Compilation results for dse-k8s-wdqs-test1001.eqiad.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 2862 |
|---|---|
| Resources added: | 435 |
| Resources removed: | 4 |
| Resources modified: | 29 |
| Change percentage: | 16.35% |
Resources only in the new catalog
- Exec[disable-rp-filter-ens2f0np0]
- Exec[systemd daemon-reload for rsyslog-imfile-remedy.timer (rsyslog-imfile-remedy.timer)]
- Exec[Generate cert dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet]
- Systemd::Unit[rsyslog-imfile-remedy.service]
- Class[Profile::Kubernetes::Node::Dse_k8s]
- Rsyslog::Conf[kubernetes-node-filters]
- Exec[create chained cert /etc/kubernetes/pki/dse__kubelet_server.chain.pem]
- Concat_fragment[component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia-header]
- Nrpe::Monitor_service[check_tcp-mss-clamper_status]
- Apt::Pin[apt_pin_linux-6.12-bookworm_bookworm-bpo]
- Systemd::Syslog[set-rbd-readahead]
- Exec[apt_repository_component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Class[Calico]
- Lvm::Physical_volume[/dev/md1]
- Concat[/etc/apt/sources.list.d/component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia.sources]
- File[/lib/systemd/system/rsyslog-imfile-remedy.service]
- Package[mmdb-bin]
- Service[cpufrequtils]
- Apt::Repository[component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- File[/etc/cfssl/ssl/dse__rsyslog/dse__rsyslog.chained.pem]
- Rsyslog::Conf[output_kafka_k8s]
- Ferm::Rule[ipip]
- Service[prometheus_lvs_realserver_mss.timer]
- Exec[Generate cert dse__calico-cni]
- Interface::Ipip[ipip_ipv4]
- File[/etc/kubernetes/pki/dse__kubelet_server.chained.pem]
- File[/etc/nerdctl/nerdctl.toml]
- File[/etc/kubernetes/pki/dse__istio-cni.chained.pem]
- Exec[ip link add name ipip0 type ipip external]
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Systemd::Unit[rsyslog-imfile-remedy.timer]
- Lvm::Logical_volume[srv]
- Systemd::Service[prometheus_lvs_realserver_mss]
- Rsyslog::Conf[input-file-kubernetes-json]
- File[/etc/cfssl/csr/dse__kubelet_server.csr]
- Prometheus::Node_ferm_mss[ferm_clamped_ipport]
- Class[Base::Sysctl::Inotify]
- Exec[create chained cert /etc/kubernetes/pki/dse__calicoctl.chain.pem]
- Rsyslog::Conf[shellbox]
- K8s::Kubelet::Cni[calico]
- Class[Role::Dse_k8s::Worker::Wdqs]
- Motd::Script[dse_k8s::worker::wdqs]
- Systemd::Timer[prometheus_ferm_mss]
- File[/etc/sysctl.d/70-increase_inotify_limits.conf]
- Logical_volume[srv]
- Class[Profile::Amd_gpu]
- File[/etc/apt/sources.list.d/component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia.list]
- Service[apparmor]
- File[/etc/kubernetes/pki/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.pem]
- Exec[Generate cert dse__calico-cni refresh]
- Cfssl::Csr[/etc/cfssl/csr/dse__system_kube-proxy.csr]
- Concat_fragment[component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- File[/srv/spark]
- Systemd::Timer[set-rbd-readahead]
- Exec[systemd daemon-reload for rsyslog-release-deleted-inotify-watches.service (rsyslog-release-deleted-inotify-watches.service)]
- File[/usr/share/GeoIP]
- File[/etc/default/wikimedia-lvs-realserver]
- Package[istio-cni]
- Ferm::Rule[ip6ip6]
- File[/etc/kubernetes/kube-proxy-config.yaml]
- Class[Role::Dse_k8s::Worker]
- Apt::Package_from_bpo[linux-6.12-bookworm]
- File[/etc/systemd/system/kubelet.service.d/container-runtime.conf]
- Exec[ip link set up dev ipip0]
- File[/etc/kubernetes/pki/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet-key.pem]
- File[/etc/kubernetes/proxy.conf]
- Interface::Manual[ipip_ipv6]
- Nrpe::Plugin[check_systemd_unit_status]
- Service[rsyslog-imfile-remedy.timer]
- Exec[ip addr add 127.0.0.42/32 dev ipip0]
- Ferm::Service[calico-bird]
- Concat::Fragment[component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia-header]
- Concat::Fragment[component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- File[/etc/kubernetes/pki/dse__kubelet_server-key.pem]
- File[/lib/systemd/system/rsyslog-release-deleted-inotify-watches.service]
- Exec[renew certificate - dse__calicoctl]
- File[/etc/cfssl/ssl/dse__rsyslog/dse__rsyslog.pem]
- Package[calicoctl]
- File[/var/run/kubernetes]
- Class[Profile::Lvs::Realserver]
- Interface::Post_up_command[clsact_lo]
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Exec[Generate cert dse__kubelet_server refresh on intermediate ca change]
- Rsyslog::Conf[rsyslog-release-deleted-inotify-watches]
- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f]
- Motd::Message[dse_k8s::worker::wdqs]
- Systemd::Timer::Job[rsyslog-release-deleted-inotify-watches]
- Cfssl::Csr[/etc/cfssl/csr/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.csr]
- Systemd::Timer[rsyslog-imfile-remedy]
- File[/etc/kubernetes/pki/dse__calico-cni.chain.pem]
- Exec[Generate cert dse__rsyslog refresh]
- File[/etc/kubernetes/pki/dse__calicoctl-key.pem]
- File[/lib/systemd/system/prometheus_lvs_realserver_mss.timer]
- Exec[Generate cert dse__calicoctl]
- File[/etc/ferm/conf.d/10_calico_typha]
- Class[Profile::Kubernetes::Container_runtime]
- File[/etc/logrotate.d/rsyslog-release-deleted-inotify-watches]
- File[/etc/cni/net.d]
- File[/etc/systemd/system/ferm.service.d/ferm-service-auto-restart.conf]
- Class[Profile::Lvs::Realserver::Ipip]
- Systemd::Override[container-runtime]
- Class[Profile::Rsyslog::Shellbox]
- Exec[apt_package_from_component_istio115]
- File[/etc/sysctl.d/70-ipv6-fowarding-accept-ra.conf]
- File[/etc/logrotate.d/set-rbd-readahead]
- K8s::Package[proxy]
- Concat::Fragment[component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Service[kube-proxy]
- File[/etc/calico/pki]
- Apt::Package_from_component[kubernetes131]
- Cfssl::Cert[dse__system_kube-proxy]
- Monitoring::Service[check_tcp-mss-clamper_status]
- Concat_file[/etc/apt/sources.list.d/component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia.sources]
- File[/etc/kubernetes/pki/dse__calicoctl.csr]
- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
- Systemd::Unit[prometheus_lvs_realserver_mss.timer]
- K8s::Kubeconfig[/etc/cni/net.d/calico-kubeconfig]
- Class[Cpufrequtils]
- File[/etc/apt/sources.list.d/component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia.list]
- Exec[systemd daemon-reload for kube-proxy.service (kube-proxy)]
- Exec[Generate cert dse__rsyslog refresh on intermediate ca change]
- Volume_group[vg_raid0]
- Exec[create chained cert /etc/kubernetes/pki/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.chain.pem]
- Class[Containerd::Configuration]
- Service[set-rbd-readahead.timer]
- Systemd::Unit[tcp-mss-clamper]
- Class[K8s::Clusters]
- Systemd::Service[kube-proxy]
- Sysctl::Parameters[kube_proxy_icmp]
- Systemd::Unit[kubelet-container-runtime]
- Systemd::Syslog[prometheus_lvs_realserver_mss]
- Mount[/srv]
- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
- Concat_file[/etc/apt/sources.list.d/component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia.sources]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Class[K8s::Proxy]
- Exec[Generate cert dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet refresh]
- Concat_fragment[component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Exec[Generate cert dse__kubelet_server refresh]
- Interface::Ipip[ipip_ipv6]
- Apt::Repository[component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Systemd::Timer::Job[set-rbd-readahead]
- Rsyslog::Conf[set-rbd-readahead]
- Systemd::Unit[ferm-ferm-service-auto-restart]
- File[/lib/systemd/system/rsyslog-imfile-remedy.timer]
- File[/etc/kubernetes/pki/dse__calico-cni.csr]
- File[/etc/default/kubelet]
- File[/etc/udev/rules.d/75-kube_proxy_conntrack.rules]
- File[/etc/cfssl/ssl/dse__rsyslog/dse__rsyslog.csr]
- File[/lib/systemd/system/rsyslog-release-deleted-inotify-watches.timer]
- File[/lib/systemd/system/prometheus_ferm_mss.timer]
- File[/etc/kubernetes]
- Systemd::Syslog[prometheus_ferm_mss]
- Firewall::Service[calico-typha]
- Exec[renew certificate - dse__kubelet_server]
- Systemd::Unit[kube-proxy]
- Package[linux-image-6.12.88+deb12-amd64]
- Systemd::Unit[prometheus_lvs_realserver_mss.service]
- Class[Profile::Containerd]
- File[/etc/sysctl.d/75-kube_proxy_icmp.conf]
- User[kube]
- File[/etc/rsyslog.d/40-rsyslog-release-deleted-inotify-watches.conf]
- File[/etc/calico]
- Service[rsyslog-release-deleted-inotify-watches.timer]
- Sysctl::Conffile[increase_inotify_limits]
- K8s::Kubeconfig[/etc/cni/net.d/istio-kubeconfig]
- File[/etc/rsyslog.d/00-imfile.conf]
- File[/etc/sysctl.d/70-opensearch.conf]
- Class[Lvm]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
- Package[kubernetes-node]
- Concat[/etc/apt/sources.list.d/component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia.sources]
- Systemd::Unit[prometheus_ferm_mss.timer]
- Systemd::Unit[set-rbd-readahead.service]
- Systemd::Service[set-rbd-readahead]
- Exec[Generate cert dse__system_kube-proxy]
- Filesystem[/dev/vg_raid0/srv]
- File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
- File_line[rm_post-up_ens2f0np0_clsact_ens2f0np0]
- File[/etc/cni]
- File[/usr/local/sbin/rsyslog-release-deleted-inotify-watches]
- Exec[cpufrequtils_reload]
- Cfssl::Cert[dse__istio-cni]
- File[/etc/kubernetes/pki/dse__calicoctl.chained.pem]
- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 check_tcp-mss-clamper_status]
- File[/lib/systemd/system/tcp-mss-clamper.service]
- Exec[systemd daemon-reload for rsyslog-imfile-remedy.service (rsyslog-imfile-remedy.service)]
- Exec[create chained cert /etc/kubernetes/pki/dse__calico-cni.chain.pem]
- Cfssl::Csr[/etc/cfssl/csr/dse__istio-cni.csr]
- Concat_fragment[component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia-header]
- K8s::Kubeconfig[/etc/calico/calicoctl-kubeconfig]
- Sysctl::Conffile[opensearch]
- File[/etc/kubernetes/pki/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.csr]
- Package[crictl]
- Augeas[ipip0_add_up]
- Concat_fragment[component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Class[K8s::Base_dirs]
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- File[/etc/kubernetes/pki/dse__calicoctl.pem]
- Ferm::Rule[clamp-mss-ipv4]
- File[/etc/cfssl/ssl/dse__rsyslog/dse__rsyslog-key.pem]
- Sysctl::Parameters[kube_proxy_conntrack]
- Concat::Fragment[component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia-header]
- Exec[Generate cert dse__rsyslog]
- Systemd::Timer[rsyslog-release-deleted-inotify-watches]
- File[/etc/kubernetes/pki/dse__calico-cni-key.pem]
- File[/etc/kubernetes/pki/dse__istio-cni.csr]
- Exec[/usr/sbin/tc qdisc del dev ens2f0np0 clsact]
- Exec[systemd daemon-reload for set-rbd-readahead.service (set-rbd-readahead.service)]
- Rsyslog::Conf[prometheus_ferm_mss]
- Systemd::Monitor[tcp-mss-clamper]
- Class[Profile::Kubernetes::Node::Dse_k8s::Wdqs]
- Class[Geoip::Data::Puppet]
- Package[socat]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Sysctl::Conffile[kube_proxy_conntrack]
- File[/etc/ferm/conf.d/10_kubelet-http]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
- Service[tcp-mss-clamper]
- K8s::Kubeconfig[/etc/kubernetes/proxy.conf]
- File[/etc/modprobe.d/blacklist-r440_wdat_wdt.conf]
- File[/var/lib/kubelet]
- Apt::Repository[component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Exec[disable-rp-filter-ipip0]
- File[/etc/default/cpufrequtils]
- Exec[disable-rp-filter-ipip60]
- File[/etc/cfssl/csr/dse__calico-cni.csr]
- Rsyslog::Conf[imfile]
- Systemd::Service[rsyslog-release-deleted-inotify-watches]
- Class[Profile::Rsyslog::Kubernetes]
- Systemd::Service[prometheus_ferm_mss]
- Augeas[ipip60_add_up]
- Ferm::Rule[clamp-mss-ipv6]
- File[/etc/cfssl/csr/dse__calicoctl.csr]
- Concat_file[/etc/apt/sources.list.d/component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia.sources]
- File[/etc/cfssl/csr/dse__istio-cni.csr]
- File[/etc/kubernetes/pki/dse__istio-cni.pem]
- Exec[Generate cert dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet refresh on intermediate ca change]
- File[/etc/kubernetes/pki/dse__kubelet_server.chain.pem]
- File[/etc/containerd/config.toml]
- Class[Geoip]
- File[/lib/systemd/system/set-rbd-readahead.service]
- Interface::Clsact[clsact_lo]
- Systemd::Service[rsyslog-imfile-remedy]
- Concat::Fragment[component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia-header]
- File[/etc/kubernetes/pki/dse__calicoctl.chain.pem]
- Concat::Fragment[component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Service[containerd]
- Cfssl::Csr[/etc/cfssl/csr/dse__kubelet_server.csr]
- Augeas[ipip0_127.0.0.42/32]
- File[/etc/kubernetes/kubelet.conf]
- File[/etc/cni/net.d/calico-kubeconfig]
- K8s::Kubeconfig[/etc/kubernetes/kubelet.conf]
- Interface::Manual[ipip_ipv4]
- File[/usr/local/bin/prometheus-lvs-realserver-mss]
- Udev::Rule[kube_proxy_conntrack]
- File[/etc/systemd/system/kube-proxy.service.d/puppet-override.conf]
- Systemd::Unit[rsyslog-release-deleted-inotify-watches.service]
- File[/etc/default/kube-proxy]
- File[/etc/rsyslog.d/08-input-file-kubernetes-json.conf]
- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- File[/etc/kubernetes/pki/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.chain.pem]
- Interface::Clsact[clsact_ens2f0np0]
- Package[cpufrequtils]
- Cfssl::Csr[/etc/cfssl/csr/dse__rsyslog.csr]
- Nrpe::Check[check_check_tcp-mss-clamper_status]
- Exec[renew certificate - dse__rsyslog]
- Sudo::User[nrpe-check_check_tcp-mss-clamper_status]
- Class[Lvs::Realserver]
- Systemd::Override[ferm-service-auto-restart]
- File[/etc/apt/sources.list.d/component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia.list]
- Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
- File[/etc/cfssl/csr/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.csr]
- File[/etc/kubernetes/pki/dse__system_kube-proxy.csr]
- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
- Ferm::Service[kubelet-http]
- File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
- Class[Toil::Rsyslog_imfile_remedy]
- Systemd::Syslog[rsyslog-release-deleted-inotify-watches]
- Package[geoip-bin]
- Interface::Post_up_command[clsact_ens2f0np0]
- Cfssl::Cert[dse__rsyslog]
- Exec[Generate cert dse__system_kube-proxy refresh on intermediate ca change]
- File[/etc/calico/calicoctl-kubeconfig]
- Augeas[ipip60_manual]
- File[/etc/kubernetes/pki/dse__kubelet_server.pem]
- File[/etc/cni/net.d/10-calico.conflist]
- File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
- File[/etc/ferm/conf.d/10_ip6ip6]
- File[/etc/rsyslog.d/35-output-kafka-k8s.conf]
- File[/etc/kubernetes/pki/dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet.chained.pem]
- Service[prometheus_ferm_mss.timer]
- Package[calico-cni]
- File[/etc/kubernetes/pki/dse__istio-cni-key.pem]
- File[/etc/kubernetes/pki/dse__system_kube-proxy-key.pem]
- Cfssl::Cert[dse__calico-cni]
- File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]
- Kmod::Module[overlay]
- Service[kubelet]
- Exec[apt_pin_apt_pin_linux-6.12-bookworm_bookworm-bpo]
- Exec[create chained cert /etc/kubernetes/pki/dse__system_kube-proxy.chain.pem]
- Class[Profile::Lvs::Configuration]
- Physical_volume[/dev/md1]
- Package[wikimedia-lvs-realserver]
- File[/etc/rsyslog.d/40-set-rbd-readahead.conf]
- File[/etc/kubernetes/pki/dse__calico-cni.chained.pem]
- File[/usr/local/sbin/set-rbd-readahead.py]
- Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status]
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Logrotate::Conf[rsyslog-release-deleted-inotify-watches]
- Cfssl::Cert[dse__kubelet_server]
- File_line[rm_post-up_lo_clsact_lo]
- Cfssl::Cert[dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet]
- File[/etc/rsyslog.d/09-kubernetes.conf]
- File[/etc/nerdctl]
- Class[Profile::Calico::Kubernetes]
- Systemd::Unit[prometheus_ferm_mss.service]
- Exec[ip link add name ipip60 type ip6tnl external]
- Systemd::Timer[prometheus_lvs_realserver_mss]
- Concat[/etc/apt/sources.list.d/component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia.sources]
- File[/var/log/set-rbd-readahead]
- Exec[Generate cert dse__calico-cni refresh on intermediate ca change]
- Package[containerd]
- Package[apparmor]
- Exec[apt_package_from_component_kubernetes131]
- Augeas[ipip0_manual]
- Class[K8s::Kubelet]
- Kmod::Blacklist[r440_wdat_wdt]
- Logrotate::Conf[prometheus_ferm_mss]
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- File[/etc/ferm/conf.d/10_calico-bird]
- Interface::Ip[ipip_ipv4 ipv4]
- Exec[systemd daemon-reload for kubelet.service (kubelet-container-runtime)]
- Apt::Package_from_component[istio115]
- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]
- Systemd::Unit[set-rbd-readahead.timer]
- File[/var/log/prometheus_lvs_realserver_mss]
- File[/etc/rsyslog.d/20-shellbox.conf]
- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Exec[/sbin/modprobe overlay]
- File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
- Package[nerdctl]
- File[/etc/update-motd.d/05-dse-k8s--worker--wdqs]
- File[/etc/cfssl/ssl/dse__rsyslog/dse__rsyslog.chain.pem]
- Sysctl::Conffile[ipv6-fowarding-accept-ra]
- Exec[/usr/sbin/tc qdisc del dev lo clsact]
- Systemd::Unit[rsyslog-release-deleted-inotify-watches.timer]
- Exec[Generate cert dse__calicoctl refresh]
- Exec[renew certificate - dse__system_kube-proxy]
- File[/etc/containerd]
- Exec[Generate cert dse__calicoctl refresh on intermediate ca change]
- Augeas[ipip0_set_up]
- File[/etc/apparmor.d/abstractions]
- File[/etc/ferm/conf.d/10_ipip]
- File[/etc/logrotate.d/prometheus_ferm_mss]
- Systemd::Service[tcp-mss-clamper]
- File[/lib/systemd/system/set-rbd-readahead.timer]
- File[/var/log/prometheus_ferm_mss]
- Exec[apt_repository_component-istio115-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- File[/etc/cfssl/csr/dse__system_kube-proxy.csr]
- Exec[Generate cert dse__kubelet_server]
- Package[linux-base]
- Sysctl::Parameters[opensearch]
- File[/etc/cfssl/csr/dse__rsyslog.csr]
- Exec[renew certificate - dse__system_node_dse-k8s-wdqs-test1001_eqiad_wmnet]
- Exec[systemd daemon-reload for ferm.service (ferm-ferm-service-auto-restart)]
- File[/etc/kubernetes/pki/dse__system_kube-proxy.chain.pem]
- File[/etc/cni/net.d/istio-kubeconfig]
- File[/etc/kubernetes/pki/dse__calico-cni.pem]
- Exec[rmmod-r440_wdat_wdt]
- Rsyslog::Input::File[kubernetes-json]
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- File[/etc/systemd/system/kubelet.service.d]
- Exec[systemd daemon-reload for rsyslog-release-deleted-inotify-watches.timer (rsyslog-release-deleted-inotify-watches.timer)]
- File[/etc/kubernetes/pki/dse__system_kube-proxy.chained.pem]
- Class[Containerd::Nerdctl]
- Exec[systemd daemon-reload for set-rbd-readahead.timer (set-rbd-readahead.timer)]
- Exec[/usr/sbin/dpkg-reconfigure -p critical -f noninteractive wikimedia-lvs-realserver]
- File[/usr/local/bin/prometheus-ferm-mss]
- File[/etc/sysctl.d/75-kube_proxy_conntrack.conf]
- Exec[Generate cert dse__system_kube-proxy refresh]
- Cfssl::Csr[/etc/cfssl/csr/dse__calico-cni.csr]
- Class[K8s::Kubelet::Cni::Base]
- Group[kube]
- Cfssl::Cert[dse__calicoctl]
- Exec[ip link set up dev ipip60]
- File[/etc/systemd/system/kube-proxy.service.d]
- Package[tcp-mss-clamper]
- File[/etc/kubernetes/pki/dse__system_kube-proxy.pem]
- Exec[exec-apt-get-update-linux-6.12-bookworm_bookworm-bpo]
- Lvm::Volume_group[vg_raid0]
- Rsyslog::Conf[kubernetes]
- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
- File[/etc/apt/preferences.d/apt_pin_linux_6_12_bookworm_bookworm_bpo.pref]
- Apt::Package_from_component[calico329]
- Class[Wmflib::Service::Catalog]
- Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
- Augeas[ipip60_set_up]
- K8s::Package[kubelet]
- Exec[ensure mountpoint '/srv' exists]
- Exec[apt_package_from_component_calico329]
- File[/etc/cfssl/ssl/dse__rsyslog]
- Ferm::Service[calico_typha]
- Exec[create chained cert /etc/cfssl/ssl/dse__rsyslog/dse__rsyslog.chain.pem]
- Class[Geoip::Bin]
- Systemd::Timer::Job[prometheus_ferm_mss]
- File[/etc/calico/calicoctl.cfg]
- Class[Profile::Kubernetes::Node]
- File[/lib/systemd/system/prometheus_ferm_mss.service]
- Cfssl::Csr[/etc/cfssl/csr/dse__calicoctl.csr]
- Exec[renew certificate - dse__calico-cni]
- Package[rsyslog-kubernetes]
- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]
- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Exec[apt_repository_component-calico329-apt.wikimedia.org-wikimedia-bookworm-wikimedia]
- Class[Containerd]
- Sysctl::Parameters[ipv6-fowarding-accept-ra]
- Sysctl::Parameters[increase_inotify_limits]
- File[/etc/kubernetes/pki]
- File[/etc/kubernetes/pki/dse__istio-cni.chain.pem]
- File[/etc/kubernetes/pki/dse__kubelet_server.csr]
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- Class[Profile::Analytics::Geoip]
- Sysctl::Conffile[kube_proxy_icmp]
- Systemd::Timer::Job[rsyslog-imfile-remedy]
- File[/etc/kubernetes/kubelet-config.yaml]
- Concat_fragment[component-kubernetes131-apt.wikimedia.org-wikimedia-bookworm-wikimedia-header]
- File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
- Systemd::Timer::Job[prometheus_lvs_realserver_mss]
- File[/etc/modules-load.d/overlay.conf]
- Class[Apparmor]
- File[/var/log/rsyslog-release-deleted-inotify-watches]
- Logrotate::Conf[set-rbd-readahead]
- File[/etc/rsyslog.d/10-kubernetes-node-filters.conf]
Resources only in the old catalog
- Motd::Message[insetup::data_platform_ferm]
- Class[Role::Insetup::Data_platform_ferm]
- Motd::Script[insetup::data_platform_ferm]
- File[/etc/update-motd.d/05-insetup--data-platform-ferm]
Resources modified
- Class[Monitoring]
- Parameters differences:
--- Class[Monitoring].orig +++ Class[Monitoring] @@ - nagios_group => insetup_eqiad + nagios_group => dse_k8s_eqiad @@ - notifications_enabled => False + notifications_enabled => True @@ - cluster => insetup + cluster => dse_k8s
- Concat::Fragment[main contacts]
- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 ssh]
- Parameters differences:
--- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 ssh].orig +++ Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 ssh] @@ - servicegroups => insetup_eqiad + servicegroups => dse_k8s_eqiad @@ - notifications_enabled => 0 + notifications_enabled => 1
- File[/etc/default/prometheus-node-exporter]
- Content differences:
--- /etc/default/prometheus-node-exporter.orig +++ /etc/default/prometheus-node-exporter @@ -15,6 +15,7 @@ --collector.netdev \ --collector.netstat \ --collector.netstat.fields=^(.*) \ + --collector.processes \ --collector.sockstat \ --collector.stat \ --collector.systemd.enable-restarts-metrics \
- Concat_fragment[main contacts]
- Content differences:
--- main contacts.orig +++ main contacts @@ -1,3 +1,3 @@ --- -role::insetup::data_platform_ferm: +role::dse_k8s::worker::wdqs: - Data Platform
- File[/etc/modprobe.d/blacklist-wmf_overlay.conf]
- Parameters differences:
--- File[/etc/modprobe.d/blacklist-wmf_overlay.conf].orig +++ File[/etc/modprobe.d/blacklist-wmf_overlay.conf] @@ - ensure => present + ensure => absent
- Content differences:
--- /etc/modprobe.d/blacklist-wmf_overlay.conf.orig +++ /etc/modprobe.d/blacklist-wmf_overlay.conf @@ -1,7 +1,3 @@ # wmf_overlay - blacklisted kernel modules # This file is managed by Puppet # -blacklist overlay -install overlay /bin/true -blacklist overlayfs -install overlayfs /bin/true
- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 ferm_active]
- Parameters differences:
--- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 ferm_active].orig +++ Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 ferm_active] @@ - servicegroups => insetup_eqiad + servicegroups => dse_k8s_eqiad @@ - notifications_enabled => 0 + notifications_enabled => 1
- Class[Profile::Base::Production]
- Parameters differences:
--- Class[Profile::Base::Production].orig +++ Class[Profile::Base::Production] @@ - role_description => Host being setup by Data Platform SREs + role_description => DSE Kubernetes worker node - dedicated to wdqs
- File[/etc/sysctl.d/51-ubuntu-defaults.conf]
- Content differences:
--- /etc/sysctl.d/51-ubuntu-defaults.conf.orig +++ /etc/sysctl.d/51-ubuntu-defaults.conf @@ -4,7 +4,7 @@ kernel.kptr_restrict = 1 kernel.printk = 4 4 1 7 kernel.yama.ptrace_scope = 1 -net.ipv4.conf.all.rp_filter = 1 +net.ipv4.conf.all.rp_filter = 0 net.ipv4.conf.default.rp_filter = 1 net.ipv4.tcp_syncookies = 1 vm.mmap_min_addr = 65536
- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 raid_md]
- Parameters differences:
--- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 raid_md].orig +++ Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 raid_md] @@ - servicegroups => insetup_eqiad + servicegroups => dse_k8s_eqiad @@ - notifications_enabled => 0 + notifications_enabled => 1
- Nrpe::Monitor_service[disk_space]
- Parameters differences:
--- Nrpe::Monitor_service[disk_space].orig +++ Nrpe::Monitor_service[disk_space] @@ - nrpe_command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs + nrpe_command => /usr/lib/nagios/plugins/check_disk -w 10% -c 5% -W 6% -K 3% -l -e -A -i '/(var/lib|run)/(kubelet|containerd)/*' --exclude-type=tracefs
- Class[Profile::Cumin::Target]
- Parameters differences:
--- Class[Profile::Cumin::Target].orig +++ Class[Profile::Cumin::Target] @@ - cluster => insetup + cluster => dse_k8s
- Class[Cumin::Selector]
- Parameters differences:
--- Class[Cumin::Selector].orig +++ Class[Cumin::Selector] @@ - cluster => insetup + cluster => dse_k8s
- Nrpe::Check[check_disk_space]
- Parameters differences:
--- Nrpe::Check[check_disk_space].orig +++ Nrpe::Check[check_disk_space] @@ - command => /usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs + command => /usr/lib/nagios/plugins/check_disk -w 10% -c 5% -W 6% -K 3% -l -e -A -i '/(var/lib|run)/(kubelet|containerd)/*' --exclude-type=tracefs
- Kmod::Blacklist[wmf_overlay]
- Parameters differences:
--- Kmod::Blacklist[wmf_overlay].orig +++ Kmod::Blacklist[wmf_overlay] @@ - modules => ['overlayfs', 'overlay'] + modules => [] @@ - ensure => present + ensure => absent
- File[/etc/nagios/nrpe.d/check_disk_space.cfg]
- Content differences:
--- /etc/nagios/nrpe.d/check_disk_space.cfg.orig +++ /etc/nagios/nrpe.d/check_disk_space.cfg @@ -1,2 +1,2 @@ # File generated by puppet. DO NOT edit by hand -command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs +command[check_disk_space]=/usr/lib/nagios/plugins/check_disk -w 10% -c 5% -W 6% -K 3% -l -e -A -i '/(var/lib|run)/(kubelet|containerd)/*' --exclude-type=tracefs
- Class[Profile::Base]
- Parameters differences:
--- Class[Profile::Base].orig +++ Class[Profile::Base] @@ - overlayfs => False + overlayfs => True @@ - use_linux612_on_bookworm => False + use_linux612_on_bookworm => True @@ - rp_filter => True + rp_filter => {'all_rp_filter': 0, 'default_rp_filter': 1} @@ - cluster => insetup + cluster => dse_k8s- File[/var/lib/prometheus/node.d/role_owner.prom]
- Content differences:
--- /var/lib/prometheus/node.d/role_owner.prom.orig +++ /var/lib/prometheus/node.d/role_owner.prom @@ -1,3 +1,3 @@ # HELP role_owner The team owner of the server role # TYPE role_owner gauge -role_owner{team="data-platform",role="insetup::data_platform_ferm",cluster="insetup"} 1.0 +role_owner{team="data-platform",role="dse_k8s::worker::wdqs",cluster="dse_k8s"} 1.0
- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 disk_space]
- Parameters differences:
--- Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 disk_space].orig +++ Monitoring::Exported_nagios_service[dse-k8s-wdqs-test1001 disk_space] @@ - servicegroups => insetup_eqiad + servicegroups => dse_k8s_eqiad @@ - notifications_enabled => 0 + notifications_enabled => 1
- Sysctl::Conffile[ubuntu defaults]
- Class[Prometheus::Node_exporter]
- Parameters differences:
--- Class[Prometheus::Node_exporter].orig +++ Class[Prometheus::Node_exporter] @@ - collectors_extra => [] + collectors_extra => ['processes']
- Class[Profile::Apt]
- Parameters differences:
--- Class[Profile::Apt].orig +++ Class[Profile::Apt] @@ - before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]'] + before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[crictl]', 'Package[containerd]', 'Package[nerdctl]', 'Package[rsyslog-kubernetes]', 'Package[cpufrequtils]', 'Package[apparmor]', 'Package[socat]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[wikimedia-lvs-realserver]', 'Package[tcp-mss-clamper]', 'Package[linux-base]', 'Package[linux-image-6.12.88+deb12-amd64]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[kubernetes-node]', 'Package[calicoctl]', 'Package[calico-cni]', 'Package[istio-cni]']
- Class[Base::Sysctl]
- Parameters differences:
--- Class[Base::Sysctl].orig +++ Class[Base::Sysctl] @@ - all_rp_filter => 1 + all_rp_filter => 0
- Class[Base::Kernel]
- Parameters differences:
--- Class[Base::Kernel].orig +++ Class[Base::Kernel] @@ - overlayfs => False + overlayfs => True
- Class[Profile::Contacts]
- Parameters differences:
--- Class[Profile::Contacts].orig +++ Class[Profile::Contacts] @@ - cluster => insetup + cluster => dse_k8s
- Sysctl::Parameters[ubuntu defaults]
- Parameters differences:
--- Sysctl::Parameters[ubuntu defaults].orig +++ Sysctl::Parameters[ubuntu defaults] @@ - values => {'kernel.printk': [4, 4, 1, 7], 'kernel.kptr_restrict': 1, 'net.ipv4.conf.default.rp_filter': 1, 'net.ipv4.conf.all.rp_filter': 1, 'net.ipv4.tcp_syncookies': 1, 'kernel.yama.ptrace_scope': 1, 'fs.protected_hardlinks': 1, 'fs.protected_symlinks': 1, 'vm.mmap_min_addr': 65536} + values => {'kernel.printk': [4, 4, 1, 7], 'kernel.kptr_restrict': 1, 'net.ipv4.conf.default.rp_filter': 1, 'net.ipv4.conf.all.rp_filter': 0, 'net.ipv4.tcp_syncookies': 1, 'kernel.yama.ptrace_scope': 1, 'fs.protected_hardlinks': 1, 'fs.protected_symlinks': 1, 'vm.mmap_min_addr': 65536}- Monitoring::Exported_nagios_host[dse-k8s-wdqs-test1001]
- Parameters differences:
--- Monitoring::Exported_nagios_host[dse-k8s-wdqs-test1001].orig +++ Monitoring::Exported_nagios_host[dse-k8s-wdqs-test1001] @@ - notifications_enabled => 0 + notifications_enabled => 1 @@ - hostgroups => insetup_eqiad,lsw1-d6-eqiad + hostgroups => dse_k8s_eqiad,lsw1-d6-eqiad
- Class[Adduser]
- Parameters differences:
--- Class[Adduser].orig +++ Class[Adduser] @@ - before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]'] + before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[crictl]', 'Package[containerd]', 'Package[nerdctl]', 'Package[rsyslog-kubernetes]', 'Package[cpufrequtils]', 'Package[apparmor]', 'Package[socat]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[wikimedia-lvs-realserver]', 'Package[tcp-mss-clamper]', 'Package[linux-base]', 'Package[linux-image-6.12.88+deb12-amd64]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[kubernetes-node]', 'Package[calicoctl]', 'Package[calico-cni]', 'Package[istio-cni]']
- Class[Profile::Monitoring]
- Parameters differences:
--- Class[Profile::Monitoring].orig +++ Class[Profile::Monitoring] @@ - nagios_group => insetup_eqiad + nagios_group => dse_k8s_eqiad @@ - notifications_enabled => False + notifications_enabled => True @@ - nrpe_check_disk_options => -w 6% -c 3% -W 6% -K 3% -l -e -A -i "/srv/sd[a-b][1-3]" -i "/srv/nvme[0-9]n[0-9]p[0-9]" --exclude-type=fuse --exclude-type=fuse.fuse_dfs --exclude-type=tracefs + nrpe_check_disk_options => -w 10% -c 5% -W 6% -K 3% -l -e -A -i '/(var/lib|run)/(kubelet|containerd)/*' --exclude-type=tracefs @@ - cluster => insetup + cluster => dse_k8s
- Class[Profile::Monitoring]
- Class[Adduser]
- Monitoring::Exported_nagios_host[dse-k8s-wdqs-test1001]
- Sysctl::Parameters[ubuntu defaults]
- Class[Profile::Contacts]
- Class[Base::Kernel]
- Class[Base::Sysctl]
- Class[Profile::Apt]
- Sysctl::Conffile[ubuntu defaults]
- File[/var/lib/prometheus/node.d/role_owner.prom]
- File[/etc/nagios/nrpe.d/check_disk_space.cfg]
- Kmod::Blacklist[wmf_overlay]
- Nrpe::Check[check_disk_space]
- Class[Cumin::Selector]
- Class[Profile::Cumin::Target]
- Nrpe::Monitor_service[disk_space]
- File[/etc/sysctl.d/51-ubuntu-defaults.conf]
- Class[Profile::Base::Production]
- Content differences:
- File[/etc/default/prometheus-node-exporter]
- Concat::Fragment[main contacts]
- Parameters differences: