Compilation results for ml-staging2003.codfw.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 3257 |
|---|---|
| Resources added: | 103 |
| Resources removed: | 0 |
| Resources modified: | 105 |
| Change percentage: | 6.39% |
Resources only in the new catalog
- Augeas[ipip0_127.0.0.42/32]
- File[/var/log/prometheus_ferm_mss]
- Augeas[ipip60_add_up]
- Exec[ip link set up dev ipip0]
- Exec[ip addr add 127.0.0.42/32 dev ipip0]
- Systemd::Unit[prometheus_ferm_mss.service]
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- File[/etc/rsyslog.d/40-prometheus-ferm-mss.conf]
- File[/usr/local/bin/prometheus-ferm-mss]
- Service[prometheus_ferm_mss.timer]
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
- File[/lib/systemd/system/tcp-mss-clamper.service]
- Augeas[ipip60_set_up]
- Systemd::Service[tcp-mss-clamper]
- Exec[disable-rp-filter-ipip60]
- Nrpe::Check[check_check_tcp-mss-clamper_status]
- Monitoring::Exported_nagios_service[ml-staging2003 check_tcp-mss-clamper_status]
- Exec[ip link add name ipip60 type ip6tnl external]
- Ferm::Rule[clamp-mss-ipv6]
- Augeas[ipip0_set_up]
- Prometheus::Node_ferm_mss[ferm_clamped_ipport]
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- File[/etc/logrotate.d/prometheus_ferm_mss]
- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]
- Augeas[ipip0_manual]
- Exec[ip link set up dev ipip60]
- Systemd::Timer[prometheus_lvs_realserver_mss]
- File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
- Systemd::Service[prometheus_ferm_mss]
- File[/etc/sudoers.d/nrpe-check_check_tcp-mss-clamper_status]
- Exec[/usr/sbin/tc qdisc del dev lo clsact]
- Ferm::Rule[ip6ip6]
- File[/usr/local/bin/prometheus-lvs-realserver-mss]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Interface::Ipip[ipip_ipv6]
- Systemd::Syslog[prometheus_ferm_mss]
- Systemd::Monitor[tcp-mss-clamper]
- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- File[/lib/systemd/system/prometheus_lvs_realserver_mss.service]
- Service[prometheus_lvs_realserver_mss.timer]
- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- File_line[rm_post-up_enp67s0f0np0_clsact_enp67s0f0np0]
- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.service (nrpe2nodexp-check_tcp-mss-clamper_status.service)]
- Systemd::Syslog[prometheus_lvs_realserver_mss]
- Augeas[ipip60_manual]
- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- File[/lib/systemd/system/prometheus_ferm_mss.service]
- Interface::Manual[ipip_ipv4]
- Interface::Post_up_command[clsact_lo]
- Exec[ip link add name ipip0 type ipip external]
- Sudo::User[nrpe-check_check_tcp-mss-clamper_status]
- Exec[systemd daemon-reload for prometheus_ferm_mss.service (prometheus_ferm_mss.service)]
- Interface::Manual[ipip_ipv6]
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.service]
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- File[/etc/rsyslog.d/40-prometheus-lvs-realserver-mss.conf]
- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
- Systemd::Timer::Job[prometheus_lvs_realserver_mss]
- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Systemd::Unit[tcp-mss-clamper]
- File_line[rm_post-up_lo_clsact_lo]
- Systemd::Unit[prometheus_ferm_mss.timer]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Systemd::Unit[prometheus_lvs_realserver_mss.service]
- Interface::Clsact[clsact_enp67s0f0np0]
- Systemd::Timer[prometheus_ferm_mss]
- Package[tcp-mss-clamper]
- Class[Profile::Lvs::Realserver::Ipip]
- Nrpe::Plugin[check_systemd_unit_status]
- Interface::Ip[ipip_ipv4 ipv4]
- Systemd::Timer[nrpe2nodexp-check_tcp-mss-clamper_status]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
- Augeas[ipip0_add_up]
- File[/lib/systemd/system/nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Ferm::Rule[ipip]
- Systemd::Service[prometheus_lvs_realserver_mss]
- Logrotate::Conf[prometheus_ferm_mss]
- Service[tcp-mss-clamper]
- Ferm::Rule[clamp-mss-ipv4]
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Monitoring::Service[check_tcp-mss-clamper_status]
- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
