Compilation results for logging-sd1001.eqiad.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• Exec[Generate cert Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet refresh on intermediate ca change]
• Exec[create chained cert /etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.chain.pem]
• File[/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.csr]
• File[/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chained.pem]
• File[/etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.csr]
• File[/etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.pem]
• File[/etc/opensearch/production-elk7-eqiad/ssl]
• File[/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.pem]
• Cfssl::Csr[/etc/cfssl/csr/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.csr]
• Exec[Generate cert Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad]
• Cfssl::Csr[/etc/cfssl/csr/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.csr]
• File[/etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.chain.pem]
• Exec[Generate cert Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet refresh]
• File[/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chain.pem]
• File[/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet-key.pem]
• Cfssl::Cert[Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet]
• Cfssl::Cert[Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad]
• Exec[renew certificate - Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet]
• File[/etc/cfssl/csr/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.csr]
• File[/etc/cfssl/csr/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.csr]
• File[/etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad-key.pem]
• Exec[Generate cert Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad refresh]
• File[/etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad]
• Exec[renew certificate - Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad]
• Exec[Generate cert Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad refresh on intermediate ca change]
• Exec[create chained cert /etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chain.pem]
• File[/etc/cfssl/ssl/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad/Production_Logging_OpenSearch__opensearch_admin_production-elk7-eqiad.chained.pem]
• Exec[Generate cert Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet]

Resources modified

• File[/etc/opensearch/production-elk7-eqiad/opensearch.yml]

  Content differences:

  --- /etc/opensearch/production-elk7-eqiad/opensearch.yml.orig
  +++ /etc/opensearch/production-elk7-eqiad/opensearch.yml
  @@ -187,5 +187,3 @@
   
   
   
  -# Disables the security plugin and the requirement for intra-cluster TLS.
  -plugins.security.disabled: true

• Class[Profile::Opensearch::Server]

  Parameters differences:

  --- Class[Profile::Opensearch::Server].orig
  +++ Class[Profile::Opensearch::Server]
  
  +    pki_intermediate_name => Production_Logging_OpenSearch
  @@
  -    common_settings       => {'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'http_port': 9200, 'transport_tcp_port': 9300, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': True, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}}
  +    common_settings       => {'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'http_port': 9200, 'transport_tcp_port': 9300, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': False, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}}
  

• Opensearch::Instance[production-elk7-eqiad]

  Parameters differences:

  --- Opensearch::Instance[production-elk7-eqiad].orig
  +++ Opensearch::Instance[production-elk7-eqiad]
  
  @@
  -    disable_security_plugin      => True
  +    disable_security_plugin      => False
  @@
  -    security_plugin_certificates => {}
  +    security_plugin_certificates => {'cert': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.pem', 'key': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet-key.pem', 'chain': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chain.pem', 'chained': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chained.pem'}
  

• Class[Profile::Opensearch::Logstash]

  Parameters differences:

  --- Class[Profile::Opensearch::Logstash].orig
  +++ Class[Profile::Opensearch::Logstash]
  
  +    pki_intermediate_name => Production_Logging_OpenSearch
  +    common_settings       => {'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'http_port': 9200, 'transport_tcp_port': 9300, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': False, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}}
  

• Class[Opensearch]

  Parameters differences:

  --- Class[Opensearch].orig
  +++ Class[Opensearch]
  
  @@
  -    instances => {'default': {'http_port': 9200, 'transport_tcp_port': 9300, 'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': True, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}, 'cluster_name': 'production-elk7-eqiad', 'unicast_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet'], 'cluster_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1023.eqiad.wmnet', 'logstash1024.eqiad.wmnet', 'logstash1025.eqiad.wmnet', 'logstash1030.eqiad.wmnet', 'logstash1031.eqiad.wmnet', 'logstash1032.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet']}}
  +    instances => {'default': {'security_plugin_certificates': {'cert': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.pem', 'key': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet-key.pem', 'chain': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chain.pem', 'chained': '/etc/opensearch/production-elk7-eqiad/ssl/Production_Logging_OpenSearch__logging-sd1001_eqiad_wmnet.chained.pem'}, 'http_port': 9200, 'transport_tcp_port': 9300, 'awareness_attributes': '', 'auto_create_index': True, 'short_cluster_name': 'elk7', 'expected_nodes': 10, 'heap_memory': '32G', 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'curator_uses_unicast_hosts': False, 'filter_cache_size': '10%', 'disktype': 'ssd', 'disable_security_plugin': False, 'recovery_max_bytes_per_sec': '800mb', 'watermarks': {'low': '1500gb', 'high': '500gb', 'flood_stage': '100gb'}, 'cluster_name': 'production-elk7-eqiad', 'unicast_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet'], 'cluster_hosts': ['logging-hd1001.eqiad.wmnet', 'logging-hd1002.eqiad.wmnet', 'logging-hd1003.eqiad.wmnet', 'logging-hd1004.eqiad.wmnet', 'logging-hd1005.eqiad.wmnet', 'logging-sd1001.eqiad.wmnet', 'logging-sd1002.eqiad.wmnet', 'logging-sd1003.eqiad.wmnet', 'logging-sd1004.eqiad.wmnet', 'logging-sd1005.eqiad.wmnet', 'logging-sd1006.eqiad.wmnet', 'logging-sd1007.eqiad.wmnet', 'logstash1023.eqiad.wmnet', 'logstash1024.eqiad.wmnet', 'logstash1025.eqiad.wmnet', 'logstash1030.eqiad.wmnet', 'logstash1031.eqiad.wmnet', 'logstash1032.eqiad.wmnet', 'logstash1033.eqiad.wmnet', 'logstash1034.eqiad.wmnet', 'logstash1035.eqiad.wmnet', 'logstash1036.eqiad.wmnet', 'logstash1037.eqiad.wmnet']}}
  

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Full Diff