Configuration +# + +# Format is "<default threshold> (, <appender>)+ + +log4j.rootLogger=${zookeeper.root.logger}, ROLLINGFILE + +# +# Log INFO level and above messages to the console +# +log4j.appender.CONSOLE=org.apache.log4j.ConsoleAppender +log4j.appender.CONSOLE.Threshold=INFO +log4j.appender.CONSOLE.layout=org.apache.log4j.PatternLayout +log4j.appender.CONSOLE.layout.ConversionPattern=%d{ISO8601} - %-5p [%t:%C{1}@%L] - %m%n + +# +# Add ROLLINGFILE to rootLogger to get log file output +# Log INFO level and above messages to a log file +log4j.appender.ROLLINGFILE=org.apache.log4j.RollingFileAppender +log4j.appender.ROLLINGFILE.Threshold=INFO +log4j.appender.ROLLINGFILE.File=${zookeeper.log.dir}/zookeeper.log + +# Max log file size of 10MB +log4j.appender.ROLLINGFILE.MaxFileSize=10MB +# Keep only 10 files +log4j.appender.ROLLINGFILE.MaxBackupIndex=10 +log4j.appender.ROLLINGFILE.layout=org.apache.log4j.PatternLayout +log4j.appender.ROLLINGFILE.layout.ConversionPattern=%d{ISO8601} - %-5p [%t:%C{1}@%L] - %m%n- Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011]
- Parameters differences:
--- Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011].orig +++ Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011] + source => puppet:///modules/profile/zookeeper/jvm_prometheus_jmx_exporter.yaml + config_dir => /etc/prometheus + port => 12181 + extra_ferm_allowed_nodes => [] + labels => {'zookeeper_cluster': 'openstack-eqiad1'} + hostname => cloudcontrol1011 + config_file => /etc/prometheus/jvm_zookeeper_jmx_exporter.yaml- Package[zookeeper]
- Parameters differences:
--- Package[zookeeper].orig +++ Package[zookeeper] + provider => apt + ensure => installed
- Class[Zookeeper]
- Parameters differences:
--- Class[Zookeeper].orig +++ Class[Zookeeper] + init_limit => 10 + data_dir => /var/lib/zookeeper + tick_time => 2000 + conf_template => profile/zookeeper/zoo.cfg.erb + before => ['Class[Zookeeper::Server]'] + sync_limit => 8 + max_client_connections => 1024 + enable_tls => False + hosts => {'cloudcontrol1006.private.eqiad.wikimedia.cloud': '1006', 'cloudcontrol1007.private.eqiad.wikimedia.cloud': '1007', 'cloudcontrol1011.private.eqiad.wikimedia.cloud': '1011'}- Ferm::Rule[skip_mcrouter_designate_conntrack_in]
- Parameters differences:
--- Ferm::Rule[skip_mcrouter_designate_conntrack_in].orig +++ Ferm::Rule[skip_mcrouter_designate_conntrack_in] - rule => proto tcp dport (11213) NOTRACK; - table => raw - ensure => present - prio => 10 - desc => Skip incoming connection tracking for mcrouter - chain => PREROUTING - domain => (ip ip6)
- File[/etc/rsyslog.d/20-mcrouter.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/20-mcrouter.conf].orig +++ File[/etc/rsyslog.d/20-mcrouter.conf] - owner => root - group => root - ensure => present - notify => Service[rsyslog] - source => puppet:///modules/mcrouter/mcrouter.rsyslog.conf - mode => 0444
- File[/lib/systemd/system/zookeeper-cleanup.timer]
- Parameters differences:
--- File[/lib/systemd/system/zookeeper-cleanup.timer].orig +++ File[/lib/systemd/system/zookeeper-cleanup.timer] + owner => root + group => root + ensure => present + notify => Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)] + mode => 0444
- Content differences:
--- /lib/systemd/system/zookeeper-cleanup.timer.orig +++ /lib/systemd/system/zookeeper-cleanup.timer @@ -0,0 +1,12 @@ +[Unit] +Description=Periodic execution of zookeeper-cleanup.service + +[Timer] +Unit=zookeeper-cleanup.service +# Accuracy sets the maximum time interval around the execution time we want to allow +AccuracySec=15sec +OnCalendar=*-*-* 0:10:00 +RandomizedDelaySec=0 + +[Install] +WantedBy=multi-user.target
- Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011]
- Parameters differences:
--- Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011].orig +++ Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011] + labels => {'zookeeper_cluster': 'openstack-eqiad1'} + hostname => cloudcontrol1011 + port => 12181- Service[zookeeper]
- Parameters differences:
--- Service[zookeeper].orig +++ Service[zookeeper] + require => ['Package[zookeeperd]', 'File[/var/lib/zookeeper]', 'File[/var/lib/zookeeper/myid]', 'File[/etc/default/zookeeper]', 'File[/etc/zookeeper/conf/zoo.cfg]', 'File[/etc/zookeeper/conf/myid]', 'File[/etc/zookeeper/conf/log4j.properties]'] + hasrestart => True + ensure => running + hasstatus => True
- Class[Mcrouter]
- Parameters differences:
--- Class[Mcrouter].orig +++ Class[Mcrouter] - ensure => present - num_proxies => 1 - region => eqiad - cluster => designate - cross_cluster_timeout_ms => 1000 - cross_region_timeout_ms => 250 - port => 11213 - probe_delay_initial_ms => 3000 - pools => {'designate': {'servers': ['172.20.2.32:11211:ascii:plain', '172.20.3.18:11211:ascii:plain', '172.20.1.25:11211:ascii:plain']}} - routes => [{'aliases': ['/eqiad/designate/'], 'route': {'type': 'OperationSelectorRoute', 'default_policy': 'PoolRoute|designate', 'operation_policies': {'add': 'AllSyncRoute|Pool|designate', 'delete': 'AllSyncRoute|Pool|designate', 'get': 'LatestRoute|Pool|designate', 'set': 'AllSyncRoute|Pool|designate'}}}]- Package[zookeeperd]
- Parameters differences:
--- Package[zookeeperd].orig +++ Package[zookeeperd] + provider => apt + ensure => installed
- File[/etc/logrotate.d/mcrouter]
- Parameters differences:
--- File[/etc/logrotate.d/mcrouter].orig +++ File[/etc/logrotate.d/mcrouter] - owner => root - ensure => present - group => root - mode => 0444
- Content differences:
--- /etc/logrotate.d/mcrouter.orig +++ /etc/logrotate.d/mcrouter @@ -1,15 +0,0 @@ -# This file is managed by Puppet. -# puppet:///logrotate/logrotate.erb - -/var/log/mcrouter.log { - notifempty - daily - rotate 7 - compress - delaycompress - missingok - sharedscripts - postrotate - service rsyslog rotate >/dev/null 2>&1 || true - endscript -}- Systemd::Service[zookeeper-cleanup]
- Parameters differences:
--- Systemd::Service[zookeeper-cleanup].orig +++ Systemd::Service[zookeeper-cleanup] + monitoring_contact_group => admins + ensure => present + monitoring_enabled => False + unit_type => timer + monitoring_critical => False + migration_task => T407130 + override => False + restart => False + require => Systemd::Unit[zookeeper-cleanup.service] + service_params => {}- File[/etc/rsyslog.d/40-zookeeper-cleanup.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/40-zookeeper-cleanup.conf].orig +++ File[/etc/rsyslog.d/40-zookeeper-cleanup.conf] + owner => root + group => root + ensure => present + notify => Service[rsyslog] + mode => 0444
- Content differences:
--- /etc/rsyslog.d/40-zookeeper-cleanup.conf.orig +++ /etc/rsyslog.d/40-zookeeper-cleanup.conf @@ -0,0 +1,10 @@ +# rsyslog.conf(5) configuration file for services. +# This file is managed by Puppet. +if $programname startswith "zookeeper-cleanup" then { + action( + type="omfile" file="/var/log/zookeeper-cleanup/syslog.log" + fileOwner="zookeeper" fileGroup="root" + fileCreateMode="0644" + ) + & stop +}- Class[Profile::Zookeeper::Monitoring::Server]
