Compilation results for krb2002.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• Systemd::Timer[wmf_auto_restart_krb5-admin-server]
• Systemd::Timer::Job[wmf_auto_restart_krb5-admin-server]
• Service[krb5-admin-server]
• Concat::Fragment[/etc/rsyncd.conf-srv-keytabs]
• Systemd::Service[wmf_auto_restart_krb5-admin-server]
• Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.service (wmf_auto_restart_krb5-admin-server.service)]
• Service[wmf_auto_restart_krb5-admin-server.timer]
• File_line[auto_restart_file_presence_krb5-admin-server]
• File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-admin-server.conf]
• Systemd::Unit[wmf_auto_restart_krb5-admin-server.timer]
• Rsyslog::Conf[wmf_auto_restart_krb5-admin-server]
• File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.service]
• Profile::Auto_restarts::Service[krb5-admin-server]
• File[/etc/logrotate.d/wmf_auto_restart_krb5-admin-server]
• File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.timer]
• Concat_fragment[/etc/rsyncd.conf-srv-keytabs]
• Logrotate::Conf[wmf_auto_restart_krb5-admin-server]
• Systemd::Unit[wmf_auto_restart_krb5-admin-server.service]
• Systemd::Syslog[wmf_auto_restart_krb5-admin-server]
• File[/var/log/wmf_auto_restart_krb5-admin-server]
• Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.timer (wmf_auto_restart_krb5-admin-server.timer)]

Resources only in the old catalog

• Firewall::Service[kerberos_kpropd_tcp]
• File[/etc/nftables/input/10_kerberos_kpropd_tcp.nft]
• Ferm::Service[kerberos_kpropd_tcp]
• Nftables::Service[kerberos_kpropd_tcp]

Resources modified

• File[/lib/systemd/system/wmf_auto_restart_krb5-kpropd.service]

  Parameters differences:

  --- File[/lib/systemd/system/wmf_auto_restart_krb5-kpropd.service].orig
  +++ File[/lib/systemd/system/wmf_auto_restart_krb5-kpropd.service]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Systemd::Timer[wmf_auto_restart_rsync]

  Parameters differences:

  --- Systemd::Timer[wmf_auto_restart_rsync].orig
  +++ Systemd::Timer[wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Timer[wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- Systemd::Timer[wmf_auto_restart_krb5-kpropd].orig
  +++ Systemd::Timer[wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Profile::Auto_restarts::Service[rsync]

  Parameters differences:

  --- Profile::Auto_restarts::Service[rsync].orig
  +++ Profile::Auto_restarts::Service[rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Concat_fragment[/etc/rsyncd.conf-srv-keytabs]

  Parameters differences:

  --- Concat_fragment[/etc/rsyncd.conf-srv-keytabs].orig
  +++ Concat_fragment[/etc/rsyncd.conf-srv-keytabs]
  
  +    target => /etc/rsyncd.conf
  +    order  => 10
  +    tag    => _etc_rsyncd.conf
  

  Content differences:

  --- /etc/rsyncd.conf-srv-keytabs.orig
  +++ /etc/rsyncd.conf-srv-keytabs
  @@ -0,0 +1,20 @@
  +# This file is being maintained by Puppet.
  +# DO NOT EDIT
  +
  +[ srv-keytabs ]
  +path            = /srv/kerberos/keytabs
  +read only       = yes
  +write only      = no
  +list            = yes
  +uid             = 0
  +gid             = 0
  +use chroot      = yes
  +
  +
  +max connections = 0
  +
  +
  +secrets file = /srv/kerberos/rsync_secrets_file
  +auth users = kerb
  +hosts allow = puppetserver1001.eqiad.wmnet localhost
  +

• File[/var/log/wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- File[/var/log/wmf_auto_restart_krb5-kpropd].orig
  +++ File[/var/log/wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => directory
  +    ensure => absent
  

• File[/srv/kerberos/rsync_secrets_file]

  Parameters differences:

  --- File[/srv/kerberos/rsync_secrets_file].orig
  +++ File[/srv/kerberos/rsync_secrets_file]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Class[Profile::Apt]

  Parameters differences:

  --- Class[Profile::Apt].orig
  +++ Class[Profile::Apt]
  
  @@
  -    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[krb5-kdc]', 'Package[bacula-fd]', 'Package[krb5-admin-server]', 'Package[python3-pexpect]', 'Package[krb5-kpropd]', 'Package[krb5-user]', 'Package[kstart]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[rsync]']
  +    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[krb5-kdc]', 'Package[bacula-fd]', 'Package[krb5-admin-server]', 'Package[python3-pexpect]', 'Package[rsync]', 'Package[krb5-kpropd]', 'Package[krb5-user]', 'Package[kstart]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']
  

• Service[wmf_auto_restart_krb5-kpropd.timer]

  Parameters differences:

  --- Service[wmf_auto_restart_krb5-kpropd.timer].orig
  +++ Service[wmf_auto_restart_krb5-kpropd.timer]
  
  +    before => ['Exec[systemd daemon-reload for wmf_auto_restart_krb5-kpropd.timer (wmf_auto_restart_krb5-kpropd.timer)]']
  @@
  -    enable => True
  +    enable => False
  @@
  -    ensure => running
  +    ensure => stopped
  

• Systemd::Unit[replicate-krb-database.timer]

  Parameters differences:

  --- Systemd::Unit[replicate-krb-database.timer].orig
  +++ Systemd::Unit[replicate-krb-database.timer]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Ferm::Service[kerberos_kpropd_tcp]

  Parameters differences:

  --- Ferm::Service[kerberos_kpropd_tcp].orig
  +++ Ferm::Service[kerberos_kpropd_tcp]
  
  -    srange              => ['krb1002.eqiad.wmnet']
  -    port                => 754
  -    proto               => tcp
  -    ensure              => present
  -    prio                => 10
  -    desc                => 
  -    unrestricted_access => False
  -    notrack             => False
  

• File[/etc/logrotate.d/wmf_auto_restart_rsync]

  Parameters differences:

  --- File[/etc/logrotate.d/wmf_auto_restart_rsync].orig
  +++ File[/etc/logrotate.d/wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Unit[replicate-krb-database.service]

  Parameters differences:

  --- Systemd::Unit[replicate-krb-database.service].orig
  +++ Systemd::Unit[replicate-krb-database.service]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Monitoring::Exported_nagios_service[krb2002 check_replicate-krb-database_status]

  Parameters differences:

  --- Monitoring::Exported_nagios_service[krb2002 check_replicate-krb-database_status].orig
  +++ Monitoring::Exported_nagios_service[krb2002 check_replicate-krb-database_status]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Class[Profile::Kerberos::Kadminserver]

  Parameters differences:

  --- Class[Profile::Kerberos::Kadminserver].orig
  +++ Class[Profile::Kerberos::Kadminserver]
  
  @@
  -    krb_kadmin_primary => krb1002.eqiad.wmnet
  +    krb_kadmin_primary => krb2002.codfw.wmnet
  

• Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]

  Parameters differences:

  --- Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)].orig
  +++ Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]
  
  +    before => ['Service[wmf_auto_restart_rsync.timer]']
  

• Systemd::Timer::Job[replicate-krb-database]

  Parameters differences:

  --- Systemd::Timer::Job[replicate-krb-database].orig
  +++ Systemd::Timer::Job[replicate-krb-database]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Firewall::Service[kerberos_kpropd_tcp]

  Parameters differences:

  --- Firewall::Service[kerberos_kpropd_tcp].orig
  +++ Firewall::Service[kerberos_kpropd_tcp]
  
  -    srange              => ['krb1002.eqiad.wmnet']
  -    port                => 754
  -    proto               => tcp
  -    ensure              => present
  -    prio                => 10
  -    desc                => 
  -    unrestricted_access => False
  -    notrack             => False
  

• Exec[systemd daemon-reload for replicate-krb-database.timer (replicate-krb-database.timer)]

  Parameters differences:

  --- Exec[systemd daemon-reload for replicate-krb-database.timer (replicate-krb-database.timer)].orig
  +++ Exec[systemd daemon-reload for replicate-krb-database.timer (replicate-krb-database.timer)]
  
  +    before => ['Service[replicate-krb-database.timer]']
  

• Systemd::Unit[wmf_auto_restart_krb5-admin-server.service]

  Parameters differences:

  --- Systemd::Unit[wmf_auto_restart_krb5-admin-server.service].orig
  +++ Systemd::Unit[wmf_auto_restart_krb5-admin-server.service]
  
  +    unit              => wmf_auto_restart_krb5-admin-server.service
  +    restart           => False
  +    ensure            => present
  +    override          => False
  +    require           => ['Class[Systemd]']
  +    override_filename => puppet-override.conf
  

• File[/lib/systemd/system/wmf_auto_restart_rsync.service]

  Parameters differences:

  --- File[/lib/systemd/system/wmf_auto_restart_rsync.service].orig
  +++ File[/lib/systemd/system/wmf_auto_restart_rsync.service]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Unit[wmf_auto_restart_krb5-kpropd.service]

  Parameters differences:

  --- Systemd::Unit[wmf_auto_restart_krb5-kpropd.service].orig
  +++ Systemd::Unit[wmf_auto_restart_krb5-kpropd.service]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• File[/lib/systemd/system/replicate-krb-database.timer]

  Parameters differences:

  --- File[/lib/systemd/system/replicate-krb-database.timer].orig
  +++ File[/lib/systemd/system/replicate-krb-database.timer]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File_line[auto_restart_file_presence_krb5-admin-server]

  Parameters differences:

  --- File_line[auto_restart_file_presence_krb5-admin-server].orig
  +++ File_line[auto_restart_file_presence_krb5-admin-server]
  
  +    path    => /etc/debdeploy-client/autorestarts.conf
  +    require => File[/etc/debdeploy-client/autorestarts.conf]
  +    line    => krb5-admin-server
  +    ensure  => present
  

• Systemd::Unit[wmf_auto_restart_rsync.timer]

  Parameters differences:

  --- Systemd::Unit[wmf_auto_restart_rsync.timer].orig
  +++ Systemd::Unit[wmf_auto_restart_rsync.timer]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Profile::Auto_restarts::Service[krb5-kpropd]

  Parameters differences:

  --- Profile::Auto_restarts::Service[krb5-kpropd].orig
  +++ Profile::Auto_restarts::Service[krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Service[replicate-krb-database.timer]

  Parameters differences:

  --- Service[replicate-krb-database.timer].orig
  +++ Service[replicate-krb-database.timer]
  
  -    before => ['Exec[systemd daemon-reload for replicate-krb-database.timer (replicate-krb-database.timer)]']
  @@
  -    enable => False
  +    enable => True
  @@
  -    ensure => stopped
  +    ensure => running
  

• Logrotate::Conf[wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- Logrotate::Conf[wmf_auto_restart_krb5-admin-server].orig
  +++ Logrotate::Conf[wmf_auto_restart_krb5-admin-server]
  
  +    ensure => present
  

• File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-kpropd.conf]

  Parameters differences:

  --- File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-kpropd.conf].orig
  +++ File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-kpropd.conf]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• File_line[auto_restart_file_presence_rsync]

  Parameters differences:

  --- File_line[auto_restart_file_presence_rsync].orig
  +++ File_line[auto_restart_file_presence_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/etc/nftables/input/10_kerberos_kpropd_tcp.nft]

  Parameters differences:

  --- File[/etc/nftables/input/10_kerberos_kpropd_tcp.nft].orig
  +++ File[/etc/nftables/input/10_kerberos_kpropd_tcp.nft]
  
  -    tag    => nft
  -    owner  => root
  -    ensure => present
  -    notify => ['Service[nftables]']
  -    mode   => 0444
  -    group  => root
  

  Content differences:

  --- /etc/nftables/input/10_kerberos_kpropd_tcp.nft.orig
  +++ /etc/nftables/input/10_kerberos_kpropd_tcp.nft
  @@ -1,4 +0,0 @@
  -# Managed by puppet
  -# 
  -ip saddr { 10.64.32.69 } tcp dport { 754 } accept
  -ip6 saddr { 2620:0:861:103:10:64:32:69 } tcp dport { 754 } accept

• Class[Profile::Kerberos::Kdc]

  Parameters differences:

  --- Class[Profile::Kerberos::Kdc].orig
  +++ Class[Profile::Kerberos::Kdc]
  
  @@
  -    krb_kdc_servers => ['krb1002.eqiad.wmnet', 'krb2002.codfw.wmnet']
  +    krb_kdc_servers => ['krb2002.codfw.wmnet']
  

• Exec[debconf-set-selections set string krb5-config/kerberos_servers]

  Parameters differences:

  --- Exec[debconf-set-selections set string krb5-config/kerberos_servers].orig
  +++ Exec[debconf-set-selections set string krb5-config/kerberos_servers]
  
  @@
  -    unless  => test "$(echo get krb5-config/kerberos_servers | debconf-communicate)" = "0 krb1002.eqiad.wmnet krb2002.codfw.wmnet"
  +    unless  => test "$(echo get krb5-config/kerberos_servers | debconf-communicate)" = "0 krb2002.codfw.wmnet"
  @@
  -    command => echo set krb5-config/kerberos_servers string "krb1002.eqiad.wmnet krb2002.codfw.wmnet" | debconf-set-selections
  +    command => echo set krb5-config/kerberos_servers string "krb2002.codfw.wmnet" | debconf-set-selections
  

• Nftables::Service[rsyncd_access_srv-keytabs]

  Parameters differences:

  --- Nftables::Service[rsyncd_access_srv-keytabs].orig
  +++ Nftables::Service[rsyncd_access_srv-keytabs]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.service]

  Parameters differences:

  --- File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.service].orig
  +++ File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.service]
  
  +    notify => Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.service (wmf_auto_restart_krb5-admin-server.service)]
  +    ensure => present
  +    owner  => root
  +    mode   => 0444
  +    group  => root
  

  Content differences:

  --- /lib/systemd/system/wmf_auto_restart_krb5-admin-server.service.orig
  +++ /lib/systemd/system/wmf_auto_restart_krb5-admin-server.service
  @@ -0,0 +1,8 @@
  +[Unit]
  +Description=Auto restart job: krb5-admin-server
  +Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
  +
  +[Service]
  +Type=oneshot
  +User=root
  +ExecStart=/usr/local/sbin/wmf-auto-restart -s krb5-admin-server

• Monitoring::Service[check_replicate-krb-database_status]

  Parameters differences:

  --- Monitoring::Service[check_replicate-krb-database_status].orig
  +++ Monitoring::Service[check_replicate-krb-database_status]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Profile::Auto_restarts::Service[krb5-admin-server]

  Parameters differences:

  --- Profile::Auto_restarts::Service[krb5-admin-server].orig
  +++ Profile::Auto_restarts::Service[krb5-admin-server]
  
  +    ensure => present
  

• Firewall::Service[rsyncd_access_srv-keytabs]

  Parameters differences:

  --- Firewall::Service[rsyncd_access_srv-keytabs].orig
  +++ Firewall::Service[rsyncd_access_srv-keytabs]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Rsync::Server::Module[srv-keytabs]

  Parameters differences:

  --- Rsync::Server::Module[srv-keytabs].orig
  +++ Rsync::Server::Module[srv-keytabs]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]

  Parameters differences:

  --- File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf].orig
  +++ File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Service[replicate-krb-database]

  Parameters differences:

  --- Systemd::Service[replicate-krb-database].orig
  +++ Systemd::Service[replicate-krb-database]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.timer (wmf_auto_restart_krb5-admin-server.timer)]

  Parameters differences:

  --- Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.timer (wmf_auto_restart_krb5-admin-server.timer)].orig
  +++ Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.timer (wmf_auto_restart_krb5-admin-server.timer)]
  
  +    command     => /bin/systemctl daemon-reload
  +    refreshonly => True
  +    before      => ['Service[wmf_auto_restart_krb5-admin-server.timer]']
  

• Service[krb5-admin-server]

  Parameters differences:

  --- Service[krb5-admin-server].orig
  +++ Service[krb5-admin-server]
  
  +    require => Package[krb5-admin-server]
  +    ensure  => running
  

• Motd::Script[inactive_warning]

  Parameters differences:

  --- Motd::Script[inactive_warning].orig
  +++ Motd::Script[inactive_warning]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Systemd::Unit[wmf_auto_restart_krb5-kpropd.timer]

  Parameters differences:

  --- Systemd::Unit[wmf_auto_restart_krb5-kpropd.timer].orig
  +++ Systemd::Unit[wmf_auto_restart_krb5-kpropd.timer]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Systemd::Syslog[wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- Systemd::Syslog[wmf_auto_restart_krb5-kpropd].orig
  +++ Systemd::Syslog[wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Systemd::Syslog[wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- Systemd::Syslog[wmf_auto_restart_krb5-admin-server].orig
  +++ Systemd::Syslog[wmf_auto_restart_krb5-admin-server]
  
  +    programname_comparison => startswith
  +    ensure                 => present
  +    base_dir               => /var/log
  +    readable_by            => all
  +    force_stop             => True
  +    log_filename           => syslog.log
  +    owner                  => root
  +    group                  => root
  

• Debconf::Set[krb5-config/kerberos_servers]

  Parameters differences:

  --- Debconf::Set[krb5-config/kerberos_servers].orig
  +++ Debconf::Set[krb5-config/kerberos_servers]
  
  @@
  -    value => krb1002.eqiad.wmnet krb2002.codfw.wmnet
  +    value => krb2002.codfw.wmnet
  

• Service[wmf_auto_restart_krb5-admin-server.timer]

  Parameters differences:

  --- Service[wmf_auto_restart_krb5-admin-server.timer].orig
  +++ Service[wmf_auto_restart_krb5-admin-server.timer]
  
  +    enable   => True
  +    provider => systemd
  +    ensure   => running
  

• File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-admin-server.conf]

  Parameters differences:

  --- File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-admin-server.conf].orig
  +++ File[/etc/rsyslog.d/40-wmf-auto-restart-krb5-admin-server.conf]
  
  +    notify => Service[rsyslog]
  +    ensure => present
  +    owner  => root
  +    mode   => 0444
  +    group  => root
  

  Content differences:

  --- /etc/rsyslog.d/40-wmf-auto-restart-krb5-admin-server.conf.orig
  +++ /etc/rsyslog.d/40-wmf-auto-restart-krb5-admin-server.conf
  @@ -0,0 +1,10 @@
  +# rsyslog.conf(5) configuration file for services.
  +# This file is managed by Puppet.
  +if $programname startswith "wmf_auto_restart_krb5-admin-server" then {
  +    action(
  +        type="omfile" file="/var/log/wmf_auto_restart_krb5-admin-server/syslog.log"
  +        fileOwner="root" fileGroup="root"
  +        fileCreateMode="0644"
  +    )
  +    & stop
  +}

• Rsyslog::Conf[wmf_auto_restart_rsync]

  Parameters differences:

  --- Rsyslog::Conf[wmf_auto_restart_rsync].orig
  +++ Rsyslog::Conf[wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Timer::Job[wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- Systemd::Timer::Job[wmf_auto_restart_krb5-kpropd].orig
  +++ Systemd::Timer::Job[wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Concat::Fragment[/etc/rsyncd.conf-srv-keytabs]

  Parameters differences:

  --- Concat::Fragment[/etc/rsyncd.conf-srv-keytabs].orig
  +++ Concat::Fragment[/etc/rsyncd.conf-srv-keytabs]
  
  +    target => /etc/rsyncd.conf
  +    order  => 10
  

• Nrpe::Monitor_service[check_replicate-krb-database_status]

  Parameters differences:

  --- Nrpe::Monitor_service[check_replicate-krb-database_status].orig
  +++ Nrpe::Monitor_service[check_replicate-krb-database_status]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Service[krb5-kpropd]

  Parameters differences:

  --- Service[krb5-kpropd].orig
  +++ Service[krb5-kpropd]
  
  -    require => Package[krb5-kpropd]
  @@
  -    ensure  => running
  +    ensure  => stopped
  

• Package[krb5-kpropd]

  Parameters differences:

  --- Package[krb5-kpropd].orig
  +++ Package[krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Systemd::Unit[wmf_auto_restart_krb5-admin-server.timer]

  Parameters differences:

  --- Systemd::Unit[wmf_auto_restart_krb5-admin-server.timer].orig
  +++ Systemd::Unit[wmf_auto_restart_krb5-admin-server.timer]
  
  +    unit              => wmf_auto_restart_krb5-admin-server.timer
  +    restart           => False
  +    ensure            => present
  +    override          => False
  +    require           => ['Class[Systemd]']
  +    override_filename => puppet-override.conf
  

• Systemd::Syslog[wmf_auto_restart_rsync]

  Parameters differences:

  --- Systemd::Syslog[wmf_auto_restart_rsync].orig
  +++ Systemd::Syslog[wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Service[wmf_auto_restart_rsync.timer]

  Parameters differences:

  --- Service[wmf_auto_restart_rsync.timer].orig
  +++ Service[wmf_auto_restart_rsync.timer]
  
  -    before => ['Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]']
  @@
  -    enable => False
  +    enable => True
  @@
  -    ensure => stopped
  +    ensure => running
  

• Class[Profile::Kerberos::Replication]

  Parameters differences:

  --- Class[Profile::Kerberos::Replication].orig
  +++ Class[Profile::Kerberos::Replication]
  
  @@
  -    krb_kdc_servers    => ['krb1002.eqiad.wmnet', 'krb2002.codfw.wmnet']
  +    krb_kdc_servers    => ['krb2002.codfw.wmnet']
  @@
  -    krb_kadmin_primary => krb1002.eqiad.wmnet
  +    krb_kadmin_primary => krb2002.codfw.wmnet
  

• File[/etc/logrotate.d/wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- File[/etc/logrotate.d/wmf_auto_restart_krb5-admin-server].orig
  +++ File[/etc/logrotate.d/wmf_auto_restart_krb5-admin-server]
  
  +    group  => root
  +    mode   => 0444
  +    owner  => root
  +    ensure => present
  

  Content differences:

  --- /etc/logrotate.d/wmf_auto_restart_krb5-admin-server.orig
  +++ /etc/logrotate.d/wmf_auto_restart_krb5-admin-server
  @@ -0,0 +1,12 @@
  +# logrotate(8) config for wmf_auto_restart_krb5-admin-server
  +
  +/var/log/wmf_auto_restart_krb5-admin-server/*.log {
  +    daily
  +    copytruncate
  +    missingok
  +    compress
  +    delaycompress
  +    notifempty
  +    rotate 15
  +    size 256M
  +}

• File[/usr/local/sbin/replicate_krb_database]

  Parameters differences:

  --- File[/usr/local/sbin/replicate_krb_database].orig
  +++ File[/usr/local/sbin/replicate_krb_database]
  
  @@
  -    ensure => absent
  +    ensure => present
  

  Content differences:

  --- /usr/local/sbin/replicate_krb_database.orig
  +++ /usr/local/sbin/replicate_krb_database
  @@ -8,5 +8,4 @@
   
   KRB_DATABASE_FILE=/srv/backup/kdc_database_krepl_$(date +%Y%m%d%H%M%S)
   /usr/sbin/kdb5_util dump $KRB_DATABASE_FILE
  -/usr/sbin/kprop -d -f $KRB_DATABASE_FILE krb2002.codfw.wmnet
   rm -f $KRB_DATABASE_FILE

• Systemd::Timer::Job[wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- Systemd::Timer::Job[wmf_auto_restart_krb5-admin-server].orig
  +++ Systemd::Timer::Job[wmf_auto_restart_krb5-admin-server]
  
  +    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
  +    monitoring_contact_groups => admins
  +    send_mail                 => False
  +    send_mail_only_on_error   => True
  +    require                   => File[/usr/local/sbin/wmf-auto-restart]
  +    command                   => /usr/local/sbin/wmf-auto-restart -s krb5-admin-server
  +    environment               => {}
  +    monitoring_enabled        => False
  +    user                      => root
  +    success_exit_status       => []
  +    ignore_errors             => False
  +    fixed_random_delay        => False
  +    syslog_force_stop         => True
  +    logfile_perms             => all
  +    send_mail_to              => root@krb2002.codfw.wmnet
  +    ensure                    => present
  +    private_tmp               => False
  +    logfile_basedir           => /var/log
  +    syslog_match_startswith   => True
  +    description               => Auto restart job: krb5-admin-server
  +    interval                  => {'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 13:17:00'}
  +    logfile_name              => syslog.log
  +    logging_enabled           => True
  +    logfile_group             => root
  

• Systemd::Monitor[replicate-krb-database]

  Parameters differences:

  --- Systemd::Monitor[replicate-krb-database].orig
  +++ Systemd::Monitor[replicate-krb-database]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/etc/update-motd.d/01-inactive-warning]

  Parameters differences:

  --- File[/etc/update-motd.d/01-inactive-warning].orig
  +++ File[/etc/update-motd.d/01-inactive-warning]
  
  @@
  -    ensure => present
  +    ensure => absent
  

  Content differences:

  --- /etc/update-motd.d/01-inactive-warning.orig
  +++ /etc/update-motd.d/01-inactive-warning
  @@ -18,6 +18,6 @@
   
   command since credentials are kept in sync via kprod replication.
   
  -The current active kadmin host is krb1002.eqiad.wmnet
  +The current active kadmin host is krb2002.codfw.wmnet
   
   MOTD

• Ferm::Service[rsyncd_access_srv_keytabs]

  Parameters differences:

  --- Ferm::Service[rsyncd_access_srv_keytabs].orig
  +++ Ferm::Service[rsyncd_access_srv_keytabs]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Class[Adduser]

  Parameters differences:

  --- Class[Adduser].orig
  +++ Class[Adduser]
  
  @@
  -    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[krb5-kdc]', 'Package[bacula-fd]', 'Package[krb5-admin-server]', 'Package[python3-pexpect]', 'Package[krb5-kpropd]', 'Package[krb5-user]', 'Package[kstart]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[rsync]']
  +    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[krb5-kdc]', 'Package[bacula-fd]', 'Package[krb5-admin-server]', 'Package[python3-pexpect]', 'Package[rsync]', 'Package[krb5-kpropd]', 'Package[krb5-user]', 'Package[kstart]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]']
  

• Rsyslog::Conf[wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- Rsyslog::Conf[wmf_auto_restart_krb5-kpropd].orig
  +++ Rsyslog::Conf[wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Nftables::Service[kerberos_kpropd_tcp]

  Parameters differences:

  --- Nftables::Service[kerberos_kpropd_tcp].orig
  +++ Nftables::Service[kerberos_kpropd_tcp]
  
  -    port                => 754
  -    proto               => tcp
  -    ensure              => present
  -    prio                => 10
  -    src_ips             => ['10.64.32.69', '2620:0:861:103:10:64:32:69']
  -    desc                => 
  -    unrestricted_access => False
  -    notrack             => False
  

• Systemd::Timer[wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- Systemd::Timer[wmf_auto_restart_krb5-admin-server].orig
  +++ Systemd::Timer[wmf_auto_restart_krb5-admin-server]
  
  +    accuracy           => 15sec
  +    timer_intervals    => [{'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 13:17:00'}]
  +    splay              => 0
  +    fixed_random_delay => False
  +    ensure             => present
  +    unit_name          => wmf_auto_restart_krb5-admin-server.service
  

• File[/etc/krb5.conf]

  Content differences:

  --- /etc/krb5.conf.orig
  +++ /etc/krb5.conf
  @@ -12,9 +12,8 @@
   
   [realms]
           WIKIMEDIA = {
  -                kdc = krb1002.eqiad.wmnet
                   kdc = krb2002.codfw.wmnet
  -                admin_server = krb1002.eqiad.wmnet
  +                admin_server = krb2002.codfw.wmnet
           }
   
   [domain_realm]

• File[/etc/nagios/nrpe.d/check_check_replicate-krb-database_status.cfg]

  Parameters differences:

  --- File[/etc/nagios/nrpe.d/check_check_replicate-krb-database_status.cfg].orig
  +++ File[/etc/nagios/nrpe.d/check_check_replicate-krb-database_status.cfg]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File_line[auto_restart_file_presence_krb5-kpropd]

  Parameters differences:

  --- File_line[auto_restart_file_presence_krb5-kpropd].orig
  +++ File_line[auto_restart_file_presence_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• File[/lib/systemd/system/wmf_auto_restart_rsync.timer]

  Parameters differences:

  --- File[/lib/systemd/system/wmf_auto_restart_rsync.timer].orig
  +++ File[/lib/systemd/system/wmf_auto_restart_rsync.timer]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.timer]

  Parameters differences:

  --- File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.timer].orig
  +++ File[/lib/systemd/system/wmf_auto_restart_krb5-admin-server.timer]
  
  +    notify => Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.timer (wmf_auto_restart_krb5-admin-server.timer)]
  +    ensure => present
  +    owner  => root
  +    mode   => 0444
  +    group  => root
  

  Content differences:

  --- /lib/systemd/system/wmf_auto_restart_krb5-admin-server.timer.orig
  +++ /lib/systemd/system/wmf_auto_restart_krb5-admin-server.timer
  @@ -0,0 +1,12 @@
  +[Unit]
  +Description=Periodic execution of wmf_auto_restart_krb5-admin-server.service
  +
  +[Timer]
  +Unit=wmf_auto_restart_krb5-admin-server.service
  +# Accuracy sets the maximum time interval around the execution time we want to allow
  +AccuracySec=15sec
  +OnCalendar=Mon,Tue,Wed,Thu,Fri *-*-* 13:17:00
  +RandomizedDelaySec=0
  +
  +[Install]
  +WantedBy=multi-user.target

• Nrpe::Check[check_check_replicate-krb-database_status]

  Parameters differences:

  --- Nrpe::Check[check_check_replicate-krb-database_status].orig
  +++ Nrpe::Check[check_check_replicate-krb-database_status]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/etc/krb5kdc/kpropd.acl]

  Parameters differences:

  --- File[/etc/krb5kdc/kpropd.acl].orig
  +++ File[/etc/krb5kdc/kpropd.acl]
  
  -    mode   => 0444
  -    before => Package[krb5-kpropd]
  +    ensure => absent
  

  Content differences:

  --- /etc/krb5kdc/kpropd.acl.orig
  +++ /etc/krb5kdc/kpropd.acl
  @@ -1,2 +0,0 @@
  -host/krb1002.eqiad.wmnet@WIKIMEDIA
  -host/krb2002.codfw.wmnet@WIKIMEDIA

• Class[Profile::Kerberos::Client]

  Parameters differences:

  --- Class[Profile::Kerberos::Client].orig
  +++ Class[Profile::Kerberos::Client]
  
  @@
  -    krb_kadmin_primary => krb1002.eqiad.wmnet
  +    krb_kadmin_primary => krb2002.codfw.wmnet
  @@
  -    krb_kdc_servers    => ['krb1002.eqiad.wmnet', 'krb2002.codfw.wmnet']
  +    krb_kdc_servers    => ['krb2002.codfw.wmnet']
  

• File[/etc/logrotate.d/wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- File[/etc/logrotate.d/wmf_auto_restart_krb5-kpropd].orig
  +++ File[/etc/logrotate.d/wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• File[/lib/systemd/system/replicate-krb-database.service]

  Parameters differences:

  --- File[/lib/systemd/system/replicate-krb-database.service].orig
  +++ File[/lib/systemd/system/replicate-krb-database.service]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/var/log/wmf_auto_restart_rsync]

  Parameters differences:

  --- File[/var/log/wmf_auto_restart_rsync].orig
  +++ File[/var/log/wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => directory
  

• Logrotate::Conf[wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- Logrotate::Conf[wmf_auto_restart_krb5-kpropd].orig
  +++ Logrotate::Conf[wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• Systemd::Service[wmf_auto_restart_rsync]

  Parameters differences:

  --- Systemd::Service[wmf_auto_restart_rsync].orig
  +++ Systemd::Service[wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Service[wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- Systemd::Service[wmf_auto_restart_krb5-admin-server].orig
  +++ Systemd::Service[wmf_auto_restart_krb5-admin-server]
  
  +    restart                  => False
  +    ensure                   => present
  +    unit_type                => timer
  +    require                  => Systemd::Unit[wmf_auto_restart_krb5-admin-server.service]
  +    monitoring_enabled       => False
  +    service_params           => {}
  +    monitoring_contact_group => admins
  +    migration_task           => T407130
  +    override                 => False
  +    monitoring_critical      => False
  

• Rsyslog::Conf[wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- Rsyslog::Conf[wmf_auto_restart_krb5-admin-server].orig
  +++ Rsyslog::Conf[wmf_auto_restart_krb5-admin-server]
  
  +    mode     => 0444
  +    priority => 40
  +    require  => File[/var/log/wmf_auto_restart_krb5-admin-server]
  +    ensure   => present
  

• Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.service (wmf_auto_restart_krb5-admin-server.service)]

  Parameters differences:

  --- Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.service (wmf_auto_restart_krb5-admin-server.service)].orig
  +++ Exec[systemd daemon-reload for wmf_auto_restart_krb5-admin-server.service (wmf_auto_restart_krb5-admin-server.service)]
  
  +    refreshonly => True
  +    command     => /bin/systemctl daemon-reload
  

• Systemd::Timer[replicate-krb-database]

  Parameters differences:

  --- Systemd::Timer[replicate-krb-database].orig
  +++ Systemd::Timer[replicate-krb-database]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Timer::Job[wmf_auto_restart_rsync]

  Parameters differences:

  --- Systemd::Timer::Job[wmf_auto_restart_rsync].orig
  +++ Systemd::Timer::Job[wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Exec[systemd daemon-reload for wmf_auto_restart_krb5-kpropd.timer (wmf_auto_restart_krb5-kpropd.timer)]

  Parameters differences:

  --- Exec[systemd daemon-reload for wmf_auto_restart_krb5-kpropd.timer (wmf_auto_restart_krb5-kpropd.timer)].orig
  +++ Exec[systemd daemon-reload for wmf_auto_restart_krb5-kpropd.timer (wmf_auto_restart_krb5-kpropd.timer)]
  
  -    before => ['Service[wmf_auto_restart_krb5-kpropd.timer]']
  

• Logrotate::Conf[wmf_auto_restart_rsync]

  Parameters differences:

  --- Logrotate::Conf[wmf_auto_restart_rsync].orig
  +++ Logrotate::Conf[wmf_auto_restart_rsync]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Unit[wmf_auto_restart_rsync.service]

  Parameters differences:

  --- Systemd::Unit[wmf_auto_restart_rsync.service].orig
  +++ Systemd::Unit[wmf_auto_restart_rsync.service]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• Systemd::Service[wmf_auto_restart_krb5-kpropd]

  Parameters differences:

  --- Systemd::Service[wmf_auto_restart_krb5-kpropd].orig
  +++ Systemd::Service[wmf_auto_restart_krb5-kpropd]
  
  @@
  -    ensure => present
  +    ensure => absent
  

• File[/etc/nftables/input/10_rsyncd_access_srv-keytabs.nft]

  Parameters differences:

  --- File[/etc/nftables/input/10_rsyncd_access_srv-keytabs.nft].orig
  +++ File[/etc/nftables/input/10_rsyncd_access_srv-keytabs.nft]
  
  @@
  -    ensure => absent
  +    ensure => present
  

• File[/var/log/wmf_auto_restart_krb5-admin-server]

  Parameters differences:

  --- File[/var/log/wmf_auto_restart_krb5-admin-server].orig
  +++ File[/var/log/wmf_auto_restart_krb5-admin-server]
  
  +    backup => False
  +    owner  => root
  +    ensure => directory
  +    force  => True
  +    mode   => 0755
  +    group  => root
  

• File[/lib/systemd/system/wmf_auto_restart_krb5-kpropd.timer]

  Parameters differences:

  --- File[/lib/systemd/system/wmf_auto_restart_krb5-kpropd.timer].orig
  +++ File[/lib/systemd/system/wmf_auto_restart_krb5-kpropd.timer]
  
  @@
  -    ensure => present
  +    ensure => absent
  

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Standard Diff