{"host": "releases2003.codfw.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3500, "only_in_self": ["Class[Rsync::Server::Stunnel]", "Class[Rsync::Server]", "Concat::Fragment[/etc/rsyncd.conf-header]", "Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "Concat[/etc/rsyncd.conf]", "Concat_file[/etc/rsyncd.conf]", "Concat_fragment[/etc/rsyncd.conf-header]", "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "Ferm::Service[rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "Ferm::Service[rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "File[/etc/default/rsync]", "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "File[/etc/rsync.d]", "File[/etc/stunnel/rsync.conf]", "File[/usr/local/sbin/sync-srv-mediawiki-private-primary]", "File[/usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper]", "File[/usr/local/sbin/sync-srv-patches-releases-primary]", "File_line[enable_stunnel]", "Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Firewall::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]", "Firewall::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]", "Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Nftables::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]", "Nftables::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]", "Prometheus::Blackbox::Check::Http[releases-jenkins.wikimedia.org]", "Rsync::Server::Module[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Rsync::Server::Module[srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Rsync::Server::Module[var-lib-jenkins-releases1003.eqiad.wmnet]", "Rsync::Server::Module[var-lib-jenkins-releases2003.codfw.wmnet]", "Service[rsync]", "Service[stunnel4]"], "only_in_other": [], "resource_diffs": [{"resource": "Rsync::Quickdatacopy[srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-patches-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-patches-releases2003.codfw.wmnet]\n\n+    chown  => jenkins:705\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Class[Profile::Releases::Common]", "parameters": "--- Class[Profile::Releases::Common].orig\n+++ Class[Profile::Releases::Common]\n\n@@\n-    primary_server    => releases2003.codfw.wmnet\n+    primary_server    => releases1003.eqiad.wmnet\n@@\n-    secondary_servers => ['releases1003.eqiad.wmnet']\n+    secondary_servers => ['releases2003.codfw.wmnet']\n"}, {"resource": "Service[wmf_auto_restart_rsync.timer]", "parameters": "--- Service[wmf_auto_restart_rsync.timer].orig\n+++ Service[wmf_auto_restart_rsync.timer]\n\n+    before => ['Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]']\n@@\n-    ensure => running\n+    ensure => stopped\n@@\n-    enable => True\n+    enable => False\n"}, {"resource": "Systemd::Service[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Service[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Service[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]\n\n-    before => ['Service[rsync-srv-patches-releases-primary.timer]']\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_rsync.service]", "parameters": "--- Systemd::Unit[wmf_auto_restart_rsync.service].orig\n+++ Systemd::Unit[wmf_auto_restart_rsync.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync]", "parameters": "--- Service[rsync].orig\n+++ Service[rsync]\n\n-    require   => Package[rsync]\n-    subscribe => ['Concat[/etc/rsyncd.conf]', 'File[/etc/default/rsync]']\n-    ensure    => running\n-    enable    => True\n"}, {"resource": "File[/usr/local/sbin/sync-srv-mediawiki-private-primary]", "content": "--- /usr/local/sbin/sync-srv-mediawiki-private-primary.orig\n+++ /usr/local/sbin/sync-srv-mediawiki-private-primary\n@@ -1,2 +0,0 @@\n-#!/bin/sh\n-/usr/bin/rsync  --delete -a    rsync://deploy1003.eqiad.wmnet/srv-mediawiki-private-primary /srv/mediawiki-staging/private/", "parameters": "--- File[/usr/local/sbin/sync-srv-mediawiki-private-primary].orig\n+++ File[/usr/local/sbin/sync-srv-mediawiki-private-primary]\n\n-    mode   => 0755\n-    ensure => present\n-    group  => root\n-    owner  => root\n"}, {"resource": "Systemd::Timer[rsync-srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Systemd::Timer[rsync-srv-patches-releases2003.codfw.wmnet].orig\n+++ Systemd::Timer[rsync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Quickdatacopy[srv-mediawiki-private-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-mediawiki-private-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-mediawiki-private-releases1003.eqiad.wmnet]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "parameters": "--- Ferm::Service[rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet].orig\n+++ Ferm::Service[rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases1003.eqiad.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "parameters": "--- Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n-    port                => [873, 1873]\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    src_ips             => ['10.192.16.72', '2620:0:860:102:10:192:16:72']\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "File[/var/log/rsync-srv-patches-releases-primary]", "parameters": "--- File[/var/log/rsync-srv-patches-releases-primary].orig\n+++ File[/var/log/rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Class[Profile::Releases::Mediawiki::Security]", "parameters": "--- Class[Profile::Releases::Mediawiki::Security].orig\n+++ Class[Profile::Releases::Mediawiki::Security]\n\n@@\n-    primary_server    => releases2003.codfw.wmnet\n+    primary_server    => releases1003.eqiad.wmnet\n@@\n-    secondary_servers => ['releases1003.eqiad.wmnet']\n+    secondary_servers => ['releases2003.codfw.wmnet']\n"}, {"resource": "File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]", "parameters": "--- File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf].orig\n+++ File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Class[Rsync::Server]", "parameters": "--- Class[Rsync::Server].orig\n+++ Class[Rsync::Server]\n\n-    use_chroot     => yes\n-    address        => 0.0.0.0\n-    rsyncd_conf    => {}\n-    rsync_opts     => []\n-    timeout        => 300\n-    ensure_service => running\n"}, {"resource": "File[/etc/rsync.d]", "parameters": "--- File[/etc/rsync.d].orig\n+++ File[/etc/rsync.d]\n\n-    group   => root\n-    force   => True\n-    recurse => True\n-    ensure  => absent\n-    purge   => True\n-    owner   => root\n"}, {"resource": "Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- Service[rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n-    before => ['Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]']\n@@\n-    ensure => stopped\n+    ensure => running\n@@\n-    enable => False\n+    enable => True\n"}, {"resource": "Class[Rsync::Server::Stunnel]", "parameters": "--- Class[Rsync::Server::Stunnel].orig\n+++ Class[Rsync::Server::Stunnel]\n\n-    ensure         => present\n-    ensure_service => running\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper]", "content": "--- /usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper.orig\n+++ /usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper\n@@ -1,29 +0,0 @@\n-#!/bin/sh\n-# This file is managed by Puppet\n-#\n-# This script is expected to be used as the --rsh argument to rsync.\n-# It will wrap rsync's communication in stunnel, and validate the\n-# server's cert vs the Puppet CA.