- Parameters differences:
--- Class[Profile::Zookeeper::Monitoring::Server].orig +++ Class[Profile::Zookeeper::Monitoring::Server] + cluster_name => openstack-eqiad1
- File[/lib/systemd/system/zookeeper-cleanup.service]
- Parameters differences:
--- File[/lib/systemd/system/zookeeper-cleanup.service].orig +++ File[/lib/systemd/system/zookeeper-cleanup.service] + owner => root + group => root + ensure => present + notify => Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)] + mode => 0444
- Content differences:
--- /lib/systemd/system/zookeeper-cleanup.service.orig +++ /lib/systemd/system/zookeeper-cleanup.service @@ -0,0 +1,8 @@ +[Unit] +Description=Regular jobs for running the cleanup script +Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + +[Service] +Type=oneshot +User=zookeeper +ExecStart=/usr/share/zookeeper/bin/zkCleanup.sh -n 10
- Rsyslog::Conf[mcrouter]
- Parameters differences:
--- Rsyslog::Conf[mcrouter].orig +++ Rsyslog::Conf[mcrouter] - source => puppet:///modules/mcrouter/mcrouter.rsyslog.conf - priority => 20 - ensure => present - before => Service[mcrouter] - require => File[/etc/logrotate.d/mcrouter] - mode => 0444
- Class[Openstack::Designate::Service]
- Parameters differences:
--- Class[Openstack::Designate::Service].orig +++ Class[Openstack::Designate::Service] @@ - tooz_url => memcached://localhost:11213 + tooz_url => zookeeper://cloudcontrol1006.private.eqiad.wikimedia.cloud:2181?hosts=cloudcontrol1007.private.eqiad.wikimedia.cloud:2181,cloudcontrol1011.private.eqiad.wikimedia.cloud:2181
- Class[Profile::Zookeeper::Server]
- Parameters differences:
--- Class[Profile::Zookeeper::Server].orig +++ Class[Profile::Zookeeper::Server] + own_fqdn => cloudcontrol1011.private.eqiad.wikimedia.cloud + monitoring_contact_group => admins + clusters => {'main-eqiad': {'hosts': {'conf1007.eqiad.wmnet': '1107', 'conf1008.eqiad.wmnet': '1108', 'conf1009.eqiad.wmnet': '1109'}}, 'main-codfw': {'hosts': {'conf2004.codfw.wmnet': '2001', 'conf2005.codfw.wmnet': '2002', 'conf2006.codfw.wmnet': '2003'}}, 'openstack-eqiad1': {'hosts': {'cloudcontrol1006.private.eqiad.wikimedia.cloud': '1006', 'cloudcontrol1007.private.eqiad.wikimedia.cloud': '1007', 'cloudcontrol1011.private.eqiad.wikimedia.cloud': '1011'}}, 'openstack-codfw1dev': {'hosts': {'cloudcontrol2005-dev.private.codfw.wikimedia.cloud': '2005', 'cloudcontrol2006-dev.private.codfw.wikimedia.cloud': '2006', 'cloudcontrol2010-dev.private.codfw.wikimedia.cloud': '2010'}}, 'flink-eqiad': {'hosts': {'flink-zk1001.eqiad.wmnet': '1001', 'flink-zk1002.eqiad.wmnet': '1002', 'flink-zk1003.eqiad.wmnet': '1003'}}, 'flink-codfw': {'hosts': {'flink-zk2001.codfw.wmnet': '2001', 'flink-zk2002.codfw.wmnet': '2002', 'flink-zk2003.codfw.wmnet': '2003'}}, 'druid-analytics-eqiad': {'hosts': {'an-druid1003.eqiad.wmnet': '1003', 'an-druid1004.eqiad.wmnet': '1004', 'an-druid1005.eqiad.wmnet': '1005'}}, 'druid-public-eqiad': {'hosts': {'druid1009.eqiad.wmnet': '1009', 'druid1010.eqiad.wmnet': '1010', 'druid1011.eqiad.wmnet': '1011'}}, 'druid-analytics-test-eqiad': {'hosts': {'an-test-druid1001.eqiad.wmnet': '1001'}}, 'analytics-eqiad': {'hosts': {'an-conf1004.eqiad.wmnet': '1004', 'an-conf1005.eqiad.wmnet': '1005', 'an-conf1006.eqiad.wmnet': '1006'}}, 'test-eqiad': {'hosts': {'zookeeper-test1002.eqiad.wmnet': '1002'}}, 'zuul-eqiad': {'hosts': {'zuul1001.eqiad.wmnet': '1001'}}, 'zuul-codfw': {'hosts': {'zuul2001.codfw.wmnet': '2001'}}} + monitoring_enabled => False + require => ['Class[Profile::Java]', 'Class[Profile::Zookeeper::Monitoring::Server]'] + cluster_name => openstack-eqiad1 + sync_limit => 8 + is_critical => False + max_client_connections => 1024 + enable_tls => False + prometheus_instance => ops- Service[zookeeper-cleanup.timer]
