--- Class[Profile::Apt].orig
+++ Class[Profile::Apt]
@@
- before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[bacula-fd]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[bacula-director]', 'Package[bacula-director-mysql]', 'Package[bacula-console]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']
+ before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[bacula-fd]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[bacula-director]', 'Package[bacula-director-mysql]', 'Package[bacula-console]', 'Package[bacula-sd]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']
Concat_file[/etc/bacula/sd/ssl/cert.pem]
- Parameters differences:
--- Concat_file[/etc/bacula/sd/ssl/cert.pem].orig
+++ Concat_file[/etc/bacula/sd/ssl/cert.pem]
+ ensure_newline => False
+ show_diff => True
+ order => alpha
+ tag => _etc_bacula_sd_ssl_cert.pem
+ force => False
+ format => plain
+ mode => 0644
+ backup => puppet
+ replace => True
- Bacula::Director::Pool[OldEsRoCodfw]
- Parameters differences:
--- Bacula::Director::Pool[OldEsRoCodfw].orig
+++ Bacula::Director::Pool[OldEsRoCodfw]
+ recycle => yes
+ label_fmt => old-es-ro-codfw
+ max_vols => 100
+ storage => backup2003-FileStorageEsRoCodfw
+ max_vol_bytes => 536870912000
+ catalog_files => yes
+ volume_retention => 5 years
+ autoprune => yes
- File[/etc/bacula/storages.d/backup1014-FileStorageEsRoEqiad.conf]
- Parameters differences:
--- File[/etc/bacula/storages.d/backup1014-FileStorageEsRoEqiad.conf].orig
+++ File[/etc/bacula/storages.d/backup1014-FileStorageEsRoEqiad.conf]
+ owner => bacula
+ ensure => present
+ mode => 0440
+ group => tape
+ tag => bacula-storage-backup1014.eqiad.wmnet
+ notify => Service[bacula-director]
+ require => File[/etc/bacula/storages.d]
- Content differences:
--- /etc/bacula/storages.d/backup1014-FileStorageEsRoEqiad.conf.orig
+++ /etc/bacula/storages.d/backup1014-FileStorageEsRoEqiad.conf
@@ -0,0 +1,16 @@
+# This file has been autogenerated by puppet. Don't edit by hand
+
+Storage {
+ Name = backup1014-FileStorageEsRoEqiad
+ Address = backup1014.eqiad.wmnet
+ SDPort = 9103
+ Password = 1eedc784c24dbaf5d191a6a47329af0e61259c06
+ Device = FileStorageEsRoEqiad
+ Media Type = File
+ Maximum Concurrent Jobs = 2
+ # Have the Control channel encrypted. Used for incoming console connections
+ TLS Enable = yes
+ TLS Require = yes
+ TLS CA Certificate File = "/etc/ssl/certs/wmf-ca-certificates.crt"
+ # Heartbeat Interval = 0 #in secs
+}
- Bacula::Director::Pool[OldEsRwCodfw]
- Parameters differences:
--- Bacula::Director::Pool[OldEsRwCodfw].orig
+++ Bacula::Director::Pool[OldEsRwCodfw]
+ recycle => yes
+ label_fmt => old-es-rw-codfw
+ max_vols => 200
+ storage => backup2003-FileStorageEsRwCodfw
+ max_vol_bytes => 536870912000
+ catalog_files => yes
+ volume_retention => 90 days
+ autoprune => yes
- Concat_fragment[/etc/bacula/sd_puppet_ca_chain]
- Parameters differences:
--- Concat_fragment[/etc/bacula/sd_puppet_ca_chain].orig
+++ Concat_fragment[/etc/bacula/sd_puppet_ca_chain]
+ order => 02
+ tag => _etc_bacula_sd_ssl_cert.pem
+ source => /var/lib/puppet/ssl/certs/ca.pem
+ target => /etc/bacula/sd/ssl/cert.pem
- File[/etc/bacula/conf.d/pool-OldEsRoCodfw.conf]
- Parameters differences:
--- File[/etc/bacula/conf.d/pool-OldEsRoCodfw.conf].orig
+++ File[/etc/bacula/conf.d/pool-OldEsRoCodfw.conf]
+ owner => root
+ ensure => present
+ mode => 0440
+ group => bacula
+ notify => Service[bacula-director]
- Content differences:
--- /etc/bacula/conf.d/pool-OldEsRoCodfw.conf.orig
+++ /etc/bacula/conf.d/pool-OldEsRoCodfw.conf
@@ -0,0 +1,16 @@
+# This file has been autogenerated by puppet. Don't edit by hand
+
+Pool {
+ Name = OldEsRoCodfw
+ Pool Type = Backup
+ Maximum Volumes = 100
+ Maximum Volume Bytes = 536870912000
+ Storage = backup2003-FileStorageEsRoCodfw
+ Label Format = "old-es-ro-codfw"
+ Volume Retention = 5 years
+ AutoPrune = yes
+ Recycle = yes
+ Catalog Files = yes
+ Recycle Oldest Volume = yes
+ # Cleaning Prefix = # used with tapes
+}
- File[/etc/bacula/sd/ssl/server.key]
- Parameters differences:
--- File[/etc/bacula/sd/ssl/server.key].orig
+++ File[/etc/bacula/sd/ssl/server.key]
+ owner => bacula
+ show_diff => False
+ ensure => present
+ source => /var/lib/puppet/ssl/private_keys/backup1014.eqiad.wmnet.pem
+ mode => 0400
+ group => bacula
- Concat[/etc/bacula/sd/ssl/cert.pem]
- Parameters differences:
--- Concat[/etc/bacula/sd/ssl/cert.pem].orig
+++ Concat[/etc/bacula/sd/ssl/cert.pem]
+ ensure_newline => False
+ show_diff => True
+ warn => False
+ order => alpha
+ force => False
+ format => plain
+ mode => 0644
+ backup => puppet
+ path => /etc/bacula/sd/ssl/cert.pem
+ ensure => present
+ replace => True
- File[/etc/bacula/sd/ssl]
- Parameters differences:
--- File[/etc/bacula/sd/ssl].orig
+++ File[/etc/bacula/sd/ssl]
+ owner => bacula
+ ensure => directory
+ mode => 0555
+ group => bacula
- Systemd::Unit[nrpe2nodexp-bacula_sd.timer]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-bacula_sd.timer].orig
+++ Systemd::Unit[nrpe2nodexp-bacula_sd.timer]
+ override => False
+ ensure => absent
+ unit => nrpe2nodexp-bacula_sd.timer
+ override_filename => puppet-override.conf
+ restart => False
+ require => ['Class[Systemd]']
- Monitoring::Service[bacula_sd]
- Parameters differences:
--- Monitoring::Service[bacula_sd].orig
+++ Monitoring::Service[bacula_sd]
+ critical => False
+ check_interval => 1
+ contact_group => admins
+ passive => False
+ notes_url => https://wikitech.wikimedia.org/wiki/Bacula
+ check_command => nrpe_check!check_bacula_sd!10
+ freshness => 36000
+ config_dir => /etc/nagios
+ host => backup1014
+ ensure => present
+ retry_interval => 1
+ migration_task => T357099
+ description => bacula sd process
+ retries => 3
- File[/var/lib/prometheus/node.d/check_bacula_sd.prom]
- Parameters differences:
--- File[/var/lib/prometheus/node.d/check_bacula_sd.prom].orig
+++ File[/var/lib/prometheus/node.d/check_bacula_sd.prom]
+ owner => root
+ ensure => absent
+ group => root
- File[/srv/bacula]
- Parameters differences:
--- File[/srv/bacula].orig
+++ File[/srv/bacula]
+ owner => bacula
+ ensure => directory
+ mode => 0660
+ group => bacula
- Prometheus::Alert::Rule[check_bacula_sd_4d3ab0ef8aa01b04270054b3d1d3c587]
- Parameters differences:
--- Prometheus::Alert::Rule[check_bacula_sd_4d3ab0ef8aa01b04270054b3d1d3c587].orig
+++ Prometheus::Alert::Rule[check_bacula_sd_4d3ab0ef8aa01b04270054b3d1d3c587]
+ site => eqiad
+ dashboard => TODO
+ team => observability
+ def_label_whitelst => ['team', 'severity']
+ summary => NRPE CHECK: bacula sd process
+ severity => info
+ instance => ops
+ logs => https://logstash.wikimedia.org/app/dashboards#/view/2d343ac0-6df8-11f0-8e08-7fab0da52b33?_g=(filters:!((query:(match_phrase:(event.module:check_bacula_sd))),(query:(match_phrase:(host.name:{{$labels.instance|stripPort}})))))
+ runbook => https://wikitech.wikimedia.org/wiki/Bacula
+ ensure => absent
+ expr => (nagios_nrpe_check_result{alert_rule_hash="4d3ab0ef8aa01b04270054b3d1d3c587",check_name="check_bacula_sd", status=~"(WARNING|CRITICAL)", severity=~"(warning|critical)"} > 0) * on (instance) group_left (team) role_owner
+ group => nrpechecks
+ alert_name => nrpe_bacula_sd_process
+ for => 3m
+ description => NRPE CHECK: bacula sd process
- Puppet::Expose_agent_certs[/etc/bacula/sd]
- Parameters differences:
--- Puppet::Expose_agent_certs[/etc/bacula/sd].orig
+++ Puppet::Expose_agent_certs[/etc/bacula/sd]
+ provide_private => True
+ ssldir => /var/lib/puppet/ssl
+ provide_p12 => False
+ require => File[/etc/bacula/sd]
+ provide_pem => True
+ ensure => present
+ user => bacula
+ group => bacula
+ provide_keypair => True
- Bacula::Director::Pool[OldEsRoEqiad]
- Parameters differences:
--- Bacula::Director::Pool[OldEsRoEqiad].orig
+++ Bacula::Director::Pool[OldEsRoEqiad]
+ recycle => yes
+ label_fmt => old-es-ro-eqiad
+ max_vols => 100
+ storage => backup1003-FileStorageEsRoEqiad
+ max_vol_bytes => 536870912000
+ catalog_files => yes
+ volume_retention => 5 years
+ autoprune => yes
- File[/srv/bacula/es-readonly]
- Parameters differences:
--- File[/srv/bacula/es-readonly].orig
+++ File[/srv/bacula/es-readonly]
+ owner => bacula
+ ensure => directory
+ group => bacula
+ mode => 0660
+ require => File[/srv/bacula]
- Class[Profile::Backup::Storage::Common]
- Parameters differences:
--- Class[Profile::Backup::Storage::Common].orig
+++ Class[Profile::Backup::Storage::Common]
+ director => backup1014.eqiad.wmnet
- File[/etc/bacula/conf.d/pool-EsRoCodfw.conf]
- Content differences:
--- /etc/bacula/conf.d/pool-EsRoCodfw.conf.orig
+++ /etc/bacula/conf.d/pool-EsRoCodfw.conf
@@ -5,7 +5,7 @@
Pool Type = Backup
Maximum Volumes = 100
Maximum Volume Bytes = 536870912000
- Storage = backup2003-FileStorageEsRoCodfw
+ Storage = backup2014-FileStorageEsRoCodfw
Label Format = "es-ro-codfw"
Volume Retention = 5 years
AutoPrune = yes
- File[/etc/bacula/sd-devices.d/FileStorageEsRwEqiad.conf]
- Parameters differences:
--- File[/etc/bacula/sd-devices.d/FileStorageEsRwEqiad.conf].orig
+++ File[/etc/bacula/sd-devices.d/FileStorageEsRwEqiad.conf]
+ owner => bacula
+ ensure => present
+ mode => 0440
+ group => tape
+ notify => Service[bacula-sd]
+ require => File[/etc/bacula/sd-devices.d]
- Content differences:
--- /etc/bacula/sd-devices.d/FileStorageEsRwEqiad.conf.orig
+++ /etc/bacula/sd-devices.d/FileStorageEsRwEqiad.conf
@@ -0,0 +1,14 @@
+# This file has been autogenerated by puppet. Don't edit by hand
+
+Device {
+ Name = FileStorageEsRwEqiad
+ Device Type = File
+ Media Type = File
+ Archive Device = /srv/bacula/es-readwrite
+ Maximum Concurrent Jobs = 2
+ LabelMedia = yes;
+ Random Access = Yes;
+ AutomaticMount = yes;
+ RemovableMedia = no;
+ AlwaysOpen = no;
+}
- Systemd::Timer::Job[nrpe2nodexp-bacula_sd]
- Parameters differences:
--- Systemd::Timer::Job[nrpe2nodexp-bacula_sd].orig
+++ Systemd::Timer::Job[nrpe2nodexp-bacula_sd]
+ private_tmp => False
+ fixed_random_delay => True
+ send_mail => False
+ logfile_name => syslog.log
+ ensure => absent
+ splay => 60
+ syslog_identifier => nrpe2nodexp-bacula_sd
+ send_mail_only_on_error => True
+ description => execution of nrpe2nodexp for the check_bacula_sd command.
+ logfile_group => root
+ logfile_perms => all
+ logging_enabled => False
+ syslog_force_stop => True
+ syslog_match_startswith => True
+ success_exit_status => []
+ ignore_errors => True
+ interval => [{'start': 'OnUnitInactiveSec', 'interval': '1min'}]
+ logfile_basedir => /var/log
+ command => /usr/local/bin/nrpe2nodexp --alert-rule-hash "4d3ab0ef8aa01b04270054b3d1d3c587" --timeout 10 --check-command "check_bacula_sd"
+ environment => {}
+ user => nagios
+ monitoring_contact_groups => admins
+ group => prometheus-node-exporter
+ send_mail_to => root@backup1014.eqiad.wmnet
+ monitoring_notes_url => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+ monitoring_enabled => False
- File[/etc/bacula/bacula-sd.conf]
- Parameters differences:
--- File[/etc/bacula/bacula-sd.conf].orig
+++ File[/etc/bacula/bacula-sd.conf]
+ owner => bacula
+ ensure => present
+ mode => 0400
+ group => tape
+ notify => Service[bacula-sd]
+ require => Package[bacula-sd]
- Content differences:
--- /etc/bacula/bacula-sd.conf.orig
+++ /etc/bacula/bacula-sd.conf
@@ -0,0 +1,40 @@
+# This file has been autogenerated by puppet. Don't edit by hand
+
+# The directors allowed to contect to us
+Director {
+ Name = "backup1014.eqiad.wmnet"
+ Password = "1eedc784c24dbaf5d191a6a47329af0e61259c06"
+ # Have the Control channel encrypted. Used for incoming console connections
+ TLS Enable = yes
+ TLS Require = yes
+ TLS CA Certificate File = "/etc/ssl/certs/wmf-ca-certificates.crt"
+ TLS Verify Peer = no
+ TLS Certificate = "/etc/bacula/sd/ssl/cert.pem"
+ TLS Key = "/etc/bacula/sd/ssl/server.key"
+}
+
+Storage {
+ Name = "backup1014.eqiad.wmnet-fd"
+ SDport = 9103
+ WorkingDirectory = "/var/lib/bacula"
+ Pid Directory = "/var/run/bacula"
+ Maximum Concurrent Jobs = 5
+ Plugin Directory = "/usr/lib/bacula"
+ # Do Have the data channel encrypted.
+ TLS Enable = yes
+ TLS Require = yes
+ TLS CA Certificate File = "/etc/ssl/certs/wmf-ca-certificates.crt"
+ TLS Verify Peer = yes
+ TLS Certificate = "/etc/bacula/sd/ssl/cert.pem"
+ TLS Key = "/etc/bacula/sd/ssl/server.key"
+ # Heartbeat inverval = 0 # in secs
+ # SDAddresses = # For director connections
+}
+
+# Send all messages except skipped files back to Director
+Messages {
+ Name = Standard
+ director = "backup1014.eqiad.wmnet" = all, !skipped, !restored
+}
+
+@|"sh -c 'for f in /etc/bacula/sd-devices.d/*.conf ; do echo @${f} ; done'"
- Service[nrpe2nodexp-bacula_sd.timer]
- Parameters differences:
--- Service[nrpe2nodexp-bacula_sd.timer].orig
+++ Service[nrpe2nodexp-bacula_sd.timer]
+ ensure => stopped
+ provider => systemd
+ enable => False
+ before => ['Exec[systemd daemon-reload for nrpe2nodexp-bacula_sd.timer (nrpe2nodexp-bacula_sd.timer)]']
- Systemd::Unit[nrpe2nodexp-bacula_sd.service]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-bacula_sd.service].orig
+++ Systemd::Unit[nrpe2nodexp-bacula_sd.service]
+ override => False
+ ensure => absent
+ unit => nrpe2nodexp-bacula_sd.service
+ override_filename => puppet-override.conf
+ restart => False
+ require => ['Class[Systemd]']
- Service[bacula-sd]
- Parameters differences:
--- Service[bacula-sd].orig
+++ Service[bacula-sd]
+ ensure => running
+ require => Package[bacula-sd]
- File[/etc/bacula/sd/ssl/server-keypair.pem]
- Parameters differences:
--- File[/etc/bacula/sd/ssl/server-keypair.pem].orig
+++ File[/etc/bacula/sd/ssl/server-keypair.pem]
+ owner => bacula
+ ensure => present
+ mode => 0400
+ group => bacula
- File[/etc/bacula/sd-devices.d/FileStorageEsRoEqiad.conf]
- Parameters differences:
--- File[/etc/bacula/sd-devices.d/FileStorageEsRoEqiad.conf].orig
+++ File[/etc/bacula/sd-devices.d/FileStorageEsRoEqiad.conf]
+ owner => bacula
+ ensure => present
+ mode => 0440
+ group => tape
+ notify => Service[bacula-sd]
+ require => File[/etc/bacula/sd-devices.d]
- Content differences:
--- /etc/bacula/sd-devices.d/FileStorageEsRoEqiad.conf.orig
+++ /etc/bacula/sd-devices.d/FileStorageEsRoEqiad.conf
@@ -0,0 +1,14 @@
+# This file has been autogenerated by puppet. Don't edit by hand
+
+Device {
+ Name = FileStorageEsRoEqiad
+ Device Type = File
+ Media Type = File
+ Archive Device = /srv/bacula/es-readonly
+ Maximum Concurrent Jobs = 2
+ LabelMedia = yes;
+ Random Access = Yes;
+ AutomaticMount = yes;
+ RemovableMedia = no;
+ AlwaysOpen = no;
+}
- Exec[create-/etc/bacula/sd-keypair]
- Parameters differences:
--- Exec[create-/etc/bacula/sd-keypair].orig
+++ Exec[create-/etc/bacula/sd-keypair]
+ require => File[/etc/bacula/sd/ssl]
+ creates => /etc/bacula/sd/ssl/server-keypair.pem
+ before => File[/etc/bacula/sd/ssl/server-keypair.pem]
+ command => /bin/cat /var/lib/puppet/ssl/private_keys/backup1014.eqiad.wmnet.pem /var/lib/puppet/ssl/certs/backup1014.eqiad.wmnet.pem > /etc/bacula/sd/ssl/server-keypair.pem
- Bacula::Director::Pool[EsRoEqiad]
- Parameters differences:
--- Bacula::Director::Pool[EsRoEqiad].orig
+++ Bacula::Director::Pool[EsRoEqiad]
@@
- storage => backup1003-FileStorageEsRoEqiad
+ storage => backup1014-FileStorageEsRoEqiad
- Sslcert::X509_to_pkcs12[puppet::expose_agent_cert: /etc/bacula/sd]