Compilation results for deploy1003.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the old catalog

• File[/etc/kubernetes/eventstreams-internal-staging.config]
• Exec[create chained cert /etc/kubernetes/pki/wikikube__eventstreams-internal-deploy.chain.pem]
• File[/etc/kubernetes/eventstreams-internal-deploy-staging-codfw.config]
• Exec[Generate cert wikikube__eventstreams-internal-deploy]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal-key.pem]
• Exec[create chained cert /etc/kubernetes/pki/wikikube_staging__eventstreams-internal-deploy.chain.pem]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal-deploy.csr]
• Exec[Generate cert wikikube_staging__eventstreams-internal]
• File[/etc/cfssl/csr/wikikube_staging__eventstreams-internal-deploy.csr]
• Exec[Generate cert wikikube_staging__eventstreams-internal-deploy]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal-deploy.pem]
• Exec[Generate cert wikikube__eventstreams-internal refresh on intermediate ca change]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal-deploy.chained.pem]
• File[/etc/kubernetes/eventstreams-internal-deploy-eqiad.config]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal.pem]
• File[/etc/kubernetes/eventstreams-internal-deploy-staging-eqiad.config]
• File[/etc/helmfile-defaults/private/main_services/eventstreams-internal]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal.chain.pem]
• File[/etc/kubernetes/eventstreams-internal-staging-eqiad.config]
• Exec[create chained cert /etc/kubernetes/pki/wikikube__eventstreams-internal.chain.pem]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal-deploy.chain.pem]
• Exec[Generate cert wikikube_staging__eventstreams-internal refresh]
• File[/etc/cfssl/csr/wikikube__eventstreams-internal.csr]
• File[/etc/kubernetes/eventstreams-internal-deploy-staging.config]
• File[/etc/kubernetes/eventstreams-internal-codfw.config]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal.chain.pem]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal-key.pem]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal-deploy.csr]
• File[/etc/kubernetes/eventstreams-internal-staging-codfw.config]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal.pem]
• Exec[renew certificate - wikikube_staging__eventstreams-internal-deploy]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal.chained.pem]
• Exec[Generate cert wikikube__eventstreams-internal]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal.chained.pem]
• Exec[Generate cert wikikube_staging__eventstreams-internal-deploy refresh]
• Exec[renew certificate - wikikube_staging__eventstreams-internal]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal-deploy.chained.pem]
• Exec[create chained cert /etc/kubernetes/pki/wikikube_staging__eventstreams-internal.chain.pem]
• Exec[Generate cert wikikube__eventstreams-internal-deploy refresh]
• Exec[Generate cert wikikube_staging__eventstreams-internal-deploy refresh on intermediate ca change]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal-deploy.chain.pem]
• File[/etc/cfssl/csr/wikikube__eventstreams-internal-deploy.csr]
• Exec[Generate cert wikikube__eventstreams-internal-deploy refresh on intermediate ca change]
• Exec[Generate cert wikikube__eventstreams-internal refresh]
• Exec[Generate cert wikikube_staging__eventstreams-internal refresh on intermediate ca change]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal.csr]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal.csr]
• Exec[renew certificate - wikikube__eventstreams-internal]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal-deploy-key.pem]
• File[/etc/cfssl/csr/wikikube_staging__eventstreams-internal.csr]
• File[/etc/kubernetes/eventstreams-internal-deploy-codfw.config]
• File[/etc/helmfile-defaults/private/main_services/eventstreams-internal/codfw.yaml]
• File[/etc/kubernetes/pki/wikikube__eventstreams-internal-deploy-key.pem]
• Exec[renew certificate - wikikube__eventstreams-internal-deploy]
• File[/etc/kubernetes/eventstreams-internal-eqiad.config]
• File[/etc/kubernetes/pki/wikikube_staging__eventstreams-internal-deploy.pem]
• File[/etc/helmfile-defaults/private/main_services/eventstreams-internal/staging.yaml]

Resources modified

• File[/etc/helmfile-defaults/services-staging.yaml]

  Content differences:

  --- /etc/helmfile-defaults/services-staging.yaml.orig
  +++ /etc/helmfile-defaults/services-staging.yaml
  @@ -84,10 +84,6 @@
       usernames:
       - name: eventstreams
       - name: eventstreams-deploy
  -  eventstreams-internal:
  -    usernames:
  -    - name: eventstreams-internal
  -    - name: eventstreams-internal-deploy
     failoid-ng:
       usernames:
       - name: failoid-ng

• File[/etc/helmfile-defaults/services-eqiad.yaml]

  Content differences:

  --- /etc/helmfile-defaults/services-eqiad.yaml.orig
  +++ /etc/helmfile-defaults/services-eqiad.yaml
  @@ -84,10 +84,6 @@
       usernames:
       - name: eventstreams
       - name: eventstreams-deploy
  -  eventstreams-internal:
  -    usernames:
  -    - name: eventstreams-internal
  -    - name: eventstreams-internal-deploy
     failoid-ng:
       usernames:
       - name: failoid-ng

• File[/etc/helmfile-defaults/services-staging-codfw.yaml]

  Content differences:

  --- /etc/helmfile-defaults/services-staging-codfw.yaml.orig
  +++ /etc/helmfile-defaults/services-staging-codfw.yaml
  @@ -84,10 +84,6 @@
       usernames:
       - name: eventstreams
       - name: eventstreams-deploy
  -  eventstreams-internal:
  -    usernames:
  -    - name: eventstreams-internal
  -    - name: eventstreams-internal-deploy
     failoid-ng:
       usernames:
       - name: failoid-ng

• File[/etc/profile.d/kube-conf.sh]

  Content differences:

  --- /etc/profile.d/kube-conf.sh.orig
  +++ /etc/profile.d/kube-conf.sh
  @@ -3,7 +3,7 @@
   
   # kube environments
   export KUBE_ENV_ENVIRONMENTS="eqiad codfw staging staging-eqiad staging-codfw ml-serve-eqiad ml-serve-codfw ml-staging-codfw dse-k8s-eqiad dse-k8s-codfw aux-k8s-eqiad aux-k8s-codfw"
  -export KUBE_ENV_SERVICES="admin apertium api-gateway benthos-cache-invalidator changeprop changeprop-jobqueue chart-renderer cirrus-streaming-updater citoid commons-impact-analytics cxserver data-gateway developer-portal device-analytics echostore edit-analytics editor-analytics eventgate-analytics eventgate-analytics-external eventgate-logging-external eventgate-main eventstreams eventstreams-internal failoid-ng geo-analytics ipoid kartotherian linked-artifacts linkrecommendation machinetranslation mathoid media-analytics miscweb mobileapps mw-api-ext mw-api-int mw-cron mw-debug mw-experimental mw-jobrunner mw-mcrouter mw-misc mw-page-content-change-enrich mw-parsoid mw-script mw-videoscaler mw-web mw-wikifunctions opentelemetry-collector page-analytics proton push-notifications ratelimit rdf-streaming-updater recommendation-api rest-gateway sessionstore shellbox shellbox-constraints shellbox-media shellbox-syntaxhighlight shellbox-timeline shellbox-video tegola-vector-tiles termbox thumbor toolhub wikidata-query-gui wikifeeds wikifunctions zotero article-descriptions article-models articletopic-outlink edit-check experimental llm logo-detection ores-legacy readability recommendation-api-ng revertrisk revise-tone-task-generator revision-models revscoring-articlequality revscoring-articletopic revscoring-draftquality revscoring-drafttopic revscoring-editquality-damaging revscoring-editquality-goodfaith revscoring-editquality-reverted analytics analytics-test kafka-mirrormaker opensearch-ipoid opensearch-ipoid-test opensearch-operator opensearch-operator-3 opensearch-semantic-search opensearch-semantic-search-test opensearch-test opensearch-toolhub opensearch-toolhub-test opensearch-apifeatureusage opensearch-apifeatureusage-test opensearch-ttmserver opensearch-ttmserver-test wdqs-internal wdqs-internal-next wdqs-external wdqs-external-next echoserver airflow-analytics-product airflow-analytics-test airflow-dev airflow-fr-tech airflow-main airflow-ml airflow-platform-eng airflow-research airflow-search airflow-sre airflow-test-k8s airflow-wikidata airflow-wmde blunderbuss datahub datahub-next datasets-config datasets-config-next growthbook growthbook-next llm-inference mediawiki-dumps-legacy mw-content-history-reconcile-enrich mw-content-history-reconcile-enrich-next mw-dump-rev-content-reconcile-enrich mw-dump-rev-content-reconcile-enrich-next mw-page-html-content-change-enrich mw-page-html-content-change-enrich-next mw-page-html-feature-counts-change-enrich mw-page-html-feature-counts-change-enrich-next spark spark-history spark-history-test superset superset-next test-kitchen test-kitchen-next turnilo turnilo-next webrequest-page-view webrequest-page-view-next wdqs-queryhammer codesearch jaeger redioscope sophroid zarcillo"
  +export KUBE_ENV_SERVICES="admin apertium api-gateway benthos-cache-invalidator changeprop changeprop-jobqueue chart-renderer cirrus-streaming-updater citoid commons-impact-analytics cxserver data-gateway developer-portal device-analytics echostore edit-analytics editor-analytics eventgate-analytics eventgate-analytics-external eventgate-logging-external eventgate-main eventstreams failoid-ng geo-analytics ipoid kartotherian linked-artifacts linkrecommendation machinetranslation mathoid media-analytics miscweb mobileapps mw-api-ext mw-api-int mw-cron mw-debug mw-experimental mw-jobrunner mw-mcrouter mw-misc mw-page-content-change-enrich mw-parsoid mw-script mw-videoscaler mw-web mw-wikifunctions opentelemetry-collector page-analytics proton push-notifications ratelimit rdf-streaming-updater recommendation-api rest-gateway sessionstore shellbox shellbox-constraints shellbox-media shellbox-syntaxhighlight shellbox-timeline shellbox-video tegola-vector-tiles termbox thumbor toolhub wikidata-query-gui wikifeeds wikifunctions zotero article-descriptions article-models articletopic-outlink edit-check experimental llm logo-detection ores-legacy readability recommendation-api-ng revertrisk revise-tone-task-generator revision-models revscoring-articlequality revscoring-articletopic revscoring-draftquality revscoring-drafttopic revscoring-editquality-damaging revscoring-editquality-goodfaith revscoring-editquality-reverted analytics analytics-test kafka-mirrormaker opensearch-ipoid opensearch-ipoid-test opensearch-operator opensearch-operator-3 opensearch-semantic-search opensearch-semantic-search-test opensearch-test opensearch-toolhub opensearch-toolhub-test opensearch-apifeatureusage opensearch-apifeatureusage-test opensearch-ttmserver opensearch-ttmserver-test wdqs-internal wdqs-internal-next wdqs-external wdqs-external-next echoserver airflow-analytics-product airflow-analytics-test airflow-dev airflow-fr-tech airflow-main airflow-ml airflow-platform-eng airflow-research airflow-search airflow-sre airflow-test-k8s airflow-wikidata airflow-wmde blunderbuss datahub datahub-next datasets-config datasets-config-next eventstreams-internal growthbook growthbook-next llm-inference mediawiki-dumps-legacy mw-content-history-reconcile-enrich mw-content-history-reconcile-enrich-next mw-dump-rev-content-reconcile-enrich mw-dump-rev-content-reconcile-enrich-next mw-page-html-content-change-enrich mw-page-html-content-change-enrich-next mw-page-html-feature-counts-change-enrich mw-page-html-feature-counts-change-enrich-next spark spark-history spark-history-test superset superset-next test-kitchen test-kitchen-next turnilo turnilo-next webrequest-page-view webrequest-page-view-next wdqs-queryhammer codesearch jaeger redioscope sophroid zarcillo"
   
   # Array that maps kubernetes environments to their respective versions
   # This duplicated information from KUBE_ENV_ENVIRONMENTS, but I did not want to break existing scripts

• File[/etc/helmfile-defaults/services-staging-eqiad.yaml]

  Content differences:

  --- /etc/helmfile-defaults/services-staging-eqiad.yaml.orig
  +++ /etc/helmfile-defaults/services-staging-eqiad.yaml
  @@ -84,10 +84,6 @@
       usernames:
       - name: eventstreams
       - name: eventstreams-deploy
  -  eventstreams-internal:
  -    usernames:
  -    - name: eventstreams-internal
  -    - name: eventstreams-internal-deploy
     failoid-ng:
       usernames:
       - name: failoid-ng

• File[/etc/helmfile-defaults/services-codfw.yaml]

  Content differences:

  --- /etc/helmfile-defaults/services-codfw.yaml.orig
  +++ /etc/helmfile-defaults/services-codfw.yaml
  @@ -84,10 +84,6 @@
       usernames:
       - name: eventstreams
       - name: eventstreams-deploy
  -  eventstreams-internal:
  -    usernames:
  -    - name: eventstreams-internal
  -    - name: eventstreams-internal-deploy
     failoid-ng:
       usernames:
       - name: failoid-ng

• File[/etc/helmfile-defaults/sophroid/service.yaml]

  Content differences:

  --- /etc/helmfile-defaults/sophroid/service.yaml.orig
  +++ /etc/helmfile-defaults/sophroid/service.yaml
  @@ -750,39 +750,6 @@
       state: production
       discovery:
       - dnsdisc: eventstreams
  -      active_active: true
  -  eventstreams-internal:
  -    description: Internal streams of events via HTTP + SSE, backed by Kafka. eventstreams-internal.discovery.wmnet
  -    encryption: true
  -    ip:
  -      codfw:
  -        default: 10.2.1.35
  -      eqiad:
  -        default: 10.2.2.35
  -    lvs:
  -      class: low-traffic
  -      conftool:
  -        cluster: kubernetes
  -        service: kubesvc
  -      depool_threshold: 0.5
  -      enabled: true
  -      monitors:
  -        IdleConnection:
  -          max-delay: 300
  -          timeout-clean-reconnect: 3
  -      scheduler: wrr
  -    page: false
  -    probes:
  -    - type: http
  -      path: "/_info"
  -    - type: swagger
  -    port: 4992
  -    sites:
  -    - eqiad
  -    - codfw
  -    state: service_setup
  -    discovery:
  -    - dnsdisc: eventstreams-internal
         active_active: true
     k8s-ingress-staging:
       description: istio-ingresscontroller on kubernetes staging. k8s-ingress-staging.discovery.wmnet
  @@ -4318,6 +4285,21 @@
       - codfw
       - eqiad
       state: service_setup
  +  eventstreams-internal:
  +    description: Internal streams of events via HTTP + SSE, backed by Kafka. eventstreams-internal.discovery.wmnet
  +    encryption: true
  +    ip:
  +      eqiad:
  +        default: 10.2.2.91
  +      codfw:
  +        default: 10.2.1.91
  +    page: false
  +    probes:
  +    - type: http
  +    port: 30443
  +    sites:
  +    - eqiad
  +    state: production
     analytics-web:
       encryption: true
       role: analytics_cluster::webserver

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Standard Diff
• Full Diff