- Parameters differences:
--- Service[zookeeper-cleanup.timer].orig +++ Service[zookeeper-cleanup.timer] + enable => True + provider => systemd + ensure => running
- Rsyslog::Conf[zookeeper-cleanup]
- Parameters differences:
--- Rsyslog::Conf[zookeeper-cleanup].orig +++ Rsyslog::Conf[zookeeper-cleanup] + priority => 40 + require => File[/var/log/zookeeper-cleanup] + ensure => present + mode => 0444
- File[/var/lib/zookeeper]
- Parameters differences:
--- File[/var/lib/zookeeper].orig +++ File[/var/lib/zookeeper] + owner => zookeeper + ensure => directory + group => zookeeper + mode => 0755
- File[/var/log/zookeeper-cleanup]
- Parameters differences:
--- File[/var/log/zookeeper-cleanup].orig +++ File[/var/log/zookeeper-cleanup] + owner => zookeeper + group => root + ensure => directory + force => True + backup => False + mode => 0755
- Exec[java__cacert_wmf:puppetca.pem]
- Parameters differences:
--- Exec[java__cacert_wmf:puppetca.pem].orig +++ Exec[java__cacert_wmf:puppetca.pem] + command => /usr/bin/keytool -import -trustcacerts -noprompt -cacerts -file /etc/ssl/certs/Puppet_Internal_CA.pem -storepass changeit -alias wmf:puppetca.pem + user => root + unless => /usr/bin/keytool -list -cacerts -noprompt -storepass changeit -alias wmf:puppetca.pem + group => root
- Systemd::Unit[mcrouter]
- Parameters differences:
--- Systemd::Unit[mcrouter].orig +++ Systemd::Unit[mcrouter] - override => True - ensure => present - restart => False - require => ['Class[Systemd]'] - override_filename => puppet-override.conf - unit => mcrouter
- File[/etc/zookeeper/conf/zoo.cfg]
- Parameters differences:
--- File[/etc/zookeeper/conf/zoo.cfg].orig +++ File[/etc/zookeeper/conf/zoo.cfg] + require => Package[zookeeper] + owner => root + group => root
- Content differences:
--- /etc/zookeeper/conf/zoo.cfg.orig +++ /etc/zookeeper/conf/zoo.cfg @@ -0,0 +1,65 @@ +# Note: This file is managed by Puppet. + +# http://hadoop.apache.org/zookeeper/docs/current/zookeeperAdmin.html + +# https://zookeeper.apache.org/doc/r3.4.10/zookeeperAdmin.html#sc_zkCommands +# T365400 Really we should check zk version >= 3.4.10 but for now just check os +4lw.commands.whitelist=* + +# specify all zookeeper servers +# The first port is used by followers to connect to the leader +# The second one is used for leader election +server.1006=cloudcontrol1006.private.eqiad.wikimedia.cloud:2182:2183 +server.1007=cloudcontrol1007.private.eqiad.wikimedia.cloud:2182:2183 +server.1011=cloudcontrol1011.private.eqiad.wikimedia.cloud:2182:2183 + +# the port at which the clients will connect +clientPort=2181 + +# the directory where the snapshot is stored. +dataDir=/var/lib/zookeeper + +# Place the dataLogDir to a separate physical disc for better performance +# dataLogDir=/disk2/zookeeper + + +# The maximum number of connections per IP, 0 == unlimited +maxClientCnxns=1024 + +# The number of milliseconds of each tick. +tickTime=2000 + +# The number of ticks that the initial +# synchronization phase can take. +initLimit=10 + +# The number of ticks that can pass between +# sending a request and getting an acknowledgement +syncLimit=8 + +# To avoid seeks ZooKeeper allocates space in the transaction log file in +# blocks of preAllocSize kilobytes. The default block size is 64M. One reason +# for changing the size of the blocks is to reduce the block size if snapshots +# are taken more often. (Also, see snapCount). +#preAllocSize=65536 + +# Clients can submit requests faster than ZooKeeper can process them, +# especially if there are a lot of clients. To prevent ZooKeeper from running +# out of memory due to queued requests, ZooKeeper will throttle clients so that +# there is no more than globalOutstandingLimit outstanding requests in the +# system. The default limit is 1,000.ZooKeeper logs transactions to a +# transaction log. After snapCount transactions are written to a log file a +# snapshot is started and a new transaction log file is started. The default +# snapCount is 10,000. +#snapCount=1000 + +# If this option is defined, requests will be will logged to a trace file named +# traceFile.year.month.day. +#traceFile= + +# Leader accepts client connections. Default value is "yes". The leader machine +# coordinates updates. For higher update throughput at thes slight expense of +# read throughput the leader can be configured to not accept clients and focus +# on coordination. +#leaderServes=yes +
- File[/etc/mcrouter/config.json]
- Parameters differences:
--- File[/etc/mcrouter/config.json].orig +++ File[/etc/mcrouter/config.json] - validate_cmd => /usr/bin/mcrouter --validate-config --port 11213 --route-prefix eqiad/designate --config file:% - owner => root - group => root - ensure => present - require => Package[mcrouter] - mode => 0444
- Content differences:
--- /etc/mcrouter/config.json.orig +++ /etc/mcrouter/config.json @@ -1,28 +0,0 @@ -{ - "pools": { - "designate": { - "servers": [ - "172.20.2.32:11211:ascii:plain", - "172.20.3.18:11211:ascii:plain", - "172.20.1.25:11211:ascii:plain" - ] - } - }, - "routes": [ - { - "aliases": [ - "/eqiad/designate/" - ], - "route": { - "type": "OperationSelectorRoute", - "default_policy": "PoolRoute|designate", - "operation_policies": { - "add": "AllSyncRoute|Pool|designate", - "delete": "AllSyncRoute|Pool|designate", - "get": "LatestRoute|Pool|designate", - "set": "AllSyncRoute|Pool|designate" - } - } - } - ] -}- File[/etc/zookeeper/conf/myid]
- Parameters differences:
--- File[/etc/zookeeper/conf/myid].orig +++ File[/etc/zookeeper/conf/myid] + owner => root + group => root
- Content differences:
--- /etc/zookeeper/conf/myid.orig +++ /etc/zookeeper/conf/myid @@ -0,0 +1 @@ +1011
- File[/etc/default/mcrouter]
- Parameters differences:
--- File[/etc/default/mcrouter].orig +++ File[/etc/default/mcrouter] - owner => root - ensure => present - group => root - mode => 0444
- Content differences:
--- /etc/default/mcrouter.orig +++ /etc/default/mcrouter @@ -1,13 +0,0 @@ -# Default settings for mcrouter. -# This file is managed by Puppet. - -PORT="11213" -ADDITIONAL_ARGS="--route-prefix=eqiad/designate \ ---cross-region-timeout-ms=250 \ ---cross-cluster-timeout-ms=1000 \ ---send-invalid-route-to-default \ ---file-observer-poll-period-ms=1000 \ ---file-observer-sleep-before-update-ms=100 \ ---num-proxies=1 \ ---probe-timeout-initial=3000 \ -"
- Java::Cacert[wmf:Wikimedia_Internal_Root_CA]
- Parameters differences:
--- Java::Cacert[wmf:Wikimedia_Internal_Root_CA].orig +++ Java::Cacert[wmf:Wikimedia_Internal_Root_CA] + owner => root + group => root + ensure => present + path => /usr/share/ca-certificates/wikimedia/Wikimedia_Internal_Root_CA.crt + storepass => changeit + require => Alternatives::Java[21]
