Compilation results for cloudcontrol1011.eqiad.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	4085
Resources added:	47
Resources removed:	21
Resources modified:	74
Change percentage:	3.48%

Resources only in the new catalog

Class[Profile::Zookeeper::Monitoring::Server]
File[/var/lib/zookeeper/myid]
File[/var/log/zookeeper-cleanup]
File[/etc/prometheus]
File[/etc/zookeeper/conf/zoo.cfg]
Alternatives::Java[21]
Java::Cacert[wmf:puppetca.pem]
Rsyslog::Conf[zookeeper-cleanup]
Package[openjdk-21-jdk]
Systemd::Timer::Job[zookeeper-cleanup]
File[/etc/zookeeper/conf/myid]
Package[prometheus-jmx-exporter]
Systemd::Service[zookeeper-cleanup]
Logrotate::Conf[zookeeper-cleanup]
Class[Profile::Zookeeper::Server]
Firewall::Service[zookeeper]
Systemd::Syslog[zookeeper-cleanup]
Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]
File[/lib/systemd/system/zookeeper-cleanup.service]
Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)]
Java::Cacert[wmf:Wikimedia_Internal_Root_CA]
Class[Zookeeper]
Service[zookeeper-cleanup.timer]
Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011]
File[/etc/default/zookeeper]
Package[zookeeper]
Class[Java]
Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]
File[/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml]
Systemd::Unit[zookeeper-cleanup.service]
File[/etc/ferm/conf.d/10_zookeeper]
Package[zookeeperd]
Exec[java__cacert_wmf:puppetca.pem]
File[/etc/zookeeper/conf/log4j.properties]
File[/etc/rsyslog.d/40-zookeeper-cleanup.conf]
Exec[update_java_alternatives_21]
Service[zookeeper]
Systemd::Timer[zookeeper-cleanup]
Ferm::Service[zookeeper]
File[/lib/systemd/system/zookeeper-cleanup.timer]
File[/var/lib/zookeeper]
Systemd::Unit[zookeeper-cleanup.timer]
Class[Zookeeper::Server]
Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011]
File[/etc/logrotate.d/zookeeper-cleanup]
Class[Profile::Java]
Java::Package[openjdk-jdk-21]

Resources only in the old catalog

File[/etc/rsyslog.d/20-mcrouter.conf]
Class[Mcrouter]
File[/etc/systemd/system/mcrouter.service.d/puppet-override.conf]
Logrotate::Rule[mcrouter]
Ferm::Rule[skip_mcrouter_designate_conntrack_out]
Exec[systemd daemon-reload for mcrouter.service (mcrouter)]
Ferm::Service[mcrouter]
File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out]
File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in]
Logrotate::Conf[mcrouter]
File[/etc/default/mcrouter]
Service[mcrouter]
File[/etc/logrotate.d/mcrouter]
Rsyslog::Conf[mcrouter]
File[/etc/systemd/system/mcrouter.service.d]
Package[mcrouter]
Ferm::Rule[skip_mcrouter_designate_conntrack_in]
File[/etc/mcrouter/config.json]
Systemd::Service[mcrouter]
Systemd::Unit[mcrouter]
File[/etc/ferm/conf.d/10_mcrouter]

Resources modified

Exec[systemd daemon-reload for mcrouter.service (mcrouter)]

Parameters differences:

--- Exec[systemd daemon-reload for mcrouter.service (mcrouter)].orig
+++ Exec[systemd daemon-reload for mcrouter.service (mcrouter)]

-    command     => /bin/systemctl daemon-reload
-    refreshonly => True
-    before      => ['Service[mcrouter]']

File[/etc/default/zookeeper]

Parameters differences:

--- File[/etc/default/zookeeper].orig
+++ File[/etc/default/zookeeper]

+    require => Package[zookeeperd]
+    owner   => root
+    group   => root

Content differences:

--- /etc/default/zookeeper.orig
+++ /etc/default/zookeeper
@@ -0,0 +1,6 @@
+# Note: This file is managed by Puppet.
+
+# Enable JMX connections on port 9998
+JMXLOCALONLY=false
+JAVA_OPTS="-Xms1g -Xmx1g -javaagent:/usr/share/java/prometheus/jmx_prometheus_javaagent.jar=10.64.151.8:12181:/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml -Dcom.sun.management.jmxremote.port=9998 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false"
+JAVA=/usr/lib/jvm/java-21-openjdk-amd64/bin/java

Java::Package[openjdk-jdk-21]

Parameters differences:

--- Java::Package[openjdk-jdk-21].orig
+++ Java::Package[openjdk-jdk-21]

+    package_info => {'version': '21', 'variant': 'jdk'}
+    egd_source   => /dev/random
+    hardened_tls => False

Ferm::Service[zookeeper]

Parameters differences:

--- Ferm::Service[zookeeper].orig
+++ Ferm::Service[zookeeper]

+    proto               => tcp
+    ensure              => present
+    prio                => 10
+    desc                => 
+    port                => [2181, 2182, 2183]
+    unrestricted_access => False
+    notrack             => False
+    srange              => ['cloudcontrol1006.private.eqiad.wikimedia.cloud', 'cloudcontrol1007.private.eqiad.wikimedia.cloud', 'cloudcontrol1011.private.eqiad.wikimedia.cloud']

Logrotate::Rule[mcrouter]

Parameters differences:

--- Logrotate::Rule[mcrouter].orig
+++ Logrotate::Rule[mcrouter]

-    post_rotate    => ['service rsyslog rotate >/dev/null 2>&1 || true']
-    ensure         => present
-    compress       => True
-    copy_truncate  => False
-    not_if_empty   => True
-    frequency      => daily
-    missing_ok     => True
-    date_yesterday => False
-    file_glob      => /var/log/mcrouter.log
-    rotate         => 7
-    no_create      => False
-    date_ext       => False

File[/etc/zookeeper/conf/log4j.properties]

Parameters differences:

--- File[/etc/zookeeper/conf/log4j.properties].orig
+++ File[/etc/zookeeper/conf/log4j.properties]

+    require => Package[zookeeperd]
+    owner   => root
+    group   => root

Content differences:

--- /etc/zookeeper/conf/log4j.properties.orig
+++ /etc/zookeeper/conf/log4j.properties
@@ -0,0 +1,31 @@
+# Note: This file is managed by Puppet.
+
+#
+# ZooKeeper Logging Configuration
+#
+
+# Format is "<default threshold> (, <appender>)+
+
+log4j.rootLogger=${zookeeper.root.logger}, ROLLINGFILE
+
+#
+# Log INFO level and above messages to the console
+#
+log4j.appender.CONSOLE=org.apache.log4j.ConsoleAppender
+log4j.appender.CONSOLE.Threshold=INFO
+log4j.appender.CONSOLE.layout=org.apache.log4j.PatternLayout
+log4j.appender.CONSOLE.layout.ConversionPattern=%d{ISO8601} - %-5p [%t:%C{1}@%L] - %m%n
+
+#
+# Add ROLLINGFILE to rootLogger to get log file output
+#    Log INFO level and above messages to a log file
+log4j.appender.ROLLINGFILE=org.apache.log4j.RollingFileAppender
+log4j.appender.ROLLINGFILE.Threshold=INFO
+log4j.appender.ROLLINGFILE.File=${zookeeper.log.dir}/zookeeper.log
+
+# Max log file size of 10MB
+log4j.appender.ROLLINGFILE.MaxFileSize=10MB
+# Keep only 10 files
+log4j.appender.ROLLINGFILE.MaxBackupIndex=10
+log4j.appender.ROLLINGFILE.layout=org.apache.log4j.PatternLayout
+log4j.appender.ROLLINGFILE.layout.ConversionPattern=%d{ISO8601} - %-5p [%t:%C{1}@%L] - %m%n

Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011]

Parameters differences:

--- Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011].orig
+++ Profile::Prometheus::Jmx_exporter[zookeeper_server_cloudcontrol1011]

+    source                   => puppet:///modules/profile/zookeeper/jvm_prometheus_jmx_exporter.yaml
+    config_dir               => /etc/prometheus
+    port                     => 12181
+    extra_ferm_allowed_nodes => []
+    labels                   => {'zookeeper_cluster': 'openstack-eqiad1'}
+    hostname                 => cloudcontrol1011
+    config_file              => /etc/prometheus/jvm_zookeeper_jmx_exporter.yaml

Package[zookeeper]

Parameters differences:

--- Package[zookeeper].orig
+++ Package[zookeeper]

+    provider => apt
+    ensure   => installed

Class[Zookeeper]

Parameters differences:

--- Class[Zookeeper].orig
+++ Class[Zookeeper]

+    init_limit             => 10
+    data_dir               => /var/lib/zookeeper
+    tick_time              => 2000
+    conf_template          => profile/zookeeper/zoo.cfg.erb
+    before                 => ['Class[Zookeeper::Server]']
+    sync_limit             => 8
+    max_client_connections => 1024
+    enable_tls             => False
+    hosts                  => {'cloudcontrol1006.private.eqiad.wikimedia.cloud': '1006', 'cloudcontrol1007.private.eqiad.wikimedia.cloud': '1007', 'cloudcontrol1011.private.eqiad.wikimedia.cloud': '1011'}

Ferm::Rule[skip_mcrouter_designate_conntrack_in]

Parameters differences:

--- Ferm::Rule[skip_mcrouter_designate_conntrack_in].orig
+++ Ferm::Rule[skip_mcrouter_designate_conntrack_in]

-    rule   => proto tcp dport (11213) NOTRACK;
-    table  => raw
-    ensure => present
-    prio   => 10
-    desc   => Skip incoming connection tracking for mcrouter
-    chain  => PREROUTING
-    domain => (ip ip6)

File[/etc/rsyslog.d/20-mcrouter.conf]

Parameters differences:

--- File[/etc/rsyslog.d/20-mcrouter.conf].orig
+++ File[/etc/rsyslog.d/20-mcrouter.conf]

-    owner  => root
-    group  => root
-    ensure => present
-    notify => Service[rsyslog]
-    source => puppet:///modules/mcrouter/mcrouter.rsyslog.conf
-    mode   => 0444

File[/lib/systemd/system/zookeeper-cleanup.timer]

Parameters differences:

--- File[/lib/systemd/system/zookeeper-cleanup.timer].orig
+++ File[/lib/systemd/system/zookeeper-cleanup.timer]

+    owner  => root
+    group  => root
+    ensure => present
+    notify => Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)]
+    mode   => 0444

Content differences:

--- /lib/systemd/system/zookeeper-cleanup.timer.orig
+++ /lib/systemd/system/zookeeper-cleanup.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of zookeeper-cleanup.service
+
+[Timer]
+Unit=zookeeper-cleanup.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=*-*-* 0:10:00
+RandomizedDelaySec=0
+
+[Install]
+WantedBy=multi-user.target

Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011]

Parameters differences:

--- Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011].orig
+++ Prometheus::Jmx_exporter_instance[zookeeper_server_cloudcontrol1011]

+    labels   => {'zookeeper_cluster': 'openstack-eqiad1'}
+    hostname => cloudcontrol1011
+    port     => 12181

Service[zookeeper]

Parameters differences:

--- Service[zookeeper].orig
+++ Service[zookeeper]

+    require    => ['Package[zookeeperd]', 'File[/var/lib/zookeeper]', 'File[/var/lib/zookeeper/myid]', 'File[/etc/default/zookeeper]', 'File[/etc/zookeeper/conf/zoo.cfg]', 'File[/etc/zookeeper/conf/myid]', 'File[/etc/zookeeper/conf/log4j.properties]']
+    hasrestart => True
+    ensure     => running
+    hasstatus  => True

Class[Mcrouter]

Parameters differences:

--- Class[Mcrouter].orig
+++ Class[Mcrouter]

-    ensure                   => present
-    num_proxies              => 1
-    region                   => eqiad
-    cluster                  => designate
-    cross_cluster_timeout_ms => 1000
-    cross_region_timeout_ms  => 250
-    port                     => 11213
-    probe_delay_initial_ms   => 3000
-    pools                    => {'designate': {'servers': ['172.20.2.32:11211:ascii:plain', '172.20.3.18:11211:ascii:plain', '172.20.1.25:11211:ascii:plain']}}
-    routes                   => [{'aliases': ['/eqiad/designate/'], 'route': {'type': 'OperationSelectorRoute', 'default_policy': 'PoolRoute|designate', 'operation_policies': {'add': 'AllSyncRoute|Pool|designate', 'delete': 'AllSyncRoute|Pool|designate', 'get': 'LatestRoute|Pool|designate', 'set': 'AllSyncRoute|Pool|designate'}}}]

Package[zookeeperd]

Parameters differences:

--- Package[zookeeperd].orig
+++ Package[zookeeperd]

+    provider => apt
+    ensure   => installed

File[/etc/logrotate.d/mcrouter]

Parameters differences:

--- File[/etc/logrotate.d/mcrouter].orig
+++ File[/etc/logrotate.d/mcrouter]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0444

Content differences:

--- /etc/logrotate.d/mcrouter.orig
+++ /etc/logrotate.d/mcrouter
@@ -1,15 +0,0 @@
-# This file is managed by Puppet.
-# puppet:///logrotate/logrotate.erb
-
-/var/log/mcrouter.log {
-    notifempty
-    daily
-    rotate 7
-    compress
-    delaycompress
-    missingok
-    sharedscripts
-    postrotate
-        service rsyslog rotate >/dev/null 2>&1 || true
-    endscript
-}

Systemd::Service[zookeeper-cleanup]

Parameters differences:

--- Systemd::Service[zookeeper-cleanup].orig
+++ Systemd::Service[zookeeper-cleanup]

+    monitoring_contact_group => admins
+    ensure                   => present
+    monitoring_enabled       => False
+    unit_type                => timer
+    monitoring_critical      => False
+    migration_task           => T407130
+    override                 => False
+    restart                  => False
+    require                  => Systemd::Unit[zookeeper-cleanup.service]
+    service_params           => {}

File[/etc/rsyslog.d/40-zookeeper-cleanup.conf]

Parameters differences:

--- File[/etc/rsyslog.d/40-zookeeper-cleanup.conf].orig
+++ File[/etc/rsyslog.d/40-zookeeper-cleanup.conf]

+    owner  => root
+    group  => root
+    ensure => present
+    notify => Service[rsyslog]
+    mode   => 0444

Content differences:

--- /etc/rsyslog.d/40-zookeeper-cleanup.conf.orig
+++ /etc/rsyslog.d/40-zookeeper-cleanup.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "zookeeper-cleanup" then {
+    action(
+        type="omfile" file="/var/log/zookeeper-cleanup/syslog.log"
+        fileOwner="zookeeper" fileGroup="root"
+        fileCreateMode="0644"
+    )
+    & stop
+}

Class[Profile::Zookeeper::Monitoring::Server]

Parameters differences:

--- Class[Profile::Zookeeper::Monitoring::Server].orig
+++ Class[Profile::Zookeeper::Monitoring::Server]

+    cluster_name => openstack-eqiad1

File[/lib/systemd/system/zookeeper-cleanup.service]

Parameters differences:

--- File[/lib/systemd/system/zookeeper-cleanup.service].orig
+++ File[/lib/systemd/system/zookeeper-cleanup.service]

+    owner  => root
+    group  => root
+    ensure => present
+    notify => Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]
+    mode   => 0444

Content differences:

--- /lib/systemd/system/zookeeper-cleanup.service.orig
+++ /lib/systemd/system/zookeeper-cleanup.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Regular jobs for running the cleanup script
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=zookeeper
+ExecStart=/usr/share/zookeeper/bin/zkCleanup.sh -n 10

Rsyslog::Conf[mcrouter]

Parameters differences:

--- Rsyslog::Conf[mcrouter].orig
+++ Rsyslog::Conf[mcrouter]

-    source   => puppet:///modules/mcrouter/mcrouter.rsyslog.conf
-    priority => 20
-    ensure   => present
-    before   => Service[mcrouter]
-    require  => File[/etc/logrotate.d/mcrouter]
-    mode     => 0444

Class[Openstack::Designate::Service]

Parameters differences:

--- Class[Openstack::Designate::Service].orig
+++ Class[Openstack::Designate::Service]

@@
-    tooz_url => memcached://localhost:11213
+    tooz_url => zookeeper://cloudcontrol1006.private.eqiad.wikimedia.cloud:2181?hosts=cloudcontrol1007.private.eqiad.wikimedia.cloud:2181,cloudcontrol1011.private.eqiad.wikimedia.cloud:2181

Class[Profile::Zookeeper::Server]

Parameters differences:

--- Class[Profile::Zookeeper::Server].orig
+++ Class[Profile::Zookeeper::Server]

+    own_fqdn                 => cloudcontrol1011.private.eqiad.wikimedia.cloud
+    monitoring_contact_group => admins
+    clusters                 => {'main-eqiad': {'hosts': {'conf1007.eqiad.wmnet': '1107', 'conf1008.eqiad.wmnet': '1108', 'conf1009.eqiad.wmnet': '1109'}}, 'main-codfw': {'hosts': {'conf2004.codfw.wmnet': '2001', 'conf2005.codfw.wmnet': '2002', 'conf2006.codfw.wmnet': '2003'}}, 'openstack-eqiad1': {'hosts': {'cloudcontrol1006.private.eqiad.wikimedia.cloud': '1006', 'cloudcontrol1007.private.eqiad.wikimedia.cloud': '1007', 'cloudcontrol1011.private.eqiad.wikimedia.cloud': '1011'}}, 'openstack-codfw1dev': {'hosts': {'cloudcontrol2005-dev.private.codfw.wikimedia.cloud': '2005', 'cloudcontrol2006-dev.private.codfw.wikimedia.cloud': '2006', 'cloudcontrol2010-dev.private.codfw.wikimedia.cloud': '2010'}}, 'flink-eqiad': {'hosts': {'flink-zk1001.eqiad.wmnet': '1001', 'flink-zk1002.eqiad.wmnet': '1002', 'flink-zk1003.eqiad.wmnet': '1003'}}, 'flink-codfw': {'hosts': {'flink-zk2001.codfw.wmnet': '2001', 'flink-zk2002.codfw.wmnet': '2002', 'flink-zk2003.codfw.wmnet': '2003'}}, 'druid-analytics-eqiad': {'hosts': {'an-druid1003.eqiad.wmnet': '1003', 'an-druid1004.eqiad.wmnet': '1004', 'an-druid1005.eqiad.wmnet': '1005'}}, 'druid-public-eqiad': {'hosts': {'druid1009.eqiad.wmnet': '1009', 'druid1010.eqiad.wmnet': '1010', 'druid1011.eqiad.wmnet': '1011'}}, 'druid-analytics-test-eqiad': {'hosts': {'an-test-druid1001.eqiad.wmnet': '1001'}}, 'analytics-eqiad': {'hosts': {'an-conf1004.eqiad.wmnet': '1004', 'an-conf1005.eqiad.wmnet': '1005', 'an-conf1006.eqiad.wmnet': '1006'}}, 'test-eqiad': {'hosts': {'zookeeper-test1002.eqiad.wmnet': '1002'}}, 'zuul-eqiad': {'hosts': {'zuul1001.eqiad.wmnet': '1001'}}, 'zuul-codfw': {'hosts': {'zuul2001.codfw.wmnet': '2001'}}}
+    monitoring_enabled       => False
+    require                  => ['Class[Profile::Java]', 'Class[Profile::Zookeeper::Monitoring::Server]']
+    cluster_name             => openstack-eqiad1
+    sync_limit               => 8
+    is_critical              => False
+    max_client_connections   => 1024
+    enable_tls               => False
+    prometheus_instance      => ops

Service[zookeeper-cleanup.timer]

Parameters differences:

--- Service[zookeeper-cleanup.timer].orig
+++ Service[zookeeper-cleanup.timer]

+    enable   => True
+    provider => systemd
+    ensure   => running

Rsyslog::Conf[zookeeper-cleanup]

Parameters differences:

--- Rsyslog::Conf[zookeeper-cleanup].orig
+++ Rsyslog::Conf[zookeeper-cleanup]

+    priority => 40
+    require  => File[/var/log/zookeeper-cleanup]
+    ensure   => present
+    mode     => 0444

File[/var/lib/zookeeper]

Parameters differences:

--- File[/var/lib/zookeeper].orig
+++ File[/var/lib/zookeeper]

+    owner  => zookeeper
+    ensure => directory
+    group  => zookeeper
+    mode   => 0755

File[/var/log/zookeeper-cleanup]

Parameters differences:

--- File[/var/log/zookeeper-cleanup].orig
+++ File[/var/log/zookeeper-cleanup]

+    owner  => zookeeper
+    group  => root
+    ensure => directory
+    force  => True
+    backup => False
+    mode   => 0755

Exec[java__cacert_wmf:puppetca.pem]

Parameters differences:

--- Exec[java__cacert_wmf:puppetca.pem].orig
+++ Exec[java__cacert_wmf:puppetca.pem]

+    command => /usr/bin/keytool -import -trustcacerts -noprompt -cacerts     -file /etc/ssl/certs/Puppet_Internal_CA.pem -storepass changeit -alias wmf:puppetca.pem

+    user    => root
+    unless  => /usr/bin/keytool -list -cacerts -noprompt -storepass changeit -alias wmf:puppetca.pem
+    group   => root

Systemd::Unit[mcrouter]

Parameters differences:

--- Systemd::Unit[mcrouter].orig
+++ Systemd::Unit[mcrouter]

-    override          => True
-    ensure            => present
-    restart           => False
-    require           => ['Class[Systemd]']
-    override_filename => puppet-override.conf
-    unit              => mcrouter

File[/etc/zookeeper/conf/zoo.cfg]

Parameters differences:

--- File[/etc/zookeeper/conf/zoo.cfg].orig
+++ File[/etc/zookeeper/conf/zoo.cfg]

+    require => Package[zookeeper]
+    owner   => root
+    group   => root

Content differences:

--- /etc/zookeeper/conf/zoo.cfg.orig
+++ /etc/zookeeper/conf/zoo.cfg
@@ -0,0 +1,65 @@
+# Note: This file is managed by Puppet.
+
+# http://hadoop.apache.org/zookeeper/docs/current/zookeeperAdmin.html
+
+# https://zookeeper.apache.org/doc/r3.4.10/zookeeperAdmin.html#sc_zkCommands
+# T365400 Really we should check zk version >= 3.4.10 but for now just check os
+4lw.commands.whitelist=*
+
+# specify all zookeeper servers
+# The first port is used by followers to connect to the leader
+# The second one is used for leader election
+server.1006=cloudcontrol1006.private.eqiad.wikimedia.cloud:2182:2183
+server.1007=cloudcontrol1007.private.eqiad.wikimedia.cloud:2182:2183
+server.1011=cloudcontrol1011.private.eqiad.wikimedia.cloud:2182:2183
+
+# the port at which the clients will connect
+clientPort=2181
+
+# the directory where the snapshot is stored.
+dataDir=/var/lib/zookeeper
+
+# Place the dataLogDir to a separate physical disc for better performance
+# dataLogDir=/disk2/zookeeper
+
+
+# The maximum number of connections per IP, 0 == unlimited
+maxClientCnxns=1024
+
+# The number of milliseconds of each tick.
+tickTime=2000
+
+# The number of ticks that the initial
+# synchronization phase can take.
+initLimit=10
+
+# The number of ticks that can pass between
+# sending a request and getting an acknowledgement
+syncLimit=8
+
+# To avoid seeks ZooKeeper allocates space in the transaction log file in
+# blocks of preAllocSize kilobytes. The default block size is 64M. One reason
+# for changing the size of the blocks is to reduce the block size if snapshots
+# are taken more often. (Also, see snapCount).
+#preAllocSize=65536
+
+# Clients can submit requests faster than ZooKeeper can process them,
+# especially if there are a lot of clients. To prevent ZooKeeper from running
+# out of memory due to queued requests, ZooKeeper will throttle clients so that
+# there is no more than globalOutstandingLimit outstanding requests in the
+# system. The default limit is 1,000.ZooKeeper logs transactions to a
+# transaction log. After snapCount transactions are written to a log file a
+# snapshot is started and a new transaction log file is started. The default
+# snapCount is 10,000.
+#snapCount=1000
+
+# If this option is defined, requests will be will logged to a trace file named
+# traceFile.year.month.day.
+#traceFile=
+
+# Leader accepts client connections. Default value is "yes". The leader machine
+# coordinates updates. For higher update throughput at thes slight expense of
+# read throughput the leader can be configured to not accept clients and focus
+# on coordination.
+#leaderServes=yes
+

File[/etc/mcrouter/config.json]

Parameters differences:

--- File[/etc/mcrouter/config.json].orig
+++ File[/etc/mcrouter/config.json]

-    validate_cmd => /usr/bin/mcrouter --validate-config --port 11213 --route-prefix eqiad/designate --config file:%
-    owner        => root
-    group        => root
-    ensure       => present
-    require      => Package[mcrouter]
-    mode         => 0444

Content differences:

--- /etc/mcrouter/config.json.orig
+++ /etc/mcrouter/config.json
@@ -1,28 +0,0 @@
-{
-  "pools": {
-    "designate": {
-      "servers": [
-        "172.20.2.32:11211:ascii:plain",
-        "172.20.3.18:11211:ascii:plain",
-        "172.20.1.25:11211:ascii:plain"
-      ]
-    }
-  },
-  "routes": [
-    {
-      "aliases": [
-        "/eqiad/designate/"
-      ],
-      "route": {
-        "type": "OperationSelectorRoute",
-        "default_policy": "PoolRoute|designate",
-        "operation_policies": {
-          "add": "AllSyncRoute|Pool|designate",
-          "delete": "AllSyncRoute|Pool|designate",
-          "get": "LatestRoute|Pool|designate",
-          "set": "AllSyncRoute|Pool|designate"
-        }
-      }
-    }
-  ]
-}

File[/etc/zookeeper/conf/myid]

Parameters differences:

--- File[/etc/zookeeper/conf/myid].orig
+++ File[/etc/zookeeper/conf/myid]

+    owner => root
+    group => root

Content differences:

--- /etc/zookeeper/conf/myid.orig
+++ /etc/zookeeper/conf/myid
@@ -0,0 +1 @@
+1011

File[/etc/default/mcrouter]

Parameters differences:

--- File[/etc/default/mcrouter].orig
+++ File[/etc/default/mcrouter]

-    owner  => root
-    ensure => present
-    group  => root
-    mode   => 0444

Content differences:

--- /etc/default/mcrouter.orig
+++ /etc/default/mcrouter
@@ -1,13 +0,0 @@
-# Default settings for mcrouter.
-# This file is managed by Puppet.
-
-PORT="11213"
-ADDITIONAL_ARGS="--route-prefix=eqiad/designate \
---cross-region-timeout-ms=250 \
---cross-cluster-timeout-ms=1000 \
---send-invalid-route-to-default \
---file-observer-poll-period-ms=1000 \
---file-observer-sleep-before-update-ms=100 \
---num-proxies=1 \
---probe-timeout-initial=3000 \
-"

Java::Cacert[wmf:Wikimedia_Internal_Root_CA]

Parameters differences:

--- Java::Cacert[wmf:Wikimedia_Internal_Root_CA].orig
+++ Java::Cacert[wmf:Wikimedia_Internal_Root_CA]

+    owner     => root
+    group     => root
+    ensure    => present
+    path      => /usr/share/ca-certificates/wikimedia/Wikimedia_Internal_Root_CA.crt
+    storepass => changeit
+    require   => Alternatives::Java[21]

Java::Cacert[wmf:puppetca.pem]

Parameters differences:

--- Java::Cacert[wmf:puppetca.pem].orig
+++ Java::Cacert[wmf:puppetca.pem]

+    owner     => root
+    group     => root
+    ensure    => present
+    path      => /etc/ssl/certs/Puppet_Internal_CA.pem
+    storepass => changeit
+    require   => Alternatives::Java[21]

Class[Adduser]

Parameters differences:

--- Class[Adduser].orig
+++ Class[Adduser]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[mcrouter]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[zookeeper]', 'Package[zookeeperd]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-jmx-exporter]', 'Package[openjdk-21-jdk]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']

File[/etc/ferm/conf.d/10_zookeeper]

Parameters differences:

--- File[/etc/ferm/conf.d/10_zookeeper].orig
+++ File[/etc/ferm/conf.d/10_zookeeper]

+    owner   => root
+    group   => root
+    ensure  => present
+    notify  => Service[ferm]
+    require => File[/etc/ferm/conf.d]
+    tag     => ferm
+    mode    => 0400

Content differences:

--- /etc/ferm/conf.d/10_zookeeper.orig
+++ /etc/ferm/conf.d/10_zookeeper
@@ -0,0 +1,6 @@
+# Autogenerated by puppet. DO NOT EDIT BY HAND!
+#
+# 
+&R_SERVICE(tcp, (2181 2182 2183), (172.20.1.25 172.20.2.32 172.20.3.18 2a02:ec80:a000:201::25 2a02:ec80:a000:202::32 2a02:ec80:a000:203::18));
+
+

Systemd::Syslog[zookeeper-cleanup]

Parameters differences:

--- Systemd::Syslog[zookeeper-cleanup].orig
+++ Systemd::Syslog[zookeeper-cleanup]

+    owner                  => zookeeper
+    group                  => root
+    ensure                 => present
+    base_dir               => /var/log
+    log_filename           => syslog.log
+    programname_comparison => startswith
+    readable_by            => all
+    force_stop             => True

Exec[openstack-trixie-flamingo-apt-upgrade]

Parameters differences:

--- Exec[openstack-trixie-flamingo-apt-upgrade].orig
+++ Exec[openstack-trixie-flamingo-apt-upgrade]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[mcrouter]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[zookeeper]', 'Package[zookeeperd]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-jmx-exporter]', 'Package[openjdk-21-jdk]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']

Ferm::Service[mcrouter]

Parameters differences:

--- Ferm::Service[mcrouter].orig
+++ Ferm::Service[mcrouter]

-    proto               => tcp
-    ensure              => present
-    prio                => 10
-    desc                => Allow connections to mcrouter
-    port                => 11213
-    unrestricted_access => False
-    notrack             => True
-    srange              => ['cloudcontrol1006.private.eqiad.wikimedia.cloud', 'cloudcontrol1007.private.eqiad.wikimedia.cloud', 'cloudcontrol1011.private.eqiad.wikimedia.cloud']

Logrotate::Conf[zookeeper-cleanup]

Parameters differences:

--- Logrotate::Conf[zookeeper-cleanup].orig
+++ Logrotate::Conf[zookeeper-cleanup]

+    ensure => present

Class[Profile::Java]

Parameters differences:

--- Class[Profile::Java].orig
+++ Class[Profile::Java]

+    enable_dbg      => False
+    java_packages   => []
+    egd_source      => /dev/random
+    extra_args      => {}
+    trust_puppet_ca => True
+    hardened_tls    => False

Systemd::Unit[zookeeper-cleanup.timer]

Parameters differences:

--- Systemd::Unit[zookeeper-cleanup.timer].orig
+++ Systemd::Unit[zookeeper-cleanup.timer]

+    override          => False
+    ensure            => present
+    restart           => False
+    require           => ['Class[Systemd]']
+    override_filename => puppet-override.conf
+    unit              => zookeeper-cleanup.timer

File[/etc/prometheus]

Parameters differences:

--- File[/etc/prometheus].orig
+++ File[/etc/prometheus]

+    owner  => root
+    group  => root
+    ensure => directory
+    mode   => 0444

Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]

Parameters differences:

--- Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA].orig
+++ Exec[java__cacert_wmf:Wikimedia_Internal_Root_CA]

+    command => /usr/bin/keytool -import -trustcacerts -noprompt -cacerts     -file /usr/share/ca-certificates/wikimedia/Wikimedia_Internal_Root_CA.crt -storepass changeit -alias wmf:Wikimedia_Internal_Root_CA

+    user    => root
+    unless  => /usr/bin/keytool -list -cacerts -noprompt -storepass changeit -alias wmf:Wikimedia_Internal_Root_CA
+    group   => root

Logrotate::Conf[mcrouter]

Parameters differences:

--- Logrotate::Conf[mcrouter].orig
+++ Logrotate::Conf[mcrouter]

-    ensure => present

Firewall::Service[zookeeper]

Parameters differences:

--- Firewall::Service[zookeeper].orig
+++ Firewall::Service[zookeeper]

+    proto               => tcp
+    ensure              => present
+    prio                => 10
+    desc                => 
+    port                => [2181, 2182, 2183]
+    unrestricted_access => False
+    notrack             => False
+    srange              => ['cloudcontrol1006.private.eqiad.wikimedia.cloud', 'cloudcontrol1007.private.eqiad.wikimedia.cloud', 'cloudcontrol1011.private.eqiad.wikimedia.cloud']

Package[prometheus-jmx-exporter]

Parameters differences:

--- Package[prometheus-jmx-exporter].orig
+++ Package[prometheus-jmx-exporter]

+    provider => apt
+    ensure   => installed

Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]

Parameters differences:

--- Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)].orig
+++ Exec[systemd daemon-reload for zookeeper-cleanup.service (zookeeper-cleanup.service)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True

Class[Java]

Parameters differences:

--- Class[Java].orig
+++ Class[Java]

+    enable_dbg    => False
+    java_packages => [{'version': '21', 'variant': 'jdk'}]
+    egd_source    => /dev/random
+    before        => ['Java::Cacert[wmf:puppetca.pem]', 'Java::Cacert[wmf:Wikimedia_Internal_Root_CA]', 'Java::Cacert[wmf:puppetca.pem]', 'Java::Cacert[wmf:Wikimedia_Internal_Root_CA]']
+    require       => Package[wmf-certificates]
+    hardened_tls  => False

File[/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml]

Parameters differences:

--- File[/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml].orig
+++ File[/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml]

+    owner  => root
+    group  => root
+    ensure => present
+    links  => follow
+    mode   => 0444
+    source => puppet:///modules/profile/zookeeper/jvm_prometheus_jmx_exporter.yaml

Systemd::Timer[zookeeper-cleanup]

Parameters differences:

--- Systemd::Timer[zookeeper-cleanup].orig
+++ Systemd::Timer[zookeeper-cleanup]

+    ensure             => present
+    splay              => 0
+    accuracy           => 15sec
+    timer_intervals    => [{'start': 'OnCalendar', 'interval': '*-*-* 0:10:00'}]
+    fixed_random_delay => False
+    unit_name          => zookeeper-cleanup.service

Package[mcrouter]

Parameters differences:

--- Package[mcrouter].orig
+++ Package[mcrouter]

-    provider => apt
-    ensure   => installed

Alternatives::Java[21]

Parameters differences:

--- Alternatives::Java[21].orig
+++ Alternatives::Java[21]

+    require => Java::Package[openjdk-jdk-21]

File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in]

Parameters differences:

--- File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in].orig
+++ File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in]

-    owner   => root
-    group   => root
-    ensure  => present
-    notify  => Service[ferm]
-    require => File[/etc/ferm/conf.d]
-    tag     => ferm
-    mode    => 0400

Content differences:

--- /etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in.orig
+++ /etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_in
@@ -1,11 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-# 10_skip_mcrouter_designate_conntrack_in: Skip incoming connection tracking for mcrouter
-
-domain (ip ip6) {
-	table raw {
-		chain PREROUTING {
-			proto tcp dport (11213) NOTRACK;
-		}
-	}
-}

File[/etc/logrotate.d/zookeeper-cleanup]

Parameters differences:

--- File[/etc/logrotate.d/zookeeper-cleanup].orig
+++ File[/etc/logrotate.d/zookeeper-cleanup]

+    owner  => root
+    ensure => present
+    group  => root
+    mode   => 0444

Content differences:

--- /etc/logrotate.d/zookeeper-cleanup.orig
+++ /etc/logrotate.d/zookeeper-cleanup
@@ -0,0 +1,12 @@
+# logrotate(8) config for zookeeper-cleanup
+
+/var/log/zookeeper-cleanup/*.log {
+    daily
+    copytruncate
+    missingok
+    compress
+    delaycompress
+    notifempty
+    rotate 15
+    size 256M
+}

Systemd::Service[mcrouter]

Parameters differences:

--- Systemd::Service[mcrouter].orig
+++ Systemd::Service[mcrouter]

-    monitoring_contact_group => admins
-    ensure                   => present
-    monitoring_enabled       => False
-    unit_type                => service
-    monitoring_critical      => False
-    migration_task           => T407130
-    override                 => True
-    restart                  => False
-    service_params           => {}

Ferm::Rule[skip_mcrouter_designate_conntrack_out]

Parameters differences:

--- Ferm::Rule[skip_mcrouter_designate_conntrack_out].orig
+++ Ferm::Rule[skip_mcrouter_designate_conntrack_out]

-    rule   => proto tcp sport (11213) NOTRACK;
-    table  => raw
-    ensure => present
-    prio   => 10
-    desc   => Skip outgoing connection tracking for mcrouter
-    chain  => OUTPUT
-    domain => (ip ip6)

Class[Profile::Openstack::Base::Designate::Service]

Parameters differences:

--- Class[Profile::Openstack::Base::Designate::Service].orig
+++ Class[Profile::Openstack::Base::Designate::Service]

@@
-    tooz_backend           => mcrouter
+    tooz_backend           => zookeeper
@@
-    zookeeper_cluster_name => designate_eqiad1
+    zookeeper_cluster_name => openstack-eqiad1

Class[Zookeeper::Server]

Parameters differences:

--- Class[Zookeeper::Server].orig
+++ Class[Zookeeper::Server]

+    own_fqdn             => cloudcontrol1011.private.eqiad.wikimedia.cloud
+    log4j_template       => profile/zookeeper/log4j.properties.erb
+    java_opts            => -Xms1g -Xmx1g -javaagent:/usr/share/java/prometheus/jmx_prometheus_javaagent.jar=10.64.151.8:12181:/etc/prometheus/jvm_zookeeper_jmx_exporter.yaml
+    cleanup_timer_deploy => True
+    jmx_port             => 9998
+    cleanup_script       => /usr/share/zookeeper/bin/zkCleanup.sh
+    cleanup_script_args  => -n 10
+    default_template     => profile/zookeeper/zookeeper.default.erb
+    enable_tls           => False
+    java_home            => /usr/lib/jvm/java-21-openjdk-amd64

File[/etc/systemd/system/mcrouter.service.d/puppet-override.conf]

Parameters differences:

--- File[/etc/systemd/system/mcrouter.service.d/puppet-override.conf].orig
+++ File[/etc/systemd/system/mcrouter.service.d/puppet-override.conf]

-    owner  => root
-    group  => root
-    ensure => present
-    notify => Exec[systemd daemon-reload for mcrouter.service (mcrouter)]
-    mode   => 0444

Content differences:

--- /etc/systemd/system/mcrouter.service.d/puppet-override.conf.orig
+++ /etc/systemd/system/mcrouter.service.d/puppet-override.conf
@@ -1,4 +0,0 @@
-[Service]
-LimitNOFILE=64000
-User=mcrouter
-Nice=-19

Package[openjdk-21-jdk]

Parameters differences:

--- Package[openjdk-21-jdk].orig
+++ Package[openjdk-21-jdk]

+    provider => apt
+    ensure   => installed

Service[mcrouter]

Parameters differences:

--- Service[mcrouter].orig
+++ Service[mcrouter]

-    enable => True
-    ensure => running

File[/etc/designate/designate.conf]

Content differences:

--- /etc/designate/designate.conf.orig
+++ /etc/designate/designate.conf
@@ -291,7 +291,7 @@
 # Each designate host just talks to the local mcrouter instance; this instance
 # is part of a pool that includes the other designate hosts.
 #
-backend_url = memcached://localhost:11213
+backend_url = zookeeper://cloudcontrol1006.private.eqiad.wikimedia.cloud:2181?hosts=cloudcontrol1007.private.eqiad.wikimedia.cloud:2181,cloudcontrol1011.private.eqiad.wikimedia.cloud:2181
 
 [service:worker]
 #workers = None

File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out]

Parameters differences:

--- File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out].orig
+++ File[/etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out]

-    owner   => root
-    group   => root
-    ensure  => present
-    notify  => Service[ferm]
-    require => File[/etc/ferm/conf.d]
-    tag     => ferm
-    mode    => 0400

Content differences:

--- /etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out.orig
+++ /etc/ferm/conf.d/10_skip_mcrouter_designate_conntrack_out
@@ -1,11 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-# 10_skip_mcrouter_designate_conntrack_out: Skip outgoing connection tracking for mcrouter
-
-domain (ip ip6) {
-	table raw {
-		chain OUTPUT {
-			proto tcp sport (11213) NOTRACK;
-		}
-	}
-}

Class[Profile::Apt]

Parameters differences:

--- Class[Profile::Apt].orig
+++ Class[Profile::Apt]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[mcrouter]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[python3-novaclient]', 'Package[python3-glanceclient]', 'Package[python3-keystoneauth1]', 'Package[python3-keystoneclient]', 'Package[python3-openstackclient]', 'Package[python3-troveclient]', 'Package[python3-designateclient]', 'Package[python3-neutronclient]', 'Package[python3-osc-placement]', 'Package[python3-tenacity]', 'Package[patch]', 'Package[libapache2-mod-auth-openidc]', 'Package[apache2]', 'Package[links]', 'Package[keystone]', 'Package[alembic]', 'Package[ldapvi]', 'Package[python3-ldappool]', 'Package[python3-ldap3]', 'Package[ruby-net-ldap]', 'Package[python3-mwclient]', 'Package[libvirt-clients]', 'Package[python3-pytest]', 'Package[neutron-common]', 'Package[neutron-api]', 'Package[neutron-server]', 'Package[glance]', 'Package[placement-api]', 'Package[cinder-api]', 'Package[cinder-scheduler]', 'Package[cinder-volume]', 'Package[tgt]', 'Package[python3-trove]', 'Package[trove-common]', 'Package[trove-api]', 'Package[trove-taskmanager]', 'Package[trove-conductor]', 'Package[python3-sqlalchemy]', 'Package[designate-sink]', 'Package[designate-common]', 'Package[designate-mdns]', 'Package[designate]', 'Package[designate-api]', 'Package[designate-doc]', 'Package[designate-central]', 'Package[python3-git]', 'Package[zookeeper]', 'Package[zookeeperd]', 'Package[radosgw]', 'Package[ceph-common]', 'Package[fio]', 'Package[heat-api]', 'Package[heat-api-cfn]', 'Package[heat-engine]', 'Package[magnum-api]', 'Package[magnum-conductor]', 'Package[helm3]', 'Package[unzip]', 'Package[bridge-utils]', 'Package[nova-common]', 'Package[nova-conductor]', 'Package[nova-scheduler]', 'Package[nova-api]', 'Package[octavia-api]', 'Package[octavia-health-manager]', 'Package[octavia-housekeeping]', 'Package[octavia-worker]', 'Package[python3-octavia]', 'Package[python3-octaviaclient]', 'Package[ldap-utils]', 'Package[memcached]', 'Package[liburi-perl]', 'Package[mariadb-server]', 'Package[mariadb-backup]', 'Package[galera-4]', 'Package[python3-pymysql]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[vlan]', 'Package[prometheus-openstack-exporter]', 'Package[rsync]', 'Package[prometheus-jmx-exporter]', 'Package[openjdk-21-jdk]', 'Package[prometheus-memcached-exporter]', 'Package[prometheus-mysqld-exporter]', 'Package[bacula-fd]', 'Package[bacula-common]', 'Package[tofu]']

File[/var/lib/zookeeper/myid]

Parameters differences:

--- File[/var/lib/zookeeper/myid].orig
+++ File[/var/lib/zookeeper/myid]

+    owner  => root
+    ensure => link
+    group  => root
+    target => /etc/zookeeper/conf/myid

Systemd::Timer::Job[zookeeper-cleanup]

Parameters differences:

--- Systemd::Timer::Job[zookeeper-cleanup].orig
+++ Systemd::Timer::Job[zookeeper-cleanup]

+    syslog_match_startswith   => True
+    send_mail_only_on_error   => True
+    fixed_random_delay        => False
+    monitoring_contact_groups => admins
+    syslog_force_stop         => True
+    private_tmp               => False
+    send_mail                 => False
+    logfile_group             => root
+    success_exit_status       => []
+    command                   => /usr/share/zookeeper/bin/zkCleanup.sh -n 10
+    require                   => Service[zookeeper]
+    logfile_name              => syslog.log
+    logfile_perms             => all
+    environment               => {}
+    send_mail_to              => root@cloudcontrol1011.eqiad.wmnet
+    interval                  => {'start': 'OnCalendar', 'interval': '*-*-* 0:10:00'}
+    ensure                    => present
+    ignore_errors             => False
+    logging_enabled           => True
+    monitoring_enabled        => False
+    logfile_basedir           => /var/log
+    user                      => zookeeper
+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+    description               => Regular jobs for running the cleanup script

Exec[update_java_alternatives_21]

Parameters differences:

--- Exec[update_java_alternatives_21].orig
+++ Exec[update_java_alternatives_21]

+    command => /usr/sbin/update-java-alternatives -s /usr/lib/jvm/java-1.21.0-openjdk-amd64
+    unless  => /usr/bin/update-alternatives --query java | /bin/grep 'Value: /usr/lib/jvm/java-21-openjdk-amd64'

Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)].orig
+++ Exec[systemd daemon-reload for zookeeper-cleanup.timer (zookeeper-cleanup.timer)]

+    command     => /bin/systemctl daemon-reload
+    refreshonly => True
+    before      => ['Service[zookeeper-cleanup.timer]']

File[/etc/ferm/conf.d/10_mcrouter]

Parameters differences:

--- File[/etc/ferm/conf.d/10_mcrouter].orig
+++ File[/etc/ferm/conf.d/10_mcrouter]

-    owner   => root
-    group   => root
-    ensure  => present
-    notify  => Service[ferm]
-    require => File[/etc/ferm/conf.d]
-    tag     => ferm
-    mode    => 0400

Content differences:

--- /etc/ferm/conf.d/10_mcrouter.orig
+++ /etc/ferm/conf.d/10_mcrouter
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-# Allow connections to mcrouter
-&R_SERVICE(tcp, 11213, (172.20.1.25 172.20.2.32 172.20.3.18 2a02:ec80:a000:201::25 2a02:ec80:a000:202::32 2a02:ec80:a000:203::18));
-
-
-
-&NO_TRACK(tcp, 11213);

Systemd::Unit[zookeeper-cleanup.service]

Parameters differences:

--- Systemd::Unit[zookeeper-cleanup.service].orig
+++ Systemd::Unit[zookeeper-cleanup.service]

+    override          => False
+    ensure            => present
+    restart           => False
+    require           => ['Class[Systemd]']
+    override_filename => puppet-override.conf
+    unit              => zookeeper-cleanup.service

File[/etc/systemd/system/mcrouter.service.d]

Parameters differences:

--- File[/etc/systemd/system/mcrouter.service.d].orig
+++ File[/etc/systemd/system/mcrouter.service.d]

-    owner  => root
-    ensure => directory
-    group  => root
-    mode   => 0555

Compilation results for cloudcontrol1011.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources only in the old catalog

Resources modified

Relevant files