Compilation results for kafka-jumbo1010.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.csr]
• Exec[renew certificate - kafka__kafka_mirror_maker]
• Exec[Generate cert kafka__kafka-jumbo1010_eqiad_wmnet refresh]
• Cfssl::Cert[kafka__kafka_mirror_maker]
• Cfssl::Csr[/etc/cfssl/csr/kafka__kafka_mirror_maker.csr]
• Exec[Generate cert kafka__kafka_mirror_maker refresh on intermediate ca change]
• Exec[Generate cert kafka__kafka_mirror_maker]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.csr]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet-key.pem]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker-key.pem]
• Exec[create chained cert /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.chain.pem]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.chained.pem]
• Cfssl::Cert[kafka__kafka-jumbo1010_eqiad_wmnet]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.pem]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.chain.pem]
• Cfssl::Csr[/etc/cfssl/csr/kafka__kafka-jumbo1010_eqiad_wmnet.csr]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.chain.pem]
• File[/etc/cfssl/csr/kafka__kafka_mirror_maker.csr]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.pem]
• Exec[create chained cert /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.chain.pem]
• Exec[renew certificate - kafka__kafka-jumbo1010_eqiad_wmnet]
• Exec[Generate cert kafka__kafka_mirror_maker refresh]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.chained.pem]
• File[/etc/cfssl/csr/kafka__kafka-jumbo1010_eqiad_wmnet.csr]
• Exec[Generate cert kafka__kafka-jumbo1010_eqiad_wmnet]
• Exec[Generate cert kafka__kafka-jumbo1010_eqiad_wmnet refresh on intermediate ca change]

Resources only in the old catalog

• Exec[renew certificate - kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11]
• Exec[Generate cert kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11 refresh]
• Exec[create chained cert /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.chain.pem]
• Exec[Generate cert kafka__kafka_mirror_maker_kafka_11 refresh on intermediate ca change]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.chained.pem]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.pem]
• Exec[Generate cert kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11 refresh on intermediate ca change]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11-key.pem]
• Cfssl::Csr[/etc/cfssl/csr/kafka__kafka_mirror_maker_kafka_11.csr]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.csr]
• Exec[renew certificate - kafka__kafka_mirror_maker_kafka_11]
• Exec[Generate cert kafka__kafka_mirror_maker_kafka_11 refresh]
• File[/etc/cfssl/csr/kafka__kafka_mirror_maker_kafka_11.csr]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.pem]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.chain.pem]
• File[/etc/cfssl/csr/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.csr]
• Exec[Generate cert kafka__kafka_mirror_maker_kafka_11]
• Cfssl::Cert[kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11-key.pem]
• Cfssl::Cert[kafka__kafka_mirror_maker_kafka_11]
• Exec[create chained cert /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.chain.pem]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.csr]
• Cfssl::Csr[/etc/cfssl/csr/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.csr]
• Exec[Generate cert kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11]
• File[/etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.chained.pem]
• File[/etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.chain.pem]

Resources modified

• Sslcert::X509_to_pkcs12[kafka_mirror_keystore]

  Parameters differences:

  --- Sslcert::X509_to_pkcs12[kafka_mirror_keystore].orig
  +++ Sslcert::X509_to_pkcs12[kafka_mirror_keystore]
  
  @@
  -    public_key  => /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.chained.pem
  +    public_key  => /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.chained.pem
  @@
  -    private_key => /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11-key.pem
  +    private_key => /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker-key.pem
  

• Exec[sslcert generate kafka_keystore.p12]

  Parameters differences:

  --- Exec[sslcert generate kafka_keystore.p12].orig
  +++ Exec[sslcert generate kafka_keystore.p12]
  
  @@
  -    unless  => /usr/bin/test     "$(/usr/bin/openssl x509 -in /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.chained.pem)" ==     "$(/usr/bin/openssl pkcs12 -password 'pass:qwerty' -in /etc/kafka/ssl/kafka_jumbo-eqiad_broker.keystore.p12 -clcerts -nokeys | openssl x509)"
  +    unless  => /usr/bin/test     "$(/usr/bin/openssl x509 -in /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.chained.pem)" ==     "$(/usr/bin/openssl pkcs12 -password 'pass:qwerty' -in /etc/kafka/ssl/kafka_jumbo-eqiad_broker.keystore.p12 -clcerts -nokeys | openssl x509)"
  @@
  -    command => /usr/bin/openssl pkcs12 -export  -in /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.chained.pem -inkey /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11-key.pem -out /etc/kafka/ssl/kafka_jumbo-eqiad_broker.keystore.p12 -password 'pass:qwerty'
  +    command => /usr/bin/openssl pkcs12 -export  -in /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.chained.pem -inkey /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet-key.pem -out /etc/kafka/ssl/kafka_jumbo-eqiad_broker.keystore.p12 -password 'pass:qwerty'
  

• Sslcert::X509_to_pkcs12[kafka_keystore]

  Parameters differences:

  --- Sslcert::X509_to_pkcs12[kafka_keystore].orig
  +++ Sslcert::X509_to_pkcs12[kafka_keystore]
  
  @@
  -    public_key  => /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11.chained.pem
  +    public_key  => /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet.chained.pem
  @@
  -    private_key => /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet_kafka_11-key.pem
  +    private_key => /etc/kafka/ssl/kafka__kafka-jumbo1010_eqiad_wmnet-key.pem
  

• Exec[sslcert generate kafka_mirror_keystore.p12]

  Parameters differences:

  --- Exec[sslcert generate kafka_mirror_keystore.p12].orig
  +++ Exec[sslcert generate kafka_mirror_keystore.p12]
  
  @@
  -    unless  => /usr/bin/test     "$(/usr/bin/openssl x509 -in /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.chained.pem)" ==     "$(/usr/bin/openssl pkcs12 -password 'pass:' -in /etc/kafka/mirror/ssl/kafka_mirror_maker.keystore.p12 -clcerts -nokeys | openssl x509)"
  +    unless  => /usr/bin/test     "$(/usr/bin/openssl x509 -in /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.chained.pem)" ==     "$(/usr/bin/openssl pkcs12 -password 'pass:' -in /etc/kafka/mirror/ssl/kafka_mirror_maker.keystore.p12 -clcerts -nokeys | openssl x509)"
  @@
  -    command => /usr/bin/openssl pkcs12 -export  -in /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11.chained.pem -inkey /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker_kafka_11-key.pem -out /etc/kafka/mirror/ssl/kafka_mirror_maker.keystore.p12 -password 'pass:'
  +    command => /usr/bin/openssl pkcs12 -export  -in /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker.chained.pem -inkey /etc/kafka/mirror/ssl/kafka__kafka_mirror_maker-key.pem -out /etc/kafka/mirror/ssl/kafka_mirror_maker.keystore.p12 -password 'pass:'
  

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Full Diff