- Java::Cacert[wmf:puppetca.pem]
- Parameters differences:
--- Java::Cacert[wmf:puppetca.pem].orig +++ Java::Cacert[wmf:puppetca.pem] + owner => root + group => root + ensure => present + path => /etc/ssl/certs/Puppet_Internal_CA.pem + storepass => changeit + require => Alternatives::Java[21]
- Class[Adduser]
- Parameters differences:
--- Class[Adduser].orig +++ Class[Adduser] @@ - before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[mcrouter]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]'] + before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[zookeeper]', 'Package[zookeeperd]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-jmx-exporter]', 'Package[openjdk-21-jdk]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']
- File[/etc/ferm/conf.d/10_zookeeper]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_zookeeper].orig +++ File[/etc/ferm/conf.d/10_zookeeper] + owner => root + group => root + ensure => present + notify => Service[ferm] + require => File[/etc/ferm/conf.d] + tag => ferm + mode => 0400
- Content differences:
--- /etc/ferm/conf.d/10_zookeeper.orig +++ /etc/ferm/conf.d/10_zookeeper @@ -0,0 +1,6 @@ +# Autogenerated by puppet. DO NOT EDIT BY HAND! +# +# +&R_SERVICE(tcp, (2181 2182 2183), (172.20.1.25 172.20.2.32 172.20.3.18 2a02:ec80:a000:201::25 2a02:ec80:a000:202::32 2a02:ec80:a000:203::18)); + +
- Systemd::Syslog[zookeeper-cleanup]
- Parameters differences:
--- Systemd::Syslog[zookeeper-cleanup].orig +++ Systemd::Syslog[zookeeper-cleanup] + owner => zookeeper + group => root + ensure => present + base_dir => /var/log + log_filename => syslog.log + programname_comparison => startswith + readable_by => all + force_stop => True
- Exec[openstack-trixie-flamingo-apt-upgrade]
- Parameters differences:
--- Exec[openstack-trixie-flamingo-apt-upgrade].orig +++ Exec[openstack-trixie-flamingo-apt-upgrade] @@ - before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[mcrouter]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]'] + before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[zookeeper]', 'Package[zookeeperd]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-jmx-exporter]', 'Package[openjdk-21-jdk]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']
- Ferm::Service[mcrouter]
- Parameters differences:
--- Ferm::Service[mcrouter].orig +++ Ferm::Service[mcrouter] - proto => tcp - ensure => present - prio => 10 - desc => Allow connections to mcrouter - port => 11213 - unrestricted_access => False - notrack => True - srange => ['cloudcontrol1006.private.eqiad.wikimedia.cloud', 'cloudcontrol1007.private.eqiad.wikimedia.cloud', 'cloudcontrol1011.private.eqiad.wikimedia.cloud']
- Logrotate::Conf[zookeeper-cleanup]
- Parameters differences:
--- Logrotate::Conf[zookeeper-cleanup].orig +++ Logrotate::Conf[zookeeper-cleanup] + ensure => present
- Class[Profile::Java]
- Parameters differences:
--- Class[Profile::Java].orig +++ Class[Profile::Java] + enable_dbg => False + java_packages => [] + egd_source => /dev/random + extra_args => {} + trust_puppet_ca => True + hardened_tls => False- Systemd::Unit[zookeeper-cleanup.timer]
- Parameters differences:
--- Systemd::Unit[zookeeper-cleanup.timer].orig +++ Systemd::Unit[zookeeper-cleanup.timer] + override => False + ensure => present + restart => False + require => ['Class[Systemd]'] + override_filename => puppet-override.conf + unit => zookeeper-cleanup.timer
- File[/etc/prometheus]
- Parameters differences:
--- File[/etc/prometheus].orig +++ File[/etc/prometheus] + owner => root + group => root + ensure => directory + mode => 0444
- Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]
- Parameters differences:
--- Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA].orig +++ Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA] + command => /usr/bin/keytool -import -trustcacerts -noprompt -cacerts -file /usr/share/ca-certificates/wikimedia/Wikimedia_Internal_Root_CA.crt -storepass changeit -alias wmf:Wikimedia_Internal_Root_CA + user => root + unless => /usr/bin/keytool -list -cacerts -noprompt -storepass changeit -alias wmf:Wikimedia_Internal_Root_CA + group => root
- Logrotate::Conf[mcrouter]
- Parameters differences:
--- Logrotate::Conf[mcrouter].orig +++ Logrotate::Conf[mcrouter] - ensure => present
- Firewall::Service[zookeeper]
- Parameters differences:
--- Firewall::Service[zookeeper].orig +++ Firewall::Service[zookeeper] + proto => tcp + ensure => present + prio => 10 + desc => + port => [2181, 2182, 2183] + unrestricted_access => False + notrack => False + srange => ['cloudcontrol1006.private.eqiad.wikimedia.cloud', 'cloudcontrol1007.private.eqiad.wikimedia.cloud', 'cloudcontrol1011.private.eqiad.wikimedia.cloud']
- Package[prometheus-jmx-exporter]
- Parameters differences:
--- Package[prometheus-jmx-exporter].orig +++ Package[prometheus-jmx-exporter] + provider => apt + ensure => installed
- Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]
- Parameters differences:
--- Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)].orig +++ Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)] + command => /bin/systemctl daemon-reload + refreshonly => True
- Class[Java]
- Parameters differences:
- Class[Java]
- Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]
- Package[prometheus-jmx-exporter]
- Firewall::Service[zookeeper]
- Logrotate::Conf[mcrouter]
- Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]
- File[/etc/prometheus]
- Systemd::Unit[zookeeper-cleanup.timer]
- Class[Profile::Java]
- Logrotate::Conf[zookeeper-cleanup]
- Ferm::Service[mcrouter]
- Exec[openstack-trixie-flamingo-apt-upgrade]
- Content differences:
- File[/etc/ferm/conf.d/10_zookeeper]
- Class[Adduser]
- Java::Cacert[wmf:puppetca.pem]
- Content differences:
- Content differences:
- Content differences:
- Content differences:
- File[/etc/zookeeper/conf/zoo.cfg]
- Systemd::Unit[mcrouter]
- Exec[java__cacert_wmf:puppetca.pem]
- File[/var/log/zookeeper-cleanup]
- File[/var/lib/zookeeper]
- Rsyslog::Conf[zookeeper-cleanup]
- Service[zookeeper-cleanup.timer]
- Class[Profile::Zookeeper::Server]
- Class[Openstack::Designate::Service]
- Content differences:
- File[/lib/systemd/system/zookeeper-cleanup.service]
- Content differences:
- File[/etc/rsyslog.d/40-zookeeper-cleanup.conf]
- Content differences:
- File[/etc/logrotate.d/mcrouter]
- Package[zookeeperd]
- Class[Mcrouter]
- Service[zookeeper]
- Content differences:
- File[/lib/systemd/system/zookeeper-cleanup.timer]
- File[/etc/rsyslog.d/20-mcrouter.conf]
- Ferm::Rule[skip_mcrouter_designate_conntrack_in]
- Class[Zookeeper]
- Package[zookeeper]
- Content differences:
- File[/etc/zookeeper/conf/log4j.properties]
- Logrotate::Rule[mcrouter]
- Ferm::Service[zookeeper]
- Content differences:
- File[/etc/default/zookeeper]
- Parameters differences: