{"host": "backup1004.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2936, "only_in_self": ["Cfssl::Cert[discovery2026__backup1004_eqiad_wmnet]", "Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "Class[Mediabackup::Storage]", "Class[Profile::Mediabackup::Storage]", "Class[Role::Mediabackup::Storage]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet]", "Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet]", "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]", "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]", "Exec[update-sysusers-minio-user]", "Ferm::Service[minio_console_mediabackup_workers]", "Ferm::Service[minio_mediabackup_workers]", "File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "File[/etc/default/minio]", "File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]", "File[/etc/ferm/conf.d/10_minio_mediabackup_workers]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem]", "File[/etc/minio/ssl]", "File[/etc/minio]", "File[/etc/nagios/nrpe.d/check_minio_server.cfg]", "File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]", "File[/etc/sudoers.d/nrpe-check_minio_server]", "File[/etc/sysusers.d/minio-user.conf]", "File[/etc/update-motd.d/05-mediabackup--storage]", "File[/lib/systemd/system/nrpe2nodexp-minio_server.service]", "File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]", "File[/srv/objectstorage/.minio/certs/private.key]", "File[/srv/objectstorage/.minio/certs/public.crt]", "File[/srv/objectstorage/.minio/certs]", "File[/srv/objectstorage/.minio]", "File[/srv/objectstorage]", "File[/var/lib/prometheus/node.d/check_minio_server.prom]", "Firewall::Service[minio-console-mediabackup-workers]", "Firewall::Service[minio-mediabackup-workers]", "Monitoring::Exported_nagios_service[backup1004 minio_server]", "Monitoring::Service[minio_server]", "Motd::Message[mediabackup::storage]", "Motd::Script[mediabackup::storage]", "Nftables::Service[minio-console-mediabackup-workers]", "Nftables::Service[minio-mediabackup-workers]", "Nrpe::Check[check_minio_server]", "Nrpe::Monitor_service[minio_server]", "Package[minio]", "Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]", "Rsyslog::Conf[nrpe2nodexp-minio_server]", "Service[minio]", "Service[nrpe2nodexp-minio_server.timer]", "Sudo::User[nrpe-check_minio_server]", "Systemd::Service[nrpe2nodexp-minio_server]", "Systemd::Sysuser[minio-user]", "Systemd::Timer::Job[nrpe2nodexp-minio_server]", "Systemd::Timer[nrpe2nodexp-minio_server]", "Systemd::Unit[nrpe2nodexp-minio_server.service]", "Systemd::Unit[nrpe2nodexp-minio_server.timer]", "User[minio-user]"], "only_in_other": ["Class[Role::Insetup::Data_persistence_ferm]", "File[/etc/update-motd.d/05-insetup--data-persistence-ferm]", "Motd::Message[insetup::data_persistence_ferm]", "Motd::Script[insetup::data_persistence_ferm]"], "resource_diffs": [{"resource": "File[/var/lib/prometheus/node.d/role_owner.prom]", "content": "--- /var/lib/prometheus/node.d/role_owner.prom.orig\n+++ /var/lib/prometheus/node.d/role_owner.prom\n@@ -1,3 +1,3 @@\n # HELP role_owner The team owner of the server role\n # TYPE role_owner gauge\n-role_owner{team=\"data-persistence\",role=\"mediabackup::storage\",cluster=\"backup\"} 1.0\n+role_owner{team=\"data-persistence\",role=\"insetup::data_persistence_ferm\",cluster=\"insetup\"} 1.0"}, {"resource": "File[/etc/nagios/nrpe.d/check_minio_server.cfg]", "content": "--- /etc/nagios/nrpe.d/check_minio_server.cfg.orig\n+++ /etc/nagios/nrpe.d/check_minio_server.cfg\n@@ -1,2 +0,0 @@\n-# File generated by puppet. DO NOT edit by hand\n-command[check_minio_server]=/usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server", "parameters": "--- File[/etc/nagios/nrpe.d/check_minio_server.cfg].orig\n+++ File[/etc/nagios/nrpe.d/check_minio_server.cfg]\n\n-    group   => root\n-    ensure  => present\n-    owner   => root\n-    require => Package[nagios-nrpe-server]\n-    tag     => nrpe::check\n-    mode    => 0444\n-    notify  => Service[nagios-nrpe-server]\n"}, {"resource": "Class[Profile::Base]", "parameters": "--- Class[Profile::Base].orig\n+++ Class[Profile::Base]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Systemd::Timer::Job[nrpe2nodexp-minio_server]", "parameters": "--- Systemd::Timer::Job[nrpe2nodexp-minio_server].orig\n+++ Systemd::Timer::Job[nrpe2nodexp-minio_server]\n\n-    ensure                    => absent\n-    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n-    logfile_name              => syslog.log\n-    environment               => {}\n-    send_mail_only_on_error   => True\n-    syslog_identifier         => nrpe2nodexp-minio_server\n-    monitoring_contact_groups => admins\n-    logfile_group             => root\n-    group                     => prometheus-node-exporter\n-    user                      => nagios\n-    private_tmp               => False\n-    fixed_random_delay        => True\n-    syslog_match_startswith   => True\n-    send_mail_to              => root@backup1004.eqiad.wmnet\n-    splay                     => 60\n-    syslog_force_stop         => True\n-    logging_enabled           => False\n-    send_mail                 => False\n-    ignore_errors             => True\n-    interval                  => [{'start': 'OnUnitInactiveSec', 'interval': '1min'}]\n-    command                   => /usr/local/bin/nrpe2nodexp --alert-rule-hash \"afd847791207995d7987063926084703\" --timeout 10 --check-command \"check_minio_server\"\n-    description               => execution of nrpe2nodexp for the check_minio_server command.\n-    monitoring_enabled        => False\n-    logfile_basedir           => /var/log\n-    success_exit_status       => []\n-    logfile_perms             => all\n"}, {"resource": "File[/srv/objectstorage/.minio]", "parameters": "--- File[/srv/objectstorage/.minio].orig\n+++ File[/srv/objectstorage/.minio]\n\n-    group   => minio-user\n-    ensure  => directory\n-    owner   => minio-user\n-    require => File[/srv/objectstorage]\n-    mode    => 0700\n"}, {"resource": "Firewall::Service[minio-console-mediabackup-workers]", "parameters": "--- Firewall::Service[minio-console-mediabackup-workers].orig\n+++ Firewall::Service[minio-console-mediabackup-workers]\n\n-    ensure              => present\n-    notrack             => False\n-    port                => 9001\n-    desc                => \n-    prio                => 10\n-    proto               => tcp\n-    unrestricted_access => False\n-    srange              => ['ms-backup1003.eqiad.wmnet', 'ms-backup1004.eqiad.wmnet']\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 disk_space]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 disk_space].orig\n+++ Monitoring::Exported_nagios_service[backup1004 disk_space]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "File[/lib/systemd/system/nrpe2nodexp-minio_server.service]", "content": "--- /lib/systemd/system/nrpe2nodexp-minio_server.service.orig\n+++ /lib/systemd/system/nrpe2nodexp-minio_server.service\n@@ -1,11 +0,0 @@\n-[Unit]\n-Description=execution of nrpe2nodexp for the check_minio_server command.\n-Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n-\n-[Service]\n-Type=oneshot\n-User=nagios\n-\n-Group=prometheus-node-exporter\n-SyslogIdentifier=nrpe2nodexp-minio_server\n-ExecStart=-/usr/local/bin/nrpe2nodexp --alert-rule-hash \"afd847791207995d7987063926084703\" --timeout 10 --check-command \"check_minio_server\"", "parameters": "--- File[/lib/systemd/system/nrpe2nodexp-minio_server.service].orig\n+++ File[/lib/systemd/system/nrpe2nodexp-minio_server.service]\n\n-    group  => root\n-    ensure => absent\n-    owner  => root\n-    mode   => 0444\n-    notify => Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]\n"}, {"resource": "File[/etc/ferm/conf.d/10_minio_mediabackup_workers]", "content": "--- /etc/ferm/conf.d/10_minio_mediabackup_workers.orig\n+++ /etc/ferm/conf.d/10_minio_mediabackup_workers\n@@ -1,8 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 9000, (10.64.0.66 10.64.179.2 2620:0:861:101:10:64:0:66 2620:0:861:139:10:64:179:2));\n-\n-\n-\n-&NO_TRACK(tcp, 9000);", "parameters": "--- File[/etc/ferm/conf.d/10_minio_mediabackup_workers].orig\n+++ File[/etc/ferm/conf.d/10_minio_mediabackup_workers]\n\n-    group   => root\n-    ensure  => present\n-    owner   => root\n-    require => File[/etc/ferm/conf.d]\n-    tag     => ferm\n-    mode    => 0400\n-    notify  => Service[ferm]\n"}, {"resource": "File[/srv/objectstorage/.minio/certs]", "parameters": "--- File[/srv/objectstorage/.minio/certs].orig\n+++ File[/srv/objectstorage/.minio/certs]\n\n-    group   => minio-user\n-    ensure  => directory\n-    owner   => minio-user\n-    require => File[/srv/objectstorage/.minio]\n-    mode    => 0600\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 minio_server]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 minio_server].orig\n+++ Monitoring::Exported_nagios_service[backup1004 minio_server]\n\n-    ensure                 => present\n-    check_interval         => 1\n-    notification_options   => c,r,f\n-    retry_interval         => 1\n-    check_period           => 24x7\n-    contact_groups         => admins\n-    service_description    => MinIO server processes\n-    host_name              => backup1004\n-    is_volatile            => 0\n-    max_check_attempts     => 3\n-    active_checks_enabled  => 1\n-    check_freshness        => 0\n-    notes_url              => https://wikitech.wikimedia.org/wiki/Media_storage/Backups\n-    notifications_enabled  => 1\n-    notification_period    => 24x7\n-    passive_checks_enabled => 1\n-    servicegroups          => backup_eqiad\n-    check_command          => nrpe_check!check_minio_server!10\n-    notification_interval  => 0\n"}, {"resource": "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change]", "parameters": "--- Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change].orig\n+++ Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change]\n\n-    require     => Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]\n-    subscribe   => File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]\n-    environment => ['GODEBUG=x509ignoreCN=0']\n-    refreshonly => True\n-    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup1004.eqiad.wmnet.pem -label discovery2026  /etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet\n\n"}, {"resource": "Nftables::Service[minio-console-mediabackup-workers]", "parameters": "--- Nftables::Service[minio-console-mediabackup-workers].orig\n+++ Nftables::Service[minio-console-mediabackup-workers]\n\n-    ensure              => present\n-    notrack             => False\n-    port                => 9001\n-    desc                => \n-    src_ips             => ['10.64.0.66', '10.64.179.2', '2620:0:861:101:10:64:0:66', '2620:0:861:139:10:64:179:2']\n-    prio                => 10\n-    proto               => tcp\n-    unrestricted_access => False\n"}, {"resource": "User[minio-user]", "parameters": "--- User[minio-user].orig\n+++ User[minio-user]\n\n-    ensure   => present\n-    home     => /srv/objectstorage\n-    password => !\n-    system   => True\n-    groups   => []\n"}, {"resource": "File[/srv/objectstorage/.minio/certs/public.crt]", "parameters": "--- File[/srv/objectstorage/.minio/certs/public.crt].orig\n+++ File[/srv/objectstorage/.minio/certs/public.crt]\n\n-    group  => minio-user\n-    ensure => link\n-    owner  => minio-user\n-    target => /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem\n"}, {"resource": "File[/etc/minio]", "parameters": "--- File[/etc/minio].orig\n+++ File[/etc/minio]\n\n-    group   => minio-user\n-    ensure  => directory\n-    owner   => minio-user\n-    require => User[minio-user]\n-    mode    => 0440\n"}, {"resource": "Systemd::Service[nrpe2nodexp-minio_server]", "parameters": "--- Systemd::Service[nrpe2nodexp-minio_server].orig\n+++ Systemd::Service[nrpe2nodexp-minio_server]\n\n-    monitoring_contact_group => admins\n-    ensure                   => absent\n-    require                  => Systemd::Unit[nrpe2nodexp-minio_server.service]\n-    unit_type                => timer\n-    migration_task           => T407130\n-    restart                  => False\n-    monitoring_enabled       => False\n-    monitoring_critical      => False\n-    override                 => False\n-    service_params           => {}\n"}, {"resource": "Systemd::Unit[nrpe2nodexp-minio_server.timer]", "parameters": "--- Systemd::Unit[nrpe2nodexp-minio_server.timer].orig\n+++ Systemd::Unit[nrpe2nodexp-minio_server.timer]\n\n-    restart           => False\n-    ensure            => absent\n-    unit              => nrpe2nodexp-minio_server.timer\n-    require           => ['Class[Systemd]']\n-    override_filename => puppet-override.conf\n-    override          => False\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 raid_megaraid]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 raid_megaraid].orig\n+++ Monitoring::Exported_nagios_service[backup1004 raid_megaraid]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "File[/etc/default/minio]", "content": "--- /etc/default/minio.orig\n+++ /etc/default/minio\n@@ -1,7 +0,0 @@\n-# Note: This file is managed by Puppet.