- File[/var/log/prometheus_lvs_realserver_mss]
- File[/etc/ferm/conf.d/10_ip6ip6]
- File[/etc/ferm/conf.d/10_ipip]
- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f]
- Exec[/usr/sbin/tc qdisc del dev enp67s0f0np0 clsact]
- Nrpe::Monitor_service[check_tcp-mss-clamper_status]
- File[/lib/systemd/system/prometheus_ferm_mss.timer]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
- Exec[disable-rp-filter-ipip0]
- File[/etc/ferm/conf.d/10_clamp-mss-ipv4]
- Exec[disable-rp-filter-enp67s0f0np0]
- Interface::Post_up_command[clsact_enp67s0f0np0]
- File[/etc/logrotate.d/prometheus_lvs_realserver_mss]
- Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]
- Systemd::Unit[prometheus_lvs_realserver_mss.timer]
- Rsyslog::Conf[prometheus_ferm_mss]
- Interface::Ipip[ipip_ipv4]
- Interface::Clsact[clsact_lo]
- Systemd::Timer::Job[prometheus_ferm_mss]
- File[/lib/systemd/system/prometheus_lvs_realserver_mss.timer]
Resources modified
- Service[prometheus_ferm_mss.timer]
- Parameters differences:
--- Service[prometheus_ferm_mss.timer].orig +++ Service[prometheus_ferm_mss.timer] + enable => False + before => ['Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]'] + ensure => stopped + provider => systemd
- File_line[rm_post-up_lo_clsact_lo]
- Parameters differences:
--- File_line[rm_post-up_lo_clsact_lo].orig +++ File_line[rm_post-up_lo_clsact_lo] + ensure => absent + path => /etc/network/interfaces + match => post-up /usr/sbin/tc qdisc add dev lo clsact + match_for_absence => True
- Interface::Ipip[ipip_ipv4]
- Parameters differences:
--- Interface::Ipip[ipip_ipv4].orig +++ Interface::Ipip[ipip_ipv4] + family => inet + ensure => present + address => 127.0.0.42 + interface => ipip0
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Logrotate::Conf[prometheus_lvs_realserver_mss].orig +++ Logrotate::Conf[prometheus_lvs_realserver_mss] + ensure => absent
- Interface::Manual[ipip_ipv6]
- Parameters differences:
--- Interface::Manual[ipip_ipv6].orig +++ Interface::Manual[ipip_ipv6] + family => inet6 + ensure => present + interface => ipip60 + hotplug => False
- Ferm::Rule[ipip]
- Parameters differences:
--- Ferm::Rule[ipip].orig +++ Ferm::Rule[ipip] + domain => (ip) + desc => + chain => INPUT + rule => saddr 172.16.0.0/12 proto ipencap ACCEPT; + prio => 10 + table => filter + ensure => present
- File[/lib/systemd/system/prometheus_ferm_mss.timer]
- Parameters differences:
--- File[/lib/systemd/system/prometheus_ferm_mss.timer].orig +++ File[/lib/systemd/system/prometheus_ferm_mss.timer] + owner => root + group => root + ensure => absent + mode => 0444 + notify => Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
- Content differences:
--- /lib/systemd/system/prometheus_ferm_mss.timer.orig +++ /lib/systemd/system/prometheus_ferm_mss.timer @@ -0,0 +1,12 @@ +[Unit] +Description=Periodic execution of prometheus_ferm_mss.service + +[Timer] +Unit=prometheus_ferm_mss.service +# Accuracy sets the maximum time interval around the execution time we want to allow +AccuracySec=15sec +OnCalendar=minutely +RandomizedDelaySec=0 + +[Install] +WantedBy=multi-user.target
- Augeas[ipip0_add_up]
- Parameters differences:
--- Augeas[ipip0_add_up].orig +++ Augeas[ipip0_add_up] + context => /files/etc/network/interfaces/*[. = 'ipip0' and ./family = 'inet'] + lens => Interfaces.lns + onlyif => match up[. = 'ip link add name ipip0 type ipip external'] size == 0 + incl => /etc/network/interfaces + changes => set up[last()+1] 'ip link add name ipip0 type ipip external' + require => Interface::Manual[ipip_ipv4]
- Systemd::Timer::Job[prometheus_ferm_mss]
- Parameters differences:
--- Systemd::Timer::Job[prometheus_ferm_mss].orig +++ Systemd::Timer::Job[prometheus_ferm_mss] + logfile_name => syslog.log + ensure => absent + user => root + send_mail_to => root@ml-staging2003.codfw.wmnet + environment => {} + ignore_errors => False + success_exit_status => [] + send_mail_only_on_error => True + monitoring_notes_url => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + private_tmp => False + logging_enabled => True + command => /usr/local/bin/prometheus-ferm-mss -o /var/lib/prometheus/node.d/ferm-mss.prom -e + monitoring_contact_groups => admins + description => Regular job to collect MSS values of ferm-based hosts + syslog_match_startswith => True + syslog_force_stop => True + logfile_basedir => /var/log + logfile_perms => all + fixed_random_delay => False + monitoring_enabled => False + logfile_group => root + interval => {'start': 'OnCalendar', 'interval': 'minutely'} + send_mail => False- Interface::Manual[ipip_ipv4]
- Parameters differences:
--- Interface::Manual[ipip_ipv4].orig +++ Interface::Manual[ipip_ipv4] + family => inet + ensure => present + interface => ipip0 + hotplug => False
- Interface::Post_up_command[clsact_lo]
- Parameters differences:
--- Interface::Post_up_command[clsact_lo].orig +++ Interface::Post_up_command[clsact_lo] + ensure => absent + command => /usr/sbin/tc qdisc add dev lo clsact + interface => lo
- Systemd::Unit[tcp-mss-clamper]
- Parameters differences:
--- Systemd::Unit[tcp-mss-clamper].orig +++ Systemd::Unit[tcp-mss-clamper] + override_filename => puppet-override.conf + unit => tcp-mss-clamper + override => False + ensure => absent + restart => False + require => ['Class[Systemd]']
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service].orig +++ Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service] + override_filename => puppet-override.conf + override => False + unit => nrpe2nodexp-check_tcp-mss-clamper_status.service + ensure => absent + restart => False + require => ['Class[Systemd]']
- Monitoring::Service[check_tcp-mss-clamper_status]
- Parameters differences:
--- Monitoring::Service[check_tcp-mss-clamper_status].orig +++ Monitoring::Service[check_tcp-mss-clamper_status] + check_command => nrpe_check!check_check_tcp-mss-clamper_status!10 + host => ml-staging2003 + retry_interval => 1 + critical => False + ensure => absent + check_interval => 10 + contact_group => admins + retries => 2 + migration_task => T407130 + freshness => 36000 + notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments + passive => False + description => Check unit status of tcp-mss-clamper + config_dir => /etc/nagios
- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf].orig +++ File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf] + owner => root + group => root + ensure => absent + mode => 0444 + notify => Service[rsyslog]
- Content differences:
--- /etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf.orig +++ /etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: Apache-2.0 +if $programname contains "nrpe2nodexp-check_tcp-mss-clamper_status" then { + if ($msg contains "\"ecs.version\": \"1.7.0\"") then { + # Send logs to kafka + set $.log_outputs = "kafka ecs_170 local"; + } else { + # Filter out non-relevant nrpe2nodexp messages + stop + } +}- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f]
- Parameters differences:
--- Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f].orig +++ Prometheus::Alert::Rule[check_check_tcp-mss-clamper_status_295d6d5dd0a784bb9ba1d5983fd1894f] + def_label_whitelst => ['team', 'severity'] + for => 11m + ensure => absent + site => codfw + summary => NRPE CHECK: Check unit status of tcp-mss-clamper + dashboard => TODO + runbook => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments + logs => https://logstash.wikimedia.org/app/dashboards#/view/2d343ac0-6df8-11f0-8e08-7fab0da52b33?_g=(filters:!((query:(match_phrase:(event.module:check_check_tcp-mss-clamper_status))),(query:(match_phrase:(host.name:{{$labels.instance|stripPort}}))))) + team => observability + group => nrpechecks + alert_name => nrpe_Check_unit_status_of_tcp_mss_clamper + description => NRPE CHECK: Check unit status of tcp-mss-clamper + severity => info + instance => ops + expr => (nagios_nrpe_check_result{alert_rule_hash="295d6d5dd0a784bb9ba1d5983fd1894f",check_name="check_check_tcp-mss-clamper_status", status=~"(WARNING|CRITICAL)", severity=~"(warning|critical)"} > 0) * on (instance) group_left (team) role_owner- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