\n-\n-set -eu\n-\n-cleanup() {\n-    [ -f \"$CONFIG\" ] && rm -f \"$CONFIG\"\n-}\n-trap cleanup EXIT\n-\n-CONFIG=$(mktemp -t sync-ssl-wrapper.stunnel.conf.XXXXXXXX)\n-\n-RSYNC_SSL_PORT=${RSYNC_SSL_PORT:-1873}\n-\n-cat > \"$CONFIG\" <<EOF\n-foreground  = yes\n-client      = yes\n-connect     = $1:$RSYNC_SSL_PORT\n-CAfile      = /var/lib/puppet/ssl/certs/ca.pem\n-cert        = /var/lib/puppet/ssl/certs/releases2003.codfw.wmnet.pem\n-key         = /var/lib/puppet/ssl/private_keys/releases2003.codfw.wmnet.pem\n-verifyChain = yes\n-EOF\n-\n-/usr/bin/stunnel4 \"$CONFIG\"", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper]\n\n-    mode   => 0755\n-    ensure => present\n-    group  => root\n-    owner  => root\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv-patches-releases-primary]", "parameters": "--- File[/etc/logrotate.d/rsync-srv-patches-releases-primary].orig\n+++ File[/etc/logrotate.d/rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => directory\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsyslog::Conf[rsync-srv-patches-releases-primary]", "parameters": "--- Rsyslog::Conf[rsync-srv-patches-releases-primary].orig\n+++ Rsyslog::Conf[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases-primary]", "content": "--- /usr/local/sbin/sync-srv-patches-releases-primary.orig\n+++ /usr/local/sbin/sync-srv-patches-releases-primary\n@@ -1,2 +0,0 @@\n-#!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper --delete -a  --chown=jenkins:705  rsync://deploy1003.eqiad.wmnet/srv-patches-releases-primary /srv/patches/", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases-primary].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases-primary]\n\n-    mode   => 0755\n-    ensure => present\n-    group  => root\n-    owner  => root\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.service]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.service].orig\n+++ Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.service]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Server::Module[var-lib-jenkins-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Server::Module[var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Rsync::Server::Module[var-lib-jenkins-releases1003.eqiad.wmnet]\n\n-    max_connections => 0\n-    auto_firewall   => True\n-    qos_low         => False\n-    write_only      => no\n-    lock_file       => /var/run/rsyncd.lock\n-    read_only       => yes\n-    uid             => 0\n-    chroot          => True\n-    list            => yes\n-    hosts_allow     => ['releases1003.eqiad.wmnet']\n-    gid             => 0\n-    ensure          => present\n-    path            => /var/lib/jenkins\n"}, {"resource": "Concat_file[/etc/rsyncd.conf]", "parameters": "--- Concat_file[/etc/rsyncd.conf].orig\n+++ Concat_file[/etc/rsyncd.conf]\n\n-    group          => root\n-    format         => plain\n-    tag            => _etc_rsyncd.conf\n-    mode           => 0444\n-    show_diff      => True\n-    backup         => puppet\n-    order          => alpha\n-    replace        => True\n-    force          => False\n-    ensure_newline => False\n-    owner          => root\n"}, {"resource": "Logrotate::Conf[wmf_auto_restart_rsync]", "parameters": "--- Logrotate::Conf[wmf_auto_restart_rsync].orig\n+++ Logrotate::Conf[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Server::Module[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Server::Module[srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Rsync::Server::Module[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n-    max_connections => 0\n-    auto_firewall   => True\n-    qos_low         => False\n-    write_only      => no\n-    lock_file       => /var/run/rsyncd.lock\n-    read_only       => yes\n-    uid             => 0\n-    chroot          => True\n-    list            => yes\n-    hosts_allow     => ['releases1003.eqiad.wmnet']\n-    gid             => 0\n-    ensure          => present\n-    path            => /srv/org/wikimedia/releases\n"}, {"resource": "Service[rsync-srv-patches-releases-primary.timer]", "parameters": "--- Service[rsync-srv-patches-releases-primary.timer].orig\n+++ Service[rsync-srv-patches-releases-primary.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]']\n@@\n-    ensure => running\n+    ensure => stopped\n@@\n-    enable => True\n+    enable => False\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases-primary.service]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases-primary.service].orig\n+++ Systemd::Unit[rsync-srv-patches-releases-primary.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "content": "--- /etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet.orig\n+++ /etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, (873 1873), (10.64.48.34 2620:0:861:107:10:64:48:34));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet].orig\n+++ File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]\n\n-    notify  => Service[ferm]\n-    tag     => ferm\n-    group   => root\n-    require => File[/etc/ferm/conf.d]\n-    mode    => 0400\n-    ensure  => present\n-    owner   => root\n"}, {"resource": "Rsync::Quickdatacopy[srv-mediawiki-private-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-mediawiki-private-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-mediawiki-private-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Quickdatacopy[srv-mediawiki-private-primary]", "parameters": "--- Rsync::Quickdatacopy[srv-mediawiki-private-primary].orig\n+++ Rsync::Quickdatacopy[srv-mediawiki-private-primary]\n\n@@\n-    dest_host => releases2003.codfw.wmnet\n+    dest_host => releases1003.eqiad.wmnet\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Systemd::Timer[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Timer[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Timer[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/wmf_auto_restart_rsync]", "parameters": "--- File[/etc/logrotate.d/wmf_auto_restart_rsync].orig\n+++ File[/etc/logrotate.d/wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[srv-patches-releases-primary]", "parameters": "--- Rsync::Quickdatacopy[srv-patches-releases-primary].orig\n+++ Rsync::Quickdatacopy[srv-patches-releases-primary]\n\n@@\n-    dest_host => releases2003.codfw.wmnet\n+    dest_host => releases1003.eqiad.wmnet\n"}, {"resource": "Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "parameters": "--- Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet].orig\n+++ Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases1003.eqiad.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Nftables::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]", "parameters": "--- Nftables::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Nftables::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]\n\n-    port                => [873, 1873]\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    src_ips             => ['10.64.48.34', '2620:0:861:107:10:64:48:34']\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-header]", "content": "--- /etc/rsyncd.conf-header.orig\n+++ /etc/rsyncd.conf-header\n@@ -1,11 +0,0 @@\n-# This file is being maintained by Puppet.\n-# DO NOT EDIT\n-\n-uid = nobody\n-gid = nogroup\n-use chroot = yes\n-\n-log format = %t %a %m %f %b\n-syslog facility = local3\n-timeout = 300\n-address = 0.0.0.0", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-header].orig\n+++ Concat_fragment[/etc/rsyncd.conf-header]\n\n-    tag    => _etc_rsyncd.conf\n-    order  => 01\n-    target => /etc/rsyncd.conf\n"}, {"resource": "File[/etc/default/rsync]", "content": "--- /etc/default/rsync.orig\n+++ /etc/default/rsync\n@@ -1,46 +0,0 @@\n-#####################################################################\n-### THIS FILE IS MANAGED BY PUPPET\n-### puppet:///rsync/rsync.default.erb\n-#####################################################################\n-\n-# defaults file for rsync daemon mode\n-\n-# start rsync in daemon mode from init.d script?\n-#  only allowed values are \"true\", \"false\", and \"inetd\"\n-#  Use \"inetd\" if you want to start the rsyncd from inetd,\n-#  all this does is prevent the init.d script from printing a message\n-#  about not starting rsyncd (you still need to modify inetd's config yourself).\n-RSYNC_ENABLE=true\n-\n-# which file should be used as the configuration file for rsync.\n-# This file is used instead of the default /etc/rsyncd.conf\n-# Warning: This option has no effect if the daemon is accessed\n-#          using a remote shell. When using a different file for\n-#          rsync you might want to symlink /etc/rsyncd.conf to\n-#          that file.\n-RSYNC_CONFIG_FILE=/etc/rsyncd.conf\n-\n-# what extra options to give rsync --daemon?\n-#  that excludes the --daemon; that's always done in the init.d script\n-#  Possibilities are:\n-#   --address=123.45.67.89\t\t(bind to a specific IP address)\n-#   --port=8730\t\t\t\t(bind to specified port; default 873)\n-RSYNC_OPTS=''\n-\n-# run rsyncd at a nice level?\n-#  the rsync daemon can impact performance due to much I/O and CPU usage,\n-#  so you may want to run it at a nicer priority than the default priority.\n-#  Allowed values are 0 - 19 inclusive; 10 is a reasonable value.\n-RSYNC_NICE=''\n-\n-# run rsyncd with ionice?\n-#  \"ionice\" does for IO load what \"nice\" does for CPU load.\n-#  As rsync is often used for backups which aren't all that time-critical,\n-#  reducing the rsync IO priority will benefit the rest of the system.\n-#  See the manpage for ionice for allowed options.\n-#  -c3 is recommended, this will run rsync IO at \"idle\" priority. Uncomment\n-#  the next line to activate this.\n-# RSYNC_IONICE='-c3'\n-\n-# Don't forget to create an appropriate config file,\n-# else the daemon will not start.", "parameters": "--- File[/etc/default/rsync].orig\n+++ File[/etc/default/rsync]\n\n-    mode   => 0444\n-    ensure => present\n-    group  => root\n-    owner  => root\n"}, {"resource": "Concat[/etc/rsyncd.conf]", "parameters": "--- Concat[/etc/rsyncd.conf].orig\n+++ Concat[/etc/rsyncd.conf]\n\n-    group          => root\n-    format         => plain\n-    mode           => 0444\n-    warn           => False\n-    show_diff      => True\n-    backup         => puppet\n-    order          => alpha\n-    replace        => True\n-    owner          => root\n-    force          => False\n-    ensure_newline => False\n-    ensure         => present\n-    path           => /etc/rsyncd.conf\n"}, {"resource": "File_line[auto_restart_file_presence_rsync]", "parameters": "--- File_line[auto_restart_file_presence_rsync].orig\n+++ File_line[auto_restart_file_presence_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[stunnel4]", "parameters": "--- Service[stunnel4].orig\n+++ Service[stunnel4]\n\n-    enable    => True\n-    ensure    => running\n-    subscribe => ['Concat[/etc/rsyncd.conf]', 'File[/etc/default/rsync]', 'File[/etc/stunnel/rsync.conf]', 'File_line[enable_stunnel]', 'Package[stunnel4]']\n"}, {"resource": "Systemd::Timer[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Timer[wmf_auto_restart_rsync].orig\n+++ Systemd::Timer[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer::Job[rsync-srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Systemd::Timer::Job[rsync-srv-patches-releases2003.codfw.wmnet].orig\n+++ Systemd::Timer::Job[rsync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "parameters": "--- Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n-    port                => [873, 1873]\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    src_ips             => ['10.64.48.34', '2620:0:861:107:10:64:48:34']\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Class[Profile::Releases::Mediawiki::Private]", "parameters": "--- Class[Profile::Releases::Mediawiki::Private].orig\n+++ Class[Profile::Releases::Mediawiki::Private]\n\n@@\n-    primary_server    => releases2003.codfw.wmnet\n+    primary_server    => releases1003.eqiad.wmnet\n@@\n-    secondary_servers => ['releases1003.eqiad.wmnet']\n+    secondary_servers => ['releases2003.codfw.wmnet']\n"}, {"resource": "Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]\n\n+    before => ['Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]']\n"}, {"resource": "Rsync::Quickdatacopy[srv-patches-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-patches-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-patches-releases1003.eqiad.wmnet]\n\n-    chown  => jenkins:705\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "parameters": "--- Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet].orig\n+++ Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases2003.codfw.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "content": "--- /etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet.orig\n+++ /etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet\n@@ -1,20 +0,0 @@\n-# This file is being maintained by Puppet.\n-# DO NOT EDIT\n-\n-[ var-lib-jenkins-releases2003.codfw.wmnet ]\n-path            = /var/lib/jenkins\n-read only       = yes\n-write only      = no\n-list            = yes\n-uid             = 0\n-gid             = 0\n-use chroot      = yes\n-\n-\n-max connections = 0\n-\n-\n-\n-\n-hosts allow = releases2003.codfw.wmnet localhost\n-", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]\n\n-    tag    => _etc_rsyncd.conf\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "content": "--- /etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet.orig\n+++ /etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet\n@@ -1,20 +0,0 @@\n-# This file is being maintained by Puppet.\n-# DO NOT EDIT\n-\n-[ srv-org-wikimedia-releases-releases1003.eqiad.wmnet ]\n-path            = /srv/org/wikimedia/releases\n-read only       = yes\n-write only      = no\n-list            = yes\n-uid             = 0\n-gid             = 0\n-use chroot      = yes\n-\n-\n-max connections = 0\n-\n-\n-\n-\n-hosts allow = releases1003.eqiad.wmnet localhost\n-", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n-    tag    => _etc_rsyncd.conf\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "File[/var/log/wmf_auto_restart_rsync]", "parameters": "--- File[/var/log/wmf_auto_restart_rsync].orig\n+++ File[/var/log/wmf_auto_restart_rsync]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_rsync.timer]", "parameters": "--- Systemd::Unit[wmf_auto_restart_rsync.timer].orig\n+++ Systemd::Unit[wmf_auto_restart_rsync.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Syslog[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Syslog[wmf_auto_restart_rsync].orig\n+++ Systemd::Syslog[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsyslog::Conf[wmf_auto_restart_rsync]", "parameters": "--- Rsyslog::Conf[wmf_auto_restart_rsync].orig\n+++ Rsyslog::Conf[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases2003.codfw.wmnet/srv-org-wikimedia-releases-releases2003.codfw.wmnet /srv/org/wikimedia/releases/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases1003.eqiad.wmnet/srv-org-wikimedia-releases-releases2003.codfw.wmnet /srv/org/wikimedia/releases/"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-header]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-header].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-header]\n\n-    order  => 01\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "parameters": "--- Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases2003.codfw.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper]", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Quickdatacopy[var-lib-jenkins-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[var-lib-jenkins-releases1003.eqiad.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "Profile::Auto_restarts::Service[rsync]", "parameters": "--- Profile::Auto_restarts::Service[rsync].orig\n+++ Profile::Auto_restarts::Service[rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/scap.secondary]", "parameters": "--- File[/etc/scap.secondary].orig\n+++ File[/etc/scap.secondary]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Ferm::Service[rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "parameters": "--- Ferm::Service[rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet].orig\n+++ Ferm::Service[rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases2003.codfw.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "File[/usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases2003.codfw.wmnet/var-lib-jenkins-releases2003.codfw.wmnet /var/lib/jenkins/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases1003.eqiad.wmnet/var-lib-jenkins-releases2003.codfw.wmnet /var/lib/jenkins/"}, {"resource": "Systemd::Service[rsync-srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Systemd::Service[rsync-srv-patches-releases2003.codfw.wmnet].orig\n+++ Systemd::Service[rsync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Logrotate::Conf[rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- Logrotate::Conf[rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ Logrotate::Conf[rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "parameters": "--- Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases1003.eqiad.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Rsync::Server::Module[srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Server::Module[srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Rsync::Server::Module[srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n-    max_connections => 0\n-    auto_firewall   => True\n-    qos_low         => False\n-    write_only      => no\n-    lock_file       => /var/run/rsyncd.lock\n-    read_only       => yes\n-    uid             => 0\n-    chroot          => True\n-    list            => yes\n-    hosts_allow     => ['releases2003.codfw.wmnet']\n-    gid             => 0\n-    ensure          => present\n-    path            => /srv/org/wikimedia/releases\n"}, {"resource": "Motd::Script[rsync_source_warning]", "parameters": "--- Motd::Script[rsync_source_warning].orig\n+++ Motd::Script[rsync_source_warning]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_rsync.timer]", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_rsync.timer].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_rsync.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "content": "--- /etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet.orig\n+++ /etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, (873 1873), (10.192.16.72 2620:0:860:102:10:192:16:72));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet].orig\n+++ File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]\n\n-    notify  => Service[ferm]\n-    tag     => ferm\n-    group   => root\n-    require => File[/etc/ferm/conf.d]\n-    mode    => 0400\n-    ensure  => present\n-    owner   => root\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Systemd::Timer::Job[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Timer::Job[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Timer::Job[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases-primary.timer]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases-primary.timer].orig\n+++ Systemd::Unit[rsync-srv-patches-releases-primary.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Prometheus::Blackbox::Check::Http[releases-jenkins.wikimedia.org]", "parameters": "--- Prometheus::Blackbox::Check::Http[releases-jenkins.wikimedia.org].orig\n+++ Prometheus::Blackbox::Check::Http[releases-jenkins.wikimedia.org]\n\n-    instance_label          => releases2003\n-    method                  => GET\n-    body                    => {}\n-    force_tls               => False\n-    body_regex_matches      => ['<title>Dashboard - Jenkins<.title>']\n-    team                    => collaboration-services\n-    header_matches          => []\n-    client_auth_key         => /etc/prometheus/ssl/server.key\n-    ssl_expired_description => The certificate presented by service {{ $labels.instance }} is going to expire in {{ $value | humanizeDuration }}\n-    ssl_expired_dashboard   => https://grafana.wikimedia.org/d/K1dRhGCnz/probes-tls-dashboard\n-    client_auth_cert        => /etc/prometheus/ssl/cert.pem\n-    ip4                     => 10.192.16.72\n-    insecure_tls            => False\n-    status_matches          => []\n-    prometheus_instance     => ops\n-    alert_after             => 2m\n-    port                    => 8080\n-    ip_families             => ['ip4', 'ip6']\n-    server_name             => releases-jenkins.wikimedia.org\n-    ssl_expired_runbook     => https://wikitech.wikimedia.org/wiki/TLS/Runbook#{{ $labels.instance }}\n-    follow_redirects        => False\n-    header_not_matches      => []\n-    req_headers             => {}\n-    site                    => codfw\n-    body_regex_not_matches  => []\n-    probe_runbook           => https://wikitech.wikimedia.org/wiki/Runbook#{{ $labels.instance }}\n-    probe_dashboard         => https://grafana.wikimedia.org/d/O0nHhdhnz/network-probes-overview?var-job={{ $labels.job }}&var-module=All\n-    ip6                     => 2620:0:860:102:10:192:16:72\n-    probe_description       => {{ $labels.instance }} failed when probed by {{ $labels.module }} from {{ $externalLabels.site }}. Availability is {{ $value }}%.\n-    certificate_expiry_days => 10\n-    use_client_auth         => False\n-    severity                => task\n-    timeout                 => 3s\n-    probe_summary           => Service {{ $labels.instance }} has failed probes ({{ $labels.module }})\n-    ssl_expired_summary     => Certificate for service {{ $labels.instance }} is about to expire\n-    path                    => /\n"}, {"resource": "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "content": "--- /etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet.orig\n+++ /etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, (873 1873), (10.192.16.72 2620:0:860:102:10:192:16:72));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet].orig\n+++ File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]\n\n-    notify  => Service[ferm]\n-    tag     => ferm\n-    group   => root\n-    require => File[/etc/ferm/conf.d]\n-    mode    => 0400\n-    ensure  => present\n-    owner   => root\n"}, {"resource": "Systemd::Service[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Service[wmf_auto_restart_rsync].orig\n+++ Systemd::Service[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Syslog[rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- Systemd::Syslog[rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ Systemd::Syslog[rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]\n\n-    before => ['Service[wmf_auto_restart_rsync.timer]']\n"}, {"resource": "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "content": "--- /etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet.orig\n+++ /etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, (873 1873), (10.64.48.34 2620:0:861:107:10:64:48:34));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet].orig\n+++ File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]\n\n-    notify  => Service[ferm]\n-    tag     => ferm\n-    group   => root\n-    require => File[/etc/ferm/conf.d]\n-    mode    => 0400\n-    ensure  => present\n-    owner   => root\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://deploy1003.eqiad.wmnet/srv-patches-releases2003.codfw.wmnet /srv/patches/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper --delete -a  --chown=jenkins:705  rsync://deploy1003.eqiad.wmnet/srv-patches-releases2003.codfw.wmnet /srv/patches/", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_rsync.service]", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_rsync.service].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_rsync.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "Rsync::Server::Module[var-lib-jenkins-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Server::Module[var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Rsync::Server::Module[var-lib-jenkins-releases2003.codfw.wmnet]\n\n-    max_connections => 0\n-    auto_firewall   => True\n-    qos_low         => False\n-    write_only      => no\n-    lock_file       => /var/run/rsyncd.lock\n-    read_only       => yes\n-    uid             => 0\n-    chroot          => True\n-    list            => yes\n-    hosts_allow     => ['releases2003.codfw.wmnet']\n-    gid             => 0\n-    ensure          => present\n-    path            => /var/lib/jenkins\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases-primary.service]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases-primary.service].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases-primary.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nftables::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]", "parameters": "--- Nftables::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Nftables::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]\n\n-    port                => [873, 1873]\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    src_ips             => ['10.192.16.72', '2620:0:860:102:10:192:16:72']\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Rsync::Quickdatacopy[var-lib-jenkins-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[var-lib-jenkins-releases2003.codfw.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "File[/etc/update-motd.d/01-rsync-source-warning]", "content": "--- /etc/update-motd.d/01-rsync-source-warning.orig\n+++ /etc/update-motd.d/01-rsync-source-warning\n@@ -21,6 +21,6 @@\n \n DO NOT UPLOAD FILES HERE.\n \n-Upload to 'releases2003.codfw.wmnet' instead.\n+Upload to 'releases1003.eqiad.wmnet' instead.\n \n MOTD", "parameters": "--- File[/etc/update-motd.d/01-rsync-source-warning].orig\n+++ File[/etc/update-motd.d/01-rsync-source-warning]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File_line[enable_stunnel]", "parameters": "--- File_line[enable_stunnel].orig\n+++ File_line[enable_stunnel]\n\n-    match    => ^ENABLED=\n-    multiple => False\n-    line     => ENABLED=1  # Managed by puppet\n-    ensure   => present\n-    path     => /etc/default/stunnel4\n"}, {"resource": "Firewall::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]", "parameters": "--- Firewall::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Firewall::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases1003.eqiad.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Firewall::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]", "parameters": "--- Firewall::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Firewall::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]\n\n-    port                => [873, 1873]\n-    srange              => ['releases2003.codfw.wmnet']\n-    desc                => \n-    unrestricted_access => False\n-    proto               => tcp\n-    prio                => 10\n-    ensure              => present\n-    notrack             => False\n"}, {"resource": "Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "content": "--- /etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet.orig\n+++ /etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet\n@@ -1,20 +0,0 @@\n-# This file is being maintained by Puppet.\n-# DO NOT EDIT\n-\n-[ var-lib-jenkins-releases1003.eqiad.wmnet ]\n-path            = /var/lib/jenkins\n-read only       = yes\n-write only      = no\n-list            = yes\n-uid             = 0\n-gid             = 0\n-use chroot      = yes\n-\n-\n-max connections = 0\n-\n-\n-\n-\n-hosts allow = releases1003.eqiad.wmnet localhost\n-", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]\n\n-    tag    => _etc_rsyncd.conf\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Systemd::Syslog[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Syslog[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Syslog[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer::Job[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Timer::Job[wmf_auto_restart_rsync].orig\n+++ Systemd::Timer::Job[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/stunnel/rsync.conf]", "content": "--- /etc/stunnel/rsync.conf.orig\n+++ /etc/stunnel/rsync.conf\n@@ -1,14 +0,0 @@\n-# This file is managed by puppet\n-\n-[rsync]\n-accept = :::1873\n-client = no\n-\n-CAfile = /var/lib/puppet/ssl/certs/ca.pem\n-cert   = /var/lib/puppet/ssl/certs/releases2003.codfw.wmnet.pem\n-key    = /var/lib/puppet/ssl/private_keys/releases2003.codfw.wmnet.pem\n-\n-verifyChain = yes\n-\n-exec = /usr/bin/rsync\n-execargs = rsync --daemon --config /etc/rsyncd.conf", "parameters": "--- File[/etc/stunnel/rsync.conf].orig\n+++ File[/etc/stunnel/rsync.conf]\n\n-    mode   => 0444\n-    ensure => present\n-    group  => root\n-    owner  => root\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "content": "--- /etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet.orig\n+++ /etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet\n@@ -1,20 +0,0 @@\n-# This file is being maintained by Puppet.\n-# DO NOT EDIT\n-\n-[ srv-org-wikimedia-releases-releases2003.codfw.wmnet ]\n-path            = /srv/org/wikimedia/releases\n-read only       = yes\n-write only      = no\n-list            = yes\n-uid             = 0\n-gid             = 0\n-use chroot      = yes\n-\n-\n-max connections = 0\n-\n-\n-\n-\n-hosts allow = releases2003.codfw.wmnet localhost\n-", "parameters": "--- Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n-    tag    => _etc_rsyncd.conf\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Logrotate::Conf[rsync-srv-patches-releases-primary]", "parameters": "--- Logrotate::Conf[rsync-srv-patches-releases-primary].orig\n+++ Logrotate::Conf[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet]", "parameters": "--- File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet].orig\n+++ File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]\n\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "parameters": "--- Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]\n\n-    order  => 10\n-    target => /etc/rsyncd.conf\n"}, {"resource": "Rsyslog::Conf[rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- Rsyslog::Conf[rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ Rsyslog::Conf[rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}], "perc_changed": "4.46%"}, "core": {"total": 3500, "only_in_self": ["Concat[/etc/rsyncd.conf]", "Concat_file[/etc/rsyncd.conf]", "Concat_fragment[/etc/rsyncd.conf-header]", "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "File[/etc/default/rsync]", "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "File[/etc/rsync.d]", "File[/etc/stunnel/rsync.conf]", "File[/usr/local/sbin/sync-srv-mediawiki-private-primary]", "File[/usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper]", "File[/usr/local/sbin/sync-srv-patches-releases-primary]", "File_line[enable_stunnel]", "Service[rsync]", "Service[stunnel4]"], "only_in_other": [], "resource_diffs": [{"resource": "File[/var/log/wmf_auto_restart_rsync]", "parameters": "--- File[/var/log/wmf_auto_restart_rsync].orig\n+++ File[/var/log/wmf_auto_restart_rsync]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Service[wmf_auto_restart_rsync.timer]", "parameters": "--- Service[wmf_auto_restart_rsync.timer].orig\n+++ Service[wmf_auto_restart_rsync.timer]\n\n+    before => ['Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]']\n@@\n-    ensure => running\n+    ensure => stopped\n@@\n-    enable => True\n+    enable => False\n"}, {"resource": "File[/usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases2003.codfw.wmnet/srv-org-wikimedia-releases-releases2003.codfw.wmnet /srv/org/wikimedia/releases/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases1003.eqiad.wmnet/srv-org-wikimedia-releases-releases2003.codfw.wmnet /srv/org/wikimedia/releases/"}, {"resource": "Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]\n\n-    before => ['Service[rsync-srv-patches-releases-primary.timer]']\n"}, {"resource": "File[/var/log/rsync-srv-patches-releases-primary]", "parameters": "--- File[/var/log/rsync-srv-patches-releases-primary].orig\n+++ File[/var/log/rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper]", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]", "parameters": "--- File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf].orig\n+++ File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/etc/scap.secondary]", "parameters": "--- File[/etc/scap.secondary].orig\n+++ File[/etc/scap.secondary]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases2003.codfw.wmnet/var-lib-jenkins-releases2003.codfw.wmnet /var/lib/jenkins/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases1003.eqiad.wmnet/var-lib-jenkins-releases2003.codfw.wmnet /var/lib/jenkins/"}, {"resource": "Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- Service[rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n-    before => ['Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]']\n@@\n-    ensure => stopped\n+    ensure => running\n@@\n-    enable => False\n+    enable => True\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv-patches-releases-primary]", "parameters": "--- File[/etc/logrotate.d/rsync-srv-patches-releases-primary].orig\n+++ File[/etc/logrotate.d/rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_rsync.timer]", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_rsync.timer].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_rsync.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => directory\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]\n\n-    before => ['Service[wmf_auto_restart_rsync.timer]']\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://deploy1003.eqiad.wmnet/srv-patches-releases2003.codfw.wmnet /srv/patches/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper --delete -a  --chown=jenkins:705  rsync://deploy1003.eqiad.wmnet/srv-patches-releases2003.codfw.wmnet /srv/patches/", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_rsync.service]", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_rsync.service].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_rsync.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-srv-patches-releases-primary.timer]", "parameters": "--- Service[rsync-srv-patches-releases-primary.timer].orig\n+++ Service[rsync-srv-patches-releases-primary.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]']\n@@\n-    ensure => running\n+    ensure => stopped\n@@\n-    enable => True\n+    enable => False\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases-primary.service]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases-primary.service].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases-primary.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/etc/update-motd.d/01-rsync-source-warning]", "content": "--- /etc/update-motd.d/01-rsync-source-warning.orig\n+++ /etc/update-motd.d/01-rsync-source-warning\n@@ -21,6 +21,6 @@\n \n DO NOT UPLOAD FILES HERE.\n \n-Upload to 'releases2003.codfw.wmnet' instead.\n+Upload to 'releases1003.eqiad.wmnet' instead.\n \n MOTD", "parameters": "--- File[/etc/update-motd.d/01-rsync-source-warning].orig\n+++ File[/etc/update-motd.d/01-rsync-source-warning]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/etc/logrotate.d/wmf_auto_restart_rsync]", "parameters": "--- File[/etc/logrotate.d/wmf_auto_restart_rsync].orig\n+++ File[/etc/logrotate.d/wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File_line[auto_restart_file_presence_rsync]", "parameters": "--- File_line[auto_restart_file_presence_rsync].orig\n+++ File_line[auto_restart_file_presence_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]\n\n+    before => ['Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]']\n"}, {"resource": "File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet]", "parameters": "--- File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet].orig\n+++ File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}], "perc_changed": "1.40%"}, "main": {"total": 3500, "only_in_self": ["Class[Rsync::Server::Stunnel]", "Class[Rsync::Server]", "Concat::Fragment[/etc/rsyncd.conf-header]", "Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Concat::Fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "Concat::Fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "Concat[/etc/rsyncd.conf]", "Concat_file[/etc/rsyncd.conf]", "Concat_fragment[/etc/rsyncd.conf-header]", "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Concat_fragment[/etc/rsyncd.conf-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases1003.eqiad.wmnet]", "Concat_fragment[/etc/rsyncd.conf-var-lib-jenkins-releases2003.codfw.wmnet]", "Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "Ferm::Service[rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "Ferm::Service[rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "Ferm::Service[rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "File[/etc/default/rsync]", "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases1003_eqiad_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_srv_org_wikimedia_releases_releases2003_codfw_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases1003_eqiad_wmnet]", "File[/etc/ferm/conf.d/10_rsyncd_access_var_lib_jenkins_releases2003_codfw_wmnet]", "File[/etc/rsync.d]", "File[/etc/stunnel/rsync.conf]", "File[/usr/local/sbin/sync-srv-mediawiki-private-primary]", "File[/usr/local/sbin/sync-srv-patches-releases-primary-ssl-wrapper]", "File[/usr/local/sbin/sync-srv-patches-releases-primary]", "File_line[enable_stunnel]", "Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Firewall::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Firewall::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]", "Firewall::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]", "Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Nftables::Service[rsyncd_access_srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Nftables::Service[rsyncd_access_var-lib-jenkins-releases1003.eqiad.wmnet]", "Nftables::Service[rsyncd_access_var-lib-jenkins-releases2003.codfw.wmnet]", "Prometheus::Blackbox::Check::Http[releases-jenkins.wikimedia.org]", "Rsync::Server::Module[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "Rsync::Server::Module[srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "Rsync::Server::Module[var-lib-jenkins-releases1003.eqiad.wmnet]", "Rsync::Server::Module[var-lib-jenkins-releases2003.codfw.wmnet]", "Service[rsync]", "Service[stunnel4]"], "only_in_other": [], "resource_diffs": [{"resource": "Rsync::Quickdatacopy[srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-patches-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-patches-releases2003.codfw.wmnet]\n\n+    chown  => jenkins:705\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/var/log/wmf_auto_restart_rsync]", "parameters": "--- File[/var/log/wmf_auto_restart_rsync].orig\n+++ File[/var/log/wmf_auto_restart_rsync]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_rsync.timer]", "parameters": "--- Systemd::Unit[wmf_auto_restart_rsync.timer].orig\n+++ Systemd::Unit[wmf_auto_restart_rsync.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Class[Profile::Releases::Common]", "parameters": "--- Class[Profile::Releases::Common].orig\n+++ Class[Profile::Releases::Common]\n\n@@\n-    primary_server    => releases2003.codfw.wmnet\n+    primary_server    => releases1003.eqiad.wmnet\n@@\n-    secondary_servers => ['releases1003.eqiad.wmnet']\n+    secondary_servers => ['releases2003.codfw.wmnet']\n"}, {"resource": "Systemd::Syslog[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Syslog[wmf_auto_restart_rsync].orig\n+++ Systemd::Syslog[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[wmf_auto_restart_rsync.timer]", "parameters": "--- Service[wmf_auto_restart_rsync.timer].orig\n+++ Service[wmf_auto_restart_rsync.timer]\n\n+    before => ['Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]']\n@@\n-    ensure => running\n+    ensure => stopped\n@@\n-    enable => True\n+    enable => False\n"}, {"resource": "Rsyslog::Conf[wmf_auto_restart_rsync]", "parameters": "--- Rsyslog::Conf[wmf_auto_restart_rsync].orig\n+++ Rsyslog::Conf[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Service[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Service[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Service[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases2003.codfw.wmnet/srv-org-wikimedia-releases-releases2003.codfw.wmnet /srv/org/wikimedia/releases/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-org-wikimedia-releases-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases1003.eqiad.wmnet/srv-org-wikimedia-releases-releases2003.codfw.wmnet /srv/org/wikimedia/releases/"}, {"resource": "Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]\n\n-    before => ['Service[rsync-srv-patches-releases-primary.timer]']\n"}, {"resource": "Systemd::Unit[wmf_auto_restart_rsync.service]", "parameters": "--- Systemd::Unit[wmf_auto_restart_rsync.service].orig\n+++ Systemd::Unit[wmf_auto_restart_rsync.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer[rsync-srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Systemd::Timer[rsync-srv-patches-releases2003.codfw.wmnet].orig\n+++ Systemd::Timer[rsync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Quickdatacopy[srv-mediawiki-private-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-mediawiki-private-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-mediawiki-private-releases1003.eqiad.wmnet]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-srv-patches-releases-primary]", "parameters": "--- File[/var/log/rsync-srv-patches-releases-primary].orig\n+++ File[/var/log/rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Class[Profile::Releases::Mediawiki::Security]", "parameters": "--- Class[Profile::Releases::Mediawiki::Security].orig\n+++ Class[Profile::Releases::Mediawiki::Security]\n\n@@\n-    primary_server    => releases2003.codfw.wmnet\n+    primary_server    => releases1003.eqiad.wmnet\n@@\n-    secondary_servers => ['releases1003.eqiad.wmnet']\n+    secondary_servers => ['releases2003.codfw.wmnet']\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper]", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]", "parameters": "--- File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf].orig\n+++ File[/etc/rsyslog.d/40-wmf-auto-restart-rsync.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[var-lib-jenkins-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[var-lib-jenkins-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[var-lib-jenkins-releases1003.eqiad.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ File[/etc/logrotate.d/rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Profile::Auto_restarts::Service[rsync]", "parameters": "--- Profile::Auto_restarts::Service[rsync].orig\n+++ Profile::Auto_restarts::Service[rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/scap.secondary]", "parameters": "--- File[/etc/scap.secondary].orig\n+++ File[/etc/scap.secondary]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases2003.codfw.wmnet/var-lib-jenkins-releases2003.codfw.wmnet /var/lib/jenkins/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-var-lib-jenkins-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://releases1003.eqiad.wmnet/var-lib-jenkins-releases2003.codfw.wmnet /var/lib/jenkins/"}, {"resource": "Systemd::Service[rsync-srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Systemd::Service[rsync-srv-patches-releases2003.codfw.wmnet].orig\n+++ Systemd::Service[rsync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Logrotate::Conf[rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- Logrotate::Conf[rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ Logrotate::Conf[rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- Service[rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n-    before => ['Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]']\n@@\n-    ensure => stopped\n+    ensure => running\n@@\n-    enable => False\n+    enable => True\n"}, {"resource": "File[/etc/logrotate.d/rsync-srv-patches-releases-primary]", "parameters": "--- File[/etc/logrotate.d/rsync-srv-patches-releases-primary].orig\n+++ File[/etc/logrotate.d/rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Motd::Script[rsync_source_warning]", "parameters": "--- Motd::Script[rsync_source_warning].orig\n+++ Motd::Script[rsync_source_warning]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_rsync.timer]", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_rsync.timer].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_rsync.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ File[/var/log/rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => directory\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-patches-releases-primary.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsyslog::Conf[rsync-srv-patches-releases-primary]", "parameters": "--- Rsyslog::Conf[rsync-srv-patches-releases-primary].orig\n+++ Rsyslog::Conf[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases-primary.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.service]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.service].orig\n+++ Systemd::Unit[rsync-srv-patches-releases2003.codfw.wmnet.service]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Systemd::Timer::Job[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Timer::Job[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Timer::Job[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases-primary.timer]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases-primary.timer].orig\n+++ Systemd::Unit[rsync-srv-patches-releases-primary.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-srv-patches-releases2003-codfw-wmnet.conf]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Systemd::Service[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Service[wmf_auto_restart_rsync].orig\n+++ Systemd::Service[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Syslog[rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- Systemd::Syslog[rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ Systemd::Syslog[rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]", "parameters": "--- Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)].orig\n+++ Exec[systemd daemon-reload for wmf_auto_restart_rsync.timer (wmf_auto_restart_rsync.timer)]\n\n-    before => ['Service[wmf_auto_restart_rsync.timer]']\n"}, {"resource": "File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet]", "content": "--- /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet.orig\n+++ /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet\n@@ -1,2 +1,2 @@\n #!/bin/sh\n-/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper --delete -a    rsync://deploy1003.eqiad.wmnet/srv-patches-releases2003.codfw.wmnet /srv/patches/\n+/usr/bin/rsync --rsh /usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet-ssl-wrapper --delete -a  --chown=jenkins:705  rsync://deploy1003.eqiad.wmnet/srv-patches-releases2003.codfw.wmnet /srv/patches/", "parameters": "--- File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet].orig\n+++ File[/usr/local/sbin/sync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/wmf_auto_restart_rsync.service]", "parameters": "--- File[/lib/systemd/system/wmf_auto_restart_rsync.service].orig\n+++ File[/lib/systemd/system/wmf_auto_restart_rsync.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases2003.codfw.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "Logrotate::Conf[wmf_auto_restart_rsync]", "parameters": "--- Logrotate::Conf[wmf_auto_restart_rsync].orig\n+++ Logrotate::Conf[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-srv-patches-releases-primary.timer]", "parameters": "--- Service[rsync-srv-patches-releases-primary.timer].orig\n+++ Service[rsync-srv-patches-releases-primary.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-srv-patches-releases-primary.timer (rsync-srv-patches-releases-primary.timer)]']\n@@\n-    ensure => running\n+    ensure => stopped\n@@\n-    enable => True\n+    enable => False\n"}, {"resource": "Systemd::Unit[rsync-srv-patches-releases-primary.service]", "parameters": "--- Systemd::Unit[rsync-srv-patches-releases-primary.service].orig\n+++ Systemd::Unit[rsync-srv-patches-releases-primary.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[srv-mediawiki-private-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-mediawiki-private-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-mediawiki-private-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Quickdatacopy[srv-mediawiki-private-primary]", "parameters": "--- Rsync::Quickdatacopy[srv-mediawiki-private-primary].orig\n+++ Rsync::Quickdatacopy[srv-mediawiki-private-primary]\n\n@@\n-    dest_host => releases2003.codfw.wmnet\n+    dest_host => releases1003.eqiad.wmnet\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases-primary.service]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases-primary.service].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases-primary.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.timer]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsync::Quickdatacopy[var-lib-jenkins-releases2003.codfw.wmnet]", "parameters": "--- Rsync::Quickdatacopy[var-lib-jenkins-releases2003.codfw.wmnet].orig\n+++ Rsync::Quickdatacopy[var-lib-jenkins-releases2003.codfw.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "File[/etc/update-motd.d/01-rsync-source-warning]", "content": "--- /etc/update-motd.d/01-rsync-source-warning.orig\n+++ /etc/update-motd.d/01-rsync-source-warning\n@@ -21,6 +21,6 @@\n \n DO NOT UPLOAD FILES HERE.\n \n-Upload to 'releases2003.codfw.wmnet' instead.\n+Upload to 'releases1003.eqiad.wmnet' instead.\n \n MOTD", "parameters": "--- File[/etc/update-motd.d/01-rsync-source-warning].orig\n+++ File[/etc/update-motd.d/01-rsync-source-warning]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Systemd::Timer[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Timer[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Timer[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/wmf_auto_restart_rsync]", "parameters": "--- File[/etc/logrotate.d/wmf_auto_restart_rsync].orig\n+++ File[/etc/logrotate.d/wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[srv-patches-releases-primary]", "parameters": "--- Rsync::Quickdatacopy[srv-patches-releases-primary].orig\n+++ Rsync::Quickdatacopy[srv-patches-releases-primary]\n\n@@\n-    dest_host => releases2003.codfw.wmnet\n+    dest_host => releases1003.eqiad.wmnet\n"}, {"resource": "Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-org-wikimedia-releases-releases1003.eqiad.wmnet]\n\n@@\n-    source_host => releases2003.codfw.wmnet\n+    source_host => releases1003.eqiad.wmnet\n"}, {"resource": "Systemd::Syslog[rsync-srv-patches-releases-primary]", "parameters": "--- Systemd::Syslog[rsync-srv-patches-releases-primary].orig\n+++ Systemd::Syslog[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer::Job[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Timer::Job[wmf_auto_restart_rsync].orig\n+++ Systemd::Timer::Job[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File_line[auto_restart_file_presence_rsync]", "parameters": "--- File_line[auto_restart_file_presence_rsync].orig\n+++ File_line[auto_restart_file_presence_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer[wmf_auto_restart_rsync]", "parameters": "--- Systemd::Timer[wmf_auto_restart_rsync].orig\n+++ Systemd::Timer[wmf_auto_restart_rsync]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer::Job[rsync-srv-patches-releases2003.codfw.wmnet]", "parameters": "--- Systemd::Timer::Job[rsync-srv-patches-releases2003.codfw.wmnet].orig\n+++ Systemd::Timer::Job[rsync-srv-patches-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service]", "parameters": "--- File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service].orig\n+++ File[/lib/systemd/system/rsync-srv-patches-releases2003.codfw.wmnet.service]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Class[Profile::Releases::Mediawiki::Private]", "parameters": "--- Class[Profile::Releases::Mediawiki::Private].orig\n+++ Class[Profile::Releases::Mediawiki::Private]\n\n@@\n-    primary_server    => releases2003.codfw.wmnet\n+    primary_server    => releases1003.eqiad.wmnet\n@@\n-    secondary_servers => ['releases1003.eqiad.wmnet']\n+    secondary_servers => ['releases2003.codfw.wmnet']\n"}, {"resource": "Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-srv-patches-releases2003.codfw.wmnet.timer (rsync-srv-patches-releases2003.codfw.wmnet.timer)]\n\n+    before => ['Service[rsync-srv-patches-releases2003.codfw.wmnet.timer]']\n"}, {"resource": "Rsync::Quickdatacopy[srv-patches-releases1003.eqiad.wmnet]", "parameters": "--- Rsync::Quickdatacopy[srv-patches-releases1003.eqiad.wmnet].orig\n+++ Rsync::Quickdatacopy[srv-patches-releases1003.eqiad.wmnet]\n\n-    chown  => jenkins:705\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Logrotate::Conf[rsync-srv-patches-releases-primary]", "parameters": "--- Logrotate::Conf[rsync-srv-patches-releases-primary].orig\n+++ Logrotate::Conf[rsync-srv-patches-releases-primary]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet]", "parameters": "--- File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet].orig\n+++ File[/usr/local/sbin/sync-srv-mediawiki-private-releases2003.codfw.wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}, {"resource": "Rsyslog::Conf[rsync-srv-patches-releases2003_codfw_wmnet]", "parameters": "--- Rsyslog::Conf[rsync-srv-patches-releases2003_codfw_wmnet].orig\n+++ Rsyslog::Conf[rsync-srv-patches-releases2003_codfw_wmnet]\n\n@@\n-    ensure => absent\n+    ensure => present\n"}], "perc_changed": "3.20%"}}}