\n-MINIO_VOLUMES=\"/srv/objectstorage\"\n-MINIO_OPTS=\"--address 10.64.0.56:9000 --console-address 10.64.0.56:9001\"\n-MINIO_ROOT_USER=\"auser\"\n-MINIO_ROOT_PASSWORD=\"dummypassword\"\n-MINIO_REGION_NAME=\"eqiad\"\n-MINIO_PROMETHEUS_AUTH_TYPE=\"public\"", "parameters": "--- File[/etc/default/minio].orig\n+++ File[/etc/default/minio]\n\n-    group     => minio-user\n-    ensure    => present\n-    owner     => minio-user\n-    require   => User[minio-user]\n-    mode      => 0440\n-    show_diff => False\n"}, {"resource": "File[/var/lib/prometheus/node.d/check_minio_server.prom]", "parameters": "--- File[/var/lib/prometheus/node.d/check_minio_server.prom].orig\n+++ File[/var/lib/prometheus/node.d/check_minio_server.prom]\n\n-    group  => root\n-    ensure => absent\n-    owner  => root\n"}, {"resource": "Motd::Script[insetup::data_persistence_ferm]", "parameters": "--- Motd::Script[insetup::data_persistence_ferm].orig\n+++ Motd::Script[insetup::data_persistence_ferm]\n\n+    ensure   => present\n+    priority => 5\n"}, {"resource": "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "parameters": "--- File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem].orig\n+++ File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]\n\n-    group  => root\n-    ensure => file\n-    owner  => minio-user\n-    mode   => 0440\n-    source => puppet:///modules/profile/pki/intermediates/discovery2026-cert.pem\n"}, {"resource": "File[/etc/sudoers.d/nrpe-check_minio_server]", "parameters": "--- File[/etc/sudoers.d/nrpe-check_minio_server].orig\n+++ File[/etc/sudoers.d/nrpe-check_minio_server]\n\n-    group   => root\n-    ensure  => absent\n-    owner   => root\n-    require => Package[nagios-nrpe-server]\n"}, {"resource": "File[/srv/objectstorage]", "parameters": "--- File[/srv/objectstorage].orig\n+++ File[/srv/objectstorage]\n\n-    group   => minio-user\n-    ensure  => directory\n-    owner   => minio-user\n-    require => User[minio-user]\n-    mode    => 0750\n"}, {"resource": "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]", "parameters": "--- Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)].orig\n+++ Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]\n\n-    refreshonly => True\n-    command     => /bin/systemctl daemon-reload\n"}, {"resource": "Systemd::Unit[nrpe2nodexp-minio_server.service]", "parameters": "--- Systemd::Unit[nrpe2nodexp-minio_server.service].orig\n+++ Systemd::Unit[nrpe2nodexp-minio_server.service]\n\n-    restart           => False\n-    ensure            => absent\n-    unit              => nrpe2nodexp-minio_server.service\n-    require           => ['Class[Systemd]']\n-    override_filename => puppet-override.conf\n-    override          => False\n"}, {"resource": "File[/srv/objectstorage/.minio/certs/private.key]", "parameters": "--- File[/srv/objectstorage/.minio/certs/private.key].orig\n+++ File[/srv/objectstorage/.minio/certs/private.key]\n\n-    group  => minio-user\n-    ensure => link\n-    owner  => minio-user\n-    target => /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem\n"}, {"resource": "Monitoring::Service[minio_server]", "parameters": "--- Monitoring::Service[minio_server].orig\n+++ Monitoring::Service[minio_server]\n\n-    passive        => False\n-    ensure         => present\n-    critical       => False\n-    check_interval => 1\n-    freshness      => 36000\n-    contact_group  => admins\n-    retries        => 3\n-    migration_task => T357099\n-    description    => MinIO server processes\n-    retry_interval => 1\n-    config_dir     => /etc/nagios\n-    host           => backup1004\n-    notes_url      => https://wikitech.wikimedia.org/wiki/Media_storage/Backups\n-    check_command  => nrpe_check!check_minio_server!10\n"}, {"resource": "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]", "parameters": "--- Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)].orig\n+++ Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]\n\n-    refreshonly => True\n-    command     => /bin/systemctl daemon-reload\n"}, {"resource": "Service[nrpe2nodexp-minio_server.timer]", "parameters": "--- Service[nrpe2nodexp-minio_server.timer].orig\n+++ Service[nrpe2nodexp-minio_server.timer]\n\n-    ensure   => stopped\n-    provider => systemd\n-    enable   => False\n-    before   => ['Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]']\n"}, {"resource": "Class[Cumin::Selector]", "parameters": "--- Class[Cumin::Selector].orig\n+++ Class[Cumin::Selector]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Sudo::User[nrpe-check_minio_server]", "parameters": "--- Sudo::User[nrpe-check_minio_server].orig\n+++ Sudo::User[nrpe-check_minio_server]\n\n-    ensure     => absent\n-    require    => ['Class[Sudo]']\n-    user       => nagios\n-    tag        => nrpe::check\n-    privileges => []\n"}, {"resource": "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem]", "parameters": "--- File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem].orig\n+++ File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem]\n\n-    group   => root\n-    ensure  => file\n-    owner   => minio-user\n-    require => Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]\n"}, {"resource": "Service[minio]", "parameters": "--- Service[minio].orig\n+++ Service[minio]\n\n-    ensure  => running\n-    require => ['Package[minio]', 'File[/etc/default/minio]']\n-    enable  => True\n"}, {"resource": "File[/etc/minio/ssl]", "parameters": "--- File[/etc/minio/ssl].orig\n+++ File[/etc/minio/ssl]\n\n-    group   => minio-user\n-    ensure  => directory\n-    owner   => minio-user\n-    require => ['File[/etc/minio]', 'User[minio-user]']\n-    mode    => 0700\n"}, {"resource": "Class[Profile::Base::Production]", "parameters": "--- Class[Profile::Base::Production].orig\n+++ Class[Profile::Base::Production]\n\n@@\n-    role_description => Media backups storage server\n+    role_description => Host being setup by Data Persistence SREs\n"}, {"resource": "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh]", "parameters": "--- Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh].orig\n+++ Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh]\n\n-    refreshonly => True\n-    subscribe   => File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]\n-    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup1004.eqiad.wmnet.pem -label discovery2026  /etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet\n\n-    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "Motd::Message[insetup::data_persistence_ferm]", "parameters": "--- Motd::Message[insetup::data_persistence_ferm].orig\n+++ Motd::Message[insetup::data_persistence_ferm]\n\n+    priority => 5\n+    message  => backup1004 is a Host being setup by Data Persistence SREs (insetup::data_persistence_ferm)\n+    ensure   => present\n"}, {"resource": "Ferm::Service[minio_console_mediabackup_workers]", "parameters": "--- Ferm::Service[minio_console_mediabackup_workers].orig\n+++ Ferm::Service[minio_console_mediabackup_workers]\n\n-    ensure              => present\n-    notrack             => False\n-    port                => 9001\n-    desc                => \n-    prio                => 10\n-    proto               => tcp\n-    unrestricted_access => False\n-    srange              => ['ms-backup1003.eqiad.wmnet', 'ms-backup1004.eqiad.wmnet']\n"}, {"resource": "Ferm::Service[minio_mediabackup_workers]", "parameters": "--- Ferm::Service[minio_mediabackup_workers].orig\n+++ Ferm::Service[minio_mediabackup_workers]\n\n-    ensure              => present\n-    notrack             => True\n-    port                => 9000\n-    desc                => \n-    prio                => 10\n-    proto               => tcp\n-    unrestricted_access => False\n-    srange              => ['ms-backup1003.eqiad.wmnet', 'ms-backup1004.eqiad.wmnet']\n"}, {"resource": "File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]", "content": "--- /etc/ferm/conf.d/10_minio_console_mediabackup_workers.orig\n+++ /etc/ferm/conf.d/10_minio_console_mediabackup_workers\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 9001, (10.64.0.66 10.64.179.2 2620:0:861:101:10:64:0:66 2620:0:861:139:10:64:179:2));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers].orig\n+++ File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]\n\n-    group   => root\n-    ensure  => present\n-    owner   => root\n-    require => File[/etc/ferm/conf.d]\n-    tag     => ferm\n-    mode    => 0400\n-    notify  => Service[ferm]\n"}, {"resource": "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet]", "parameters": "--- Exec[Generate cert discovery2026__backup1004_eqiad_wmnet].orig\n+++ Exec[Generate cert discovery2026__backup1004_eqiad_wmnet]\n\n-    unless      => /usr/bin/test \"$(/usr/bin/openssl x509 -in /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem -noout -pubkey 2>&1)\" == \"$(/usr/bin/openssl pkey -pubout -in /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem 2>&1)\"\n\n-    require     => Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]\n-    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup1004.eqiad.wmnet.pem -label discovery2026  /etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet\n\n-    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]", "parameters": "--- Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703].orig\n+++ Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]\n\n-    ensure             => absent\n-    for                => 3m\n-    alert_name         => nrpe_MinIO_server_processes\n-    logs               => https://logstash.wikimedia.org/app/dashboards#/view/2d343ac0-6df8-11f0-8e08-7fab0da52b33?_g=(filters:!((query:(match_phrase:(event.module:check_minio_server))),(query:(match_phrase:(host.name:{{$labels.instance|stripPort}})))))\n-    description        => NRPE CHECK: MinIO server processes\n-    instance           => ops\n-    group              => nrpechecks\n-    runbook            => https://wikitech.wikimedia.org/wiki/Media_storage/Backups\n-    expr               => (nagios_nrpe_check_result{alert_rule_hash=\"afd847791207995d7987063926084703\",check_name=\"check_minio_server\", status=~\"(WARNING|CRITICAL)\", severity=~\"(warning|critical)\"} > 0) * on (instance) group_left (team) role_owner\n-    def_label_whitelst => ['team', 'severity']\n-    site               => eqiad\n-    team               => observability\n-    severity           => info\n-    dashboard          => TODO\n-    summary            => NRPE CHECK: MinIO server processes\n"}, {"resource": "Class[Profile::Monitoring]", "parameters": "--- Class[Profile::Monitoring].orig\n+++ Class[Profile::Monitoring]\n\n@@\n-    nagios_group          => backup_eqiad\n+    nagios_group          => insetup_eqiad\n@@\n-    notifications_enabled => True\n+    notifications_enabled => False\n@@\n-    cluster               => backup\n+    cluster               => insetup\n"}, {"resource": "Systemd::Sysuser[minio-user]", "parameters": "--- Systemd::Sysuser[minio-user].orig\n+++ Systemd::Sysuser[minio-user]\n\n-    ensure            => present\n-    usertype          => user\n-    home_dir          => /srv/objectstorage\n-    id                => -\n-    additional_groups => []\n-    username          => minio-user\n-    allow_login       => False\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 ssh]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 ssh].orig\n+++ Monitoring::Exported_nagios_service[backup1004 ssh]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Concat::Fragment[main contacts]"}, {"resource": "File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]", "content": "--- /lib/systemd/system/nrpe2nodexp-minio_server.timer.orig\n+++ /lib/systemd/system/nrpe2nodexp-minio_server.timer\n@@ -1,14 +0,0 @@\n-[Unit]\n-Description=Periodic execution of nrpe2nodexp-minio_server.service\n-\n-[Timer]\n-Unit=nrpe2nodexp-minio_server.service\n-# Accuracy sets the maximum time interval around the execution time we want to allow\n-AccuracySec=15sec\n-OnUnitInactiveSec=1min\n-OnActiveSec=1s\n-RandomizedDelaySec=60\n-FixedRandomDelay=true\n-\n-[Install]\n-WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/nrpe2nodexp-minio_server.timer].orig\n+++ File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]\n\n-    group  => root\n-    ensure => absent\n-    owner  => root\n-    mode   => 0444\n-    notify => Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]\n"}, {"resource": "File[/etc/update-motd.d/05-mediabackup--storage]", "content": "--- /etc/update-motd.d/05-mediabackup--storage.orig\n+++ /etc/update-motd.d/05-mediabackup--storage\n@@ -1,2 +0,0 @@\n-#!/bin/sh\n-printf \"%s\\n\" \"backup1004 is a Media backups storage server (mediabackup::storage)\"", "parameters": "--- File[/etc/update-motd.d/05-mediabackup--storage].orig\n+++ File[/etc/update-motd.d/05-mediabackup--storage]\n\n-    mode   => 0555\n-    ensure => present\n-    owner  => root\n-    group  => root\n"}, {"resource": "Exec[update-sysusers-minio-user]", "parameters": "--- Exec[update-sysusers-minio-user].orig\n+++ Exec[update-sysusers-minio-user]\n\n-    provider => shell\n-    onlyif   => test -n \"$(systemd-sysusers --dry-run /etc/sysusers.d/minio-user.conf 2>&1)\"\n-    path     => /usr/bin:/usr/sbin:/bin\n-    user     => root\n-    command  => /bin/systemd-sysusers /etc/sysusers.d/minio-user.conf\n"}, {"resource": "Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "parameters": "--- Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem].orig\n+++ Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]\n\n-    unless    => /usr/bin/test \"$(/bin/cat /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem | sha512sum)\" == \"$(/bin/cat /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem | sha512sum)\"\n\n-    require   => Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change]\n-    subscribe => ['Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet]', 'File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]', 'File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem]']\n-    command   => /bin/cat /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem > /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem\n"}, {"resource": "Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "parameters": "--- Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr].orig\n+++ Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]\n\n-    ensure      => present\n-    hosts       => ['backup1004', 'backup1004.eqiad.wmnet', '127.0.0.1', '::1', 'localhost']\n-    names       => []\n-    key         => {'algo': 'ecdsa', 'size': 256}\n-    common_name => backup1004.eqiad.wmnet\n"}, {"resource": "Cfssl::Cert[discovery2026__backup1004_eqiad_wmnet]", "parameters": "--- Cfssl::Cert[discovery2026__backup1004_eqiad_wmnet].orig\n+++ Cfssl::Cert[discovery2026__backup1004_eqiad_wmnet]\n\n-    ensure          => present\n-    require         => ['User[minio-user]', 'File[/etc/minio/ssl]']\n-    label           => discovery2026\n-    environment     => ['GODEBUG=x509ignoreCN=0']\n-    common_name     => backup1004.eqiad.wmnet\n-    group           => root\n-    auto_renew      => True\n-    provide_chain   => True\n-    before_services => []\n-    names           => []\n-    renew_seconds   => 952200\n-    notify_services => []\n-    owner           => minio-user\n-    outdir          => /etc/minio/ssl\n-    hosts           => ['backup1004', 'backup1004.eqiad.wmnet', '127.0.0.1', '::1', 'localhost']\n-    notify          => Service[minio]\n-    mode            => 0740\n-    key             => {'algo': 'ecdsa', 'size': 256}\n"}, {"resource": "Nrpe::Check[check_minio_server]", "parameters": "--- Nrpe::Check[check_minio_server].orig\n+++ Nrpe::Check[check_minio_server]\n\n-    ensure  => present\n-    command => /usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server\n-    before  => Monitoring::Service[minio_server]\n"}, {"resource": "Package[minio]", "parameters": "--- Package[minio].orig\n+++ Package[minio]\n\n-    ensure   => installed\n-    provider => apt\n"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[minio]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 raid_md]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 raid_md].orig\n+++ Monitoring::Exported_nagios_service[backup1004 raid_md]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Systemd::Timer[nrpe2nodexp-minio_server]", "parameters": "--- Systemd::Timer[nrpe2nodexp-minio_server].orig\n+++ Systemd::Timer[nrpe2nodexp-minio_server]\n\n-    ensure             => absent\n-    fixed_random_delay => True\n-    accuracy           => 15sec\n-    splay              => 60\n-    timer_intervals    => [{'start': 'OnUnitInactiveSec', 'interval': '1min'}, {'interval': '1s', 'start': 'OnActiveSec'}]\n-    unit_name          => nrpe2nodexp-minio_server.service\n"}, {"resource": "File[/etc/sysusers.d/minio-user.conf]", "content": "--- /etc/sysusers.d/minio-user.conf.orig\n+++ /etc/sysusers.d/minio-user.conf\n@@ -1 +0,0 @@\n-u\tminio-user\t-\t-\t/srv/objectstorage\t-", "parameters": "--- File[/etc/sysusers.d/minio-user.conf].orig\n+++ File[/etc/sysusers.d/minio-user.conf]\n\n-    group   => root\n-    ensure  => file\n-    owner   => root\n-    require => File[/etc/sysusers.d]\n-    mode    => 0444\n"}, {"resource": "Class[Mediabackup::Storage]", "parameters": "--- Class[Mediabackup::Storage].orig\n+++ Class[Mediabackup::Storage]\n\n-    root_user     => auser\n-    cert_path     => /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem\n-    config_dir    => /etc/minio\n-    port          => 9000\n-    console_port  => 9001\n-    root_password => dummypassword\n-    storage_path  => /srv/objectstorage\n-    key_path      => /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem\n"}, {"resource": "Monitoring::Exported_nagios_host[backup1004]", "parameters": "--- Monitoring::Exported_nagios_host[backup1004].orig\n+++ Monitoring::Exported_nagios_host[backup1004]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    hostgroups            => backup_eqiad,asw2-a-eqiad\n+    hostgroups            => insetup_eqiad,asw2-a-eqiad\n"}, {"resource": "Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet]", "parameters": "--- Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet].orig\n+++ Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet]\n\n-    unless      => /usr/bin/openssl x509 -in /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem -checkend 952200\n-    require     => Exec[Generate cert discovery2026__backup1004_eqiad_wmnet]\n-    command     => /usr/bin/cfssl sign -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup1004.eqiad.wmnet.pem -label discovery2026  /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet\n\n-    environment => ['GODEBUG=x509ignoreCN=0']\n"}, {"resource": "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr]", "parameters": "--- File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr].orig\n+++ File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr]\n\n-    group  => root\n-    ensure => file\n-    owner  => minio-user\n-    mode   => 0440\n"}, {"resource": "Firewall::Service[minio-mediabackup-workers]", "parameters": "--- Firewall::Service[minio-mediabackup-workers].orig\n+++ Firewall::Service[minio-mediabackup-workers]\n\n-    ensure              => present\n-    notrack             => True\n-    port                => 9000\n-    desc                => \n-    prio                => 10\n-    proto               => tcp\n-    unrestricted_access => False\n-    srange              => ['ms-backup1003.eqiad.wmnet', 'ms-backup1004.eqiad.wmnet']\n"}, {"resource": "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem]", "parameters": "--- File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem].orig\n+++ File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem]\n\n-    group  => root\n-    ensure => file\n-    owner  => minio-user\n-    mode   => 0440\n"}, {"resource": "Motd::Message[mediabackup::storage]", "parameters": "--- Motd::Message[mediabackup::storage].orig\n+++ Motd::Message[mediabackup::storage]\n\n-    priority => 5\n-    message  => backup1004 is a Media backups storage server (mediabackup::storage)\n-    ensure   => present\n"}, {"resource": "Class[Monitoring]", "parameters": "--- Class[Monitoring].orig\n+++ Class[Monitoring]\n\n@@\n-    nagios_group          => backup_eqiad\n+    nagios_group          => insetup_eqiad\n@@\n-    notifications_enabled => True\n+    notifications_enabled => False\n@@\n-    cluster               => backup\n+    cluster               => insetup\n"}, {"resource": "Class[Profile::Cumin::Target]", "parameters": "--- Class[Profile::Cumin::Target].orig\n+++ Class[Profile::Cumin::Target]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Class[Profile::Contacts]", "parameters": "--- Class[Profile::Contacts].orig\n+++ Class[Profile::Contacts]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "File[/etc/update-motd.d/05-insetup--data-persistence-ferm]", "content": "--- /etc/update-motd.d/05-insetup--data-persistence-ferm.orig\n+++ /etc/update-motd.d/05-insetup--data-persistence-ferm\n@@ -0,0 +1,2 @@\n+#!/bin/sh\n+printf \"%s\\n\" \"backup1004 is a Host being setup by Data Persistence SREs (insetup::data_persistence_ferm)\"", "parameters": "--- File[/etc/update-motd.d/05-insetup--data-persistence-ferm].orig\n+++ File[/etc/update-motd.d/05-insetup--data-persistence-ferm]\n\n+    mode   => 0555\n+    ensure => present\n+    owner  => root\n+    group  => root\n"}, {"resource": "Concat_fragment[main contacts]", "content": "--- main contacts.orig\n+++ main contacts\n@@ -1,3 +1,3 @@\n ---\n-role::mediabackup::storage:\n+role::insetup::data_persistence_ferm:\n - Data Persistence"}, {"resource": "Rsyslog::Conf[nrpe2nodexp-minio_server]", "parameters": "--- Rsyslog::Conf[nrpe2nodexp-minio_server].orig\n+++ Rsyslog::Conf[nrpe2nodexp-minio_server]\n\n-    mode     => 0444\n-    ensure   => absent\n-    priority => 25\n"}, {"resource": "Class[Profile::Mediabackup::Storage]", "parameters": "--- Class[Profile::Mediabackup::Storage].orig\n+++ Class[Profile::Mediabackup::Storage]\n\n-    mediabackup_config => {'mw_db_password': 'notsecret', 'db_password': 'notsecret', 'storage_root_user': 'auser', 'storage_root_password': 'dummypassword', 'encryption_key': '# created: 2021-11-29T11:50:16+01:00\\n# public key: public\\nAGE-SECRET-KEY-private\"\\n', 'access_key': 's3user', 'secret_key': 's3key', 'recovery_access_key': 's3userForFileRestores', 'recovery_secret_key': 's3keyForFileRestores', 'batchsize': 100, 'dblists_path': '/srv/mediawiki-config/dblists', 'mw_db_config_file': '/etc/mediabackup/mw_db.ini', 'db_config_file': '/etc/mediabackup/mediabackups_db.ini', 'storage_path': '/srv/objectstorage', 'storage_port': 9000, 'console_port': 9001, 'sections': {'s1': {'host': 'db1239.eqiad.wmnet', 'port': 3311}, 's2': {'host': 'db1239.eqiad.wmnet', 'port': 3312}, 's3': {'host': 'db1150.eqiad.wmnet', 'port': 3313}, 's4': {'host': 'db1245.eqiad.wmnet', 'port': 3314}, 's5': {'host': 'db1245.eqiad.wmnet', 'port': 3315}, 's6': {'host': 'db1225.eqiad.wmnet', 'port': 3316}, 's7': {'host': 'db1171.eqiad.wmnet', 'port': 3317}, 's8': {'host': 'db1171.eqiad.wmnet', 'port': 3318}}, 'mw_db_user': 'mediabackup', 'db_host': 'db1204.eqiad.wmnet', 'db_port': 3306, 'db_user': 'mediabackup', 'db_schema': 'mediabackups', 'worker_hosts': ['ms-backup1003.eqiad.wmnet', 'ms-backup1004.eqiad.wmnet'], 'storage_hosts': ['backup1004.eqiad.wmnet:9000', 'backup1005.eqiad.wmnet:9000', 'backup1006.eqiad.wmnet:9000', 'backup1007.eqiad.wmnet:9000', 'backup1011.eqiad.wmnet:9000', 'backup1010.eqiad.wmnet:9000', 'backup1015.eqiad.wmnet:9000', 'backup1015.eqiad.wmnet:9001', 'backup1015.eqiad.wmnet:9002', 'backup1015.eqiad.wmnet:9003', 'backup1016.eqiad.wmnet:9000', 'backup1016.eqiad.wmnet:9001', 'backup1016.eqiad.wmnet:9002', 'backup1016.eqiad.wmnet:9003', 'backup1017.eqiad.wmnet:9000', 'backup1017.eqiad.wmnet:9001', 'backup1017.eqiad.wmnet:9002', 'backup1017.eqiad.wmnet:9003', 'backup1018.eqiad.wmnet:9000', 'backup1018.eqiad.wmnet:9001', 'backup1018.eqiad.wmnet:9002', 'backup1018.eqiad.wmnet:9003', 'backup1019.eqiad.wmnet:9000', 'backup1019.eqiad.wmnet:9001', 'backup1019.eqiad.wmnet:9002', 'backup1019.eqiad.wmnet:9003', 'backup1020.eqiad.wmnet:9000', 'backup1020.eqiad.wmnet:9001', 'backup1020.eqiad.wmnet:9002', 'backup1020.eqiad.wmnet:9003']}\n"}, {"resource": "Nftables::Service[minio-mediabackup-workers]", "parameters": "--- Nftables::Service[minio-mediabackup-workers].orig\n+++ Nftables::Service[minio-mediabackup-workers]\n\n-    ensure              => present\n-    notrack             => True\n-    port                => 9000\n-    desc                => \n-    src_ips             => ['10.64.0.66', '10.64.179.2', '2620:0:861:101:10:64:0:66', '2620:0:861:139:10:64:179:2']\n-    prio                => 10\n-    proto               => tcp\n-    unrestricted_access => False\n"}, {"resource": "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem]", "parameters": "--- File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem].orig\n+++ File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem]\n\n-    group     => root\n-    ensure    => file\n-    owner     => minio-user\n-    backup    => False\n-    mode      => 0440\n-    show_diff => False\n"}, {"resource": "Nrpe::Monitor_service[minio_server]", "parameters": "--- Nrpe::Monitor_service[minio_server].orig\n+++ Nrpe::Monitor_service[minio_server]\n\n-    critical                    => False\n-    ensure                      => present\n-    check_interval              => 1\n-    alertmanager_team           => observability\n-    contact_group               => admins\n-    timeout                     => 10\n-    migration_task              => T357099\n-    retries                     => 3\n-    enable_nrpe2nodexp          => False\n-    description                 => MinIO server processes\n-    retry_interval              => 1\n-    notes_url                   => https://wikitech.wikimedia.org/wiki/Media_storage/Backups\n-    nrpe_command                => /usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server\n-    enable_icinga_check         => True\n-    nrpe2nodexp_parse_perf_data => False\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[minio]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "content": "--- /etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr.orig\n+++ /etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr\n@@ -1,17 +0,0 @@\n-{\n-  \"CN\": \"backup1004.eqiad.wmnet\",\n-  \"hosts\": [\n-    \"backup1004\",\n-    \"backup1004.eqiad.wmnet\",\n-    \"127.0.0.1\",\n-    \"::1\",\n-    \"localhost\"\n-  ],\n-  \"key\": {\n-    \"algo\": \"ecdsa\",\n-    \"size\": 256\n-  },\n-  \"names\": [\n-\n-  ]\n-}", "parameters": "--- File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr].orig\n+++ File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]\n\n-    group  => root\n-    ensure => file\n-    owner  => root\n-    mode   => 0400\n"}, {"resource": "Motd::Script[mediabackup::storage]", "parameters": "--- Motd::Script[mediabackup::storage].orig\n+++ Motd::Script[mediabackup::storage]\n\n-    ensure   => present\n-    priority => 5\n"}, {"resource": "File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]", "content": "--- /etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf.orig\n+++ /etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf\n@@ -1,10 +0,0 @@\n-# SPDX-License-Identifier: Apache-2.0\n-if $programname contains \"nrpe2nodexp-minio_server\" then {\n-    if ($msg contains \"\\\"ecs.version\\\": \\\"1.7.0\\\"\") then {\n-        # Send logs to kafka\n-        set $.log_outputs = \"kafka ecs_170 local\";\n-    } else {\n-        # Filter out non-relevant nrpe2nodexp messages\n-        stop\n-    }\n-}", "parameters": "--- File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf].orig\n+++ File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]\n\n-    group  => root\n-    ensure => absent\n-    owner  => root\n-    mode   => 0444\n-    notify => Service[rsyslog]\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 ferm_active]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 ferm_active].orig\n+++ Monitoring::Exported_nagios_service[backup1004 ferm_active]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}], "perc_changed": "5.04%"}, "core": {"total": 2936, "only_in_self": ["Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet]", "Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet]", "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]", "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]", "Exec[update-sysusers-minio-user]", "File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "File[/etc/default/minio]", "File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]", "File[/etc/ferm/conf.d/10_minio_mediabackup_workers]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem]", "File[/etc/minio/ssl]", "File[/etc/minio]", "File[/etc/nagios/nrpe.d/check_minio_server.cfg]", "File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]", "File[/etc/sudoers.d/nrpe-check_minio_server]", "File[/etc/sysusers.d/minio-user.conf]", "File[/etc/update-motd.d/05-mediabackup--storage]", "File[/lib/systemd/system/nrpe2nodexp-minio_server.service]", "File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]", "File[/srv/objectstorage/.minio/certs/private.key]", "File[/srv/objectstorage/.minio/certs/public.crt]", "File[/srv/objectstorage/.minio/certs]", "File[/srv/objectstorage/.minio]", "File[/srv/objectstorage]", "File[/var/lib/prometheus/node.d/check_minio_server.prom]", "Package[minio]", "Service[minio]", "Service[nrpe2nodexp-minio_server.timer]", "User[minio-user]"], "only_in_other": ["File[/etc/update-motd.d/05-insetup--data-persistence-ferm]"], "resource_diffs": [{"resource": "File[/var/lib/prometheus/node.d/role_owner.prom]", "content": "--- /var/lib/prometheus/node.d/role_owner.prom.orig\n+++ /var/lib/prometheus/node.d/role_owner.prom\n@@ -1,3 +1,3 @@\n # HELP role_owner The team owner of the server role\n # TYPE role_owner gauge\n-role_owner{team=\"data-persistence\",role=\"mediabackup::storage\",cluster=\"backup\"} 1.0\n+role_owner{team=\"data-persistence\",role=\"insetup::data_persistence_ferm\",cluster=\"insetup\"} 1.0"}, {"resource": "Concat_fragment[main contacts]", "content": "--- main contacts.orig\n+++ main contacts\n@@ -1,3 +1,3 @@\n ---\n-role::mediabackup::storage:\n+role::insetup::data_persistence_ferm:\n - Data Persistence"}], "perc_changed": "1.33%"}, "main": {"total": 2936, "only_in_self": ["Cfssl::Cert[discovery2026__backup1004_eqiad_wmnet]", "Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "Class[Mediabackup::Storage]", "Class[Profile::Mediabackup::Storage]", "Class[Role::Mediabackup::Storage]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh on intermediate ca change]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet refresh]", "Exec[Generate cert discovery2026__backup1004_eqiad_wmnet]", "Exec[create chained cert /etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "Exec[renew certificate - discovery2026__backup1004_eqiad_wmnet]", "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]", "Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]", "Exec[update-sysusers-minio-user]", "Ferm::Service[minio_console_mediabackup_workers]", "Ferm::Service[minio_mediabackup_workers]", "File[/etc/cfssl/csr/discovery2026__backup1004_eqiad_wmnet.csr]", "File[/etc/default/minio]", "File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]", "File[/etc/ferm/conf.d/10_minio_mediabackup_workers]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet-key.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chain.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.chained.pem]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.csr]", "File[/etc/minio/ssl/discovery2026__backup1004_eqiad_wmnet.pem]", "File[/etc/minio/ssl]", "File[/etc/minio]", "File[/etc/nagios/nrpe.d/check_minio_server.cfg]", "File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]", "File[/etc/sudoers.d/nrpe-check_minio_server]", "File[/etc/sysusers.d/minio-user.conf]", "File[/etc/update-motd.d/05-mediabackup--storage]", "File[/lib/systemd/system/nrpe2nodexp-minio_server.service]", "File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]", "File[/srv/objectstorage/.minio/certs/private.key]", "File[/srv/objectstorage/.minio/certs/public.crt]", "File[/srv/objectstorage/.minio/certs]", "File[/srv/objectstorage/.minio]", "File[/srv/objectstorage]", "File[/var/lib/prometheus/node.d/check_minio_server.prom]", "Firewall::Service[minio-console-mediabackup-workers]", "Firewall::Service[minio-mediabackup-workers]", "Monitoring::Exported_nagios_service[backup1004 minio_server]", "Monitoring::Service[minio_server]", "Motd::Message[mediabackup::storage]", "Motd::Script[mediabackup::storage]", "Nftables::Service[minio-console-mediabackup-workers]", "Nftables::Service[minio-mediabackup-workers]", "Nrpe::Check[check_minio_server]", "Nrpe::Monitor_service[minio_server]", "Package[minio]", "Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]", "Rsyslog::Conf[nrpe2nodexp-minio_server]", "Service[minio]", "Service[nrpe2nodexp-minio_server.timer]", "Sudo::User[nrpe-check_minio_server]", "Systemd::Service[nrpe2nodexp-minio_server]", "Systemd::Sysuser[minio-user]", "Systemd::Timer::Job[nrpe2nodexp-minio_server]", "Systemd::Timer[nrpe2nodexp-minio_server]", "Systemd::Unit[nrpe2nodexp-minio_server.service]", "Systemd::Unit[nrpe2nodexp-minio_server.timer]", "User[minio-user]"], "only_in_other": ["Class[Role::Insetup::Data_persistence_ferm]", "File[/etc/update-motd.d/05-insetup--data-persistence-ferm]", "Motd::Message[insetup::data_persistence_ferm]", "Motd::Script[insetup::data_persistence_ferm]"], "resource_diffs": [{"resource": "File[/var/lib/prometheus/node.d/role_owner.prom]", "content": "--- /var/lib/prometheus/node.d/role_owner.prom.orig\n+++ /var/lib/prometheus/node.d/role_owner.prom\n@@ -1,3 +1,3 @@\n # HELP role_owner The team owner of the server role\n # TYPE role_owner gauge\n-role_owner{team=\"data-persistence\",role=\"mediabackup::storage\",cluster=\"backup\"} 1.0\n+role_owner{team=\"data-persistence\",role=\"insetup::data_persistence_ferm\",cluster=\"insetup\"} 1.0"}, {"resource": "Class[Profile::Monitoring]", "parameters": "--- Class[Profile::Monitoring].orig\n+++ Class[Profile::Monitoring]\n\n@@\n-    nagios_group          => backup_eqiad\n+    nagios_group          => insetup_eqiad\n@@\n-    notifications_enabled => True\n+    notifications_enabled => False\n@@\n-    cluster               => backup\n+    cluster               => insetup\n"}, {"resource": "Class[Profile::Base]", "parameters": "--- Class[Profile::Base].orig\n+++ Class[Profile::Base]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 ssh]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 ssh].orig\n+++ Monitoring::Exported_nagios_service[backup1004 ssh]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 disk_space]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 disk_space].orig\n+++ Monitoring::Exported_nagios_service[backup1004 disk_space]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Concat::Fragment[main contacts]"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[minio]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 raid_md]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 raid_md].orig\n+++ Monitoring::Exported_nagios_service[backup1004 raid_md]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Monitoring::Exported_nagios_host[backup1004]", "parameters": "--- Monitoring::Exported_nagios_host[backup1004].orig\n+++ Monitoring::Exported_nagios_host[backup1004]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    hostgroups            => backup_eqiad,asw2-a-eqiad\n+    hostgroups            => insetup_eqiad,asw2-a-eqiad\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 raid_megaraid]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 raid_megaraid].orig\n+++ Monitoring::Exported_nagios_service[backup1004 raid_megaraid]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Class[Monitoring]", "parameters": "--- Class[Monitoring].orig\n+++ Class[Monitoring]\n\n@@\n-    nagios_group          => backup_eqiad\n+    nagios_group          => insetup_eqiad\n@@\n-    notifications_enabled => True\n+    notifications_enabled => False\n@@\n-    cluster               => backup\n+    cluster               => insetup\n"}, {"resource": "Class[Profile::Cumin::Target]", "parameters": "--- Class[Profile::Cumin::Target].orig\n+++ Class[Profile::Cumin::Target]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Class[Profile::Contacts]", "parameters": "--- Class[Profile::Contacts].orig\n+++ Class[Profile::Contacts]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Concat_fragment[main contacts]", "content": "--- main contacts.orig\n+++ main contacts\n@@ -1,3 +1,3 @@\n ---\n-role::mediabackup::storage:\n+role::insetup::data_persistence_ferm:\n - Data Persistence"}, {"resource": "Class[Cumin::Selector]", "parameters": "--- Class[Cumin::Selector].orig\n+++ Class[Cumin::Selector]\n\n@@\n-    cluster => backup\n+    cluster => insetup\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[minio]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']\n"}, {"resource": "Monitoring::Exported_nagios_service[backup1004 ferm_active]", "parameters": "--- Monitoring::Exported_nagios_service[backup1004 ferm_active].orig\n+++ Monitoring::Exported_nagios_service[backup1004 ferm_active]\n\n@@\n-    notifications_enabled => 1\n+    notifications_enabled => 0\n@@\n-    servicegroups         => backup_eqiad\n+    servicegroups         => insetup_eqiad\n"}, {"resource": "Class[Profile::Base::Production]", "parameters": "--- Class[Profile::Base::Production].orig\n+++ Class[Profile::Base::Production]\n\n@@\n-    role_description => Media backups storage server\n+    role_description => Host being setup by Data Persistence SREs\n"}], "perc_changed": "2.86%"}}}