- Parameters differences:
--- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)].orig +++ Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)] + refreshonly => True + command => /bin/systemctl daemon-reload
- Exec[disable-rp-filter-enp67s0f0np0]
- Parameters differences:
--- Exec[disable-rp-filter-enp67s0f0np0].orig +++ Exec[disable-rp-filter-enp67s0f0np0] + unless => /usr/sbin/sysctl -n net.ipv4.conf.enp67s0f0np0.rp_filter |grep -- '0' + command => /usr/sbin/sysctl -q net.ipv4.conf.enp67s0f0np0.rp_filter=0
- Augeas[ipip60_add_up]
- Parameters differences:
--- Augeas[ipip60_add_up].orig +++ Augeas[ipip60_add_up] + context => /files/etc/network/interfaces/*[. = 'ipip60' and ./family = 'inet6'] + lens => Interfaces.lns + onlyif => match up[. = 'ip link add name ipip60 type ip6tnl external'] size == 0 + incl => /etc/network/interfaces + changes => set up[last()+1] 'ip link add name ipip60 type ip6tnl external' + require => Interface::Manual[ipip_ipv6]
- File[/usr/local/bin/prometheus-ferm-mss]
- Parameters differences:
--- File[/usr/local/bin/prometheus-ferm-mss].orig +++ File[/usr/local/bin/prometheus-ferm-mss] + owner => root + source => puppet:///modules/prometheus/usr/local/bin/prometheus-ferm-mss.py + group => root + ensure => absent + mode => 0555
- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]
- Parameters differences:
--- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport].orig +++ Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport] + outfile => /var/lib/prometheus/node.d/lvs-realserver-mss.prom + ensure => absent + clamped_ipport => []
- Sudo::User[nrpe-check_check_tcp-mss-clamper_status]
- Parameters differences:
--- Sudo::User[nrpe-check_check_tcp-mss-clamper_status].orig +++ Sudo::User[nrpe-check_check_tcp-mss-clamper_status] + tag => nrpe::check + ensure => absent + user => nagios + privileges => [] + require => ['Class[Sudo]']
- File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_clamp-mss-ipv6].orig +++ File[/etc/ferm/conf.d/10_clamp-mss-ipv6] + owner => root + tag => ferm + group => root + ensure => absent + mode => 0400 + notify => Service[ferm] + require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_clamp-mss-ipv6.orig +++ /etc/ferm/conf.d/10_clamp-mss-ipv6 @@ -0,0 +1,11 @@ +# Autogenerated by puppet. DO NOT EDIT BY HAND! +# +# 10_clamp-mss-ipv6: + +domain (ip6) { + table filter { + chain OUTPUT { + outerface (enp67s0f0np0 lo) saddr @ipfilter(()) proto tcp sport () tcp-flags (SYN) SYN TCPMSS set-mss 1400; + } + } +}- Ferm::Rule[ip6ip6]
- Parameters differences:
--- Ferm::Rule[ip6ip6].orig +++ Ferm::Rule[ip6ip6] + domain => (ip6) + desc => + chain => INPUT + rule => saddr 0100::/64 proto ipv6 ACCEPT; + prio => 10 + table => filter + ensure => present
- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Parameters differences:
--- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer].orig +++ Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer] + enable => False + before => ['Exec[systemd daemon-reload for nrpe2nodexp-check_tcp-mss-clamper_status.timer (nrpe2nodexp-check_tcp-mss-clamper_status.timer)]'] + ensure => stopped + provider => systemd
- File_line[rm_post-up_enp67s0f0np0_clsact_enp67s0f0np0]
- Parameters differences:
--- File_line[rm_post-up_enp67s0f0np0_clsact_enp67s0f0np0].orig +++ File_line[rm_post-up_enp67s0f0np0_clsact_enp67s0f0np0] + ensure => absent + path => /etc/network/interfaces + match => post-up /usr/sbin/tc qdisc add dev enp67s0f0np0 clsact + match_for_absence => True
- Systemd::Service[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Systemd::Service[prometheus_lvs_realserver_mss].orig +++ Systemd::Service[prometheus_lvs_realserver_mss] + monitoring_critical => False + ensure => absent + unit_type => timer + restart => False + require => Systemd::Unit[prometheus_lvs_realserver_mss.service] + migration_task => T407130 + service_params => {} + override => False + monitoring_contact_group => admins + monitoring_enabled => False- Class[Adduser]
- Parameters differences:
--- Class[Adduser].orig +++ Class[Adduser] @@ - before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[dragonfly-dfdaemon]', 'Package[dragonfly-dfget]', 'Package[crictl]', 'Package[containerd]', 'Package[nerdctl]', 'Package[rsyslog-kubernetes]', 'Package[cpufrequtils]', 'Package[apparmor]', 'Package[socat]', 'Package[amd-k8s-device-plugin]', 'Package[amd-k8s-node-labeller]', 'Package[rocm-smi]', 'Package[python3-requests]', 'Package[firmware-amd-graphics]', 'Package[wikimedia-lvs-realserver]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[kubernetes-node]', 'Package[calicoctl]', 'Package[calico-cni]', 'Package[istio-cni]', 'Package[libhwloc15]'] + before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[ulogd2]', 'Package[conntrack]', 'Package[dragonfly-dfdaemon]', 'Package[dragonfly-dfget]', 'Package[crictl]', 'Package[containerd]', 'Package[nerdctl]', 'Package[rsyslog-kubernetes]', 'Package[cpufrequtils]', 'Package[apparmor]', 'Package[socat]', 'Package[amd-k8s-device-plugin]', 'Package[amd-k8s-node-labeller]', 'Package[rocm-smi]', 'Package[python3-requests]', 'Package[firmware-amd-graphics]', 'Package[wikimedia-lvs-realserver]', 'Package[tcp-mss-clamper]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[kubernetes-node]', 'Package[calicoctl]', 'Package[calico-cni]', 'Package[istio-cni]', 'Package[libhwloc15]']
- File[/var/log/prometheus_ferm_mss]
- Parameters differences:
--- File[/var/log/prometheus_ferm_mss].orig +++ File[/var/log/prometheus_ferm_mss] + force => True + owner => root + group => root + backup => False + ensure => absent + mode => 0755
- Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
- Parameters differences:
--- Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)].orig +++ Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)] + refreshonly => True + command => /bin/systemctl daemon-reload
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
- Parameters differences:
--- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)].orig +++ Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)] + refreshonly => True + command => /bin/systemctl daemon-reload
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Parameters differences:
--- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer].orig +++ Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer] + override_filename => puppet-override.conf + unit => nrpe2nodexp-check_tcp-mss-clamper_status.timer + override => False + ensure => absent + restart => False + require => ['Class[Systemd]']
- Interface::Ip[ipip_ipv4 ipv4]
- Parameters differences:
--- Interface::Ip[ipip_ipv4 ipv4].orig +++ Interface::Ip[ipip_ipv4 ipv4] + interface => ipip0 + ensure => present + prefixlen => 32 + address => 127.0.0.42 + require => Augeas[ipip0_set_up]
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- Parameters differences:
--- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg].orig +++ File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg] + owner => root + tag => nrpe::check + group => root + ensure => absent + mode => 0444 + notify => Service[nagios-nrpe-server] + require => Package[nagios-nrpe-server]
- Content differences:
--- /etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg.orig +++ /etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg @@ -0,0 +1,2 @@ +# File generated by puppet. DO NOT edit by hand +command[check_check_tcp-mss-clamper_status]=/usr/local/lib/nagios/plugins/check_systemd_unit_status tcp-mss-clamper
- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status].orig +++ Rsyslog::Conf[nrpe2nodexp-check_tcp-mss-clamper_status] + ensure => absent + mode => 0444 + priority => 25
- Interface::Clsact[clsact_enp67s0f0np0]
- Parameters differences:
--- Interface::Clsact[clsact_enp67s0f0np0].orig +++ Interface::Clsact[clsact_enp67s0f0np0] + ensure => absent + interface => enp67s0f0np0
- Augeas[ipip60_set_up]
- Parameters differences:
--- Augeas[ipip60_set_up].orig +++ Augeas[ipip60_set_up] + context => /files/etc/network/interfaces/*[. = 'ipip60' and ./family = 'inet6'] + lens => Interfaces.lns + onlyif => match up[. = 'ip link set up dev ipip60'] size == 0 + incl => /etc/network/interfaces + changes => set up[last()+1] 'ip link set up dev ipip60' + require => Augeas[ipip60_add_up]
- Augeas[ipip0_set_up]
- Parameters differences:
--- Augeas[ipip0_set_up].orig +++ Augeas[ipip0_set_up] + context => /files/etc/network/interfaces/*[. = 'ipip0' and ./family = 'inet'] + lens => Interfaces.lns + onlyif => match up[. = 'ip link set up dev ipip0'] size == 0 + incl => /etc/network/interfaces + changes => set up[last()+1] 'ip link set up dev ipip0' + require => Augeas[ipip0_add_up]
- Augeas[ipip0_manual]
- Parameters differences:
--- Augeas[ipip0_manual].orig +++ Augeas[ipip0_manual] + lens => Interfaces.lns + incl => /etc/network/interfaces + changes => ["set auto[./1 = 'ipip0']/1 'ipip0'", "set iface[. = 'ipip0'] 'ipip0'", "set iface[. = 'ipip0']/family 'inet'", "set iface[. = 'ipip0']/method 'manual'"] + context => /files/etc/network/interfaces
- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status].orig +++ Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status] + monitoring_critical => False + ensure => absent + unit_type => timer + restart => False + require => Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service] + migration_task => T407130 + service_params => {} + override => False + monitoring_contact_group => admins + monitoring_enabled => False- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- Parameters differences:
--- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status].orig +++ Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status] + logfile_name => syslog.log + ensure => absent + user => nagios + send_mail_to => root@ml-staging2003.codfw.wmnet + ignore_errors => True + environment => {} + success_exit_status => [] + send_mail_only_on_error => True + group => prometheus-node-exporter + monitoring_notes_url => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state + private_tmp => False + syslog_identifier => nrpe2nodexp-check_tcp-mss-clamper_status + logging_enabled => False + command => /usr/local/bin/nrpe2nodexp --alert-rule-hash "295d6d5dd0a784bb9ba1d5983fd1894f" --timeout 10 --check-command "check_check_tcp-mss-clamper_status" + monitoring_contact_groups => admins + description => execution of nrpe2nodexp for the check_check_tcp-mss-clamper_status command. + syslog_match_startswith => True + syslog_force_stop => True + logfile_basedir => /var/log + logfile_perms => all + splay => 300 + fixed_random_delay => True + monitoring_enabled => False + logfile_group => root + interval => [{'start': 'OnUnitInactiveSec', 'interval': '5min'}] + send_mail => False- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Rsyslog::Conf[prometheus_lvs_realserver_mss].orig +++ Rsyslog::Conf[prometheus_lvs_realserver_mss] + ensure => absent + mode => 0444 + priority => 40 + require => File[/var/log/prometheus_lvs_realserver_mss]
- Nrpe::Monitor_service[check_tcp-mss-clamper_status]
- Parameters differences:
--- Nrpe::Monitor_service[check_tcp-mss-clamper_status].orig +++ Nrpe::Monitor_service[check_tcp-mss-clamper_status] + retry_interval => 1 + ensure => absent + nrpe2nodexp_parse_perf_data => False + retries => 2 + migration_task => T407130 + enable_icinga_check => True + alertmanager_severity_override => info + notes_url => https://wikitech.wikimedia.org/wiki/LVS#IPIP_encapsulation_experiments + nrpe_command => /usr/local/lib/nagios/plugins/check_systemd_unit_status tcp-mss-clamper + alertmanager_team => observability + check_interval => 10 + contact_group => admins + enable_nrpe2nodexp => False + description => Check unit status of tcp-mss-clamper + timeout => 10 + critical => False
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- Parameters differences:
--- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status].orig +++ File[/usr/local/lib/nagios/plugins/check_systemd_unit_status] + owner => root + source => puppet:///modules/systemd/check_systemd_unit_status + tag => nrpe::plugin + group => root + ensure => file + mode => 0555 + require => File[/usr/local/lib/nagios/plugins/]
- Package[tcp-mss-clamper]
- Parameters differences:
--- Package[tcp-mss-clamper].orig +++ Package[tcp-mss-clamper] + ensure => absent + provider => apt
- Systemd::Timer[prometheus_lvs_realserver_mss]
- Parameters differences:
--- Systemd::Timer[prometheus_lvs_realserver_mss].orig +++ Systemd::Timer[prometheus_lvs_realserver_mss] + accuracy => 15sec + unit_name => prometheus_lvs_realserver_mss.service + splay => 0 + fixed_random_delay => False + ensure => absent + timer_intervals => [{'start': 'OnCalendar', 'interval': 'minutely'}]- Interface::Ipip[ipip_ipv6]
- Parameters differences:
--- Interface::Ipip[ipip_ipv6].orig +++ Interface::Ipip[ipip_ipv6] + family => inet6 + ensure => present + interface => ipip60
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- Parameters differences:
--- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom].orig +++ File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom] + owner => root + ensure => absent + group => root
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- Parameters differences:
--- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)].orig +++ Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)] + refreshonly => True + command => /bin/systemctl daemon-reload
- Exec[disable-rp-filter-ipip0]
- Parameters differences:
--- Exec[disable-rp-filter-ipip0].orig +++ Exec[disable-rp-filter-ipip0] + unless => /usr/sbin/sysctl -n net.ipv4.conf.ipip0.rp_filter |grep -- '0' + command => /usr/sbin/sysctl -q net.ipv4.conf.ipip0.rp_filter=0 + require => Interface::Ipip[ipip_ipv4]
- Interface::Clsact[clsact_lo]
- Parameters differences:
- Interface::Clsact[clsact_lo]
- Exec[disable-rp-filter-ipip0]
- Exec[systemd daemon-reload for tcp-mss-clamper.service (tcp-mss-clamper)]
- File[/var/lib/prometheus/node.d/check_check_tcp-mss-clamper_status.prom]
- Interface::Ipip[ipip_ipv6]
- Systemd::Timer[prometheus_lvs_realserver_mss]
- Package[tcp-mss-clamper]
- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]
- Nrpe::Monitor_service[check_tcp-mss-clamper_status]
- Rsyslog::Conf[prometheus_lvs_realserver_mss]
- Systemd::Timer::Job[nrpe2nodexp-check_tcp-mss-clamper_status]
- Systemd::Service[nrpe2nodexp-check_tcp-mss-clamper_status]
- Augeas[ipip0_manual]
- Augeas[ipip0_set_up]
- Augeas[ipip60_set_up]
- Interface::Clsact[clsact_enp67s0f0np0]
- Content differences:
- File[/etc/nagios/nrpe.d/check_check_tcp-mss-clamper_status.cfg]
- Interface::Ip[ipip_ipv4 ipv4]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.timer (prometheus_lvs_realserver_mss.timer)]
- Exec[systemd daemon-reload for prometheus_ferm_mss.timer (prometheus_ferm_mss.timer)]
- File[/var/log/prometheus_ferm_mss]
- Class[Adduser]
- Systemd::Service[prometheus_lvs_realserver_mss]
- File_line[rm_post-up_enp67s0f0np0_clsact_enp67s0f0np0]
- Service[nrpe2nodexp-check_tcp-mss-clamper_status.timer]
- Content differences:
- File[/etc/ferm/conf.d/10_clamp-mss-ipv6]
- Sudo::User[nrpe-check_check_tcp-mss-clamper_status]
- Prometheus::Node_lvs_realserver_mss[lvs_clamped_ipport]
- File[/usr/local/bin/prometheus-ferm-mss]
- Augeas[ipip60_add_up]
- Exec[disable-rp-filter-enp67s0f0np0]
- Exec[systemd daemon-reload for prometheus_lvs_realserver_mss.service (prometheus_lvs_realserver_mss.service)]
- Content differences:
- File[/etc/rsyslog.d/25-nrpe2nodexp-check-tcp-mss-clamper-status.conf]
- Monitoring::Service[check_tcp-mss-clamper_status]
- Systemd::Unit[nrpe2nodexp-check_tcp-mss-clamper_status.service]
- Systemd::Unit[tcp-mss-clamper]
- Interface::Post_up_command[clsact_lo]
- Interface::Manual[ipip_ipv4]
- Systemd::Timer::Job[prometheus_ferm_mss]
- Content differences:
- File[/lib/systemd/system/prometheus_ferm_mss.timer]
- Ferm::Rule[ipip]
- Interface::Manual[ipip_ipv6]
- Logrotate::Conf[prometheus_lvs_realserver_mss]
- Interface::Ipip[ipip_ipv4]
- File_line[rm_post-up_lo_clsact_lo]
- Parameters differences: