Compilation results for backup2007.codfw.wmnet: System changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	2936
Resources added:	4
Resources removed:	62
Resources modified:	82
Change percentage:	5.04%

Resources only in the new catalog

Motd::Message[insetup::data_persistence_ferm]
Class[Role::Insetup::Data_persistence_ferm]
File[/etc/update-motd.d/05-insetup--data-persistence-ferm]
Motd::Script[insetup::data_persistence_ferm]

Resources only in the old catalog

Exec[create chained cert /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]
File[/etc/minio]
Rsyslog::Conf[nrpe2nodexp-minio_server]
File[/etc/sysusers.d/minio-user.conf]
Nftables::Service[minio-mediabackup-workers]
Nftables::Service[minio-console-mediabackup-workers]
Monitoring::Exported_nagios_service[backup2007 minio_server]
Package[minio]
Systemd::Unit[nrpe2nodexp-minio_server.timer]
Systemd::Sysuser[minio-user]
File[/srv/objectstorage/.minio/certs/public.crt]
File[/srv/objectstorage/.minio/certs/private.key]
Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]
Cfssl::Cert[discovery2026__backup2007_codfw_wmnet]
File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem]
Systemd::Unit[nrpe2nodexp-minio_server.service]
File[/srv/objectstorage/.minio/certs]
File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]
File[/etc/update-motd.d/05-mediabackup--storage]
User[minio-user]
Systemd::Service[nrpe2nodexp-minio_server]
File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]
File[/lib/systemd/system/nrpe2nodexp-minio_server.service]
Monitoring::Service[minio_server]
File[/etc/minio/ssl]
File[/etc/nagios/nrpe.d/check_minio_server.cfg]
Firewall::Service[minio-mediabackup-workers]
Class[Mediabackup::Storage]
Class[Role::Mediabackup::Storage]
Exec[Generate cert discovery2026__backup2007_codfw_wmnet]
Ferm::Service[minio_console_mediabackup_workers]
File[/srv/objectstorage/.minio]
File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]
File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]
Exec[renew certificate - discovery2026__backup2007_codfw_wmnet]
Motd::Script[mediabackup::storage]
Service[minio]
File[/etc/sudoers.d/nrpe-check_minio_server]
File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem]
Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh]
Firewall::Service[minio-console-mediabackup-workers]
File[/var/lib/prometheus/node.d/check_minio_server.prom]
Service[nrpe2nodexp-minio_server.timer]
File[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]
File[/etc/default/minio]
Sudo::User[nrpe-check_minio_server]
Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]
Nrpe::Check[check_minio_server]
Motd::Message[mediabackup::storage]
File[/srv/objectstorage]
File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem]
Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh on intermediate ca change]
Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]
Systemd::Timer[nrpe2nodexp-minio_server]
File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.csr]
Ferm::Service[minio_mediabackup_workers]
Exec[update-sysusers-minio-user]
Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]
Class[Profile::Mediabackup::Storage]
Nrpe::Monitor_service[minio_server]
Systemd::Timer::Job[nrpe2nodexp-minio_server]
File[/etc/ferm/conf.d/10_minio_mediabackup_workers]

Resources modified

File[/var/lib/prometheus/node.d/role_owner.prom]

Content differences:

--- /var/lib/prometheus/node.d/role_owner.prom.orig
+++ /var/lib/prometheus/node.d/role_owner.prom
@@ -1,3 +1,3 @@
 # HELP role_owner The team owner of the server role
 # TYPE role_owner gauge
-role_owner{team="data-persistence",role="mediabackup::storage",cluster="backup"} 1.0
+role_owner{team="data-persistence",role="insetup::data_persistence_ferm",cluster="insetup"} 1.0

Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]

Parameters differences:

--- Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr].orig
+++ Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]

-    ensure      => present
-    hosts       => ['backup2007', 'backup2007.codfw.wmnet', '127.0.0.1', '::1', 'localhost']
-    names       => []
-    key         => {'algo': 'ecdsa', 'size': 256}
-    common_name => backup2007.codfw.wmnet

Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh on intermediate ca change]

Parameters differences:

--- Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh on intermediate ca change].orig
+++ Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh on intermediate ca change]

-    require     => Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]
-    subscribe   => File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]
-    environment => ['GODEBUG=x509ignoreCN=0']
-    refreshonly => True
-    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup2007.codfw.wmnet.pem -label discovery2026  /etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet

File[/etc/nagios/nrpe.d/check_minio_server.cfg]

Parameters differences:

--- File[/etc/nagios/nrpe.d/check_minio_server.cfg].orig
+++ File[/etc/nagios/nrpe.d/check_minio_server.cfg]

-    group   => root
-    ensure  => present
-    owner   => root
-    require => Package[nagios-nrpe-server]
-    tag     => nrpe::check
-    mode    => 0444
-    notify  => Service[nagios-nrpe-server]

Content differences:

--- /etc/nagios/nrpe.d/check_minio_server.cfg.orig
+++ /etc/nagios/nrpe.d/check_minio_server.cfg
@@ -1,2 +0,0 @@
-# File generated by puppet. DO NOT edit by hand
-command[check_minio_server]=/usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server

Class[Profile::Base]

Parameters differences:

--- Class[Profile::Base].orig
+++ Class[Profile::Base]

@@
-    cluster => backup
+    cluster => insetup

Systemd::Timer::Job[nrpe2nodexp-minio_server]

Parameters differences:

--- Systemd::Timer::Job[nrpe2nodexp-minio_server].orig
+++ Systemd::Timer::Job[nrpe2nodexp-minio_server]

-    ensure                    => absent
-    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
-    logfile_name              => syslog.log
-    environment               => {}
-    send_mail_only_on_error   => True
-    syslog_identifier         => nrpe2nodexp-minio_server
-    monitoring_contact_groups => admins
-    logfile_group             => root
-    group                     => prometheus-node-exporter
-    user                      => nagios
-    private_tmp               => False
-    fixed_random_delay        => True
-    syslog_match_startswith   => True
-    send_mail_to              => root@backup2007.codfw.wmnet
-    splay                     => 60
-    syslog_force_stop         => True
-    logging_enabled           => False
-    send_mail                 => False
-    ignore_errors             => True
-    interval                  => [{'start': 'OnUnitInactiveSec', 'interval': '1min'}]
-    command                   => /usr/local/bin/nrpe2nodexp --alert-rule-hash "afd847791207995d7987063926084703" --timeout 10 --check-command "check_minio_server"
-    description               => execution of nrpe2nodexp for the check_minio_server command.
-    monitoring_enabled        => False
-    logfile_basedir           => /var/log
-    success_exit_status       => []
-    logfile_perms             => all

File[/srv/objectstorage/.minio]

Parameters differences:

--- File[/srv/objectstorage/.minio].orig
+++ File[/srv/objectstorage/.minio]

-    group   => minio-user
-    ensure  => directory
-    owner   => minio-user
-    require => File[/srv/objectstorage]
-    mode    => 0700

Exec[create chained cert /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]

Parameters differences:

--- Exec[create chained cert /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem].orig
+++ Exec[create chained cert /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]

-    unless    => /usr/bin/test "$(/bin/cat /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem | sha512sum)" == "$(/bin/cat /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem | sha512sum)"

-    require   => Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh on intermediate ca change]
-    subscribe => ['Exec[renew certificate - discovery2026__backup2007_codfw_wmnet]', 'File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]', 'File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem]']
-    command   => /bin/cat /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem > /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem

Firewall::Service[minio-console-mediabackup-workers]

Parameters differences:

--- Firewall::Service[minio-console-mediabackup-workers].orig
+++ Firewall::Service[minio-console-mediabackup-workers]

-    ensure              => present
-    notrack             => False
-    port                => 9001
-    desc                => 
-    prio                => 10
-    proto               => tcp
-    unrestricted_access => False
-    srange              => ['ms-backup2003.codfw.wmnet', 'ms-backup2004.codfw.wmnet']

Monitoring::Exported_nagios_service[backup2007 ferm_active]

Parameters differences:

--- Monitoring::Exported_nagios_service[backup2007 ferm_active].orig
+++ Monitoring::Exported_nagios_service[backup2007 ferm_active]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => backup_codfw
+    servicegroups         => insetup_codfw

File[/lib/systemd/system/nrpe2nodexp-minio_server.service]

Parameters differences:

--- File[/lib/systemd/system/nrpe2nodexp-minio_server.service].orig
+++ File[/lib/systemd/system/nrpe2nodexp-minio_server.service]

-    group  => root
-    ensure => absent
-    owner  => root
-    mode   => 0444
-    notify => Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]

Content differences:

--- /lib/systemd/system/nrpe2nodexp-minio_server.service.orig
+++ /lib/systemd/system/nrpe2nodexp-minio_server.service
@@ -1,11 +0,0 @@
-[Unit]
-Description=execution of nrpe2nodexp for the check_minio_server command.
-Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
-
-[Service]
-Type=oneshot
-User=nagios
-
-Group=prometheus-node-exporter
-SyslogIdentifier=nrpe2nodexp-minio_server
-ExecStart=-/usr/local/bin/nrpe2nodexp --alert-rule-hash "afd847791207995d7987063926084703" --timeout 10 --check-command "check_minio_server"

File[/etc/ferm/conf.d/10_minio_mediabackup_workers]

Parameters differences:

--- File[/etc/ferm/conf.d/10_minio_mediabackup_workers].orig
+++ File[/etc/ferm/conf.d/10_minio_mediabackup_workers]

-    group   => root
-    ensure  => present
-    owner   => root
-    require => File[/etc/ferm/conf.d]
-    tag     => ferm
-    mode    => 0400
-    notify  => Service[ferm]

Content differences:

--- /etc/ferm/conf.d/10_minio_mediabackup_workers.orig
+++ /etc/ferm/conf.d/10_minio_mediabackup_workers
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-# 
-&R_SERVICE(tcp, 9000, (10.192.12.6 10.192.8.7 2620:0:860:109:10:192:8:7 2620:0:860:10d:10:192:12:6));
-
-
-
-&NO_TRACK(tcp, 9000);

File[/srv/objectstorage/.minio/certs]

Parameters differences:

--- File[/srv/objectstorage/.minio/certs].orig
+++ File[/srv/objectstorage/.minio/certs]

-    group   => minio-user
-    ensure  => directory
-    owner   => minio-user
-    require => File[/srv/objectstorage/.minio]
-    mode    => 0600

File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem]

Parameters differences:

--- File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem].orig
+++ File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem]

-    group     => root
-    ensure    => file
-    owner     => minio-user
-    backup    => False
-    mode      => 0440
-    show_diff => False

Monitoring::Exported_nagios_service[backup2007 minio_server]

Parameters differences:

--- Monitoring::Exported_nagios_service[backup2007 minio_server].orig
+++ Monitoring::Exported_nagios_service[backup2007 minio_server]

-    ensure                 => present
-    check_interval         => 1
-    notification_options   => c,r,f
-    retry_interval         => 1
-    check_period           => 24x7
-    contact_groups         => admins
-    service_description    => MinIO server processes
-    host_name              => backup2007
-    is_volatile            => 0
-    max_check_attempts     => 3
-    active_checks_enabled  => 1
-    check_freshness        => 0
-    notes_url              => https://wikitech.wikimedia.org/wiki/Media_storage/Backups
-    notifications_enabled  => 1
-    notification_period    => 24x7
-    passive_checks_enabled => 1
-    servicegroups          => backup_codfw
-    check_command          => nrpe_check!check_minio_server!10
-    notification_interval  => 0

Exec[Generate cert discovery2026__backup2007_codfw_wmnet]

Parameters differences:

--- Exec[Generate cert discovery2026__backup2007_codfw_wmnet].orig
+++ Exec[Generate cert discovery2026__backup2007_codfw_wmnet]

-    unless      => /usr/bin/test "$(/usr/bin/openssl x509 -in /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem -noout -pubkey 2>&1)" == "$(/usr/bin/openssl pkey -pubout -in /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem 2>&1)"

-    require     => Cfssl::Csr[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]
-    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup2007.codfw.wmnet.pem -label discovery2026  /etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet

-    environment => ['GODEBUG=x509ignoreCN=0']

Nftables::Service[minio-console-mediabackup-workers]

Parameters differences:

--- Nftables::Service[minio-console-mediabackup-workers].orig
+++ Nftables::Service[minio-console-mediabackup-workers]

-    ensure              => present
-    notrack             => False
-    port                => 9001
-    desc                => 
-    src_ips             => ['10.192.12.6', '10.192.8.7', '2620:0:860:109:10:192:8:7', '2620:0:860:10d:10:192:12:6']
-    prio                => 10
-    proto               => tcp
-    unrestricted_access => False

User[minio-user]

Parameters differences:

--- User[minio-user].orig
+++ User[minio-user]

-    ensure   => present
-    home     => /srv/objectstorage
-    password => !
-    system   => True
-    groups   => []

File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]

Parameters differences:

--- File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem].orig
+++ File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]

-    group  => root
-    ensure => file
-    owner  => minio-user
-    mode   => 0440
-    source => puppet:///modules/profile/pki/intermediates/discovery2026-cert.pem

File[/srv/objectstorage/.minio/certs/public.crt]

Parameters differences:

--- File[/srv/objectstorage/.minio/certs/public.crt].orig
+++ File[/srv/objectstorage/.minio/certs/public.crt]

-    group  => minio-user
-    ensure => link
-    owner  => minio-user
-    target => /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem

File[/etc/minio]

Parameters differences:

--- File[/etc/minio].orig
+++ File[/etc/minio]

-    group   => minio-user
-    ensure  => directory
-    owner   => minio-user
-    require => User[minio-user]
-    mode    => 0440

Systemd::Service[nrpe2nodexp-minio_server]

Parameters differences:

--- Systemd::Service[nrpe2nodexp-minio_server].orig
+++ Systemd::Service[nrpe2nodexp-minio_server]

-    monitoring_contact_group => admins
-    ensure                   => absent
-    require                  => Systemd::Unit[nrpe2nodexp-minio_server.service]
-    unit_type                => timer
-    migration_task           => T407130
-    restart                  => False
-    monitoring_enabled       => False
-    monitoring_critical      => False
-    override                 => False
-    service_params           => {}

Systemd::Unit[nrpe2nodexp-minio_server.timer]

Parameters differences:

--- Systemd::Unit[nrpe2nodexp-minio_server.timer].orig
+++ Systemd::Unit[nrpe2nodexp-minio_server.timer]

-    restart           => False
-    ensure            => absent
-    unit              => nrpe2nodexp-minio_server.timer
-    require           => ['Class[Systemd]']
-    override_filename => puppet-override.conf
-    override          => False

File[/etc/default/minio]

Parameters differences:

--- File[/etc/default/minio].orig
+++ File[/etc/default/minio]

-    group     => minio-user
-    ensure    => present
-    owner     => minio-user
-    require   => User[minio-user]
-    mode      => 0440
-    show_diff => False

Content differences:

--- /etc/default/minio.orig
+++ /etc/default/minio
@@ -1,7 +0,0 @@
-# Note: This file is managed by Puppet.
-MINIO_VOLUMES="/srv/objectstorage"
-MINIO_OPTS="--address 10.192.48.43:9000 --console-address 10.192.48.43:9001"
-MINIO_ROOT_USER="auser"
-MINIO_ROOT_PASSWORD="dummypassword"
-MINIO_REGION_NAME="codfw"
-MINIO_PROMETHEUS_AUTH_TYPE="public"

File[/var/lib/prometheus/node.d/check_minio_server.prom]

Parameters differences:

--- File[/var/lib/prometheus/node.d/check_minio_server.prom].orig
+++ File[/var/lib/prometheus/node.d/check_minio_server.prom]

-    group  => root
-    ensure => absent
-    owner  => root

Motd::Script[insetup::data_persistence_ferm]

Parameters differences:

--- Motd::Script[insetup::data_persistence_ferm].orig
+++ Motd::Script[insetup::data_persistence_ferm]

+    ensure   => present
+    priority => 5

File[/etc/sudoers.d/nrpe-check_minio_server]

Parameters differences:

--- File[/etc/sudoers.d/nrpe-check_minio_server].orig
+++ File[/etc/sudoers.d/nrpe-check_minio_server]

-    group   => root
-    ensure  => absent
-    owner   => root
-    require => Package[nagios-nrpe-server]

Monitoring::Exported_nagios_host[backup2007]

Parameters differences:

--- Monitoring::Exported_nagios_host[backup2007].orig
+++ Monitoring::Exported_nagios_host[backup2007]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    hostgroups            => backup_codfw,lsw1-d7-codfw
+    hostgroups            => insetup_codfw,lsw1-d7-codfw

File[/srv/objectstorage]

Parameters differences:

--- File[/srv/objectstorage].orig
+++ File[/srv/objectstorage]

-    group   => minio-user
-    ensure  => directory
-    owner   => minio-user
-    require => User[minio-user]
-    mode    => 0750

Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]

Parameters differences:

--- Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)].orig
+++ Exec[systemd daemon-reload for nrpe2nodexp-minio_server.service (nrpe2nodexp-minio_server.service)]

-    refreshonly => True
-    command     => /bin/systemctl daemon-reload

Systemd::Unit[nrpe2nodexp-minio_server.service]

Parameters differences:

--- Systemd::Unit[nrpe2nodexp-minio_server.service].orig
+++ Systemd::Unit[nrpe2nodexp-minio_server.service]

-    restart           => False
-    ensure            => absent
-    unit              => nrpe2nodexp-minio_server.service
-    require           => ['Class[Systemd]']
-    override_filename => puppet-override.conf
-    override          => False

File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem]

Parameters differences:

--- File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem].orig
+++ File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem]

-    group  => root
-    ensure => file
-    owner  => minio-user
-    mode   => 0440

File[/srv/objectstorage/.minio/certs/private.key]

Parameters differences:

--- File[/srv/objectstorage/.minio/certs/private.key].orig
+++ File[/srv/objectstorage/.minio/certs/private.key]

-    group  => minio-user
-    ensure => link
-    owner  => minio-user
-    target => /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem

Monitoring::Service[minio_server]

Parameters differences:

--- Monitoring::Service[minio_server].orig
+++ Monitoring::Service[minio_server]

-    passive        => False
-    ensure         => present
-    critical       => False
-    check_interval => 1
-    freshness      => 36000
-    contact_group  => admins
-    retries        => 3
-    migration_task => T357099
-    description    => MinIO server processes
-    retry_interval => 1
-    config_dir     => /etc/nagios
-    host           => backup2007
-    notes_url      => https://wikitech.wikimedia.org/wiki/Media_storage/Backups
-    check_command  => nrpe_check!check_minio_server!10

Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]

Parameters differences:

--- Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)].orig
+++ Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]

-    refreshonly => True
-    command     => /bin/systemctl daemon-reload

Service[nrpe2nodexp-minio_server.timer]

Parameters differences:

--- Service[nrpe2nodexp-minio_server.timer].orig
+++ Service[nrpe2nodexp-minio_server.timer]

-    ensure   => stopped
-    provider => systemd
-    enable   => False
-    before   => ['Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]']

Class[Cumin::Selector]

Parameters differences:

--- Class[Cumin::Selector].orig
+++ Class[Cumin::Selector]

@@
-    cluster => backup
+    cluster => insetup

File[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]

Parameters differences:

--- File[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr].orig
+++ File[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]

-    group  => root
-    ensure => file
-    owner  => root
-    mode   => 0400

Content differences:

--- /etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr.orig
+++ /etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr
@@ -1,17 +0,0 @@
-{
-  "CN": "backup2007.codfw.wmnet",
-  "hosts": [
-    "backup2007",
-    "backup2007.codfw.wmnet",
-    "127.0.0.1",
-    "::1",
-    "localhost"
-  ],
-  "key": {
-    "algo": "ecdsa",
-    "size": 256
-  },
-  "names": [
-
-  ]
-}

Sudo::User[nrpe-check_minio_server]

Parameters differences:

--- Sudo::User[nrpe-check_minio_server].orig
+++ Sudo::User[nrpe-check_minio_server]

-    ensure     => absent
-    require    => ['Class[Sudo]']
-    user       => nagios
-    tag        => nrpe::check
-    privileges => []

Service[minio]

Parameters differences:

--- Service[minio].orig
+++ Service[minio]

-    ensure  => running
-    require => ['Package[minio]', 'File[/etc/default/minio]']
-    enable  => True

File[/etc/minio/ssl]

Parameters differences:

--- File[/etc/minio/ssl].orig
+++ File[/etc/minio/ssl]

-    group   => minio-user
-    ensure  => directory
-    owner   => minio-user
-    require => ['File[/etc/minio]', 'User[minio-user]']
-    mode    => 0700

Class[Profile::Base::Production]

Parameters differences:

--- Class[Profile::Base::Production].orig
+++ Class[Profile::Base::Production]

@@
-    role_description => Media backups storage server
+    role_description => Host being setup by Data Persistence SREs

Motd::Message[insetup::data_persistence_ferm]

Parameters differences:

--- Motd::Message[insetup::data_persistence_ferm].orig
+++ Motd::Message[insetup::data_persistence_ferm]

+    priority => 5
+    message  => backup2007 is a Host being setup by Data Persistence SREs (insetup::data_persistence_ferm)
+    ensure   => present

Cfssl::Cert[discovery2026__backup2007_codfw_wmnet]

Parameters differences:

--- Cfssl::Cert[discovery2026__backup2007_codfw_wmnet].orig
+++ Cfssl::Cert[discovery2026__backup2007_codfw_wmnet]

-    ensure          => present
-    require         => ['User[minio-user]', 'File[/etc/minio/ssl]']
-    label           => discovery2026
-    environment     => ['GODEBUG=x509ignoreCN=0']
-    common_name     => backup2007.codfw.wmnet
-    group           => root
-    auto_renew      => True
-    provide_chain   => True
-    before_services => []
-    names           => []
-    renew_seconds   => 952200
-    notify_services => []
-    owner           => minio-user
-    outdir          => /etc/minio/ssl
-    hosts           => ['backup2007', 'backup2007.codfw.wmnet', '127.0.0.1', '::1', 'localhost']
-    notify          => Service[minio]
-    mode            => 0740
-    key             => {'algo': 'ecdsa', 'size': 256}

Ferm::Service[minio_console_mediabackup_workers]

Parameters differences:

--- Ferm::Service[minio_console_mediabackup_workers].orig
+++ Ferm::Service[minio_console_mediabackup_workers]

-    ensure              => present
-    notrack             => False
-    port                => 9001
-    desc                => 
-    prio                => 10
-    proto               => tcp
-    unrestricted_access => False
-    srange              => ['ms-backup2003.codfw.wmnet', 'ms-backup2004.codfw.wmnet']

Ferm::Service[minio_mediabackup_workers]

Parameters differences:

--- Ferm::Service[minio_mediabackup_workers].orig
+++ Ferm::Service[minio_mediabackup_workers]

-    ensure              => present
-    notrack             => True
-    port                => 9000
-    desc                => 
-    prio                => 10
-    proto               => tcp
-    unrestricted_access => False
-    srange              => ['ms-backup2003.codfw.wmnet', 'ms-backup2004.codfw.wmnet']

File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]

Parameters differences:

--- File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers].orig
+++ File[/etc/ferm/conf.d/10_minio_console_mediabackup_workers]

-    group   => root
-    ensure  => present
-    owner   => root
-    require => File[/etc/ferm/conf.d]
-    tag     => ferm
-    mode    => 0400
-    notify  => Service[ferm]

Content differences:

--- /etc/ferm/conf.d/10_minio_console_mediabackup_workers.orig
+++ /etc/ferm/conf.d/10_minio_console_mediabackup_workers
@@ -1,6 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-# 
-&R_SERVICE(tcp, 9001, (10.192.12.6 10.192.8.7 2620:0:860:109:10:192:8:7 2620:0:860:10d:10:192:12:6));
-
-

Monitoring::Exported_nagios_service[backup2007 raid_md]

Parameters differences:

--- Monitoring::Exported_nagios_service[backup2007 raid_md].orig
+++ Monitoring::Exported_nagios_service[backup2007 raid_md]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => backup_codfw
+    servicegroups         => insetup_codfw

Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]

Parameters differences:

--- Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703].orig
+++ Prometheus::Alert::Rule[check_minio_server_afd847791207995d7987063926084703]

-    ensure             => absent
-    for                => 3m
-    alert_name         => nrpe_MinIO_server_processes
-    logs               => https://logstash.wikimedia.org/app/dashboards#/view/2d343ac0-6df8-11f0-8e08-7fab0da52b33?_g=(filters:!((query:(match_phrase:(event.module:check_minio_server))),(query:(match_phrase:(host.name:{{$labels.instance|stripPort}})))))
-    description        => NRPE CHECK: MinIO server processes
-    instance           => ops
-    group              => nrpechecks
-    runbook            => https://wikitech.wikimedia.org/wiki/Media_storage/Backups
-    expr               => (nagios_nrpe_check_result{alert_rule_hash="afd847791207995d7987063926084703",check_name="check_minio_server", status=~"(WARNING|CRITICAL)", severity=~"(warning|critical)"} > 0) * on (instance) group_left (team) role_owner
-    def_label_whitelst => ['team', 'severity']
-    site               => codfw
-    team               => observability
-    severity           => info
-    dashboard          => TODO
-    summary            => NRPE CHECK: MinIO server processes

Monitoring::Exported_nagios_service[backup2007 ssh]

Parameters differences:

--- Monitoring::Exported_nagios_service[backup2007 ssh].orig
+++ Monitoring::Exported_nagios_service[backup2007 ssh]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => backup_codfw
+    servicegroups         => insetup_codfw

File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem]

Parameters differences:

--- File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem].orig
+++ File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem]

-    group   => root
-    ensure  => file
-    owner   => minio-user
-    require => Exec[create chained cert /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chain.pem]

Class[Profile::Monitoring]

Parameters differences:

--- Class[Profile::Monitoring].orig
+++ Class[Profile::Monitoring]

@@
-    nagios_group          => backup_codfw
+    nagios_group          => insetup_codfw
@@
-    notifications_enabled => True
+    notifications_enabled => False
@@
-    cluster               => backup
+    cluster               => insetup

Systemd::Sysuser[minio-user]

Parameters differences:

--- Systemd::Sysuser[minio-user].orig
+++ Systemd::Sysuser[minio-user]

-    ensure            => present
-    usertype          => user
-    home_dir          => /srv/objectstorage
-    id                => -
-    additional_groups => []
-    username          => minio-user
-    allow_login       => False

Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh]

Parameters differences:

--- Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh].orig
+++ Exec[Generate cert discovery2026__backup2007_codfw_wmnet refresh]

-    refreshonly => True
-    subscribe   => File[/etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr]
-    command     => /usr/bin/cfssl gencert -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup2007.codfw.wmnet.pem -label discovery2026  /etc/cfssl/csr/discovery2026__backup2007_codfw_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet

-    environment => ['GODEBUG=x509ignoreCN=0']

Concat::Fragment[main contacts]

File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]

Parameters differences:

--- File[/lib/systemd/system/nrpe2nodexp-minio_server.timer].orig
+++ File[/lib/systemd/system/nrpe2nodexp-minio_server.timer]

-    group  => root
-    ensure => absent
-    owner  => root
-    mode   => 0444
-    notify => Exec[systemd daemon-reload for nrpe2nodexp-minio_server.timer (nrpe2nodexp-minio_server.timer)]

Content differences:

--- /lib/systemd/system/nrpe2nodexp-minio_server.timer.orig
+++ /lib/systemd/system/nrpe2nodexp-minio_server.timer
@@ -1,14 +0,0 @@
-[Unit]
-Description=Periodic execution of nrpe2nodexp-minio_server.service
-
-[Timer]
-Unit=nrpe2nodexp-minio_server.service
-# Accuracy sets the maximum time interval around the execution time we want to allow
-AccuracySec=15sec
-OnUnitInactiveSec=1min
-OnActiveSec=1s
-RandomizedDelaySec=60
-FixedRandomDelay=true
-
-[Install]
-WantedBy=multi-user.target

File[/etc/update-motd.d/05-mediabackup--storage]

Parameters differences:

--- File[/etc/update-motd.d/05-mediabackup--storage].orig
+++ File[/etc/update-motd.d/05-mediabackup--storage]

-    mode   => 0555
-    ensure => present
-    owner  => root
-    group  => root

Content differences:

--- /etc/update-motd.d/05-mediabackup--storage.orig
+++ /etc/update-motd.d/05-mediabackup--storage
@@ -1,2 +0,0 @@
-#!/bin/sh
-printf "%s\n" "backup2007 is a Media backups storage server (mediabackup::storage)"

Monitoring::Exported_nagios_service[backup2007 disk_space]

Parameters differences:

--- Monitoring::Exported_nagios_service[backup2007 disk_space].orig
+++ Monitoring::Exported_nagios_service[backup2007 disk_space]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => backup_codfw
+    servicegroups         => insetup_codfw

Exec[update-sysusers-minio-user]

Parameters differences:

--- Exec[update-sysusers-minio-user].orig
+++ Exec[update-sysusers-minio-user]

-    provider => shell
-    onlyif   => test -n "$(systemd-sysusers --dry-run /etc/sysusers.d/minio-user.conf 2>&1)"
-    path     => /usr/bin:/usr/sbin:/bin
-    user     => root
-    command  => /bin/systemd-sysusers /etc/sysusers.d/minio-user.conf

Nrpe::Check[check_minio_server]

Parameters differences:

--- Nrpe::Check[check_minio_server].orig
+++ Nrpe::Check[check_minio_server]

-    ensure  => present
-    command => /usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server
-    before  => Monitoring::Service[minio_server]

Package[minio]

Parameters differences:

--- Package[minio].orig
+++ Package[minio]

-    ensure   => installed
-    provider => apt

Class[Adduser]

Parameters differences:

--- Class[Adduser].orig
+++ Class[Adduser]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[minio]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']

Monitoring::Exported_nagios_service[backup2007 raid_megaraid]

Parameters differences:

--- Monitoring::Exported_nagios_service[backup2007 raid_megaraid].orig
+++ Monitoring::Exported_nagios_service[backup2007 raid_megaraid]

@@
-    notifications_enabled => 1
+    notifications_enabled => 0
@@
-    servicegroups         => backup_codfw
+    servicegroups         => insetup_codfw

Systemd::Timer[nrpe2nodexp-minio_server]

Parameters differences:

--- Systemd::Timer[nrpe2nodexp-minio_server].orig
+++ Systemd::Timer[nrpe2nodexp-minio_server]

-    ensure             => absent
-    fixed_random_delay => True
-    accuracy           => 15sec
-    splay              => 60
-    timer_intervals    => [{'start': 'OnUnitInactiveSec', 'interval': '1min'}, {'interval': '1s', 'start': 'OnActiveSec'}]
-    unit_name          => nrpe2nodexp-minio_server.service

File[/etc/sysusers.d/minio-user.conf]

Parameters differences:

--- File[/etc/sysusers.d/minio-user.conf].orig
+++ File[/etc/sysusers.d/minio-user.conf]

-    group   => root
-    ensure  => file
-    owner   => root
-    require => File[/etc/sysusers.d]
-    mode    => 0444

Content differences:

--- /etc/sysusers.d/minio-user.conf.orig
+++ /etc/sysusers.d/minio-user.conf
@@ -1 +0,0 @@
-u	minio-user	-	-	/srv/objectstorage	-

Class[Mediabackup::Storage]

Parameters differences:

--- Class[Mediabackup::Storage].orig
+++ Class[Mediabackup::Storage]

-    root_user     => auser
-    cert_path     => /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.chained.pem
-    config_dir    => /etc/minio
-    port          => 9000
-    console_port  => 9001
-    root_password => dummypassword
-    storage_path  => /srv/objectstorage
-    key_path      => /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet-key.pem

Exec[renew certificate - discovery2026__backup2007_codfw_wmnet]

Parameters differences:

--- Exec[renew certificate - discovery2026__backup2007_codfw_wmnet].orig
+++ Exec[renew certificate - discovery2026__backup2007_codfw_wmnet]

-    unless      => /usr/bin/openssl x509 -in /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.pem -checkend 952200
-    require     => Exec[Generate cert discovery2026__backup2007_codfw_wmnet]
-    command     => /usr/bin/cfssl sign -config /etc/cfssl/client-cfssl.conf -tls-remote-ca /etc/ssl/certs/wmf-ca-certificates.crt -mutual-tls-client-cert /etc/cfssl/mutual_tls_client_cert.pem -mutual-tls-client-key /var/lib/puppet/ssl/private_keys/backup2007.codfw.wmnet.pem -label discovery2026  /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.csr | /usr/bin/cfssljson -bare /etc/minio/ssl/discovery2026__backup2007_codfw_wmnet

-    environment => ['GODEBUG=x509ignoreCN=0']

Firewall::Service[minio-mediabackup-workers]

Parameters differences:

--- Firewall::Service[minio-mediabackup-workers].orig
+++ Firewall::Service[minio-mediabackup-workers]

-    ensure              => present
-    notrack             => True
-    port                => 9000
-    desc                => 
-    prio                => 10
-    proto               => tcp
-    unrestricted_access => False
-    srange              => ['ms-backup2003.codfw.wmnet', 'ms-backup2004.codfw.wmnet']

Motd::Message[mediabackup::storage]

Parameters differences:

--- Motd::Message[mediabackup::storage].orig
+++ Motd::Message[mediabackup::storage]

-    priority => 5
-    message  => backup2007 is a Media backups storage server (mediabackup::storage)
-    ensure   => present

Class[Monitoring]

Parameters differences:

--- Class[Monitoring].orig
+++ Class[Monitoring]

@@
-    nagios_group          => backup_codfw
+    nagios_group          => insetup_codfw
@@
-    notifications_enabled => True
+    notifications_enabled => False
@@
-    cluster               => backup
+    cluster               => insetup

Class[Profile::Cumin::Target]

Parameters differences:

--- Class[Profile::Cumin::Target].orig
+++ Class[Profile::Cumin::Target]

@@
-    cluster => backup
+    cluster => insetup

Class[Profile::Contacts]

Parameters differences:

--- Class[Profile::Contacts].orig
+++ Class[Profile::Contacts]

@@
-    cluster => backup
+    cluster => insetup

File[/etc/update-motd.d/05-insetup--data-persistence-ferm]

Parameters differences:

--- File[/etc/update-motd.d/05-insetup--data-persistence-ferm].orig
+++ File[/etc/update-motd.d/05-insetup--data-persistence-ferm]

+    mode   => 0555
+    ensure => present
+    owner  => root
+    group  => root

Content differences:

--- /etc/update-motd.d/05-insetup--data-persistence-ferm.orig
+++ /etc/update-motd.d/05-insetup--data-persistence-ferm
@@ -0,0 +1,2 @@
+#!/bin/sh
+printf "%s\n" "backup2007 is a Host being setup by Data Persistence SREs (insetup::data_persistence_ferm)"

File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.csr]

Parameters differences:

--- File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.csr].orig
+++ File[/etc/minio/ssl/discovery2026__backup2007_codfw_wmnet.csr]

-    group  => root
-    ensure => file
-    owner  => minio-user
-    mode   => 0440

Concat_fragment[main contacts]

Content differences:

--- main contacts.orig
+++ main contacts
@@ -1,3 +1,3 @@
 ---
-role::mediabackup::storage:
+role::insetup::data_persistence_ferm:
 - Data Persistence

Rsyslog::Conf[nrpe2nodexp-minio_server]

Parameters differences:

--- Rsyslog::Conf[nrpe2nodexp-minio_server].orig
+++ Rsyslog::Conf[nrpe2nodexp-minio_server]

-    mode     => 0444
-    ensure   => absent
-    priority => 25

Class[Profile::Mediabackup::Storage]

Parameters differences:

--- Class[Profile::Mediabackup::Storage].orig
+++ Class[Profile::Mediabackup::Storage]

-    mediabackup_config => {'mw_db_password': 'notsecret', 'db_password': 'notsecret', 'storage_root_user': 'auser', 'storage_root_password': 'dummypassword', 'encryption_key': '# created: 2021-11-29T11:50:16+01:00\n# public key: public\nAGE-SECRET-KEY-private"\n', 'access_key': 's3user', 'secret_key': 's3key', 'recovery_access_key': 's3userForFileRestores', 'recovery_secret_key': 's3keyForFileRestores', 'batchsize': 100, 'dblists_path': '/srv/mediawiki-config/dblists', 'mw_db_config_file': '/etc/mediabackup/mw_db.ini', 'db_config_file': '/etc/mediabackup/mediabackups_db.ini', 'storage_path': '/srv/objectstorage', 'storage_port': 9000, 'console_port': 9001, 'sections': {'s1': {'host': 'db2250.codfw.wmnet', 'port': 3311}, 's2': {'host': 'db2197.codfw.wmnet', 'port': 3312}, 's3': {'host': 'db2239.codfw.wmnet', 'port': 3313}, 's4': {'host': 'db2199.codfw.wmnet', 'port': 3314}, 's5': {'host': 'db2201.codfw.wmnet', 'port': 3315}, 's6': {'host': 'db2197.codfw.wmnet', 'port': 3316}, 's7': {'host': 'db2198.codfw.wmnet', 'port': 3317}, 's8': {'host': 'db2198.codfw.wmnet', 'port': 3318}}, 'mw_db_user': 'mediabackup', 'db_host': 'db2183.codfw.wmnet', 'db_port': 3306, 'db_user': 'mediabackup', 'db_schema': 'mediabackups', 'worker_hosts': ['ms-backup2003.codfw.wmnet', 'ms-backup2004.codfw.wmnet'], 'storage_hosts': ['backup2004.codfw.wmnet:9000', 'backup2005.codfw.wmnet:9000', 'backup2006.codfw.wmnet:9000', 'backup2007.codfw.wmnet:9000', 'backup2011.codfw.wmnet:9000', 'backup2010.codfw.wmnet:9000', 'backup2015.codfw.wmnet:9000', 'backup2015.codfw.wmnet:9001', 'backup2015.codfw.wmnet:9002', 'backup2015.codfw.wmnet:9003', 'backup2016.codfw.wmnet:9000', 'backup2016.codfw.wmnet:9001', 'backup2016.codfw.wmnet:9002', 'backup2016.codfw.wmnet:9003', 'backup2017.codfw.wmnet:9000', 'backup2017.codfw.wmnet:9001', 'backup2017.codfw.wmnet:9002', 'backup2017.codfw.wmnet:9003', 'backup2018.codfw.wmnet:9000', 'backup2018.codfw.wmnet:9001', 'backup2018.codfw.wmnet:9002', 'backup2018.codfw.wmnet:9003', 'backup2019.codfw.wmnet:9000', 'backup2019.codfw.wmnet:9001', 'backup2019.codfw.wmnet:9002', 'backup2019.codfw.wmnet:9003', 'backup2020.codfw.wmnet:9000', 'backup2020.codfw.wmnet:9001', 'backup2020.codfw.wmnet:9002', 'backup2020.codfw.wmnet:9003']}

Nftables::Service[minio-mediabackup-workers]

Parameters differences:

--- Nftables::Service[minio-mediabackup-workers].orig
+++ Nftables::Service[minio-mediabackup-workers]

-    ensure              => present
-    notrack             => True
-    port                => 9000
-    desc                => 
-    src_ips             => ['10.192.12.6', '10.192.8.7', '2620:0:860:109:10:192:8:7', '2620:0:860:10d:10:192:12:6']
-    prio                => 10
-    proto               => tcp
-    unrestricted_access => False

Nrpe::Monitor_service[minio_server]

Parameters differences:

--- Nrpe::Monitor_service[minio_server].orig
+++ Nrpe::Monitor_service[minio_server]

-    critical                    => False
-    ensure                      => present
-    check_interval              => 1
-    alertmanager_team           => observability
-    contact_group               => admins
-    timeout                     => 10
-    migration_task              => T357099
-    retries                     => 3
-    enable_nrpe2nodexp          => False
-    description                 => MinIO server processes
-    retry_interval              => 1
-    notes_url                   => https://wikitech.wikimedia.org/wiki/Media_storage/Backups
-    nrpe_command                => /usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server
-    enable_icinga_check         => True
-    nrpe2nodexp_parse_perf_data => False

Class[Profile::Apt]

Parameters differences:

--- Class[Profile::Apt].orig
+++ Class[Profile::Apt]

@@
-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[minio]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']
+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[megacli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']

Motd::Script[mediabackup::storage]

Parameters differences:

--- Motd::Script[mediabackup::storage].orig
+++ Motd::Script[mediabackup::storage]

-    ensure   => present
-    priority => 5

File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]

Parameters differences:

--- File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf].orig
+++ File[/etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf]

-    group  => root
-    ensure => absent
-    owner  => root
-    mode   => 0444
-    notify => Service[rsyslog]

Content differences:

--- /etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf.orig
+++ /etc/rsyslog.d/25-nrpe2nodexp-minio-server.conf
@@ -1,10 +0,0 @@
-# SPDX-License-Identifier: Apache-2.0
-if $programname contains "nrpe2nodexp-minio_server" then {
-    if ($msg contains "\"ecs.version\": \"1.7.0\"") then {
-        # Send logs to kafka
-        set $.log_outputs = "kafka ecs_170 local";
-    } else {
-        # Filter out non-relevant nrpe2nodexp messages
-        stop
-    }
-}

Compilation results for backup2007.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources only in the old catalog

Resources modified

Relevant files