{"host": "relforge1008.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2893, "only_in_self": ["Class[Profile::Opensearch::Cirrus::Test]", "Class[Role::Cirrus::Test]", "Ferm::Service[opensearch_http_9200]", "Ferm::Service[opensearch_inter_node_9300]", "File[/etc/ferm/conf.d/10_opensearch_http_9200]", "File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]", "File[/etc/update-motd.d/05-cirrus--test]", "Firewall::Service[opensearch-http-9200]", "Firewall::Service[opensearch-inter-node-9300]", "Motd::Message[cirrus::test]", "Motd::Script[cirrus::test]"], "only_in_other": ["Class[Docker::Configuration]", "Class[Docker]", "Class[Profile::Docker::Engine]", "Class[Profile::Docker::Ferm]", "Class[Profile::Opensearch::Cirrus::Relforge]", "Class[Role::Cirrus::Relforge]", "Exec[/sbin/modprobe overlay]", "Exec[docker pull of docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 for relforge]", "Exec[systemd daemon-reload for relforge.service (relforge)]", "Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]", "Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]", "Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]", "Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]", "Ferm::Conf[docker-ferm]", "Ferm::Service[elastic_main_https_9243]", "Ferm::Service[elastic_small_alpha_https_9443]", "File[/etc/docker/daemon.json]", "File[/etc/docker]", "File[/etc/ferm/conf.d/10_elastic_main_https_9243]", "File[/etc/ferm/conf.d/10_elastic_small_alpha_https_9443]", "File[/etc/ferm/conf.d/20_docker-ferm]", "File[/etc/logrotate.d/wmf_auto_restart_containerd]", "File[/etc/logrotate.d/wmf_auto_restart_docker]", "File[/etc/modules-load.d/overlay.conf]", "File[/etc/relforge/config.yaml]", "File[/etc/relforge/env]", "File[/etc/relforge]", "File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]", "File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]", "File[/etc/update-motd.d/05-cirrus--relforge]", "File[/lib/systemd/system/relforge.service]", "File[/lib/systemd/system/wmf_auto_restart_containerd.service]", "File[/lib/systemd/system/wmf_auto_restart_containerd.timer]", "File[/lib/systemd/system/wmf_auto_restart_docker.service]", "File[/lib/systemd/system/wmf_auto_restart_docker.timer]", "File[/var/log/wmf_auto_restart_containerd]", "File[/var/log/wmf_auto_restart_docker]", "File_line[auto_restart_file_presence_containerd]", "File_line[auto_restart_file_presence_docker]", "Firewall::Service[elastic-main-https-9243]", "Firewall::Service[elastic-small-alpha-https-9443]", "Kmod::Module[overlay]", "Logrotate::Conf[wmf_auto_restart_containerd]", "Logrotate::Conf[wmf_auto_restart_docker]", "Motd::Message[cirrus::relforge]", "Motd::Script[cirrus::relforge]", "Package[apparmor]", "Package[docker.io]", "Profile::Auto_restarts::Service[containerd]", "Profile::Auto_restarts::Service[docker]", "Rsyslog::Conf[wmf_auto_restart_containerd]", "Rsyslog::Conf[wmf_auto_restart_docker]", "Service::Docker[relforge]", "Service[docker]", "Service[relforge]", "Service[wmf_auto_restart_containerd.timer]", "Service[wmf_auto_restart_docker.timer]", "Systemd::Service[relforge]", "Systemd::Service[wmf_auto_restart_containerd]", "Systemd::Service[wmf_auto_restart_docker]", "Systemd::Syslog[wmf_auto_restart_containerd]", "Systemd::Syslog[wmf_auto_restart_docker]", "Systemd::Timer::Job[wmf_auto_restart_containerd]", "Systemd::Timer::Job[wmf_auto_restart_docker]", "Systemd::Timer[wmf_auto_restart_containerd]", "Systemd::Timer[wmf_auto_restart_docker]", "Systemd::Unit[relforge]", "Systemd::Unit[wmf_auto_restart_containerd.service]", "Systemd::Unit[wmf_auto_restart_containerd.timer]", "Systemd::Unit[wmf_auto_restart_docker.service]", "Systemd::Unit[wmf_auto_restart_docker.timer]"], "resource_diffs": [{"resource": "Service::Docker[relforge]", "parameters": "--- Service::Docker[relforge].orig\n+++ Service::Docker[relforge]\n\n+    host_network => True\n+    volume       => False\n+    image_name   => opensearch\n+    port         => 9200\n+    config       => {}\n+    namespace    => repos/data-engineering\n+    environment  => {}\n+    version      => 2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2\n+    ensure       => present\n+    override_cmd => \n+    bind_mounts  => {}\n"}, {"resource": "Firewall::Service[elastic-small-alpha-https-9443]", "parameters": "--- Firewall::Service[elastic-small-alpha-https-9443].orig\n+++ Firewall::Service[elastic-small-alpha-https-9443]\n\n+    notrack             => False\n+    port                => 9443\n+    desc                => \n+    srange              => (10.64.16.154 2620:0:861:102:10:64:16:154 10.192.32.49 2620:0:860:103:10:192:32:49)\n+    prio                => 10\n+    ensure              => present\n+    proto               => tcp\n+    unrestricted_access => False\n"}, {"resource": "File[/etc/docker/daemon.json]", "content": "--- /etc/docker/daemon.json.orig\n+++ /etc/docker/daemon.json\n@@ -0,0 +1,3 @@\n+{\n+  \"storage-driver\": \"overlay2\"\n+}", "parameters": "--- File[/etc/docker/daemon.json].orig\n+++ File[/etc/docker/daemon.json]\n\n+    owner  => root\n+    ensure => present\n+    group  => root\n+    mode   => 0440\n"}, {"resource": "Class[Docker::Configuration]", "parameters": "--- Class[Docker::Configuration].orig\n+++ Class[Docker::Configuration]\n\n+    settings  => {'storage-driver': 'overlay2'}\n+    location  => /etc/docker/daemon.json\n+    directory => /etc/docker\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_docker.timer]", "parameters": "--- Systemd::Unit[wmf_auto_restart_docker.timer].orig\n+++ Systemd::Unit[wmf_auto_restart_docker.timer]\n\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    unit              => wmf_auto_restart_docker.timer\n+    ensure            => present\n+    restart           => False\n+    override          => False\n"}, {"resource": "Motd::Message[cirrus::relforge]", "parameters": "--- Motd::Message[cirrus::relforge].orig\n+++ Motd::Message[cirrus::relforge]\n\n+    priority => 5\n+    message  => relforge1008 is a OpenSearch relforge (cirrus::relforge)\n+    ensure   => present\n"}, {"resource": "File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]", "content": "--- /etc/ferm/conf.d/10_opensearch_inter_node_9300.orig\n+++ /etc/ferm/conf.d/10_opensearch_inter_node_9300\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 9300, (10.64.164.14 10.64.32.100 10.64.48.120 2620:0:861:103:10:64:32:100 2620:0:861:107:10:64:48:120 2620:0:861:12c:10:64:164:14));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_opensearch_inter_node_9300].orig\n+++ File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]\n\n-    owner   => root\n-    require => File[/etc/ferm/conf.d]\n-    ensure  => present\n-    notify  => Service[ferm]\n-    tag     => ferm\n-    group   => root\n-    mode    => 0400\n"}, {"resource": "Ferm::Service[opensearch_http_9200]", "parameters": "--- Ferm::Service[opensearch_http_9200].orig\n+++ Ferm::Service[opensearch_http_9200]\n\n-    src_sets            => ['ANALYTICS_NETWORKS']\n-    notrack             => False\n-    port                => [9200]\n-    desc                => \n-    prio                => 10\n-    ensure              => present\n-    proto               => tcp\n-    unrestricted_access => False\n"}, {"resource": "Class[Profile::Docker::Engine]", "parameters": "--- Class[Profile::Docker::Engine].orig\n+++ Class[Profile::Docker::Engine]\n\n+    settings        => {}\n+    declare_service => True\n+    packagename     => docker.io\n"}, {"resource": "Rsyslog::Conf[wmf_auto_restart_containerd]", "parameters": "--- Rsyslog::Conf[wmf_auto_restart_containerd].orig\n+++ Rsyslog::Conf[wmf_auto_restart_containerd]\n\n+    priority => 40\n+    require  => File[/var/log/wmf_auto_restart_containerd]\n+    ensure   => present\n+    mode     => 0444\n"}, {"resource": "Systemd::Timer[wmf_auto_restart_docker]", "parameters": "--- Systemd::Timer[wmf_auto_restart_docker].orig\n+++ Systemd::Timer[wmf_auto_restart_docker]\n\n+    splay              => 0\n+    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 6:45:00'}]\n+    fixed_random_delay => False\n+    ensure             => present\n+    unit_name          => wmf_auto_restart_docker.service\n+    accuracy           => 15sec\n"}, {"resource": "Ferm::Service[elastic_main_https_9243]", "parameters": "--- Ferm::Service[elastic_main_https_9243].orig\n+++ Ferm::Service[elastic_main_https_9243]\n\n+    notrack             => False\n+    port                => 9243\n+    desc                => \n+    srange              => (10.64.16.154 2620:0:861:102:10:64:16:154 10.192.32.49 2620:0:860:103:10:192:32:49)\n+    prio                => 10\n+    ensure              => present\n+    proto               => tcp\n+    unrestricted_access => False\n"}, {"resource": "Systemd::Syslog[wmf_auto_restart_docker]", "parameters": "--- Systemd::Syslog[wmf_auto_restart_docker].orig\n+++ Systemd::Syslog[wmf_auto_restart_docker]\n\n+    owner                  => root\n+    base_dir               => /var/log\n+    group                  => root\n+    log_filename           => syslog.log\n+    readable_by            => all\n+    programname_comparison => startswith\n+    ensure                 => present\n+    force_stop             => True\n"}, {"resource": "File[/etc/relforge]", "parameters": "--- File[/etc/relforge].orig\n+++ File[/etc/relforge]\n\n+    owner  => root\n+    mode   => 0755\n+    ensure => directory\n+    group  => root\n+    force  => True\n"}, {"resource": "Firewall::Service[opensearch-http-9200]", "parameters": "--- Firewall::Service[opensearch-http-9200].orig\n+++ Firewall::Service[opensearch-http-9200]\n\n-    src_sets            => ['ANALYTICS_NETWORKS']\n-    notrack             => False\n-    port                => [9200]\n-    desc                => \n-    prio                => 10\n-    ensure              => present\n-    proto               => tcp\n-    unrestricted_access => False\n"}, {"resource": "File[/etc/logrotate.d/wmf_auto_restart_containerd]", "content": "--- /etc/logrotate.d/wmf_auto_restart_containerd.orig\n+++ /etc/logrotate.d/wmf_auto_restart_containerd\n@@ -0,0 +1,12 @@\n+# logrotate(8) config for wmf_auto_restart_containerd\n+\n+/var/log/wmf_auto_restart_containerd/*.log {\n+    daily\n+    copytruncate\n+    missingok\n+    compress\n+    delaycompress\n+    notifempty\n+    rotate 15\n+    size 256M\n+}", "parameters": "--- File[/etc/logrotate.d/wmf_auto_restart_containerd].orig\n+++ File[/etc/logrotate.d/wmf_auto_restart_containerd]\n\n+    owner  => root\n+    ensure => present\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]\n\n+    before      => ['Service[wmf_auto_restart_docker.timer]']\n+    command     => /bin/systemctl daemon-reload\n+    refreshonly => True\n"}, {"resource": "Class[Profile::Base]", "parameters": "--- Class[Profile::Base].orig\n+++ Class[Profile::Base]\n\n@@\n-    overlayfs => False\n+    overlayfs => True\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[docker.io]', 'Package[apparmor]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "Motd::Script[cirrus::relforge]", "parameters": "--- Motd::Script[cirrus::relforge].orig\n+++ Motd::Script[cirrus::relforge]\n\n+    priority => 5\n+    ensure   => present\n"}, {"resource": "File[/etc/update-motd.d/05-cirrus--relforge]", "content": "--- /etc/update-motd.d/05-cirrus--relforge.orig\n+++ /etc/update-motd.d/05-cirrus--relforge\n@@ -0,0 +1,2 @@\n+#!/bin/sh\n+printf \"%s\\n\" \"relforge1008 is a OpenSearch relforge (cirrus::relforge)\"", "parameters": "--- File[/etc/update-motd.d/05-cirrus--relforge].orig\n+++ File[/etc/update-motd.d/05-cirrus--relforge]\n\n+    owner  => root\n+    ensure => present\n+    group  => root\n+    mode   => 0555\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]\n\n+    before      => ['Service[wmf_auto_restart_containerd.timer]']\n+    command     => /bin/systemctl daemon-reload\n+    refreshonly => True\n"}, {"resource": "Class[Profile::Opensearch::Cirrus::Relforge]", "parameters": "--- Class[Profile::Opensearch::Cirrus::Relforge].orig\n+++ Class[Profile::Opensearch::Cirrus::Relforge]\n\n+    image_vers    => 2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2\n+    require       => ['Class[Profile::Docker::Engine]', 'Class[Profile::Docker::Ferm]']\n+    image_name    => opensearch\n+    image_ns      => repos/data-engineering\n+    cumin_masters => ['10.64.16.154', '2620:0:861:102:10:64:16:154', '10.192.32.49', '2620:0:860:103:10:192:32:49']\n"}, {"resource": "Systemd::Unit[relforge]", "parameters": "--- Systemd::Unit[relforge].orig\n+++ Systemd::Unit[relforge]\n\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    unit              => relforge\n+    ensure            => present\n+    restart           => True\n+    override          => False\n"}, {"resource": "File[/etc/relforge/config.yaml]", "content": "--- /etc/relforge/config.yaml.orig\n+++ /etc/relforge/config.yaml\n@@ -0,0 +1 @@\n+--- {}", "parameters": "--- File[/etc/relforge/config.yaml].orig\n+++ File[/etc/relforge/config.yaml]\n\n+    owner  => root\n+    ensure => present\n+    notify => Service[relforge]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "File[/var/log/wmf_auto_restart_containerd]", "parameters": "--- File[/var/log/wmf_auto_restart_containerd].orig\n+++ File[/var/log/wmf_auto_restart_containerd]\n\n+    owner  => root\n+    mode   => 0755\n+    ensure => directory\n+    backup => False\n+    group  => root\n+    force  => True\n"}, {"resource": "Class[Profile::Monitoring]", "parameters": "--- Class[Profile::Monitoring].orig\n+++ Class[Profile::Monitoring]\n\n@@\n-    nrpe_check_disk_options => -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+    nrpe_check_disk_options => -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs\n"}, {"resource": "Service[wmf_auto_restart_docker.timer]", "parameters": "--- Service[wmf_auto_restart_docker.timer].orig\n+++ Service[wmf_auto_restart_docker.timer]\n\n+    provider => systemd\n+    enable   => True\n+    ensure   => running\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_docker.service]", "parameters": "--- Systemd::Unit[wmf_auto_restart_docker.service].orig\n+++ Systemd::Unit[wmf_auto_restart_docker.service]\n\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    unit              => wmf_auto_restart_docker.service\n+    ensure            => present\n+    restart           => False\n+    override          => False\n"}, {"resource": "Kmod::Blacklist[wmf_overlay]", "parameters": "--- Kmod::Blacklist[wmf_overlay].orig\n+++ Kmod::Blacklist[wmf_overlay]\n\n@@\n-    modules => ['overlayfs', 'overlay']\n+    modules => []\n@@\n-    ensure  => present\n+    ensure  => absent\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_containerd.timer]", "parameters": "--- Systemd::Unit[wmf_auto_restart_containerd.timer].orig\n+++ Systemd::Unit[wmf_auto_restart_containerd.timer]\n\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    unit              => wmf_auto_restart_containerd.timer\n+    ensure            => present\n+    restart           => False\n+    override          => False\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_docker.service]", "content": "--- /lib/systemd/system/wmf_auto_restart_docker.service.orig\n+++ /lib/systemd/system/wmf_auto_restart_docker.service\n@@ -0,0 +1,8 @@\n+[Unit]\n+Description=Auto restart job: docker\n+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+\n+[Service]\n+Type=oneshot\n+User=root\n+ExecStart=/usr/local/sbin/wmf-auto-restart -s docker", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_docker.service].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_docker.service]\n\n+    owner  => root\n+    ensure => present\n+    notify => Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "File[/etc/ferm/conf.d/10_opensearch_http_9200]", "content": "--- /etc/ferm/conf.d/10_opensearch_http_9200.orig\n+++ /etc/ferm/conf.d/10_opensearch_http_9200\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 9200, $ANALYTICS_NETWORKS);\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_opensearch_http_9200].orig\n+++ File[/etc/ferm/conf.d/10_opensearch_http_9200]\n\n-    owner   => root\n-    require => File[/etc/ferm/conf.d]\n-    ensure  => present\n-    notify  => Service[ferm]\n-    tag     => ferm\n-    group   => root\n-    mode    => 0400\n"}, {"resource": "Service[docker]", "parameters": "--- Service[docker].orig\n+++ Service[docker]\n\n+    ensure => running\n"}, {"resource": "Systemd::Service[wmf_auto_restart_docker]", "parameters": "--- Systemd::Service[wmf_auto_restart_docker].orig\n+++ Systemd::Service[wmf_auto_restart_docker]\n\n+    monitoring_enabled       => False\n+    service_params           => {}\n+    unit_type                => timer\n+    restart                  => False\n+    override                 => False\n+    monitoring_contact_group => admins\n+    require                  => Systemd::Unit[wmf_auto_restart_docker.service]\n+    ensure                   => present\n+    migration_task           => T407130\n+    monitoring_critical      => False\n"}, {"resource": "File[/etc/docker]", "parameters": "--- File[/etc/docker].orig\n+++ File[/etc/docker]\n\n+    owner  => root\n+    ensure => directory\n+    group  => root\n+    mode   => 0700\n"}, {"resource": "File[/etc/ferm/conf.d/20_docker-ferm]", "parameters": "--- File[/etc/ferm/conf.d/20_docker-ferm].orig\n+++ File[/etc/ferm/conf.d/20_docker-ferm]\n\n+    owner   => root\n+    source  => puppet:///modules/profile/docker/docker-ferm\n+    tag     => ferm\n+    group   => root\n+    require => File[/etc/ferm/conf.d]\n+    ensure  => present\n+    notify  => Service[ferm]\n+    mode    => 0400\n"}, {"resource": "File[/etc/update-motd.d/05-cirrus--test]", "content": "--- /etc/update-motd.d/05-cirrus--test.orig\n+++ /etc/update-motd.d/05-cirrus--test\n@@ -1,2 +0,0 @@\n-#!/bin/sh\n-printf \"%s\\n\" \"relforge1008 is a Unpuppetised system for testing (cirrus::test)\"", "parameters": "--- File[/etc/update-motd.d/05-cirrus--test].orig\n+++ File[/etc/update-motd.d/05-cirrus--test]\n\n-    owner  => root\n-    ensure => present\n-    group  => root\n-    mode   => 0555\n"}, {"resource": "Service[relforge]", "parameters": "--- Service[relforge].orig\n+++ Service[relforge]\n\n+    enable => True\n+    ensure => running\n"}, {"resource": "File[/var/log/wmf_auto_restart_docker]", "parameters": "--- File[/var/log/wmf_auto_restart_docker].orig\n+++ File[/var/log/wmf_auto_restart_docker]\n\n+    owner  => root\n+    mode   => 0755\n+    ensure => directory\n+    backup => False\n+    group  => root\n+    force  => True\n"}, {"resource": "File[/var/lib/prometheus/node.d/role_owner.prom]", "content": "--- /var/lib/prometheus/node.d/role_owner.prom.orig\n+++ /var/lib/prometheus/node.d/role_owner.prom\n@@ -1,3 +1,3 @@\n # HELP role_owner The team owner of the server role\n # TYPE role_owner gauge\n-role_owner{team=\"search-platform\",role=\"cirrus::test\",cluster=\"relforge\"} 1.0\n+role_owner{team=\"search-platform\",role=\"cirrus::relforge\",cluster=\"relforge\"} 1.0"}, {"resource": "Rsyslog::Conf[wmf_auto_restart_docker]", "parameters": "--- Rsyslog::Conf[wmf_auto_restart_docker].orig\n+++ Rsyslog::Conf[wmf_auto_restart_docker]\n\n+    priority => 40\n+    require  => File[/var/log/wmf_auto_restart_docker]\n+    ensure   => present\n+    mode     => 0444\n"}, {"resource": "Class[Docker]", "parameters": "--- Class[Docker].orig\n+++ Class[Docker]\n\n+    package_name => docker.io\n+    require      => ['Class[Docker::Configuration]']\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]\n\n+    command     => /bin/systemctl daemon-reload\n+    refreshonly => True\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_containerd.timer]", "content": "--- /lib/systemd/system/wmf_auto_restart_containerd.timer.orig\n+++ /lib/systemd/system/wmf_auto_restart_containerd.timer\n@@ -0,0 +1,12 @@\n+[Unit]\n+Description=Periodic execution of wmf_auto_restart_containerd.service\n+\n+[Timer]\n+Unit=wmf_auto_restart_containerd.service\n+# Accuracy sets the maximum time interval around the execution time we want to allow\n+AccuracySec=15sec\n+OnCalendar=Mon,Tue,Wed,Thu,Fri *-*-* 5:4:00\n+RandomizedDelaySec=0\n+\n+[Install]\n+WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_containerd.timer].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_containerd.timer]\n\n+    owner  => root\n+    ensure => present\n+    notify => Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_docker.timer]", "content": "--- /lib/systemd/system/wmf_auto_restart_docker.timer.orig\n+++ /lib/systemd/system/wmf_auto_restart_docker.timer\n@@ -0,0 +1,12 @@\n+[Unit]\n+Description=Periodic execution of wmf_auto_restart_docker.service\n+\n+[Timer]\n+Unit=wmf_auto_restart_docker.service\n+# Accuracy sets the maximum time interval around the execution time we want to allow\n+AccuracySec=15sec\n+OnCalendar=Mon,Tue,Wed,Thu,Fri *-*-* 6:45:00\n+RandomizedDelaySec=0\n+\n+[Install]\n+WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_docker.timer].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_docker.timer]\n\n+    owner  => root\n+    ensure => present\n+    notify => Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Concat_fragment[main contacts]", "content": "--- main contacts.orig\n+++ main contacts\n@@ -1,3 +1,3 @@\n ---\n-role::cirrus::test:\n+role::cirrus::relforge:\n - Search Platform"}, {"resource": "Nrpe::Check[check_disk_space]", "parameters": "--- Nrpe::Check[check_disk_space].orig\n+++ Nrpe::Check[check_disk_space]\n\n@@\n-    command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+    command => /usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_disk_space.cfg]", "content": "--- /etc/nagios/nrpe.d/check_disk_space.cfg.orig\n+++ /etc/nagios/nrpe.d/check_disk_space.cfg\n@@ -1,2 +1,2 @@\n # File generated by puppet. DO NOT edit by hand\n-command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs"}, {"resource": "Concat::Fragment[main contacts]"}, {"resource": "File_line[auto_restart_file_presence_docker]", "parameters": "--- File_line[auto_restart_file_presence_docker].orig\n+++ File_line[auto_restart_file_presence_docker]\n\n+    line    => docker\n+    path    => /etc/debdeploy-client/autorestarts.conf\n+    require => File[/etc/debdeploy-client/autorestarts.conf]\n+    ensure  => present\n"}, {"resource": "Systemd::Service[wmf_auto_restart_containerd]", "parameters": "--- Systemd::Service[wmf_auto_restart_containerd].orig\n+++ Systemd::Service[wmf_auto_restart_containerd]\n\n+    monitoring_enabled       => False\n+    service_params           => {}\n+    unit_type                => timer\n+    restart                  => False\n+    override                 => False\n+    monitoring_contact_group => admins\n+    require                  => Systemd::Unit[wmf_auto_restart_containerd.service]\n+    ensure                   => present\n+    migration_task           => T407130\n+    monitoring_critical      => False\n"}, {"resource": "File[/etc/ferm/conf.d/10_elastic_main_https_9243]", "content": "--- /etc/ferm/conf.d/10_elastic_main_https_9243.orig\n+++ /etc/ferm/conf.d/10_elastic_main_https_9243\n@@ -0,0 +1,6 @@\n+# Autogenerated by puppet. DO NOT EDIT BY HAND!\n+#\n+# \n+&R_SERVICE(tcp, 9243, (10.64.16.154 2620:0:861:102:10:64:16:154 10.192.32.49 2620:0:860:103:10:192:32:49));\n+\n+", "parameters": "--- File[/etc/ferm/conf.d/10_elastic_main_https_9243].orig\n+++ File[/etc/ferm/conf.d/10_elastic_main_https_9243]\n\n+    owner   => root\n+    require => File[/etc/ferm/conf.d]\n+    ensure  => present\n+    notify  => Service[ferm]\n+    tag     => ferm\n+    group   => root\n+    mode    => 0400\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_containerd.service]", "parameters": "--- Systemd::Unit[wmf_auto_restart_containerd.service].orig\n+++ Systemd::Unit[wmf_auto_restart_containerd.service]\n\n+    override_filename => puppet-override.conf\n+    require           => ['Class[Systemd]']\n+    unit              => wmf_auto_restart_containerd.service\n+    ensure            => present\n+    restart           => False\n+    override          => False\n"}, {"resource": "File[/etc/modprobe.d/blacklist-wmf_overlay.conf]", "content": "--- /etc/modprobe.d/blacklist-wmf_overlay.conf.orig\n+++ /etc/modprobe.d/blacklist-wmf_overlay.conf\n@@ -1,7 +1,3 @@\n # wmf_overlay - blacklisted kernel modules\n # This file is managed by Puppet\n #\n-blacklist overlay\n-install overlay /bin/true\n-blacklist overlayfs\n-install overlayfs /bin/true", "parameters": "--- File[/etc/modprobe.d/blacklist-wmf_overlay.conf].orig\n+++ File[/etc/modprobe.d/blacklist-wmf_overlay.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Logrotate::Conf[wmf_auto_restart_containerd]", "parameters": "--- Logrotate::Conf[wmf_auto_restart_containerd].orig\n+++ Logrotate::Conf[wmf_auto_restart_containerd]\n\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_containerd.service]", "content": "--- /lib/systemd/system/wmf_auto_restart_containerd.service.orig\n+++ /lib/systemd/system/wmf_auto_restart_containerd.service\n@@ -0,0 +1,8 @@\n+[Unit]\n+Description=Auto restart job: containerd\n+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+\n+[Service]\n+Type=oneshot\n+User=root\n+ExecStart=/usr/local/sbin/wmf-auto-restart -s containerd", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_containerd.service].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_containerd.service]\n\n+    owner  => root\n+    ensure => present\n+    notify => Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Ferm::Conf[docker-ferm]", "parameters": "--- Ferm::Conf[docker-ferm].orig\n+++ Ferm::Conf[docker-ferm]\n\n+    source => puppet:///modules/profile/docker/docker-ferm\n+    ensure => present\n+    prio   => 20\n"}, {"resource": "Ferm::Service[elastic_small_alpha_https_9443]", "parameters": "--- Ferm::Service[elastic_small_alpha_https_9443].orig\n+++ Ferm::Service[elastic_small_alpha_https_9443]\n\n+    notrack             => False\n+    port                => 9443\n+    desc                => \n+    srange              => (10.64.16.154 2620:0:861:102:10:64:16:154 10.192.32.49 2620:0:860:103:10:192:32:49)\n+    prio                => 10\n+    ensure              => present\n+    proto               => tcp\n+    unrestricted_access => False\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]\n\n+    command     => /bin/systemctl daemon-reload\n+    refreshonly => True\n"}, {"resource": "File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]", "content": "--- /etc/rsyslog.d/40-wmf-auto-restart-docker.conf.orig\n+++ /etc/rsyslog.d/40-wmf-auto-restart-docker.conf\n@@ -0,0 +1,10 @@\n+# rsyslog.conf(5) configuration file for services.\n+# This file is managed by Puppet.\n+if $programname startswith \"wmf_auto_restart_docker\" then {\n+    action(\n+        type=\"omfile\" file=\"/var/log/wmf_auto_restart_docker/syslog.log\"\n+        fileOwner=\"root\" fileGroup=\"root\"\n+        fileCreateMode=\"0644\"\n+    )\n+    & stop\n+}", "parameters": "--- File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf].orig\n+++ File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]\n\n+    owner  => root\n+    ensure => present\n+    notify => Service[rsyslog]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Motd::Script[cirrus::test]", "parameters": "--- Motd::Script[cirrus::test].orig\n+++ Motd::Script[cirrus::test]\n\n-    priority => 5\n-    ensure   => present\n"}, {"resource": "File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]", "content": "--- /etc/rsyslog.d/40-wmf-auto-restart-containerd.conf.orig\n+++ /etc/rsyslog.d/40-wmf-auto-restart-containerd.conf\n@@ -0,0 +1,10 @@\n+# rsyslog.conf(5) configuration file for services.\n+# This file is managed by Puppet.\n+if $programname startswith \"wmf_auto_restart_containerd\" then {\n+    action(\n+        type=\"omfile\" file=\"/var/log/wmf_auto_restart_containerd/syslog.log\"\n+        fileOwner=\"root\" fileGroup=\"root\"\n+        fileCreateMode=\"0644\"\n+    )\n+    & stop\n+}", "parameters": "--- File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf].orig\n+++ File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]\n\n+    owner  => root\n+    ensure => present\n+    notify => Service[rsyslog]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Motd::Message[cirrus::test]", "parameters": "--- Motd::Message[cirrus::test].orig\n+++ Motd::Message[cirrus::test]\n\n-    priority => 5\n-    message  => relforge1008 is a Unpuppetised system for testing (cirrus::test)\n-    ensure   => present\n"}, {"resource": "Firewall::Service[opensearch-inter-node-9300]", "parameters": "--- Firewall::Service[opensearch-inter-node-9300].orig\n+++ Firewall::Service[opensearch-inter-node-9300]\n\n-    notrack             => False\n-    port                => [9300]\n-    desc                => \n-    srange              => ['relforge1008.eqiad.wmnet', 'relforge1009.eqiad.wmnet', 'relforge1010.eqiad.wmnet']\n-    prio                => 10\n-    ensure              => present\n-    proto               => tcp\n-    unrestricted_access => False\n"}, {"resource": "Exec[systemd daemon-reload for relforge.service (relforge)]", "parameters": "--- Exec[systemd daemon-reload for relforge.service (relforge)].orig\n+++ Exec[systemd daemon-reload for relforge.service (relforge)]\n\n+    command     => /bin/systemctl daemon-reload\n+    refreshonly => True\n+    notify      => ['Service[relforge]']\n"}, {"resource": "Kmod::Module[overlay]", "parameters": "--- Kmod::Module[overlay].orig\n+++ Kmod::Module[overlay]\n\n+    ensure => present\n"}, {"resource": "Package[apparmor]", "parameters": "--- Package[apparmor].orig\n+++ Package[apparmor]\n\n+    provider => apt\n+    ensure   => installed\n"}, {"resource": "Profile::Auto_restarts::Service[containerd]", "parameters": "--- Profile::Auto_restarts::Service[containerd].orig\n+++ Profile::Auto_restarts::Service[containerd]\n\n+    ensure => present\n"}, {"resource": "Class[Base::Kernel]", "parameters": "--- Class[Base::Kernel].orig\n+++ Class[Base::Kernel]\n\n@@\n-    overlayfs => False\n+    overlayfs => True\n"}, {"resource": "File[/etc/modules-load.d/overlay.conf]", "content": "--- /etc/modules-load.d/overlay.conf.orig\n+++ /etc/modules-load.d/overlay.conf\n@@ -0,0 +1 @@\n+overlay", "parameters": "--- File[/etc/modules-load.d/overlay.conf].orig\n+++ File[/etc/modules-load.d/overlay.conf]\n\n+    owner  => root\n+    ensure => present\n+    notify => Exec[/sbin/modprobe overlay]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Systemd::Syslog[wmf_auto_restart_containerd]", "parameters": "--- Systemd::Syslog[wmf_auto_restart_containerd].orig\n+++ Systemd::Syslog[wmf_auto_restart_containerd]\n\n+    owner                  => root\n+    base_dir               => /var/log\n+    group                  => root\n+    log_filename           => syslog.log\n+    readable_by            => all\n+    programname_comparison => startswith\n+    ensure                 => present\n+    force_stop             => True\n"}, {"resource": "Package[docker.io]", "parameters": "--- Package[docker.io].orig\n+++ Package[docker.io]\n\n+    provider => apt\n+    ensure   => installed\n"}, {"resource": "File[/etc/ferm/conf.d/10_elastic_small_alpha_https_9443]", "content": "--- /etc/ferm/conf.d/10_elastic_small_alpha_https_9443.orig\n+++ /etc/ferm/conf.d/10_elastic_small_alpha_https_9443\n@@ -0,0 +1,6 @@\n+# Autogenerated by puppet. DO NOT EDIT BY HAND!\n+#\n+# \n+&R_SERVICE(tcp, 9443, (10.64.16.154 2620:0:861:102:10:64:16:154 10.192.32.49 2620:0:860:103:10:192:32:49));\n+\n+", "parameters": "--- File[/etc/ferm/conf.d/10_elastic_small_alpha_https_9443].orig\n+++ File[/etc/ferm/conf.d/10_elastic_small_alpha_https_9443]\n\n+    owner   => root\n+    require => File[/etc/ferm/conf.d]\n+    ensure  => present\n+    notify  => Service[ferm]\n+    tag     => ferm\n+    group   => root\n+    mode    => 0400\n"}, {"resource": "Systemd::Timer[wmf_auto_restart_containerd]", "parameters": "--- Systemd::Timer[wmf_auto_restart_containerd].orig\n+++ Systemd::Timer[wmf_auto_restart_containerd]\n\n+    splay              => 0\n+    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 5:4:00'}]\n+    fixed_random_delay => False\n+    ensure             => present\n+    unit_name          => wmf_auto_restart_containerd.service\n+    accuracy           => 15sec\n"}, {"resource": "Systemd::Timer::Job[wmf_auto_restart_docker]", "parameters": "--- Systemd::Timer::Job[wmf_auto_restart_docker].orig\n+++ Systemd::Timer::Job[wmf_auto_restart_docker]\n\n+    monitoring_enabled        => False\n+    user                      => root\n+    interval                  => {'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 6:45:00'}\n+    logfile_basedir           => /var/log\n+    private_tmp               => False\n+    logfile_group             => root\n+    logfile_perms             => all\n+    ensure                    => present\n+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    syslog_match_startswith   => True\n+    monitoring_contact_groups => admins\n+    syslog_force_stop         => True\n+    logging_enabled           => True\n+    send_mail                 => False\n+    environment               => {}\n+    description               => Auto restart job: docker\n+    logfile_name              => syslog.log\n+    require                   => File[/usr/local/sbin/wmf-auto-restart]\n+    fixed_random_delay        => False\n+    success_exit_status       => []\n+    command                   => /usr/local/sbin/wmf-auto-restart -s docker\n+    send_mail_to              => root@relforge1008.eqiad.wmnet\n+    send_mail_only_on_error   => True\n+    ignore_errors             => False\n"}, {"resource": "Firewall::Service[elastic-main-https-9243]", "parameters": "--- Firewall::Service[elastic-main-https-9243].orig\n+++ Firewall::Service[elastic-main-https-9243]\n\n+    notrack             => False\n+    port                => 9243\n+    desc                => \n+    srange              => (10.64.16.154 2620:0:861:102:10:64:16:154 10.192.32.49 2620:0:860:103:10:192:32:49)\n+    prio                => 10\n+    ensure              => present\n+    proto               => tcp\n+    unrestricted_access => False\n"}, {"resource": "Ferm::Service[opensearch_inter_node_9300]", "parameters": "--- Ferm::Service[opensearch_inter_node_9300].orig\n+++ Ferm::Service[opensearch_inter_node_9300]\n\n-    notrack             => False\n-    port                => [9300]\n-    desc                => \n-    srange              => ['relforge1008.eqiad.wmnet', 'relforge1009.eqiad.wmnet', 'relforge1010.eqiad.wmnet']\n-    prio                => 10\n-    ensure              => present\n-    proto               => tcp\n-    unrestricted_access => False\n"}, {"resource": "Systemd::Timer::Job[wmf_auto_restart_containerd]", "parameters": "--- Systemd::Timer::Job[wmf_auto_restart_containerd].orig\n+++ Systemd::Timer::Job[wmf_auto_restart_containerd]\n\n+    monitoring_enabled        => False\n+    user                      => root\n+    interval                  => {'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 5:4:00'}\n+    logfile_basedir           => /var/log\n+    private_tmp               => False\n+    logfile_group             => root\n+    logfile_perms             => all\n+    ensure                    => present\n+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    syslog_match_startswith   => True\n+    monitoring_contact_groups => admins\n+    syslog_force_stop         => True\n+    logging_enabled           => True\n+    send_mail                 => False\n+    environment               => {}\n+    description               => Auto restart job: containerd\n+    logfile_name              => syslog.log\n+    require                   => File[/usr/local/sbin/wmf-auto-restart]\n+    fixed_random_delay        => False\n+    success_exit_status       => []\n+    command                   => /usr/local/sbin/wmf-auto-restart -s containerd\n+    send_mail_to              => root@relforge1008.eqiad.wmnet\n+    send_mail_only_on_error   => True\n+    ignore_errors             => False\n"}, {"resource": "Profile::Auto_restarts::Service[docker]", "parameters": "--- Profile::Auto_restarts::Service[docker].orig\n+++ Profile::Auto_restarts::Service[docker]\n\n+    ensure => present\n"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[docker.io]', 'Package[apparmor]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "File[/etc/logrotate.d/wmf_auto_restart_docker]", "content": "--- /etc/logrotate.d/wmf_auto_restart_docker.orig\n+++ /etc/logrotate.d/wmf_auto_restart_docker\n@@ -0,0 +1,12 @@\n+# logrotate(8) config for wmf_auto_restart_docker\n+\n+/var/log/wmf_auto_restart_docker/*.log {\n+    daily\n+    copytruncate\n+    missingok\n+    compress\n+    delaycompress\n+    notifempty\n+    rotate 15\n+    size 256M\n+}", "parameters": "--- File[/etc/logrotate.d/wmf_auto_restart_docker].orig\n+++ File[/etc/logrotate.d/wmf_auto_restart_docker]\n\n+    owner  => root\n+    ensure => present\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Service[wmf_auto_restart_containerd.timer]", "parameters": "--- Service[wmf_auto_restart_containerd.timer].orig\n+++ Service[wmf_auto_restart_containerd.timer]\n\n+    provider => systemd\n+    enable   => True\n+    ensure   => running\n"}, {"resource": "Exec[/sbin/modprobe overlay]", "parameters": "--- Exec[/sbin/modprobe overlay].orig\n+++ Exec[/sbin/modprobe overlay]\n\n+    unless      => /bin/lsmod | /bin/grep -q '^overlay '\n+    refreshonly => True\n"}, {"resource": "File[/lib/systemd/system/relforge.service]", "content": "--- /lib/systemd/system/relforge.service.orig\n+++ /lib/systemd/system/relforge.service\n@@ -0,0 +1,20 @@\n+\n+[Unit]\n+Description=Systemd runner for relforge\n+After=docker.service\n+BindsTo=docker.service\n+\n+[Service]\n+ExecStartPre=-/usr/bin/docker stop %n\n+ExecStartPre=-/usr/bin/docker rm %n\n+ExecStart=/usr/bin/docker run --rm=true  --env-file /etc/relforge/env --network host -v /etc/relforge/:/etc/relforge --name %n docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 \n+Restart=always\n+RestartSec=10s\n+NotifyAccess=all\n+# Let docker do its things on its own terms\n+TimeoutStartSec=120\n+TimeoutStopSec=15\n+SyslogIdentifier=docker-relforge\n+\n+[Install]\n+WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/relforge.service].orig\n+++ File[/lib/systemd/system/relforge.service]\n\n+    owner  => root\n+    ensure => present\n+    notify => Exec[systemd daemon-reload for relforge.service (relforge)]\n+    group  => root\n+    mode   => 0444\n"}, {"resource": "Systemd::Service[relforge]", "parameters": "--- Systemd::Service[relforge].orig\n+++ Systemd::Service[relforge]\n\n+    monitoring_enabled       => False\n+    service_params           => {}\n+    unit_type                => service\n+    restart                  => True\n+    override                 => False\n+    monitoring_contact_group => admins\n+    ensure                   => present\n+    migration_task           => T407130\n+    monitoring_critical      => False\n"}, {"resource": "File[/etc/relforge/env]", "parameters": "--- File[/etc/relforge/env].orig\n+++ File[/etc/relforge/env]\n\n+    owner     => root\n+    show_diff => False\n+    ensure    => present\n+    notify    => Service[relforge]\n+    group     => root\n+    mode      => 0440\n"}, {"resource": "Class[Profile::Base::Production]", "parameters": "--- Class[Profile::Base::Production].orig\n+++ Class[Profile::Base::Production]\n\n@@\n-    role_description => Unpuppetised system for testing\n+    role_description => OpenSearch relforge\n"}, {"resource": "Exec[docker pull of docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 for relforge]", "parameters": "--- Exec[docker pull of docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 for relforge].orig\n+++ Exec[docker pull of docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 for relforge]\n\n+    unless  => /usr/bin/docker pull 'docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2' | grep -q 'up to date'\n+    command => /usr/bin/true\n+    notify  => Service[relforge]\n"}, {"resource": "Nrpe::Monitor_service[disk_space]", "parameters": "--- Nrpe::Monitor_service[disk_space].orig\n+++ Nrpe::Monitor_service[disk_space]\n\n@@\n-    nrpe_command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+    nrpe_command => /usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs\n"}, {"resource": "Logrotate::Conf[wmf_auto_restart_docker]", "parameters": "--- Logrotate::Conf[wmf_auto_restart_docker].orig\n+++ Logrotate::Conf[wmf_auto_restart_docker]\n\n+    ensure => present\n"}, {"resource": "File_line[auto_restart_file_presence_containerd]", "parameters": "--- File_line[auto_restart_file_presence_containerd].orig\n+++ File_line[auto_restart_file_presence_containerd]\n\n+    line    => containerd\n+    path    => /etc/debdeploy-client/autorestarts.conf\n+    require => File[/etc/debdeploy-client/autorestarts.conf]\n+    ensure  => present\n"}], "perc_changed": "6.01%"}, "core": {"total": 2893, "only_in_self": ["File[/etc/ferm/conf.d/10_opensearch_http_9200]", "File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]", "File[/etc/update-motd.d/05-cirrus--test]"], "only_in_other": ["Exec[/sbin/modprobe overlay]", "Exec[docker pull of docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 for relforge]", "Exec[systemd daemon-reload for relforge.service (relforge)]", "Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]", "Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]", "Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]", "Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]", "File[/etc/docker/daemon.json]", "File[/etc/docker]", "File[/etc/ferm/conf.d/10_elastic_main_https_9243]", "File[/etc/ferm/conf.d/10_elastic_small_alpha_https_9443]", "File[/etc/ferm/conf.d/20_docker-ferm]", "File[/etc/logrotate.d/wmf_auto_restart_containerd]", "File[/etc/logrotate.d/wmf_auto_restart_docker]", "File[/etc/modules-load.d/overlay.conf]", "File[/etc/relforge/config.yaml]", "File[/etc/relforge/env]", "File[/etc/relforge]", "File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]", "File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]", "File[/etc/update-motd.d/05-cirrus--relforge]", "File[/lib/systemd/system/relforge.service]", "File[/lib/systemd/system/wmf_auto_restart_containerd.service]", "File[/lib/systemd/system/wmf_auto_restart_containerd.timer]", "File[/lib/systemd/system/wmf_auto_restart_docker.service]", "File[/lib/systemd/system/wmf_auto_restart_docker.timer]", "File[/var/log/wmf_auto_restart_containerd]", "File[/var/log/wmf_auto_restart_docker]", "File_line[auto_restart_file_presence_containerd]", "File_line[auto_restart_file_presence_docker]", "Package[apparmor]", "Package[docker.io]", "Service[docker]", "Service[relforge]", "Service[wmf_auto_restart_containerd.timer]", "Service[wmf_auto_restart_docker.timer]"], "resource_diffs": [{"resource": "Concat_fragment[main contacts]", "content": "--- main contacts.orig\n+++ main contacts\n@@ -1,3 +1,3 @@\n ---\n-role::cirrus::test:\n+role::cirrus::relforge:\n - Search Platform"}, {"resource": "File[/etc/nagios/nrpe.d/check_disk_space.cfg]", "content": "--- /etc/nagios/nrpe.d/check_disk_space.cfg.orig\n+++ /etc/nagios/nrpe.d/check_disk_space.cfg\n@@ -1,2 +1,2 @@\n # File generated by puppet. DO NOT edit by hand\n-command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs"}, {"resource": "File[/etc/modprobe.d/blacklist-wmf_overlay.conf]", "content": "--- /etc/modprobe.d/blacklist-wmf_overlay.conf.orig\n+++ /etc/modprobe.d/blacklist-wmf_overlay.conf\n@@ -1,7 +1,3 @@\n # wmf_overlay - blacklisted kernel modules\n # This file is managed by Puppet\n #\n-blacklist overlay\n-install overlay /bin/true\n-blacklist overlayfs\n-install overlayfs /bin/true", "parameters": "--- File[/etc/modprobe.d/blacklist-wmf_overlay.conf].orig\n+++ File[/etc/modprobe.d/blacklist-wmf_overlay.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/lib/prometheus/node.d/role_owner.prom]", "content": "--- /var/lib/prometheus/node.d/role_owner.prom.orig\n+++ /var/lib/prometheus/node.d/role_owner.prom\n@@ -1,3 +1,3 @@\n # HELP role_owner The team owner of the server role\n # TYPE role_owner gauge\n-role_owner{team=\"search-platform\",role=\"cirrus::test\",cluster=\"relforge\"} 1.0\n+role_owner{team=\"search-platform\",role=\"cirrus::relforge\",cluster=\"relforge\"} 1.0"}], "perc_changed": "1.49%"}, "main": {"total": 2893, "only_in_self": ["Class[Profile::Opensearch::Cirrus::Test]", "Class[Role::Cirrus::Test]", "Ferm::Service[opensearch_http_9200]", "Ferm::Service[opensearch_inter_node_9300]", "File[/etc/ferm/conf.d/10_opensearch_http_9200]", "File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]", "File[/etc/update-motd.d/05-cirrus--test]", "Firewall::Service[opensearch-http-9200]", "Firewall::Service[opensearch-inter-node-9300]", "Motd::Message[cirrus::test]", "Motd::Script[cirrus::test]"], "only_in_other": ["Class[Docker::Configuration]", "Class[Docker]", "Class[Profile::Docker::Engine]", "Class[Profile::Docker::Ferm]", "Class[Profile::Opensearch::Cirrus::Relforge]", "Class[Role::Cirrus::Relforge]", "Exec[/sbin/modprobe overlay]", "Exec[docker pull of docker-registry.wikimedia.org/repos/data-engineering/opensearch:2026-05-13-143357-2b2e022d3e2756b0dbd31d66e341a587f5d3b8d7-production2 for relforge]", "Exec[systemd daemon-reload for relforge.service (relforge)]", "Exec[systemd daemon-reload for wmf_auto_restart_containerd.service (wmf_auto_restart_containerd.service)]", "Exec[systemd daemon-reload for wmf_auto_restart_containerd.timer (wmf_auto_restart_containerd.timer)]", "Exec[systemd daemon-reload for wmf_auto_restart_docker.service (wmf_auto_restart_docker.service)]", "Exec[systemd daemon-reload for wmf_auto_restart_docker.timer (wmf_auto_restart_docker.timer)]", "Ferm::Conf[docker-ferm]", "Ferm::Service[elastic_main_https_9243]", "Ferm::Service[elastic_small_alpha_https_9443]", "File[/etc/docker/daemon.json]", "File[/etc/docker]", "File[/etc/ferm/conf.d/10_elastic_main_https_9243]", "File[/etc/ferm/conf.d/10_elastic_small_alpha_https_9443]", "File[/etc/ferm/conf.d/20_docker-ferm]", "File[/etc/logrotate.d/wmf_auto_restart_containerd]", "File[/etc/logrotate.d/wmf_auto_restart_docker]", "File[/etc/modules-load.d/overlay.conf]", "File[/etc/relforge/config.yaml]", "File[/etc/relforge/env]", "File[/etc/relforge]", "File[/etc/rsyslog.d/40-wmf-auto-restart-containerd.conf]", "File[/etc/rsyslog.d/40-wmf-auto-restart-docker.conf]", "File[/etc/update-motd.d/05-cirrus--relforge]", "File[/lib/systemd/system/relforge.service]", "File[/lib/systemd/system/wmf_auto_restart_containerd.service]", "File[/lib/systemd/system/wmf_auto_restart_containerd.timer]", "File[/lib/systemd/system/wmf_auto_restart_docker.service]", "File[/lib/systemd/system/wmf_auto_restart_docker.timer]", "File[/var/log/wmf_auto_restart_containerd]", "File[/var/log/wmf_auto_restart_docker]", "File_line[auto_restart_file_presence_containerd]", "File_line[auto_restart_file_presence_docker]", "Firewall::Service[elastic-main-https-9243]", "Firewall::Service[elastic-small-alpha-https-9443]", "Kmod::Module[overlay]", "Logrotate::Conf[wmf_auto_restart_containerd]", "Logrotate::Conf[wmf_auto_restart_docker]", "Motd::Message[cirrus::relforge]", "Motd::Script[cirrus::relforge]", "Package[apparmor]", "Package[docker.io]", "Profile::Auto_restarts::Service[containerd]", "Profile::Auto_restarts::Service[docker]", "Rsyslog::Conf[wmf_auto_restart_containerd]", "Rsyslog::Conf[wmf_auto_restart_docker]", "Service::Docker[relforge]", "Service[docker]", "Service[relforge]", "Service[wmf_auto_restart_containerd.timer]", "Service[wmf_auto_restart_docker.timer]", "Systemd::Service[relforge]", "Systemd::Service[wmf_auto_restart_containerd]", "Systemd::Service[wmf_auto_restart_docker]", "Systemd::Syslog[wmf_auto_restart_containerd]", "Systemd::Syslog[wmf_auto_restart_docker]", "Systemd::Timer::Job[wmf_auto_restart_containerd]", "Systemd::Timer::Job[wmf_auto_restart_docker]", "Systemd::Timer[wmf_auto_restart_containerd]", "Systemd::Timer[wmf_auto_restart_docker]", "Systemd::Unit[relforge]", "Systemd::Unit[wmf_auto_restart_containerd.service]", "Systemd::Unit[wmf_auto_restart_containerd.timer]", "Systemd::Unit[wmf_auto_restart_docker.service]", "Systemd::Unit[wmf_auto_restart_docker.timer]"], "resource_diffs": [{"resource": "Concat_fragment[main contacts]", "content": "--- main contacts.orig\n+++ main contacts\n@@ -1,3 +1,3 @@\n ---\n-role::cirrus::test:\n+role::cirrus::relforge:\n - Search Platform"}, {"resource": "Nrpe::Check[check_disk_space]", "parameters": "--- Nrpe::Check[check_disk_space].orig\n+++ Nrpe::Check[check_disk_space]\n\n@@\n-    command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+    command => /usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_disk_space.cfg]", "content": "--- /etc/nagios/nrpe.d/check_disk_space.cfg.orig\n+++ /etc/nagios/nrpe.d/check_disk_space.cfg\n@@ -1,2 +1,2 @@\n # File generated by puppet. DO NOT edit by hand\n-command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs"}, {"resource": "Concat::Fragment[main contacts]"}, {"resource": "File[/etc/modprobe.d/blacklist-wmf_overlay.conf]", "content": "--- /etc/modprobe.d/blacklist-wmf_overlay.conf.orig\n+++ /etc/modprobe.d/blacklist-wmf_overlay.conf\n@@ -1,7 +1,3 @@\n # wmf_overlay - blacklisted kernel modules\n # This file is managed by Puppet\n #\n-blacklist overlay\n-install overlay /bin/true\n-blacklist overlayfs\n-install overlayfs /bin/true", "parameters": "--- File[/etc/modprobe.d/blacklist-wmf_overlay.conf].orig\n+++ File[/etc/modprobe.d/blacklist-wmf_overlay.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Class[Profile::Base]", "parameters": "--- Class[Profile::Base].orig\n+++ Class[Profile::Base]\n\n@@\n-    overlayfs => False\n+    overlayfs => True\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[docker.io]', 'Package[apparmor]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "Class[Base::Kernel]", "parameters": "--- Class[Base::Kernel].orig\n+++ Class[Base::Kernel]\n\n@@\n-    overlayfs => False\n+    overlayfs => True\n"}, {"resource": "Class[Profile::Monitoring]", "parameters": "--- Class[Profile::Monitoring].orig\n+++ Class[Profile::Monitoring]\n\n@@\n-    nrpe_check_disk_options => -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+    nrpe_check_disk_options => -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs\n"}, {"resource": "Kmod::Blacklist[wmf_overlay]", "parameters": "--- Kmod::Blacklist[wmf_overlay].orig\n+++ Kmod::Blacklist[wmf_overlay]\n\n@@\n-    modules => ['overlayfs', 'overlay']\n+    modules => []\n@@\n-    ensure  => present\n+    ensure  => absent\n"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[docker.io]', 'Package[apparmor]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "File[/var/lib/prometheus/node.d/role_owner.prom]", "content": "--- /var/lib/prometheus/node.d/role_owner.prom.orig\n+++ /var/lib/prometheus/node.d/role_owner.prom\n@@ -1,3 +1,3 @@\n # HELP role_owner The team owner of the server role\n # TYPE role_owner gauge\n-role_owner{team=\"search-platform\",role=\"cirrus::test\",cluster=\"relforge\"} 1.0\n+role_owner{team=\"search-platform\",role=\"cirrus::relforge\",cluster=\"relforge\"} 1.0"}, {"resource": "Class[Profile::Base::Production]", "parameters": "--- Class[Profile::Base::Production].orig\n+++ Class[Profile::Base::Production]\n\n@@\n-    role_description => Unpuppetised system for testing\n+    role_description => OpenSearch relforge\n"}, {"resource": "Nrpe::Monitor_service[disk_space]", "parameters": "--- Nrpe::Monitor_service[disk_space].orig\n+++ Nrpe::Monitor_service[disk_space]\n\n@@\n-    nrpe_command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" -i \"/srv/nvme[0-9]n[0-9]p[0-9]\" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs\n+    nrpe_command => /usr/lib/nagios/plugins/check_disk -w 15% -c 10% -W 6% -K 3% -l -e -A -i \"/srv/sd[a-b][1-3]\" --exclude-type=tracefs\n"}], "perc_changed": "3.32%"}}}