15.11.7, 15.11.8, 15.11.9 No public schema after Postgres Upgrade 12.14 -> 13.11

Summary

15.11.7, 15.11.8, 15.11.9 No public schema after Postgres Upgrade 12 -> 13.11

Steps to reproduce

gitlab-ctl pg-upgrade -V 13 on versions 15.11.7, 15.11.8, or 15.11.9 (Was hoping the point fixes, fixed the issue)

Maybe someelse can say at least "me too".

What is the current bug behavior?

gitlab-ctl pg-upgrade -V 13 completes successfully,
however on start up gitlab now throws 500 error and errors 2023-06-16_17:07:51.76993 ERROR: relation "application_settings" does not exist at character 454 postgres log See more log info below.

Looking at database/schema with gitlab-psql there is no public schema.

[root@gitlab-eng1 /root]# gitlab-psql
psql (13.11)
Type "help" for help.

gitlabhq_production=# \dt public.*;
Did not find any relation named "public.*".

What is the expected correct behavior?

Expect pg-upgrade to migrate data to new database successfully and completely.

Relevant logs and/or screenshots

Output of gitlab-ctl pg-upgrade -V 13

[root@gitlab-eng1 /root]# gitlab-ctl pg-upgrade -V 13
Checking for an omnibus managed postgresql: OK
Checking if postgresql['version'] is set: OK
Checking if we already upgraded: NOT OK
Checking for a newer version of PostgreSQL to install
Upgrading PostgreSQL to 13.11
Checking if disk for directory /var/opt/gitlab/postgresql/data has enough free space for PostgreSQL upgrade: OK
Checking if PostgreSQL bin files are symlinked to the expected location: OK
Waiting 30 seconds to ensure tasks complete before PostgreSQL upgrade.
See https://docs.gitlab.com/omnibus/settings/database.html#upgrade-packaged-postgresql-server for details
If you do not want to upgrade the PostgreSQL server at this time, enter Ctrl-C and see the documentation for details

Please hit Ctrl-C now if you want to cancel the operation.
Toggling deploy page:cp /opt/gitlab/embedded/service/gitlab-rails/public/deploy.html /opt/gitlab/embedded/service/gitlab-rails/public/index.html
Toggling deploy page: OK
Toggling services:ok: down: alertmanager: 0s, normally up
ok: down: gitaly: 0s, normally up
ok: down: gitlab-exporter: 0s, normally up
ok: down: gitlab-kas: 0s, normally up
ok: down: grafana: 1s, normally up
ok: down: logrotate: 0s, normally up
ok: down: node-exporter: 1s, normally up
ok: down: postgres-exporter: 0s, normally up
ok: down: prometheus: 1s, normally up
ok: down: redis-exporter: 0s, normally up
ok: down: registry: 0s, normally up
ok: down: sidekiq: 0s, normally up
Toggling services: OK
Running stop on postgresql:ok: down: postgresql: 0s, normally up
Running stop on postgresql: OK
Symlink correct version of binaries: OK
Creating temporary data directory: OK
Initializing the new database: OK
Upgrading the data: OK
Move the old data directory out of the way: OK
Rename the new data directory: OK
Saving the old version information: OK
Configuring PostgreSQL
[2023-06-16T13:06:54-04:00] INFO: Started Cinc Zero at chefzero://localhost:1 with repository at /opt/gitlab/embedded (One version per cookbook)
Cinc Client, version 17.10.0
Patents: https://www.chef.io/patents
Infra Phase starting
[2023-06-16T13:06:54-04:00] INFO: *** Cinc Client 17.10.0 ***
[2023-06-16T13:06:54-04:00] INFO: Platform: x86_64-linux
[2023-06-16T13:06:54-04:00] INFO: Cinc-client pid: 26810
[2023-06-16T13:06:57-04:00] INFO: Setting the run_list to ["recipe[gitlab::config]", "recipe[postgresql::enable]"] from CLI options
[2023-06-16T13:06:57-04:00] INFO: Run List is [recipe[gitlab::config], recipe[postgresql::enable]]
[2023-06-16T13:06:57-04:00] INFO: Run List expands to [gitlab::config, postgresql::enable]
[2023-06-16T13:06:57-04:00] INFO: Starting Cinc Client Run for gitlab-eng1.it-prod-mgmt.aws.umd.edu
[2023-06-16T13:06:57-04:00] INFO: Running start handlers
[2023-06-16T13:06:57-04:00] INFO: Start handlers complete.
Resolving cookbooks for run list: ["gitlab::config", "postgresql::enable"]
[2023-06-16T13:06:58-04:00] INFO: Loading cookbooks [gitlab@0.0.1, postgresql@0.1.0, package@0.1.0, logrotate@0.1.0, redis@0.1.0, monitoring@0.1.0, registry@0.1.0, mattermost@0.1.0, consul@0.1.0, gitaly@0.1.0, praefect@0.1.0, gitlab-kas@0.1.0, gitlab-pages@0.1.0, letsencrypt@0.1.0, nginx@0.1.0, runit@5.1.7, acme@4.1.6, crond@0.1.0]
Synchronizing cookbooks:
  - gitlab (0.0.1)
  - postgresql (0.1.0)
  - package (0.1.0)
  - logrotate (0.1.0)
  - redis (0.1.0)
  - monitoring (0.1.0)
  - registry (0.1.0)
  - mattermost (0.1.0)
  - consul (0.1.0)
  - gitaly (0.1.0)
  - praefect (0.1.0)
  - gitlab-kas (0.1.0)
  - gitlab-pages (0.1.0)
  - letsencrypt (0.1.0)
  - nginx (0.1.0)
  - runit (5.1.7)
  - acme (4.1.6)
  - crond (0.1.0)
Installing cookbook gem dependencies:
Compiling cookbooks...
Loading Cinc Auditor profile files:
Loading Cinc Auditor input files:
Loading Cinc Auditor waiver files:
Converging 27 resources
Recipe: postgresql::bin
  * ruby_block[check_postgresql_version] action run (skipped due to not_if)
  * ruby_block[check_postgresql_version_is_deprecated] action run (skipped due to not_if)
  * ruby_block[Link postgresql bin files to the correct version] action run (skipped due to only_if)
  * template[/opt/gitlab/etc/gitlab-psql-rc] action create (up to date)
Recipe: postgresql::user
  * account[Postgresql user and group] action create
    * group[Postgresql user and group] action create (up to date)
    * linux_user[Postgresql user and group] action create (up to date)
     (up to date)
  * directory[/var/opt/gitlab/postgresql] action create (up to date)
  * file[/var/opt/gitlab/postgresql/.profile] action create (up to date)
Recipe: package::sysctl
  * execute[reload all sysctl conf] action nothing (skipped due to action :nothing)
Recipe: postgresql::sysctl
  * gitlab_sysctl[kernel.shmmax] action create
    * directory[create /etc/sysctl.d for kernel.shmmax] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-kernel.shmmax.conf kernel.shmmax] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-kernel.shmmax.conf] action create (up to date)
    * execute[load sysctl conf kernel.shmmax] action nothing (skipped due to action :nothing)
     (up to date)
  * gitlab_sysctl[kernel.shmall] action create
    * directory[create /etc/sysctl.d for kernel.shmall] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-kernel.shmall.conf kernel.shmall] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-kernel.shmall.conf] action create (up to date)
    * execute[load sysctl conf kernel.shmall] action nothing (skipped due to action :nothing)
     (up to date)
  * gitlab_sysctl[kernel.sem] action create
    * directory[create /etc/sysctl.d for kernel.sem] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-kernel.sem.conf kernel.sem] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-kernel.sem.conf] action create (up to date)
    * execute[load sysctl conf kernel.sem] action nothing (skipped due to action :nothing)
     (up to date)
Recipe: postgresql::enable
  * directory[/var/opt/gitlab/postgresql] action create (up to date)
  * directory[/var/opt/gitlab/postgresql/data] action create (up to date)
  * directory[/var/log/gitlab/postgresql] action create (up to date)
  * directory[/var/opt/gitlab/postgresql/data] action create (up to date)
  * execute[/opt/gitlab/embedded/bin/initdb -D /var/opt/gitlab/postgresql/data -E UTF8] action run (skipped due to not_if)
  * file[/var/opt/gitlab/postgresql/data/server.crt] action create[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.crt] created file /var/opt/gitlab/postgresql/data/server.crt

    - create new file /var/opt/gitlab/postgresql/data/server.crt[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.crt] updated file contents /var/opt/gitlab/postgresql/data/server.crt

    - update content in file /var/opt/gitlab/postgresql/data/server.crt from none to 8abb17
    - suppressed sensitive resource[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.crt] owner changed to 995
[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.crt] group changed to 991
[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.crt] mode changed to 400

    - change mode from '' to '0400'
    - change owner from '' to 'gitlab-psql'
    - change group from '' to 'gitlab-psql'
    - restore selinux security context
  * file[/var/opt/gitlab/postgresql/data/server.key] action create[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.key] created file /var/opt/gitlab/postgresql/data/server.key

    - create new file /var/opt/gitlab/postgresql/data/server.key[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.key] updated file contents /var/opt/gitlab/postgresql/data/server.key

    - update content in file /var/opt/gitlab/postgresql/data/server.key from none to 955bdf
    - suppressed sensitive resource[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.key] owner changed to 995
[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.key] group changed to 991
[2023-06-16T13:07:01-04:00] INFO: file[/var/opt/gitlab/postgresql/data/server.key] mode changed to 400

    - change mode from '' to '0400'
    - change owner from '' to 'gitlab-psql'
    - change group from '' to 'gitlab-psql'
    - restore selinux security context
  * postgresql_config[gitlab] action create
    * template[/var/opt/gitlab/postgresql/data/postgresql.conf] action create[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/postgresql.conf] backed up to /opt/gitlab/embedded/cookbooks/cache/backup/var/opt/gitlab/postgresql/data/postgresql.conf.chef-20230616130701.423864
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/postgresql.conf] removed backup at /opt/gitlab/embedded/cookbooks/cache/backup/var/opt/gitlab/postgresql/data/postgresql.conf.chef-20230201145040.004375
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/postgresql.conf] updated file contents /var/opt/gitlab/postgresql/data/postgresql.conf

      - update content in file /var/opt/gitlab/postgresql/data/postgresql.conf from 083f8d to 760a01
      --- /var/opt/gitlab/postgresql/data/postgresql.conf	2023-06-16 13:06:50.712624089 -0400
      +++ /var/opt/gitlab/postgresql/data/.chef-postgresql20230616-26810-ecaujr.conf	2023-06-16 13:07:01.314640293 -0400
      @@ -1,3 +1,7 @@
      +# This file is managed by gitlab-ctl. Manual changes will be
      +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
      +# and run `sudo gitlab-ctl reconfigure`.
      +
       # -----------------------------
       # PostgreSQL configuration file
       # -----------------------------
      @@ -16,19 +20,18 @@
       #
       # This file is read on server startup and when the server receives a SIGHUP
       # signal.  If you edit the file on a running system, you have to SIGHUP the
      -# server for the changes to take effect, run "pg_ctl reload", or execute
      -# "SELECT pg_reload_conf()".  Some parameters, which are marked below,
      -# require a server shutdown and restart to take effect.
      +# server for the changes to take effect, or use "pg_ctl reload".  Some
      +# parameters, which are marked below, require a server shutdown and restart to
      +# take effect.
       #
       # Any parameter can also be given as a command-line option to the server, e.g.,
       # "postgres -c log_connections=on".  Some parameters can be changed at run time
       # with the "SET" SQL command.
       #
      -# Memory units:  B  = bytes            Time units:  us  = microseconds
      -#                kB = kilobytes                     ms  = milliseconds
      +# Memory units:  kB = kilobytes        Time units:  ms  = milliseconds
       #                MB = megabytes                     s   = seconds
       #                GB = gigabytes                     min = minutes
      -#                TB = terabytes                     h   = hours
      +#                                                   h   = hours
       #                                                   d   = days
       
       
      @@ -39,16 +42,16 @@
       # The default values of these variables are driven from the -D command-line
       # option or PGDATA environment variable, represented here as ConfigDir.
       
      -#data_directory = 'ConfigDir'		# use data in another directory
      -					# (change requires restart)
      -#hba_file = 'ConfigDir/pg_hba.conf'	# host-based authentication file
      -					# (change requires restart)
      -#ident_file = 'ConfigDir/pg_ident.conf'	# ident configuration file
      -					# (change requires restart)
      +#data_directory = 'ConfigDir'   # use data in another directory
      +          # (change requires restart)
      +#hba_file = 'ConfigDir/pg_hba.conf' # host-based authentication file
      +          # (change requires restart)
      +#ident_file = 'ConfigDir/pg_ident.conf' # ident configuration file
      +          # (change requires restart)
       
       # If external_pid_file is not explicitly set, no extra PID file is written.
      -#external_pid_file = ''			# write an extra PID file
      -					# (change requires restart)
      +#external_pid_file = '(none)'   # write an extra PID file
      +          # (change requires restart)
       
       
       #------------------------------------------------------------------------------
      @@ -57,60 +60,57 @@
       
       # - Connection Settings -
       
      -#listen_addresses = 'localhost'		# what IP address(es) to listen on;
      -					# comma-separated list of addresses;
      -					# defaults to 'localhost'; use '*' for all
      -					# (change requires restart)
      -#port = 5432				# (change requires restart)
      -max_connections = 100			# (change requires restart)
      -#superuser_reserved_connections = 3	# (change requires restart)
      -#unix_socket_directories = '/tmp'	# comma-separated list of directories
      -					# (change requires restart)
      -#unix_socket_group = ''			# (change requires restart)
      -#unix_socket_permissions = 0777		# begin with 0 to use octal notation
      -					# (change requires restart)
      -#bonjour = off				# advertise server via Bonjour
      -					# (change requires restart)
      -#bonjour_name = ''			# defaults to the computer name
      -					# (change requires restart)
      +listen_addresses = ''    # what IP address(es) to listen on;
      +          # comma-separated list of addresses;
      +          # defaults to 'localhost', '*' = all
      +          # (change requires restart)
      +port = 5432        # (change requires restart)
      +max_connections = 400      # (change requires restart)
      +# Note:  Increasing max_connections costs ~400 bytes of shared memory per
      +# connection slot, plus lock space (see max_locks_per_transaction).
      +#superuser_reserved_connections = 3 # (change requires restart)
      +unix_socket_directories = '/var/opt/gitlab/postgresql'   # (change requires restart)
      +#unix_socket_group = ''     # (change requires restart)
      +#unix_socket_permissions = 0777   # begin with 0 to use octal notation
      +          # (change requires restart)
      +#bonjour = off        # advertise server via Bonjour
      +          # (change requires restart)
      +#bonjour_name = ''      # defaults to the computer name
      +          # (change requires restart)
       
      -# - TCP settings -
      -# see "man tcp" for details
      +# - Security and Authentication -
       
      -#tcp_keepalives_idle = 0		# TCP_KEEPIDLE, in seconds;
      -					# 0 selects the system default
      -#tcp_keepalives_interval = 0		# TCP_KEEPINTVL, in seconds;
      -					# 0 selects the system default
      -#tcp_keepalives_count = 0		# TCP_KEEPCNT;
      -					# 0 selects the system default
      -#tcp_user_timeout = 0			# TCP_USER_TIMEOUT, in milliseconds;
      -					# 0 selects the system default
      +#authentication_timeout = 1min    # 1s-600s
       
      -# - Authentication -
      +# change requires restart
      +ssl = on
       
      -#authentication_timeout = 1min		# 1s-600s
      -#password_encryption = md5		# md5 or scram-sha-256
      +# allowed SSL ciphers
      +ssl_ciphers = 'HIGH:MEDIUM:+3DES:!aNULL:!SSLv3:!TLSv1'
      +
      +ssl_cert_file = 'server.crt'
      +ssl_key_file = 'server.key'
      +ssl_ca_file = '/opt/gitlab/embedded/ssl/certs/cacert.pem'
      +
      +
      +#ssl_renegotiation_limit = 512MB  # amount of data between renegotiations
      +#password_encryption = on
       #db_user_namespace = off
       
      -# GSSAPI using Kerberos
      -#krb_server_keyfile = 'FILE:${sysconfdir}/krb5.keytab'
      +# Kerberos and GSSAPI
      +#krb_server_keyfile = ''
      +#krb_srvname = 'postgres'   # (Kerberos only)
       #krb_caseins_users = off
       
      -# - SSL -
      +# - TCP Keepalives -
      +# see "man 7 tcp" for details
       
      -#ssl = off
      -#ssl_ca_file = ''
      -#ssl_cert_file = 'server.crt'
      -#ssl_crl_file = ''
      -#ssl_key_file = 'server.key'
      -#ssl_ciphers = 'HIGH:MEDIUM:+3DES:!aNULL' # allowed SSL ciphers
      -#ssl_prefer_server_ciphers = on
      -#ssl_ecdh_curve = 'prime256v1'
      -#ssl_min_protocol_version = 'TLSv1.2'
      -#ssl_max_protocol_version = ''
      -#ssl_dh_params_file = ''
      -#ssl_passphrase_command = ''
      -#ssl_passphrase_command_supports_reload = off
      +#tcp_keepalives_idle = 0    # TCP_KEEPIDLE, in seconds;
      +          # 0 selects the system default
      +#tcp_keepalives_interval = 0    # TCP_KEEPINTVL, in seconds;
      +          # 0 selects the system default
      +#tcp_keepalives_count = 0   # TCP_KEEPCNT;
      +          # 0 selects the system default
       
       
       #------------------------------------------------------------------------------
      @@ -119,233 +119,105 @@
       
       # - Memory -
       
      -shared_buffers = 128MB			# min 128kB
      -					# (change requires restart)
      -#huge_pages = try			# on, off, or try
      -					# (change requires restart)
      -#temp_buffers = 8MB			# min 800kB
      -#max_prepared_transactions = 0		# zero disables the feature
      -					# (change requires restart)
      -# Caution: it is not advisable to set max_prepared_transactions nonzero unless
      -# you actively intend to use prepared transactions.
      -#work_mem = 4MB				# min 64kB
      -#hash_mem_multiplier = 1.0		# 1-1000.0 multiplier on hash table work_mem
      -#maintenance_work_mem = 64MB		# min 1MB
      -#autovacuum_work_mem = -1		# min 1MB, or -1 to use maintenance_work_mem
      -#logical_decoding_work_mem = 64MB	# min 64kB
      -#max_stack_depth = 2MB			# min 100kB
      -#shared_memory_type = mmap		# the default is the first option
      -					# supported by the operating system:
      -					#   mmap
      -					#   sysv
      -					#   windows
      -					# (change requires restart)
      -dynamic_shared_memory_type = posix	# the default is the first option
      -					# supported by the operating system:
      -					#   posix
      -					#   sysv
      -					#   windows
      -					#   mmap
      -					# (change requires restart)
      +shared_buffers = 1929MB # min 128kB
      +          # (change requires restart)
      +#temp_buffers = 8MB     # min 800kB
      +#max_prepared_transactions = 0    # zero disables the feature
      +          # (change requires restart)
      +# Note:  Increasing max_prepared_transactions costs ~600 bytes of shared memory
      +# per transaction slot, plus lock space (see max_locks_per_transaction).
      +# It is not advisable to set max_prepared_transactions nonzero unless you
      +# actively intend to use prepared transactions.
      +#max_stack_depth = 2MB      # min 100kB
       
      -# - Disk -
      +# - Kernel Resource Usage -
       
      -#temp_file_limit = -1			# limits per-process temp file space
      -					# in kilobytes, or -1 for no limit
      +#max_files_per_process = 1000   # min 25
      +          # (change requires restart)
      +shared_preload_libraries = ''    # (change requires restart)
       
      -# - Kernel Resources -
      -
      -#max_files_per_process = 1000		# min 64
      -					# (change requires restart)
      -
       # - Cost-Based Vacuum Delay -
       
      -#vacuum_cost_delay = 0			# 0-100 milliseconds (0 disables)
      -#vacuum_cost_page_hit = 1		# 0-10000 credits
      -#vacuum_cost_page_miss = 10		# 0-10000 credits
      -#vacuum_cost_page_dirty = 20		# 0-10000 credits
      -#vacuum_cost_limit = 200		# 1-10000 credits
      +#vacuum_cost_delay = 0ms    # 0-100 milliseconds
      +#vacuum_cost_page_hit = 1   # 0-10000 credits
      +#vacuum_cost_page_miss = 10   # 0-10000 credits
      +#vacuum_cost_page_dirty = 20    # 0-10000 credits
      +#vacuum_cost_limit = 200    # 1-10000 credits
       
       # - Background Writer -
       
      -#bgwriter_delay = 200ms			# 10-10000ms between rounds
      -#bgwriter_lru_maxpages = 100		# max buffers written/round, 0 disables
      -#bgwriter_lru_multiplier = 2.0		# 0-10.0 multiplier on buffers scanned/round
      -#bgwriter_flush_after = 512kB		# measured in pages, 0 disables
      +#bgwriter_delay = 200ms     # 10-10000ms between rounds
      +#bgwriter_lru_maxpages = 100    # 0-1000 max buffers written/round
      +#bgwriter_lru_multiplier = 2.0    # 0-10.0 multipler on buffers scanned/round
       
       # - Asynchronous Behavior -
       
      -#effective_io_concurrency = 1		# 1-1000; 0 disables prefetching
      -#maintenance_io_concurrency = 10	# 1-1000; 0 disables prefetching
      -#max_worker_processes = 8		# (change requires restart)
      -#max_parallel_maintenance_workers = 2	# taken from max_parallel_workers
      -#max_parallel_workers_per_gather = 2	# taken from max_parallel_workers
      -#parallel_leader_participation = on
      -#max_parallel_workers = 8		# maximum number of max_worker_processes that
      -					# can be used in parallel operations
      -#old_snapshot_threshold = -1		# 1min-60d; -1 disables; 0 is immediate
      -					# (change requires restart)
      -#backend_flush_after = 0		# measured in pages, 0 disables
      +#effective_io_concurrency = 1   # 1-1000. 0 disables prefetching
       
       
       #------------------------------------------------------------------------------
      -# WRITE-AHEAD LOG
      +# WRITE AHEAD LOG
       #------------------------------------------------------------------------------
       
       # - Settings -
       
      -#wal_level = replica			# minimal, replica, or logical
      -					# (change requires restart)
      -#fsync = on				# flush data to disk for crash safety
      -					# (turning this off can cause
      -					# unrecoverable data corruption)
      -#synchronous_commit = on		# synchronization level;
      -					# off, local, remote_write, remote_apply, or on
      -#wal_sync_method = fsync		# the default is the first option
      -					# supported by the operating system:
      -					#   open_datasync
      -					#   fdatasync (default on Linux and FreeBSD)
      -					#   fsync
      -					#   fsync_writethrough
      -					#   open_sync
      -#full_page_writes = on			# recover from partial page writes
      -#wal_compression = off			# enable compression of full-page writes
      -#wal_log_hints = off			# also do full page writes of non-critical updates
      -					# (change requires restart)
      -#wal_init_zero = on			# zero-fill new WAL files
      -#wal_recycle = on			# recycle WAL files
      -#wal_buffers = -1			# min 32kB, -1 sets based on shared_buffers
      -					# (change requires restart)
      -#wal_writer_delay = 200ms		# 1-10000 milliseconds
      -#wal_writer_flush_after = 1MB		# measured in pages, 0 disables
      -#wal_skip_threshold = 2MB
      +wal_level = minimal
      +wal_log_hints = off      # also do full page writes of non-critical updates
      +          # (change requires restart)
      +#fsync = on       # turns forced synchronization on or off
      +#wal_sync_method = fsync    # the default is the first option
      +          # supported by the operating system:
      +          #   open_datasync
      +          #   fdatasync (default on Linux)
      +          #   fsync
      +          #   fsync_writethrough
      +          #   open_sync
      +#full_page_writes = on      # recover from partial page writes
      +wal_buffers = -1 # -1     # min 32kB, -1 sets based on shared_buffers
      +          # (change requires restart)
      +#wal_writer_delay = 200ms   # 1-10000 milliseconds
       
      -#commit_delay = 0			# range 0-100000, in microseconds
      -#commit_siblings = 5			# range 1-1000
      +#commit_delay = 0     # range 0-100000, in microseconds
      +#commit_siblings = 5      # range 1-1000
       
      -# - Checkpoints -
      -
      -#checkpoint_timeout = 5min		# range 30s-1d
      -max_wal_size = 1GB
       min_wal_size = 80MB
      -#checkpoint_completion_target = 0.5	# checkpoint target duration, 0.0 - 1.0
      -#checkpoint_flush_after = 256kB		# measured in pages, 0 disables
      -#checkpoint_warning = 30s		# 0 disables
      +max_wal_size = 1GB
       
      -# - Archiving -
      +# The number of replication slots to reserve.
      +max_replication_slots = 0
       
      -#archive_mode = off		# enables archiving; off, on, or always
      -				# (change requires restart)
      -#archive_command = ''		# command to use to archive a logfile segment
      -				# placeholders: %p = path of file to archive
      -				#               %f = file name only
      -				# e.g. 'test ! -f /mnt/server/archivedir/%f && cp %p /mnt/server/archivedir/%f'
      -#archive_timeout = 0		# force a logfile segment switch after this
      -				# number of seconds; 0 disables
       
      -# - Archive Recovery -
      +# - Archiving -
       
      -# These are only used in recovery mode.
      +archive_mode = off   # allows archiving to be done
      +        # (change requires restart, also requires 'wal_level' of 'hot_standby' OR 'replica')
       
      -#restore_command = ''		# command to use to restore an archived logfile segment
      -				# placeholders: %p = path of file to restore
      -				#               %f = file name only
      -				# e.g. 'cp /mnt/server/archivedir/%f %p'
      -				# (change requires restart)
      -#archive_cleanup_command = ''	# command to execute at every restartpoint
      -#recovery_end_command = ''	# command to execute at completion of recovery
      -
      -# - Recovery Target -
      -
      -# Set these only when performing a targeted recovery.
      -
      -#recovery_target = ''		# 'immediate' to end recovery as soon as a
      -                                # consistent state is reached
      -				# (change requires restart)
      -#recovery_target_name = ''	# the named restore point to which recovery will proceed
      -				# (change requires restart)
      -#recovery_target_time = ''	# the time stamp up to which recovery will proceed
      -				# (change requires restart)
      -#recovery_target_xid = ''	# the transaction ID up to which recovery will proceed
      -				# (change requires restart)
      -#recovery_target_lsn = ''	# the WAL LSN up to which recovery will proceed
      -				# (change requires restart)
      -#recovery_target_inclusive = on # Specifies whether to stop:
      -				# just after the specified recovery target (on)
      -				# just before the recovery target (off)
      -				# (change requires restart)
      -#recovery_target_timeline = 'latest'	# 'current', 'latest', or timeline ID
      -				# (change requires restart)
      -#recovery_target_action = 'pause'	# 'pause', 'promote', 'shutdown'
      -				# (change requires restart)
      -
      -
       #------------------------------------------------------------------------------
       # REPLICATION
       #------------------------------------------------------------------------------
       
      -# - Sending Servers -
      -
      -# Set these on the master and on any standby that will send replication data.
      -
      -#max_wal_senders = 10		# max number of walsender processes
      -				# (change requires restart)
      -#wal_keep_size = 0		# in megabytes; 0 disables
      -#max_slot_wal_keep_size = -1	# in megabytes; -1 disables
      -#wal_sender_timeout = 60s	# in milliseconds; 0 disables
      -
      -#max_replication_slots = 10	# max number of replication slots
      -				# (change requires restart)
      -#track_commit_timestamp = off	# collect timestamp of transaction commit
      -				# (change requires restart)
      -
       # - Master Server -
       
      -# These settings are ignored on a standby server.
      +# These settings are ignored on a standby server
       
      -#synchronous_standby_names = ''	# standby servers that provide sync rep
      -				# method to choose sync standbys, number of sync standbys,
      -				# and comma-separated list of application_name
      -				# from standby(s); '*' = all
      -#vacuum_defer_cleanup_age = 0	# number of xacts by which cleanup is delayed
      +max_wal_senders = 0
      +        # (change requires restart)
      +#wal_sender_delay = 1s    # walsender cycle time, 1-10000 milliseconds
      +#vacuum_defer_cleanup_age = 0 # number of xacts by which cleanup is delayed
      +#replication_timeout = 60s  # in milliseconds; 0 disables
      +#synchronous_standby_names = '' # standby servers that provide sync rep
      +        # comma-separated list of application_name
      +        # from standby(s); '*' = all
       
       # - Standby Servers -
       
      -# These settings are ignored on a master server.
      +# These settings are ignored on a master server
       
      -#primary_conninfo = ''			# connection string to sending server
      -#primary_slot_name = ''			# replication slot on sending server
      -#promote_trigger_file = ''		# file name whose presence ends recovery
      -#hot_standby = on			# "off" disallows queries during recovery
      -					# (change requires restart)
      -#max_standby_archive_delay = 30s	# max delay before canceling queries
      -					# when reading WAL from archive;
      -					# -1 allows indefinite delay
      -#max_standby_streaming_delay = 30s	# max delay before canceling queries
      -					# when reading streaming WAL;
      -					# -1 allows indefinite delay
      -#wal_receiver_create_temp_slot = off	# create temp slot if primary_slot_name
      -					# is not set
      -#wal_receiver_status_interval = 10s	# send replies at least this often
      -					# 0 disables
      -#hot_standby_feedback = off		# send info from standby to prevent
      -					# query conflicts
      -#wal_receiver_timeout = 60s		# time that receiver waits for
      -					# communication from master
      -					# in milliseconds; 0 disables
      -#wal_retrieve_retry_interval = 5s	# time to wait before retrying to
      -					# retrieve WAL after a failed attempt
      -#recovery_min_apply_delay = 0		# minimum delay for applying changes during recovery
      +hot_standby = off
      +          # (change requires restart)
      +#wal_receiver_status_interval = 10s # send replies at least this often
      +          # 0 disables
       
      -# - Subscribers -
      -
      -# These settings are ignored on a publisher.
      -
      -#max_logical_replication_workers = 4	# taken from max_worker_processes
      -					# (change requires restart)
      -#max_sync_workers_per_subscription = 2	# taken from max_logical_replication_workers
      -
      -
       #------------------------------------------------------------------------------
       # QUERY TUNING
       #------------------------------------------------------------------------------
      @@ -356,237 +228,126 @@
       #enable_hashagg = on
       #enable_hashjoin = on
       #enable_indexscan = on
      -#enable_indexonlyscan = on
       #enable_material = on
       #enable_mergejoin = on
       #enable_nestloop = on
      -#enable_parallel_append = on
       #enable_seqscan = on
       #enable_sort = on
      -#enable_incremental_sort = on
       #enable_tidscan = on
      -#enable_partitionwise_join = off
      -#enable_partitionwise_aggregate = off
      -#enable_parallel_hash = on
      -#enable_partition_pruning = on
       
       # - Planner Cost Constants -
       
      -#seq_page_cost = 1.0			# measured on an arbitrary scale
      -#random_page_cost = 4.0			# same scale as above
      -#cpu_tuple_cost = 0.01			# same scale as above
      -#cpu_index_tuple_cost = 0.005		# same scale as above
      -#cpu_operator_cost = 0.0025		# same scale as above
      -#parallel_tuple_cost = 0.1		# same scale as above
      -#parallel_setup_cost = 1000.0	# same scale as above
      +#cpu_tuple_cost = 0.01      # same scale as above
      +#cpu_index_tuple_cost = 0.005   # same scale as above
      +#cpu_operator_cost = 0.0025   # same scale as above
       
      -#jit_above_cost = 100000		# perform JIT compilation if available
      -					# and query more expensive than this;
      -					# -1 disables
      -#jit_inline_above_cost = 500000		# inline small functions if query is
      -					# more expensive than this; -1 disables
      -#jit_optimize_above_cost = 500000	# use expensive JIT optimizations if
      -					# query is more expensive than this;
      -					# -1 disables
      -
      -#min_parallel_table_scan_size = 8MB
      -#min_parallel_index_scan_size = 512kB
      -#effective_cache_size = 4GB
      -
       # - Genetic Query Optimizer -
       
       #geqo = on
       #geqo_threshold = 12
      -#geqo_effort = 5			# range 1-10
      -#geqo_pool_size = 0			# selects default based on effort
      -#geqo_generations = 0			# selects default based on effort
      -#geqo_selection_bias = 2.0		# range 1.5-2.0
      -#geqo_seed = 0.0			# range 0.0-1.0
      +#geqo_effort = 5      # range 1-10
      +#geqo_pool_size = 0     # selects default based on effort
      +#geqo_generations = 0     # selects default based on effort
      +#geqo_selection_bias = 2.0    # range 1.5-2.0
      +#geqo_seed = 0.0      # range 0.0-1.0
       
       # - Other Planner Options -
       
      -#default_statistics_target = 100	# range 1-10000
      -#constraint_exclusion = partition	# on, off, or partition
      -#cursor_tuple_fraction = 0.1		# range 0.0-1.0
      +#default_statistics_target = 100  # range 1-10000
      +#constraint_exclusion = partition # on, off, or partition
      +#cursor_tuple_fraction = 0.1    # range 0.0-1.0
       #from_collapse_limit = 8
      -#join_collapse_limit = 8		# 1 disables collapsing of explicit
      -					# JOIN clauses
      -#force_parallel_mode = off
      -#jit = on				# allow JIT compilation
      -#plan_cache_mode = auto			# auto, force_generic_plan or
      -					# force_custom_plan
      +#join_collapse_limit = 8    # 1 disables collapsing of explicit
      +          # JOIN clauses
       
       
       #------------------------------------------------------------------------------
      -# REPORTING AND LOGGING
      +# ERROR REPORTING AND LOGGING
       #------------------------------------------------------------------------------
       
      -# - Where to Log -
       
      -#log_destination = 'stderr'		# Valid values are combinations of
      -					# stderr, csvlog, syslog, and eventlog,
      -					# depending on platform.  csvlog
      -					# requires logging_collector to be on.
      -
      -# This is used when logging to stderr:
      -#logging_collector = off		# Enable capturing of stderr and csvlog
      -					# into log files. Required to be on for
      -					# csvlogs.
      -					# (change requires restart)
      -
      -# These are only used if logging_collector is on:
      -#log_directory = 'log'			# directory where log files are written,
      -					# can be absolute or relative to PGDATA
      -#log_filename = 'postgresql-%Y-%m-%d_%H%M%S.log'	# log file name pattern,
      -					# can include strftime() escapes
      -#log_file_mode = 0600			# creation mode for log files,
      -					# begin with 0 to use octal notation
      -#log_truncate_on_rotation = off		# If on, an existing log file with the
      -					# same name as the new log file will be
      -					# truncated rather than appended to.
      -					# But such truncation only occurs on
      -					# time-driven rotation, not on restarts
      -					# or size-driven rotation.  Default is
      -					# off, meaning append to existing files
      -					# in all cases.
      -#log_rotation_age = 1d			# Automatic rotation of logfiles will
      -					# happen after that time.  0 disables.
      -#log_rotation_size = 10MB		# Automatic rotation of logfiles will
      -					# happen after that much log output.
      -					# 0 disables.
      -
       # These are relevant when logging to syslog:
       #syslog_facility = 'LOCAL0'
       #syslog_ident = 'postgres'
      -#syslog_sequence_numbers = on
      -#syslog_split_messages = on
       
      -# This is only relevant when logging to eventlog (win32):
      -# (change requires restart)
      -#event_source = 'PostgreSQL'
      +#silent_mode = off      # Run server silently.
      +          # DO NOT USE without syslog or
      +          # logging_collector
      +          # (change requires restart)
       
      +
       # - When to Log -
       
      -#log_min_messages = warning		# values in order of decreasing detail:
      -					#   debug5
      -					#   debug4
      -					#   debug3
      -					#   debug2
      -					#   debug1
      -					#   info
      -					#   notice
      -					#   warning
      -					#   error
      -					#   log
      -					#   fatal
      -					#   panic
      +#client_min_messages = notice   # values in order of decreasing detail:
      +          #   debug5
      +          #   debug4
      +          #   debug3
      +          #   debug2
      +          #   debug1
      +          #   log
      +          #   notice
      +          #   warning
      +          #   error
       
      -#log_min_error_statement = error	# values in order of decreasing detail:
      -					#   debug5
      -					#   debug4
      -					#   debug3
      -					#   debug2
      -					#   debug1
      -					#   info
      -					#   notice
      -					#   warning
      -					#   error
      -					#   log
      -					#   fatal
      -					#   panic (effectively off)
      +#log_min_messages = warning   # values in order of decreasing detail:
      +          #   debug5
      +          #   debug4
      +          #   debug3
      +          #   debug2
      +          #   debug1
      +          #   info
      +          #   notice
      +          #   warning
      +          #   error
      +          #   log
      +          #   fatal
      +          #   panic
       
      -#log_min_duration_statement = -1	# -1 is disabled, 0 logs all statements
      -					# and their durations, > 0 logs only
      -					# statements running at least this number
      -					# of milliseconds
      +#log_min_error_statement = error  # values in order of decreasing detail:
      +          #   debug5
      +          #   debug4
      +          #   debug3
      +          #   debug2
      +          #   debug1
      +          #   info
      +          #   notice
      +          #   warning
      +          #   error
      +          #   log
      +          #   fatal
      +          #   panic (effectively off)
       
      -#log_min_duration_sample = -1		# -1 is disabled, 0 logs a sample of statements
      -					# and their durations, > 0 logs only a sample of
      -					# statements running at least this number
      -					# of milliseconds;
      -					# sample fraction is determined by log_statement_sample_rate
      -
      -#log_statement_sample_rate = 1.0	# fraction of logged statements exceeding
      -					# log_min_duration_sample to be logged;
      -					# 1.0 logs all such statements, 0.0 never logs
      -
      -
      -#log_transaction_sample_rate = 0.0	# fraction of transactions whose statements
      -					# are logged regardless of their duration; 1.0 logs all
      -					# statements from all transactions, 0.0 never logs
      -
       # - What to Log -
       
       #debug_print_parse = off
       #debug_print_rewritten = off
       #debug_print_plan = off
       #debug_pretty_print = on
      -#log_checkpoints = off
       #log_connections = off
       #log_disconnections = off
       #log_duration = off
      -#log_error_verbosity = default		# terse, default, or verbose messages
      +#log_error_verbosity = default    # terse, default, or verbose messages
       #log_hostname = off
      -#log_line_prefix = '%m [%p] '		# special values:
      -					#   %a = application name
      -					#   %u = user name
      -					#   %d = database name
      -					#   %r = remote host and port
      -					#   %h = remote host
      -					#   %b = backend type
      -					#   %p = process ID
      -					#   %t = timestamp without milliseconds
      -					#   %m = timestamp with milliseconds
      -					#   %n = timestamp with milliseconds (as a Unix epoch)
      -					#   %i = command tag
      -					#   %e = SQL state
      -					#   %c = session ID
      -					#   %l = session line number
      -					#   %s = session start timestamp
      -					#   %v = virtual transaction ID
      -					#   %x = transaction ID (0 if none)
      -					#   %q = stop here in non-session
      -					#        processes
      -					#   %% = '%'
      -					# e.g. '<%u%%%d> '
      -#log_lock_waits = off			# log lock waits >= deadlock_timeout
      -#log_parameter_max_length = -1		# when logging statements, limit logged
      -					# bind-parameter values to N bytes;
      -					# -1 means print in full, 0 disables
      -#log_parameter_max_length_on_error = 0	# when logging an error, limit logged
      -					# bind-parameter values to N bytes;
      -					# -1 means print in full, 0 disables
      -#log_statement = 'none'			# none, ddl, mod, all
      -#log_replication_commands = off
      -#log_temp_files = -1			# log temporary files equal or larger
      -					# than the specified size in kilobytes;
      -					# -1 disables, 0 logs all temp files
      -log_timezone = 'America/New_York'
      +#log_lock_waits = off     # log lock waits >= deadlock_timeout
      +#log_statement = 'none'     # none, ddl, mod, all
      +#log_timezone = '(defaults to server environment setting)'
       
      -#------------------------------------------------------------------------------
      -# PROCESS TITLE
      -#------------------------------------------------------------------------------
       
      -#cluster_name = ''			# added to process titles if nonempty
      -					# (change requires restart)
      -#update_process_title = on
      -
      -
       #------------------------------------------------------------------------------
      -# STATISTICS
      +# RUNTIME STATISTICS
       #------------------------------------------------------------------------------
       
      -# - Query and Index Statistics Collector -
      +# - Query/Index Statistics Collector -
       
       #track_activities = on
       #track_counts = on
      -#track_io_timing = off
      -#track_functions = none			# none, pl, all
      -#track_activity_query_size = 1024	# (change requires restart)
      +#track_functions = none     # none, pl, all
      +track_activity_query_size = 1024 # (change requires restart)
      +#update_process_title = on
       #stats_temp_directory = 'pg_stat_tmp'
       
       
      -# - Monitoring -
      +# - Statistics Monitoring -
       
       #log_parser_stats = off
       #log_planner_stats = off
      @@ -595,122 +356,53 @@
       
       
       #------------------------------------------------------------------------------
      -# AUTOVACUUM
      +# AUTOVACUUM PARAMETERS
       #------------------------------------------------------------------------------
       
      -#autovacuum = on			# Enable autovacuum subprocess?  'on'
      -					# requires track_counts to also be on.
      -#log_autovacuum_min_duration = -1	# -1 disables, 0 logs all actions and
      -					# their durations, > 0 logs only
      -					# actions running at least this number
      -					# of milliseconds.
      -#autovacuum_max_workers = 3		# max number of autovacuum subprocesses
      -					# (change requires restart)
      -#autovacuum_naptime = 1min		# time between autovacuum runs
      -#autovacuum_vacuum_threshold = 50	# min number of row updates before
      -					# vacuum
      -#autovacuum_vacuum_insert_threshold = 1000	# min number of row inserts
      -					# before vacuum; -1 disables insert
      -					# vacuums
      -#autovacuum_analyze_threshold = 50	# min number of row updates before
      -					# analyze
      -#autovacuum_vacuum_scale_factor = 0.2	# fraction of table size before vacuum
      -#autovacuum_vacuum_insert_scale_factor = 0.2	# fraction of inserts over table
      -					# size before insert vacuum
      -#autovacuum_analyze_scale_factor = 0.1	# fraction of table size before analyze
      -#autovacuum_freeze_max_age = 200000000	# maximum XID age before forced vacuum
      -					# (change requires restart)
      -#autovacuum_multixact_freeze_max_age = 400000000	# maximum multixact age
      -					# before forced vacuum
      -					# (change requires restart)
      -#autovacuum_vacuum_cost_delay = 2ms	# default vacuum cost delay for
      -					# autovacuum, in milliseconds;
      -					# -1 means use vacuum_cost_delay
      -#autovacuum_vacuum_cost_limit = -1	# default vacuum cost limit for
      -					# autovacuum, -1 means use
      -					# vacuum_cost_limit
      -
      -
      +autovacuum_max_workers = 3 # max number of autovacuum subprocesses
      +          # (change requires restart)
      +autovacuum_freeze_max_age = 200000000  # maximum XID age before forced vacuum
      +          # (change requires restart)
       #------------------------------------------------------------------------------
       # CLIENT CONNECTION DEFAULTS
       #------------------------------------------------------------------------------
       
       # - Statement Behavior -
       
      -#client_min_messages = notice		# values in order of decreasing detail:
      -					#   debug5
      -					#   debug4
      -					#   debug3
      -					#   debug2
      -					#   debug1
      -					#   log
      -					#   notice
      -					#   warning
      -					#   error
      -#search_path = '"$user", public'	# schema names
      -#row_security = on
      -#default_tablespace = ''		# a tablespace name, '' uses the default
      -#temp_tablespaces = ''			# a list of tablespace names, '' uses
      -					# only default tablespace
      -#default_table_access_method = 'heap'
      +#search_path = '"$user",public'   # schema names
      +#default_tablespace = ''    # a tablespace name, '' uses the default
      +#temp_tablespaces = ''      # a list of tablespace names, '' uses
      +          # only default tablespace
       #check_function_bodies = on
       #default_transaction_isolation = 'read committed'
       #default_transaction_read_only = off
       #default_transaction_deferrable = off
       #session_replication_role = 'origin'
      -#statement_timeout = 0			# in milliseconds, 0 is disabled
      -#lock_timeout = 0			# in milliseconds, 0 is disabled
      -#idle_in_transaction_session_timeout = 0	# in milliseconds, 0 is disabled
       #vacuum_freeze_min_age = 50000000
       #vacuum_freeze_table_age = 150000000
      -#vacuum_multixact_freeze_min_age = 5000000
      -#vacuum_multixact_freeze_table_age = 150000000
      -#vacuum_cleanup_index_scale_factor = 0.1	# fraction of total number of tuples
      -						# before index cleanup, 0 always performs
      -						# index cleanup
      -#bytea_output = 'hex'			# hex, escape
      +#bytea_output = 'hex'     # hex, escape
       #xmlbinary = 'base64'
       #xmloption = 'content'
      -#gin_fuzzy_search_limit = 0
      -#gin_pending_list_limit = 4MB
       
       # - Locale and Formatting -
       
      -datestyle = 'iso, mdy'
       #intervalstyle = 'postgres'
      -timezone = 'America/New_York'
      +#timezone = '(defaults to server environment setting)'
       #timezone_abbreviations = 'Default'     # Select the set of available time zone
      -					# abbreviations.  Currently, there are
      -					#   Default
      -					#   Australia (historical usage)
      -					#   India
      -					# You can create your own file in
      -					# share/timezonesets/.
      -#extra_float_digits = 1			# min -15, max 3; any value >0 actually
      -					# selects precise output mode
      -#client_encoding = sql_ascii		# actually, defaults to database
      -					# encoding
      +          # abbreviations.  Currently, there are
      +          #   Default
      +          #   Australia
      +          #   India
      +          # You can create your own file in
      +          # share/timezonesets/.
      +#extra_float_digits = 0     # min -15, max 3
      +#client_encoding = sql_ascii    # actually, defaults to database
      +          # encoding
       
      -# These settings are initialized by initdb, but they can be changed.
      -lc_messages = 'en_US.UTF-8'			# locale for system error message
      -					# strings
      -lc_monetary = 'en_US.UTF-8'			# locale for monetary formatting
      -lc_numeric = 'en_US.UTF-8'			# locale for number formatting
      -lc_time = 'en_US.UTF-8'				# locale for time formatting
      -
      -# default configuration for text search
      -default_text_search_config = 'pg_catalog.english'
      -
      -# - Shared Library Preloading -
      -
      -#shared_preload_libraries = ''	# (change requires restart)
      -#local_preload_libraries = ''
      -#session_preload_libraries = ''
      -#jit_provider = 'llvmjit'		# JIT library to use
      -
       # - Other Defaults -
       
       #dynamic_library_path = '$libdir'
      +#local_preload_libraries = ''
       
       
       #------------------------------------------------------------------------------
      @@ -718,28 +410,27 @@
       #------------------------------------------------------------------------------
       
       #deadlock_timeout = 1s
      -#max_locks_per_transaction = 64		# min 10
      -					# (change requires restart)
      -#max_pred_locks_per_transaction = 64	# min 10
      -					# (change requires restart)
      -#max_pred_locks_per_relation = -2	# negative values mean
      -					# (max_pred_locks_per_transaction
      -					#  / -max_pred_locks_per_relation) - 1
      -#max_pred_locks_per_page = 2            # min 0
      +max_locks_per_transaction = 128   # min 10
      +          # (change requires restart)
      +# Note:  Each lock table slot uses ~270 bytes of shared memory, and there are
      +# max_locks_per_transaction * (max_connections + max_prepared_transactions)
      +# lock table slots.
      +#max_pred_locks_per_transaction = 64  # min 10
      +          # (change requires restart)
       
      -
       #------------------------------------------------------------------------------
      -# VERSION AND PLATFORM COMPATIBILITY
      +# VERSION/PLATFORM COMPATIBILITY
       #------------------------------------------------------------------------------
       
       # - Previous PostgreSQL Versions -
       
       #array_nulls = on
      -#backslash_quote = safe_encoding	# on, off, or safe_encoding
      +#backslash_quote = safe_encoding  # on, off, or safe_encoding
      +#default_with_oids = off
       #escape_string_warning = on
       #lo_compat_privileges = off
      -#operator_precedence_warning = off
       #quote_all_identifiers = off
      +#sql_inheritance = on
       #standard_conforming_strings = on
       #synchronize_seqscans = on
       
      @@ -752,30 +443,15 @@
       # ERROR HANDLING
       #------------------------------------------------------------------------------
       
      -#exit_on_error = off			# terminate session on any error?
      -#restart_after_crash = on		# reinitialize after backend crash?
      -#data_sync_retry = off			# retry or panic on failure to fsync
      -					# data?
      -					# (change requires restart)
      +#exit_on_error = off        # terminate session on any error?
      +#restart_after_crash = on     # reinitialize after backend crash?
       
       
       #------------------------------------------------------------------------------
      -# CONFIG FILE INCLUDES
      -#------------------------------------------------------------------------------
      -
      -# These options allow settings to be loaded from files other than the
      -# default postgresql.conf.  Note that these are directives, not variable
      -# assignments, so they can usefully be given more than once.
      -
      -#include_dir = '...'			# include files ending in '.conf' from
      -					# a directory, e.g., 'conf.d'
      -#include_if_exists = '...'		# include file only if it exists
      -#include = '...'			# include file
      -
      -
      -#------------------------------------------------------------------------------
       # CUSTOMIZED OPTIONS
       #------------------------------------------------------------------------------
       
      -# Add settings for extensions here
      +#custom_variable_classes = ''   # list of custom variable class names
      +
      +include 'runtime.conf'[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/postgresql.conf] mode changed to 644

      - change mode from '0600' to '0644'
      - restore selinux security context
    * template[/var/opt/gitlab/postgresql/data/runtime.conf] action create[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/runtime.conf] created file /var/opt/gitlab/postgresql/data/runtime.conf

      - create new file /var/opt/gitlab/postgresql/data/runtime.conf[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/runtime.conf] updated file contents /var/opt/gitlab/postgresql/data/runtime.conf

      - update content in file /var/opt/gitlab/postgresql/data/runtime.conf from none to fb3315
      --- /var/opt/gitlab/postgresql/data/runtime.conf	2023-06-16 13:07:01.491640563 -0400
      +++ /var/opt/gitlab/postgresql/data/.chef-runtime20230616-26810-rrtx3o.conf	2023-06-16 13:07:01.491640563 -0400
      @@ -1,134 +1,268 @@
      +# This file is managed by gitlab-ctl. Manual changes will be
      +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
      +# and run `sudo gitlab-ctl reconfigure`.
      +
      +# Changing variables in this file should only require a reload of PostgreSQL
      +# As the gitlab-psql user, run:
      +# /opt/gitlab/embedded/bin/pg_ctl reload -D /var/opt/gitlab/postgresql/data
      +work_mem = 16MB				# min 64kB
      +maintenance_work_mem = 16MB # 16MB    # min 1MB
      +synchronous_commit = on # synchronization level; on, off, or local
      +synchronous_standby_names = ''
      +
      +# - Checkpoints -
      +min_wal_size = 80MB
      +max_wal_size = 1GB
      +
      +checkpoint_timeout = 5min		# range 30s-1h, default 5min
      +checkpoint_completion_target = 0.9	# checkpoint target duration, 0.0 - 1.0, default 0.5
      +checkpoint_warning = 30s		# 0 disables, default 30s
      +
      +# - Logging -
      +log_directory = '/var/log/gitlab/postgresql'
      +
      +# - Archiving -
      +archive_command = ''   # command to use to archive a logfile segment
      +archive_timeout = 0    # force a logfile segment switch after this
      +        # number of seconds; 0 disables
      +
      +# - Replication
      +wal_keep_size = 160
      +
      +max_standby_archive_delay = 30s # max delay before canceling queries
      +          # when reading WAL from archive;
      +          # -1 allows indefinite delay
      +max_standby_streaming_delay = 30s # max delay before canceling queries
      +          # when reading streaming WAL;
      +          # -1 allows indefinite delay
      +
      +hot_standby_feedback = off   # send info from standby to prevent
      +          # query conflicts
      +
      +# - Planner Cost Constants -
      +#seq_page_cost = 1.0      # measured on an arbitrary scale
      +random_page_cost = 2.0     # same scale as above
      +
      +effective_cache_size = 3859MB # Default 128MB
      +
      +log_min_duration_statement = -1  # -1 is disabled, 0 logs all statements
      +          # and their durations, > 0 logs only
      +          # statements running at least this number
      +          # of milliseconds
      +
      +log_checkpoints = off
      +
      +log_line_prefix = '' # default '', special values:
      +          #   %a = application name
      +          #   %u = user name
      +          #   %d = database name
      +          #   %r = remote host and port
      +          #   %h = remote host
      +          #   %p = process ID
      +          #   %t = timestamp without milliseconds
      +          #   %m = timestamp with milliseconds
      +          #   %i = command tag
      +          #   %e = SQL state
      +          #   %c = session ID
      +          #   %l = session line number
      +          #   %s = session start timestamp
      +          #   %v = virtual transaction ID
      +          #   %x = transaction ID (0 if none)
      +          #   %q = stop here in non-session
      +          #        processes
      +          #   %% = '%'
      +
      +log_temp_files = -1      # log temporary files equal or larger
      +          # than the specified size in kilobytes;
      +          # -1 disables, 0 logs all temp files
      +
      +
      +# - Autovacuum parameters -
      +autovacuum = on # Enable autovacuum subprocess?  'on'
      +          # requires track_counts to also be on.
      +
      +log_autovacuum_min_duration = -1 # -1 disables, 0 logs all actions and
      +          # their durations, > 0 logs only
      +          # actions running at least this number
      +          # of milliseconds.
      +
      +autovacuum_naptime = 1min # time between autovacuum runs
      +autovacuum_vacuum_threshold = 50 # min number of row updates before
      +          # vacuum
      +autovacuum_analyze_threshold = 50 # min number of row updates before
      +          # analyze
      +autovacuum_vacuum_scale_factor = 0.02 # fraction of table size before vacuum
      +autovacuum_analyze_scale_factor = 0.01 # fraction of table size before analyze
      +autovacuum_vacuum_cost_delay = 20ms # default vacuum cost delay for
      +          # autovacuum, in milliseconds;
      +          # -1 means use vacuum_cost_delay
      +autovacuum_vacuum_cost_limit = -1 # default vacuum cost limit for
      +          # autovacuum, -1 means use
      +          # vacuum_cost_limit
      +
      +# Parameters for gathering statistics
      +default_statistics_target = 1000
      +
      +# - Client connection timeouts
      +statement_timeout = 60000
      +
      +idle_in_transaction_session_timeout = 60000
      +
      +# IO settings
      +effective_io_concurrency = 1
      +track_io_timing = 'off'
      +
      +# Parallel worker settings
      +max_worker_processes = 8
      +max_parallel_workers_per_gather = 0
      +
      +# Deadlock handling and logging
      +deadlock_timeout = '5s'
      +log_lock_waits = 1
      +
      +# - Locale and Formatting -
      +datestyle = 'iso, mdy'
      +
      +# These settings are initialized by initdb, but they can be changed.
      +lc_messages = 'C'     # locale for system error message
      +          # strings
      +lc_monetary = 'C'     # locale for monetary formatting
      +lc_numeric = 'C'      # locale for number formatting
      +lc_time = 'C'       # locale for time formatting
      +
      +# default configuration for text search
      +default_text_search_config = 'pg_catalog.english'[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/runtime.conf] owner changed to 995
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/runtime.conf] mode changed to 644

      - change mode from '' to '0644'
      - change owner from '' to 'gitlab-psql'
      - restore selinux security context
    * template[/var/opt/gitlab/postgresql/data/pg_hba.conf] action create[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_hba.conf] backed up to /opt/gitlab/embedded/cookbooks/cache/backup/var/opt/gitlab/postgresql/data/pg_hba.conf.chef-20230616130701.553128
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_hba.conf] removed backup at /opt/gitlab/embedded/cookbooks/cache/backup/var/opt/gitlab/postgresql/data/pg_hba.conf.chef-20221020104244.076828
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_hba.conf] updated file contents /var/opt/gitlab/postgresql/data/pg_hba.conf

      - update content in file /var/opt/gitlab/postgresql/data/pg_hba.conf from 98c8d4 to 40e348
      --- /var/opt/gitlab/postgresql/data/pg_hba.conf	2023-06-16 13:06:50.712624089 -0400
      +++ /var/opt/gitlab/postgresql/data/.chef-pg_hba20230616-26810-879ce3.conf	2023-06-16 13:07:01.548640650 -0400
      @@ -1,98 +1,74 @@
      +# This file is managed by gitlab-ctl. Manual changes will be
      +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
      +# and run `sudo gitlab-ctl reconfigure`.
      +
       # PostgreSQL Client Authentication Configuration File
       # ===================================================
       #
      -# Refer to the "Client Authentication" section in the PostgreSQL
      -# documentation for a complete description of this file.  A short
      -# synopsis follows.
      +# Refer to the "Client Authentication" section in the
      +# PostgreSQL documentation for a complete description
      +# of this file.  A short synopsis follows.
       #
       # This file controls: which hosts are allowed to connect, how clients
       # are authenticated, which PostgreSQL user names they can use, which
       # databases they can access.  Records take one of these forms:
       #
      -# local         DATABASE  USER  METHOD  [OPTIONS]
      -# host          DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
      -# hostssl       DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
      -# hostnossl     DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
      -# hostgssenc    DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
      -# hostnogssenc  DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
      +# local      DATABASE  USER  METHOD  [OPTION]
      +# host       DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
      +# hostssl    DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
      +# hostnossl  DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
       #
       # (The uppercase items must be replaced by actual values.)
       #
      -# The first field is the connection type: "local" is a Unix-domain
      -# socket, "host" is either a plain or SSL-encrypted TCP/IP socket,
      -# "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a
      -# non-SSL TCP/IP socket.  Similarly, "hostgssenc" uses a
      -# GSSAPI-encrypted TCP/IP socket, while "hostnogssenc" uses a
      -# non-GSSAPI socket.
      +# The first field is the connection type: "local" is a Unix-domain socket,
      +# "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an
      +# SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket.
       #
      -# DATABASE can be "all", "sameuser", "samerole", "replication", a
      -# database name, or a comma-separated list thereof. The "all"
      -# keyword does not match "replication". Access to replication
      -# must be enabled in a separate record (see example below).
      +# DATABASE can be "all", "sameuser", "samerole", a database name, or
      +# a comma-separated list thereof.
       #
      -# USER can be "all", a user name, a group name prefixed with "+", or a
      -# comma-separated list thereof.  In both the DATABASE and USER fields
      -# you can also write a file name prefixed with "@" to include names
      -# from a separate file.
      +# USER can be "all", a user name, a group name prefixed with "+", or
      +# a comma-separated list thereof.  In both the DATABASE and USER fields
      +# you can also write a file name prefixed with "@" to include names from
      +# a separate file.
       #
      -# ADDRESS specifies the set of hosts the record matches.  It can be a
      -# host name, or it is made up of an IP address and a CIDR mask that is
      -# an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that
      -# specifies the number of significant bits in the mask.  A host name
      -# that starts with a dot (.) matches a suffix of the actual host name.
      -# Alternatively, you can write an IP address and netmask in separate
      -# columns to specify the set of hosts.  Instead of a CIDR-address, you
      -# can write "samehost" to match any of the server's own IP addresses,
      -# or "samenet" to match any address in any subnet that the server is
      -# directly connected to.
      +# CIDR-ADDRESS specifies the set of hosts the record matches.
      +# It is made up of an IP address and a CIDR mask that is an integer
      +# (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies
      +# the number of significant bits in the mask.  Alternatively, you can write
      +# an IP address and netmask in separate columns to specify the set of hosts.
       #
      -# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
      -# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".
      -# Note that "password" sends passwords in clear text; "md5" or
      -# "scram-sha-256" are preferred since they send encrypted passwords.
      +# METHOD can be "trust", "reject", "md5", "crypt", "password", "gss", "sspi",
      +# "krb5", "ident", "pam" or "ldap".  Note that "password" sends passwords
      +# in clear text; "md5" is preferred since it sends encrypted passwords.
       #
      -# OPTIONS are a set of options for the authentication in the format
      -# NAME=VALUE.  The available options depend on the different
      -# authentication methods -- refer to the "Client Authentication"
      -# section in the documentation for a list of which options are
      -# available for which authentication methods.
      +# OPTION is the ident map or the name of the PAM service, depending on METHOD.
       #
      -# Database and user names containing spaces, commas, quotes and other
      -# special characters must be quoted.  Quoting one of the keywords
      -# "all", "sameuser", "samerole" or "replication" makes the name lose
      -# its special character, and just match a database or username with
      -# that name.
      +# Database and user names containing spaces, commas, quotes and other special
      +# characters must be quoted. Quoting one of the keywords "all", "sameuser" or
      +# "samerole" makes the name lose its special character, and just match a
      +# database or username with that name.
       #
      -# This file is read on server startup and when the server receives a
      -# SIGHUP signal.  If you edit the file on a running system, you have to
      -# SIGHUP the server for the changes to take effect, run "pg_ctl reload",
      -# or execute "SELECT pg_reload_conf()".
      -#
      +# This file is read on server startup and when the postmaster receives
      +# a SIGHUP signal.  If you edit the file on a running system, you have
      +# to SIGHUP the postmaster for the changes to take effect.  You can use
      +# "pg_ctl reload" to do that.
      +
       # Put your actual configuration here
       # ----------------------------------
       #
       # If you want to allow non-local connections, you need to add more
      -# "host" records.  In that case you will also need to make PostgreSQL
      -# listen on a non-local interface via the listen_addresses
      -# configuration parameter, or via the -i or -h command line switches.
      +# "host" records. In that case you will also need to make PostgreSQL listen
      +# on a non-local interface via the listen_addresses configuration parameter,
      +# or via the -i or -h command line switches.
      +#
       
      -# CAUTION: Configuring the system for local "trust" authentication
      -# allows any local user to connect as any PostgreSQL user, including
      -# the database superuser.  If you do not trust all your local users,
      -# use another authentication method.
       
      +# TYPE  DATABASE    USER        CIDR-ADDRESS          METHOD
       
      -# TYPE  DATABASE        USER            ADDRESS                 METHOD
      -
       # "local" is for Unix domain socket connections only
      -local   all             all                                     trust
      -# IPv4 local connections:
      -host    all             all             127.0.0.1/32            trust
      -# IPv6 local connections:
      -host    all             all             ::1/128                 trust
      -# Allow replication connections from localhost, by a user with the
      -# replication privilege.
      -local   replication     all                                     trust
      -host    replication     all             127.0.0.1/32            trust
      -host    replication     all             ::1/128                 trust
      +local   all         all                               peer map=gitlab
      +
      +
      +[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_hba.conf] mode changed to 644

      - change mode from '0600' to '0644'
      - restore selinux security context
    * template[/var/opt/gitlab/postgresql/data/pg_ident.conf] action create[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_ident.conf] backed up to /opt/gitlab/embedded/cookbooks/cache/backup/var/opt/gitlab/postgresql/data/pg_ident.conf.chef-20230616130701.605314
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_ident.conf] removed backup at /opt/gitlab/embedded/cookbooks/cache/backup/var/opt/gitlab/postgresql/data/pg_ident.conf.chef-20221020104244.141093
[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_ident.conf] updated file contents /var/opt/gitlab/postgresql/data/pg_ident.conf

      - update content in file /var/opt/gitlab/postgresql/data/pg_ident.conf from 297f46 to 5399a1
      --- /var/opt/gitlab/postgresql/data/pg_ident.conf	2023-06-16 13:06:50.713624091 -0400
      +++ /var/opt/gitlab/postgresql/data/.chef-pg_ident20230616-26810-563cmd.conf	2023-06-16 13:07:01.602640733 -0400
      @@ -40,4 +40,8 @@
       # ----------------------------------
       
       # MAPNAME       SYSTEM-USERNAME         PG-USERNAME
      +gitlab  git  gitlab
      +gitlab  mattermost  gitlab_mattermost
      +# Default to a 1-1 mapping between system usernames and Postgres usernames
      +gitlab  /^(.*)$  \1[2023-06-16T13:07:01-04:00] INFO: template[/var/opt/gitlab/postgresql/data/pg_ident.conf] mode changed to 644

      - change mode from '0600' to '0644'
      - restore selinux security context
  
[2023-06-16T13:07:01-04:00] INFO: postgresql_config[gitlab] sending run action to execute[start postgresql] (immediate)
Recipe: postgresql::standalone
  * execute[start postgresql] action run
    [execute] ok: run: postgresql: (pid 26923) 0s
[2023-06-16T13:07:02-04:00] INFO: execute[start postgresql] ran successfully
    - execute /opt/gitlab/bin/gitlab-ctl start postgresql
  * service[postgresql] action nothing (skipped due to action :nothing)
  * runit_service[postgresql] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/postgresql] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/run] action create (up to date)
    * directory[/opt/gitlab/sv/postgresql/log] action create (up to date)
    * directory[/opt/gitlab/sv/postgresql/log/main] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_postgresql] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/postgresql/config] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/postgresql/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for postgresql service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/postgresql/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/postgresql/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/postgresql/control] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/control/t] action create (up to date)
    * link[/opt/gitlab/init/postgresql] action create (up to date)
    * file[/opt/gitlab/sv/postgresql/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/postgresql] action create (up to date)
    * ruby_block[wait for postgresql service socket] action run (skipped due to not_if)
    * directory[/opt/gitlab/service/postgresql/supervise] action create (up to date)
    * directory[/opt/gitlab/service/postgresql/log/supervise] action create (up to date)
    * file[/opt/gitlab/service/postgresql/supervise/ok] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/log/supervise/ok] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/supervise/status] action touch[2023-06-16T13:07:03-04:00] INFO: file[/opt/gitlab/service/postgresql/supervise/status] owner changed to 995
[2023-06-16T13:07:03-04:00] INFO: file[/opt/gitlab/service/postgresql/supervise/status] group changed to 991

      - change owner from 'root' to 'gitlab-psql'
      - change group from 'root' to 'gitlab-psql'
      - restore selinux security context[2023-06-16T13:07:03-04:00] INFO: file[/opt/gitlab/service/postgresql/supervise/status] updated atime and mtime to 2023-06-16 13:07:03 -0400

      - update utime on file /opt/gitlab/service/postgresql/supervise/status
    * file[/opt/gitlab/service/postgresql/log/supervise/status] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/supervise/control] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/log/supervise/control] action touch (skipped due to only_if)
    * file[/var/log/gitlab/postgresql/current] action touch (skipped due to only_if)
  
  * execute[/opt/gitlab/bin/gitlab-ctl start postgresql] action run
    [execute] ok: run: postgresql: (pid 26923) 1s
[2023-06-16T13:07:03-04:00] INFO: execute[/opt/gitlab/bin/gitlab-ctl start postgresql] ran successfully
    - execute /opt/gitlab/bin/gitlab-ctl start postgresql
  * database_objects[postgresql] action create
    * postgresql_user[gitlab] action create
      * execute[create gitlab postgresql user] action run
        [execute] CREATE ROLE
[2023-06-16T13:07:03-04:00] INFO: execute[create gitlab postgresql user] ran successfully
        - execute /opt/gitlab/bin/gitlab-psql -d template1 -c "CREATE USER \"gitlab\""
    
    * postgresql_user[gitlab_replicator] action create
      * execute[create gitlab_replicator postgresql user] action run
        [execute] CREATE ROLE
[2023-06-16T13:07:04-04:00] INFO: execute[create gitlab_replicator postgresql user] ran successfully
        - execute /opt/gitlab/bin/gitlab-psql -d template1 -c "CREATE USER \"gitlab_replicator\""
      * execute[set options for gitlab_replicator postgresql user] action run
        [execute] ALTER ROLE
[2023-06-16T13:07:04-04:00] INFO: execute[set options for gitlab_replicator postgresql user] ran successfully
        - execute /opt/gitlab/bin/gitlab-psql -d template1 -c "ALTER USER \"gitlab_replicator\" replication"
    
    * postgresql_database[gitlabhq_production] action create
      * execute[create database gitlabhq_production] action run[2023-06-16T13:07:04-04:00] INFO: execute[create database gitlabhq_production] ran successfully

        - execute /opt/gitlab/embedded/bin/createdb --port 5432 -h /var/opt/gitlab/postgresql -O gitlab gitlabhq_production
    
    * postgresql_extension[pg_trgm] action enable
      * postgresql_query[enable pg_trgm extension] action run
        * execute[enable pg_trgm extension (postgresql)] action run
          [execute] CREATE EXTENSION
[2023-06-16T13:07:04-04:00] INFO: execute[enable pg_trgm extension (postgresql)] ran successfully
          - execute /opt/gitlab/bin/gitlab-psql -d gitlabhq_production -c "CREATE EXTENSION IF NOT EXISTS pg_trgm"
      
    
    * postgresql_extension[btree_gist] action enable
      * postgresql_query[enable btree_gist extension] action run
        * execute[enable btree_gist extension (postgresql)] action run
          [execute] CREATE EXTENSION
[2023-06-16T13:07:04-04:00] INFO: execute[enable btree_gist extension (postgresql)] ran successfully
          - execute /opt/gitlab/bin/gitlab-psql -d gitlabhq_production -c "CREATE EXTENSION IF NOT EXISTS btree_gist"
      
    
  
  * version_file[Create version file for PostgreSQL] action create
    * file[/var/opt/gitlab/postgresql/VERSION] action create (up to date)
     (up to date)
  * ruby_block[warn pending postgresql restart] action run (skipped due to only_if)
  * execute[reload postgresql] action nothing (skipped due to action :nothing)
  * execute[start postgresql] action nothing (skipped due to action :nothing)
[2023-06-16T13:07:04-04:00] INFO: Cinc Client Run complete in 7.69936755 seconds

Running handlers:
[2023-06-16T13:07:04-04:00] INFO: Running report handlers
Running handlers complete
[2023-06-16T13:07:04-04:00] INFO: Report handlers complete
Infra Phase complete, 25/91 resources updated in 10 seconds
[2023-06-16T13:07:04-04:00] WARN: This release of Cinc Client became end of life (EOL) on May 1st 2023. Please update to a supported release to receive new features, bug fixes, and security updates.
Running restart on postgresql:ok: run: postgresql: (pid 27044) 0s
Running restart on postgresql: OK
Running reconfigure to re-generate any dependent service configuration
Running reconfigure:[2023-06-16T13:07:07-04:00] INFO: Started Cinc Zero at chefzero://localhost:1 with repository at /opt/gitlab/embedded (One version per cookbook)
Cinc Client, version 17.10.0
Patents: https://www.chef.io/patents
Infra Phase starting
[2023-06-16T13:07:07-04:00] INFO: *** Cinc Client 17.10.0 ***
[2023-06-16T13:07:07-04:00] INFO: Platform: x86_64-linux
[2023-06-16T13:07:07-04:00] INFO: Cinc-client pid: 27053
[2023-06-16T13:07:09-04:00] INFO: Setting the run_list to ["recipe[gitlab]"] from CLI options
[2023-06-16T13:07:09-04:00] INFO: Run List is [recipe[gitlab]]
[2023-06-16T13:07:09-04:00] INFO: Run List expands to [gitlab]
[2023-06-16T13:07:09-04:00] INFO: Starting Cinc Client Run for gitlab-eng1.it-prod-mgmt.aws.umd.edu
[2023-06-16T13:07:09-04:00] INFO: Running start handlers
[2023-06-16T13:07:09-04:00] INFO: Start handlers complete.
Resolving cookbooks for run list: ["gitlab"]
[2023-06-16T13:07:10-04:00] INFO: Loading cookbooks [gitlab@0.0.1, package@0.1.0, logrotate@0.1.0, postgresql@0.1.0, redis@0.1.0, monitoring@0.1.0, registry@0.1.0, mattermost@0.1.0, consul@0.1.0, gitaly@0.1.0, praefect@0.1.0, gitlab-kas@0.1.0, gitlab-pages@0.1.0, letsencrypt@0.1.0, nginx@0.1.0, runit@5.1.7, acme@4.1.6, crond@0.1.0]
Synchronizing cookbooks:
  - gitlab (0.0.1)
  - logrotate (0.1.0)
  - postgresql (0.1.0)
  - package (0.1.0)
  - redis (0.1.0)
  - monitoring (0.1.0)
  - registry (0.1.0)
  - mattermost (0.1.0)
  - gitaly (0.1.0)
  - praefect (0.1.0)
  - consul (0.1.0)
  - nginx (0.1.0)
  - runit (5.1.7)
  - crond (0.1.0)
  - gitlab-kas (0.1.0)
  - gitlab-pages (0.1.0)
  - letsencrypt (0.1.0)
  - acme (4.1.6)
Installing cookbook gem dependencies:
Compiling cookbooks...
Top level ::CompositeIO is deprecated, require 'multipart/post' and use `Multipart::Post::CompositeReadIO` instead!
Top level ::Parts is deprecated, require 'multipart/post' and use `Multipart::Post::Parts` instead!
Loading Cinc Auditor profile files:
Loading Cinc Auditor input files:
Loading Cinc Auditor waiver files:
Recipe: gitlab::default
  * directory[/etc/gitlab] action create (up to date)
[2023-06-16T13:07:12-04:00] WARN: Selected systemd because /run/systemd/system/ exists
[2023-06-16T13:07:12-04:00] WARN: logrotate does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: logrotate does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: puma does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitlab-rails does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitlab-shell does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitlab-workhorse does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitlab-pages does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitlab-kas does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitaly does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: mailroom does not have a log_group or default logdir mode defined. Setting to 0700.
[2023-06-16T13:07:12-04:00] WARN: gitaly does not have a log_group or default logdir mode defined. Setting to 0700.
/opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/ohai-17.9.0/lib/ohai/plugins/rpm.rb:25: warning: already initialized constant MACROS_MARKER
/opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/ohai-17.9.0/lib/ohai/plugins/rpm.rb:25: warning: previous definition of MACROS_MARKER was here
/opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/ohai-17.9.0/lib/ohai/plugins/rpm.rb:27: warning: already initialized constant DO_NOT_SPLIT
/opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/ohai-17.9.0/lib/ohai/plugins/rpm.rb:27: warning: previous definition of DO_NOT_SPLIT was here
  Converging 302 resources
  * directory[/etc/gitlab] action create (up to date)
  * directory[Create /var/opt/gitlab] action create (up to date)
  * directory[Create /var/log/gitlab] action create (up to date)
  * directory[/opt/gitlab/embedded/etc] action create (up to date)
  * template[/opt/gitlab/embedded/etc/gitconfig] action create (up to date)
Recipe: gitlab::web-server
  * account[Webserver user and group] action create
    * group[Webserver user and group] action create (up to date)
    * linux_user[Webserver user and group] action create (up to date)
     (up to date)
Recipe: gitlab::users
  * directory[/var/opt/gitlab] action create (up to date)
  * account[GitLab user and group] action create
    * group[GitLab user and group] action create (up to date)
    * linux_user[GitLab user and group] action create (up to date)
     (up to date)
  * template[/var/opt/gitlab/.gitconfig] action create (up to date)
  * directory[/var/opt/gitlab/.bundle] action create (up to date)
Recipe: gitlab::gitlab-rails
  * storage_directory[/var/opt/gitlab/git-data] action create
    * ruby_block[directory resource: /var/opt/gitlab/git-data] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/git-data/repositories] action create
    * ruby_block[directory resource: /var/opt/gitlab/git-data/repositories] action run (skipped due to not_if)
     (up to date)
Recipe: gitlab::rails_pages_shared_path
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/pages] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/pages] action run (skipped due to not_if)
     (up to date)
Recipe: gitlab::gitlab-rails
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/artifacts] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/artifacts] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/external-diffs] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/external-diffs] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/lfs-objects] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/lfs-objects] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/packages] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/packages] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/dependency_proxy] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/dependency_proxy] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/terraform_state] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/terraform_state] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/ci_secure_files] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/ci_secure_files] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/encrypted_settings] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/encrypted_settings] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/uploads] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/uploads] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-ci/builds] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-ci/builds] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/cache] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/cache] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/var/opt/gitlab/gitlab-rails/shared/tmp] action create
    * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/tmp] action run (skipped due to not_if)
     (up to date)
  * storage_directory[/opt/gitlab/embedded/service/gitlab-rails/public] action create (skipped due to only_if)
  * directory[create /var/opt/gitlab/gitlab-rails/etc] action create (up to date)
  * directory[create /opt/gitlab/etc/gitlab-rails] action create (up to date)
  * directory[create /var/opt/gitlab/gitlab-rails/working] action create (up to date)
  * directory[create /var/opt/gitlab/gitlab-rails/tmp] action create (up to date)
  * directory[create /var/opt/gitlab/gitlab-rails/upgrade-status] action create (up to date)
  * directory[create /var/log/gitlab/gitlab-rails] action create (up to date)
  * storage_directory[/var/opt/gitlab/backups] action create
    * ruby_block[directory resource: /var/opt/gitlab/backups] action run (skipped due to not_if)
     (up to date)
  * directory[/var/opt/gitlab/gitlab-rails] action create (up to date)
  * directory[/var/opt/gitlab/gitlab-ci] action create (up to date)
  * file[/var/opt/gitlab/gitlab-rails/etc/gitlab-registry.key] action create[2023-06-16T13:07:14-04:00] WARN: only_if block for file[/var/opt/gitlab/gitlab-rails/etc/gitlab-registry.key] returned a string, did you mean to run a command?
 (up to date)
  * template[/opt/gitlab/etc/gitlab-rails-rc] action create (up to date)
  * file[/opt/gitlab/embedded/service/gitlab-rails/.secret] action delete (up to date)
  * file[/var/opt/gitlab/gitlab-rails/etc/secret] action delete (up to date)
  * templatesymlink[Create a database.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/database.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/database.yml to /var/opt/gitlab/gitlab-rails/etc/database.yml] action create (up to date)
     (up to date)
  * templatesymlink[Create a secrets.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/secrets.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/secrets.yml to /var/opt/gitlab/gitlab-rails/etc/secrets.yml] action create (up to date)
     (up to date)
  * templatesymlink[Create a resque.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/resque.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/resque.yml to /var/opt/gitlab/gitlab-rails/etc/resque.yml] action create (up to date)
     (up to date)
  * templatesymlink[Create an override redis.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/redis.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/redis.yml to /var/opt/gitlab/gitlab-rails/etc/redis.yml] action create (up to date)
     (up to date)
  * templatesymlink[Create a cable.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/cable.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/cable.yml to /var/opt/gitlab/gitlab-rails/etc/cable.yml] action create (up to date)
     (up to date)
  * templatesymlink[Create a redis.cache.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.cache.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.cache.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.queues.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.queues.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.queues.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.shared_state.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.shared_state.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.shared_state.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.trace_chunks.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.trace_chunks.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.trace_chunks.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.rate_limiting.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.rate_limiting.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.rate_limiting.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.sessions.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.sessions.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.sessions.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.repository_cache.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.repository_cache.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.repository_cache.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a redis.cluster_rate_limiting.yml and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/redis.cluster_rate_limiting.yml] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/redis.cluster_rate_limiting.yml] action delete (up to date)
     (up to date)
  * templatesymlink[Create a smtp_settings.rb and create a symlink to Rails root] action delete
    * file[/var/opt/gitlab/gitlab-rails/etc/smtp_settings.rb] action delete (up to date)
    * link[/opt/gitlab/embedded/service/gitlab-rails/config/initializers/smtp_settings.rb] action delete (up to date)
     (up to date)
  * templatesymlink[Create a gitlab.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/gitlab.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/gitlab.yml to /var/opt/gitlab/gitlab-rails/etc/gitlab.yml] action create (up to date)
     (up to date)
  * templatesymlink[Create a gitlab_workhorse_secret and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret] action create (up to date)
     (up to date)
  * templatesymlink[Create a gitlab_shell_secret and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_shell_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret] action create (up to date)
     (up to date)
  * templatesymlink[Create a gitlab_incoming_email_secret and create a symlink to Rails root] action create (skipped due to only_if)
  * templatesymlink[Create a gitlab_service_desk_email_secret and create a symlink to Rails root] action create (skipped due to only_if)
  * templatesymlink[Create a gitlab_pages_secret and create a symlink to Rails root] action create[2023-06-16T13:07:15-04:00] WARN: only_if block for templatesymlink[Create a gitlab_pages_secret and create a symlink to Rails root] returned a string, did you mean to run a command?

    * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_pages_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret] action create (up to date)
     (up to date)
  * templatesymlink[Create a gitlab_kas_secret and create a symlink to Rails root] action create[2023-06-16T13:07:15-04:00] WARN: only_if block for templatesymlink[Create a gitlab_kas_secret and create a symlink to Rails root] returned a string, did you mean to run a command?

    * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_kas_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret] action create (up to date)
     (up to date)
  * link[/opt/gitlab/embedded/service/gitlab-rails/config/initializers/relative_url.rb] action delete (up to date)
  * file[/var/opt/gitlab/gitlab-rails/etc/relative_url.rb] action delete (up to date)
  * env_dir[/opt/gitlab/etc/gitlab-rails/env] action create
    * directory[/opt/gitlab/etc/gitlab-rails/env] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/HOME] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/RAILS_ENV] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/BUNDLE_GEMFILE] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/PUMA_WORKER_MAX_MEMORY] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/SIDEKIQ_MEMORY_KILLER_MAX_RSS] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/PATH] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/ICU_DATA] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/PYTHONPATH] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/EXECJS_RUNTIME] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/TZ] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/SSL_CERT_DIR] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-rails/env/SSL_CERT_FILE] action create (up to date)
     (up to date)
  * link[/opt/gitlab/embedded/service/gitlab-rails/tmp] action create (up to date)
  * link[/opt/gitlab/embedded/service/gitlab-rails/public/uploads] action create (up to date)
  * link[/opt/gitlab/embedded/service/gitlab-rails/log] action create (up to date)
  * link[/var/log/gitlab/gitlab-rails/sidekiq.log] action delete (skipped due to only_if)
  * file[/opt/gitlab/embedded/service/gitlab-rails/db/structure.sql] action create (up to date)
  * remote_file[/var/opt/gitlab/gitlab-rails/VERSION] action create (up to date)
  * remote_file[/var/opt/gitlab/gitlab-rails/REVISION] action create (up to date)
  * version_file[Create version file for Rails] action create
    * file[/var/opt/gitlab/gitlab-rails/RUBY_VERSION] action create (up to date)
     (up to date)
  * execute[clear the gitlab-rails cache] action nothing (skipped due to action :nothing)
  * file[/var/opt/gitlab/gitlab-rails/config.ru] action delete (up to date)
Recipe: gitlab::selinux
  * execute[semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp] action rungitlab-7.2.0-ssh-keygen	1.0
[2023-06-16T13:07:18-04:00] INFO: execute[Guard resource] ran successfully
 (skipped due to not_if)
  * execute[semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-10.5.0-ssh-authorized-keys.pp] action rungitlab-10.5.0-ssh-authorized-keys	1.0
[2023-06-16T13:07:21-04:00] INFO: execute[Guard resource] ran successfully
 (skipped due to not_if)
  * execute[semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-13.5.0-gitlab-shell.pp] action rungitlab-13.5.0-gitlab-shell	1.1
[2023-06-16T13:07:23-04:00] INFO: execute[Guard resource] ran successfully
 (skipped due to not_if)
  * bash[Set proper security context on ssh files for selinux] action nothing (skipped due to action :nothing)
Recipe: gitlab::add_trusted_certs
  * directory[/etc/gitlab/trusted-certs] action create (up to date)
  * directory[/opt/gitlab/embedded/ssl/certs] action create (up to date)
  * file[/opt/gitlab/embedded/ssl/certs/README] action create (up to date)
  * ruby_block[Move existing certs and link to /opt/gitlab/embedded/ssl/certs] action run (skipped due to only_if)
Recipe: gitlab::default
  * service[create a temporary puma service] action nothing (skipped due to action :nothing)
  * service[create a temporary sidekiq service] action nothing (skipped due to action :nothing)
  * service[create a temporary mailroom service] action nothing (skipped due to action :nothing)
Recipe: package::runit_systemd
  * directory[/usr/lib/systemd/system] action create (up to date)
  * template[/usr/lib/systemd/system/gitlab-runsvdir.service] action create (up to date)
  * file[/etc/systemd/system/default.target.wants/gitlab-runsvdir.service] action delete (up to date)
  * file[/etc/systemd/system/basic.target.wants/gitlab-runsvdir.service] action delete (up to date)
  * execute[systemctl daemon-reload] action nothing (skipped due to action :nothing)
  * execute[systemctl enable gitlab-runsvdir] action nothing (skipped due to action :nothing)
  * execute[systemctl start gitlab-runsvdir] action nothing (skipped due to action :nothing)
Recipe: gitlab::gitlab-shell
  * storage_directory[/var/opt/gitlab/.ssh] action create
    * ruby_block[directory resource: /var/opt/gitlab/.ssh] action run (skipped due to not_if)
     (up to date)
  * directory[/var/log/gitlab/gitlab-shell/] action create (up to date)
  * directory[/var/opt/gitlab/gitlab-shell] action create (up to date)
  * bash[generate gitlab-sshd host keys] action run (skipped due to only_if)
  * templatesymlink[Create a config.yml and create a symlink to Rails root] action create
    * template[/var/opt/gitlab/gitlab-shell/config.yml] action create (up to date)
    * link[Link /opt/gitlab/embedded/service/gitlab-shell/config.yml to /var/opt/gitlab/gitlab-shell/config.yml] action create (up to date)
     (up to date)
  * link[/opt/gitlab/embedded/service/gitlab-shell/.gitlab_shell_secret] action create (up to date)
  * file[/var/opt/gitlab/.ssh/authorized_keys] action create_if_missing (up to date)
  * env_dir[/opt/gitlab/etc/gitlab-sshd/env] action nothing (skipped due to action :nothing)
  * service[gitlab-sshd] action nothing (skipped due to action :nothing)
  * runit_service[gitlab-sshd] action disable
    * ruby_block[disable gitlab-sshd] action run (skipped due to only_if)
     (up to date)
Recipe: package::sysctl
  * execute[reload all sysctl conf] action nothing (skipped due to action :nothing)
Recipe: logrotate::folders_and_configs
  * directory[/var/opt/gitlab/logrotate] action create (up to date)
  * directory[/var/opt/gitlab/logrotate/logrotate.d] action create (up to date)
  * directory[/var/log/gitlab/logrotate] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.conf] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/nginx] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/puma] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-rails] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-shell] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-workhorse] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-pages] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-kas] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/gitaly] action create (up to date)
  * template[/var/opt/gitlab/logrotate/logrotate.d/mailroom] action create (up to date)
Recipe: logrotate::enable
  * service[logrotate] action nothing (skipped due to action :nothing)
  * runit_service[logrotate] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/logrotate] action create (up to date)
    * template[/opt/gitlab/sv/logrotate/run] action create (up to date)
    * directory[/opt/gitlab/sv/logrotate/log] action create (up to date)
    * directory[/opt/gitlab/sv/logrotate/log/main] action create (up to date)
    * template[/opt/gitlab/sv/logrotate/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_logrotate] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/logrotate/config] action create (up to date)
    * template[/opt/gitlab/sv/logrotate/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/logrotate/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for logrotate service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/logrotate/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/logrotate/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/logrotate/control] action create (up to date)
    * template[/opt/gitlab/sv/logrotate/control/t] action create (up to date)
    * link[/opt/gitlab/init/logrotate] action create (up to date)
    * file[/opt/gitlab/sv/logrotate/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/logrotate] action create (up to date)
    * ruby_block[wait for logrotate service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/logrotate/current] action touch (skipped due to only_if)
     (up to date)
Recipe: redis::enable
  * redis_service[redis] action create
    * account[user and group for redis] action create
      * group[user and group for redis] action create (up to date)
      * linux_user[user and group for redis] action create (up to date)
       (up to date)
    * group[Socket group] action create (up to date)
    * directory[/var/opt/gitlab/redis] action create (up to date)
    * directory[/var/log/gitlab/redis] action create (up to date)
    * template[/var/opt/gitlab/redis/redis.conf] action create (up to date)
    * service[redis] action nothing (skipped due to action :nothing)
    * runit_service[redis] action enable
      * ruby_block[restart_service] action nothing (skipped due to action :nothing)
      * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
      * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
      * directory[/opt/gitlab/sv/redis] action create (up to date)
      * template[/opt/gitlab/sv/redis/run] action create (up to date)
      * directory[/opt/gitlab/sv/redis/log] action create (up to date)
      * directory[/opt/gitlab/sv/redis/log/main] action create (up to date)
      * template[/opt/gitlab/sv/redis/log/config] action create (up to date)
      * ruby_block[verify_chown_persisted_on_redis] action nothing (skipped due to action :nothing)
      * link[/var/log/gitlab/redis/config] action create (up to date)
      * template[/opt/gitlab/sv/redis/log/run] action create (up to date)
      * directory[/opt/gitlab/sv/redis/env] action create (up to date)
      * ruby_block[Delete unmanaged env files for redis service] action run (skipped due to only_if)
      * template[/opt/gitlab/sv/redis/check] action create (skipped due to only_if)
      * template[/opt/gitlab/sv/redis/finish] action create (skipped due to only_if)
      * directory[/opt/gitlab/sv/redis/control] action create (up to date)
      * link[/opt/gitlab/init/redis] action create (up to date)
      * file[/opt/gitlab/sv/redis/down] action nothing (skipped due to action :nothing)
      * directory[/opt/gitlab/service] action create (up to date)
      * link[/opt/gitlab/service/redis] action create (up to date)
      * ruby_block[wait for redis service socket] action run (skipped due to not_if)
      * file[/var/log/gitlab/redis/current] action touch (skipped due to only_if)
       (up to date)
    * ruby_block[warn pending redis restart] action run (skipped due to only_if)
     (up to date)
  * template[/opt/gitlab/etc/gitlab-redis-cli-rc] action create (up to date)
Recipe: gitaly::enable
  * directory[/var/opt/gitlab/gitaly] action create (up to date)
  * directory[/var/opt/gitlab/gitaly/run] action create (up to date)
  * directory[/var/log/gitlab/gitaly] action create (up to date)
  * directory[/var/opt/gitlab/gitaly/internal_sockets] action delete (up to date)
  * env_dir[/opt/gitlab/etc/gitaly/env] action create
    * directory[/opt/gitlab/etc/gitaly/env] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/HOME] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/PATH] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/TZ] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/PYTHONPATH] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/ICU_DATA] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/SSL_CERT_DIR] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/GITALY_PID_FILE] action create (up to date)
    * file[/opt/gitlab/etc/gitaly/env/WRAPPER_JSON_LOGGING] action create (up to date)
     (up to date)
  * template[Create Gitaly config.toml] action create (up to date)
  * service[gitaly] action nothing (skipped due to action :nothing)
  * runit_service[gitaly] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/gitaly] action create (up to date)
    * template[/opt/gitlab/sv/gitaly/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitaly/log] action create (up to date)
    * directory[/opt/gitlab/sv/gitaly/log/main] action create (up to date)
    * template[/opt/gitlab/sv/gitaly/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_gitaly] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/gitaly/config] action create (up to date)
    * template[/opt/gitlab/sv/gitaly/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitaly/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for gitaly service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/gitaly/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/gitaly/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/gitaly/control] action create (up to date)
    * link[/opt/gitlab/init/gitaly] action create (up to date)
    * file[/opt/gitlab/sv/gitaly/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/gitaly] action create (up to date)
    * ruby_block[wait for gitaly service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/gitaly/current] action touch (skipped due to only_if)
     (up to date)
  * version_file[Create version file for Gitaly] action create
    * file[/var/opt/gitlab/gitaly/VERSION] action create (up to date)
     (up to date)
  * version_file[Create Ruby version file for Gitaly] action create
    * file[/var/opt/gitlab/gitaly/RUBY_VERSION] action create (up to date)
     (up to date)
  * consul_service[gitaly] action delete
    * file[/var/opt/gitlab/consul/config.d/gitaly-service.json] action delete (up to date)
     (up to date)
Recipe: postgresql::bin
  * ruby_block[check_postgresql_version] action run (skipped due to not_if)
  * ruby_block[check_postgresql_version_is_deprecated] action run (skipped due to not_if)
  * ruby_block[Link postgresql bin files to the correct version] action run (skipped due to only_if)
  * template[/opt/gitlab/etc/gitlab-psql-rc] action create (up to date)
Recipe: postgresql::user
  * account[Postgresql user and group] action create
    * group[Postgresql user and group] action create (up to date)
    * linux_user[Postgresql user and group] action create (up to date)
     (up to date)
  * directory[/var/opt/gitlab/postgresql] action create (up to date)
  * file[/var/opt/gitlab/postgresql/.profile] action create (up to date)
Recipe: postgresql::sysctl
  * gitlab_sysctl[kernel.shmmax] action create
    * directory[create /etc/sysctl.d for kernel.shmmax] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-kernel.shmmax.conf kernel.shmmax] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-kernel.shmmax.conf] action create (up to date)
    * execute[load sysctl conf kernel.shmmax] action nothing (skipped due to action :nothing)
     (up to date)
  * gitlab_sysctl[kernel.shmall] action create
    * directory[create /etc/sysctl.d for kernel.shmall] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-kernel.shmall.conf kernel.shmall] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-kernel.shmall.conf] action create (up to date)
    * execute[load sysctl conf kernel.shmall] action nothing (skipped due to action :nothing)
     (up to date)
  * gitlab_sysctl[kernel.sem] action create
    * directory[create /etc/sysctl.d for kernel.sem] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-kernel.sem.conf kernel.sem] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-kernel.sem.conf] action create (up to date)
    * execute[load sysctl conf kernel.sem] action nothing (skipped due to action :nothing)
     (up to date)
Recipe: postgresql::enable
  * directory[/var/opt/gitlab/postgresql] action create (up to date)
  * directory[/var/opt/gitlab/postgresql/data] action create (up to date)
  * directory[/var/log/gitlab/postgresql] action create (up to date)
  * directory[/var/opt/gitlab/postgresql/data] action create (up to date)
  * execute[/opt/gitlab/embedded/bin/initdb -D /var/opt/gitlab/postgresql/data -E UTF8] action run (skipped due to not_if)
  * file[/var/opt/gitlab/postgresql/data/server.crt] action create (up to date)
  * file[/var/opt/gitlab/postgresql/data/server.key] action create (up to date)
  * postgresql_config[gitlab] action create
    * template[/var/opt/gitlab/postgresql/data/postgresql.conf] action create (up to date)
    * template[/var/opt/gitlab/postgresql/data/runtime.conf] action create (up to date)
    * template[/var/opt/gitlab/postgresql/data/pg_hba.conf] action create (up to date)
    * template[/var/opt/gitlab/postgresql/data/pg_ident.conf] action create (up to date)
     (up to date)
Recipe: postgresql::standalone
  * service[postgresql] action nothing (skipped due to action :nothing)
  * runit_service[postgresql] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/postgresql] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/run] action create (up to date)
    * directory[/opt/gitlab/sv/postgresql/log] action create (up to date)
    * directory[/opt/gitlab/sv/postgresql/log/main] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_postgresql] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/postgresql/config] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/postgresql/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for postgresql service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/postgresql/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/postgresql/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/postgresql/control] action create (up to date)
    * template[/opt/gitlab/sv/postgresql/control/t] action create (up to date)
    * link[/opt/gitlab/init/postgresql] action create (up to date)
    * file[/opt/gitlab/sv/postgresql/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/postgresql] action create (up to date)
    * ruby_block[wait for postgresql service socket] action run (skipped due to not_if)
    * directory[/opt/gitlab/service/postgresql/supervise] action create (up to date)
    * directory[/opt/gitlab/service/postgresql/log/supervise] action create (up to date)
    * file[/opt/gitlab/service/postgresql/supervise/ok] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/log/supervise/ok] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/supervise/status] action touch[2023-06-16T13:07:26-04:00] INFO: file[/opt/gitlab/service/postgresql/supervise/status] owner changed to 995
[2023-06-16T13:07:26-04:00] INFO: file[/opt/gitlab/service/postgresql/supervise/status] group changed to 991

      - change owner from 'root' to 'gitlab-psql'
      - change group from 'root' to 'gitlab-psql'
      - restore selinux security context[2023-06-16T13:07:26-04:00] INFO: file[/opt/gitlab/service/postgresql/supervise/status] updated atime and mtime to 2023-06-16 13:07:26 -0400

      - update utime on file /opt/gitlab/service/postgresql/supervise/status
    * file[/opt/gitlab/service/postgresql/log/supervise/status] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/supervise/control] action touch (skipped due to only_if)
    * file[/opt/gitlab/service/postgresql/log/supervise/control] action touch (skipped due to only_if)
    * file[/var/log/gitlab/postgresql/current] action touch (skipped due to only_if)
  
  * database_objects[postgresql] action create
    * postgresql_user[gitlab] action create
      * execute[create gitlab postgresql user] action run (skipped due to not_if)
       (up to date)
    * postgresql_user[gitlab_replicator] action create
      * execute[create gitlab_replicator postgresql user] action run (skipped due to not_if)
      * execute[set options for gitlab_replicator postgresql user] action run (skipped due to not_if)
       (up to date)
    * postgresql_database[gitlabhq_production] action create
      * execute[create database gitlabhq_production] action run (skipped due to not_if)
       (up to date)
    * postgresql_extension[pg_trgm] action enable
      * postgresql_query[enable pg_trgm extension] action run (skipped due to only_if)
       (up to date)
    * postgresql_extension[btree_gist] action enable
      * postgresql_query[enable btree_gist extension] action run (skipped due to only_if)
       (up to date)
     (up to date)
  * version_file[Create version file for PostgreSQL] action create
    * file[/var/opt/gitlab/postgresql/VERSION] action create (up to date)
     (up to date)
  * ruby_block[warn pending postgresql restart] action run (skipped due to only_if)
  * execute[reload postgresql] action nothing (skipped due to action :nothing)
  * execute[start postgresql] action nothing (skipped due to action :nothing)
Recipe: praefect::disable
  * service[praefect] action nothing (skipped due to action :nothing)
  * runit_service[praefect] action disable
    * ruby_block[disable praefect] action run (skipped due to only_if)
     (up to date)
  * consul_service[praefect] action delete
    * file[/var/opt/gitlab/consul/config.d/praefect-service.json] action delete (up to date)
     (up to date)
Recipe: gitlab-kas::enable
  * directory[/var/opt/gitlab/gitlab-kas] action create (up to date)
  * directory[/var/log/gitlab/gitlab-kas] action create (up to date)
  * directory[/opt/gitlab/etc/gitlab-kas] action create (up to date)
  * ruby_block[websocket TLS termination] action run (skipped due to only_if)
  * version_file[Create version file for Gitlab KAS] action create
    * file[/var/opt/gitlab/gitlab-kas/VERSION] action create (up to date)
     (up to date)
  * file[/var/opt/gitlab/gitlab-kas/authentication_secret_file] action create (up to date)
  * file[/var/opt/gitlab/gitlab-kas/private_api_authentication_secret_file] action create (up to date)
  * file[/var/opt/gitlab/gitlab-kas/redis_password_file] action create (skipped due to only_if)
  * template[/var/opt/gitlab/gitlab-kas/gitlab-kas-config.yml] action create (up to date)
  * env_dir[/opt/gitlab/etc/gitlab-kas/env] action create
    * directory[/opt/gitlab/etc/gitlab-kas/env] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-kas/env/SSL_CERT_DIR] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-kas/env/OWN_PRIVATE_API_URL] action create (up to date)
     (up to date)
  * service[gitlab-kas] action nothing (skipped due to action :nothing)
  * runit_service[gitlab-kas] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/gitlab-kas] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-kas/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-kas/log] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-kas/log/main] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-kas/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_gitlab-kas] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/gitlab-kas/config] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-kas/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-kas/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for gitlab-kas service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/gitlab-kas/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/gitlab-kas/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/gitlab-kas/control] action create (up to date)
    * link[/opt/gitlab/init/gitlab-kas] action create (up to date)
    * file[/opt/gitlab/sv/gitlab-kas/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/gitlab-kas] action create (up to date)
    * ruby_block[wait for gitlab-kas service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/gitlab-kas/current] action touch (skipped due to only_if)
     (up to date)
Recipe: gitlab::database_migrations
  * ruby_block[check remote PG version] action nothing (skipped due to action :nothing)
  * rails_migration[gitlab-rails] action run
    * bash_hide_env[migrate gitlab-rails database] action run (skipped due to not_if)
     (up to date)
Recipe: crond::disable
  * service[crond] action nothing (skipped due to action :nothing)
  * runit_service[crond] action disable
    * ruby_block[disable crond] action run (skipped due to only_if)
     (up to date)
Recipe: gitlab::puma
  * directory[/var/log/gitlab/puma] action create (up to date)
  * directory[/opt/gitlab/var/puma] action create (up to date)
  * directory[/var/opt/gitlab/gitlab-rails/sockets] action create (up to date)
  * puma_config[/var/opt/gitlab/gitlab-rails/etc/puma.rb] action create
    * directory[/var/opt/gitlab/gitlab-rails/etc] action create (up to date)
    * template[/var/opt/gitlab/gitlab-rails/etc/puma.rb] action create (up to date)
     (up to date)
  * service[puma] action nothing (skipped due to action :nothing)
  * runit_service[puma] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/puma] action create (up to date)
    * template[/opt/gitlab/sv/puma/run] action create (up to date)
    * directory[/opt/gitlab/sv/puma/log] action create (up to date)
    * directory[/opt/gitlab/sv/puma/log/main] action create (up to date)
    * template[/opt/gitlab/sv/puma/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_puma] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/puma/config] action create (up to date)
    * template[/opt/gitlab/sv/puma/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/puma/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for puma service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/puma/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/puma/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/puma/control] action create (up to date)
    * template[/opt/gitlab/sv/puma/control/t] action create (up to date)
    * template[/opt/gitlab/sv/puma/control/h] action create (up to date)
    * link[/opt/gitlab/init/puma] action create (up to date)
    * file[/opt/gitlab/sv/puma/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/puma] action create (up to date)
    * ruby_block[wait for puma service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/puma/current] action touch (skipped due to only_if)
     (up to date)
  * consul_service[rails] action delete
    * file[/var/opt/gitlab/consul/config.d/rails-service.json] action delete (up to date)
     (up to date)
  * gitlab_sysctl[net.core.somaxconn] action create
    * directory[create /etc/sysctl.d for net.core.somaxconn] action create (up to date)
    * file[create /opt/gitlab/embedded/etc/90-omnibus-gitlab-net.core.somaxconn.conf net.core.somaxconn] action create (up to date)
    * link[/etc/sysctl.d/90-omnibus-gitlab-net.core.somaxconn.conf] action create (up to date)
    * execute[load sysctl conf net.core.somaxconn] action nothing (skipped due to action :nothing)
     (up to date)
Recipe: gitlab::sidekiq
  * sidekiq_service[sidekiq] action enable
    * directory[/var/log/gitlab/sidekiq] action create (up to date)
    * service[sidekiq] action nothing (skipped due to action :nothing)
    * runit_service[sidekiq] action enable
      * ruby_block[restart_service] action nothing (skipped due to action :nothing)
      * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
      * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
      * directory[/opt/gitlab/sv/sidekiq] action create (up to date)
      * template[/opt/gitlab/sv/sidekiq/run] action create (up to date)
      * directory[/opt/gitlab/sv/sidekiq/log] action create (up to date)
      * directory[/opt/gitlab/sv/sidekiq/log/main] action create (up to date)
      * template[/opt/gitlab/sv/sidekiq/log/config] action create (up to date)
      * ruby_block[verify_chown_persisted_on_sidekiq] action nothing (skipped due to action :nothing)
      * link[/var/log/gitlab/sidekiq/config] action create (up to date)
      * template[/opt/gitlab/sv/sidekiq/log/run] action create (up to date)
      * directory[/opt/gitlab/sv/sidekiq/env] action create (up to date)
      * ruby_block[Delete unmanaged env files for sidekiq service] action run (skipped due to only_if)
      * template[/opt/gitlab/sv/sidekiq/check] action create (skipped due to only_if)
      * template[/opt/gitlab/sv/sidekiq/finish] action create (skipped due to only_if)
      * directory[/opt/gitlab/sv/sidekiq/control] action create (up to date)
      * link[/opt/gitlab/init/sidekiq] action create (up to date)
      * file[/opt/gitlab/sv/sidekiq/down] action nothing (skipped due to action :nothing)
      * directory[/opt/gitlab/service] action create (up to date)
      * link[/opt/gitlab/service/sidekiq] action create (up to date)
      * ruby_block[wait for sidekiq service socket] action run (skipped due to not_if)
      * file[/var/log/gitlab/sidekiq/current] action touch (skipped due to only_if)
       (up to date)
     (up to date)
  * consul_service[sidekiq] action delete
    * file[/var/opt/gitlab/consul/config.d/sidekiq-service.json] action delete (up to date)
     (up to date)
Recipe: gitlab::gitlab-workhorse
  * directory[/var/opt/gitlab/gitlab-workhorse] action create (up to date)
  * directory[/var/opt/gitlab/gitlab-workhorse/sockets] action create (up to date)
  * directory[/var/log/gitlab/gitlab-workhorse] action create (up to date)
  * directory[/opt/gitlab/etc/gitlab-workhorse] action create (up to date)
  * env_dir[/opt/gitlab/etc/gitlab-workhorse/env] action create
    * directory[/opt/gitlab/etc/gitlab-workhorse/env] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-workhorse/env/PATH] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-workhorse/env/HOME] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-workhorse/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * service[gitlab-workhorse] action nothing (skipped due to action :nothing)
  * runit_service[gitlab-workhorse] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/gitlab-workhorse] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-workhorse/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-workhorse/log] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-workhorse/log/main] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-workhorse/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_gitlab-workhorse] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/gitlab-workhorse/config] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-workhorse/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-workhorse/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for gitlab-workhorse service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/gitlab-workhorse/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/gitlab-workhorse/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/gitlab-workhorse/control] action create (up to date)
    * link[/opt/gitlab/init/gitlab-workhorse] action create (up to date)
    * file[/opt/gitlab/sv/gitlab-workhorse/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/gitlab-workhorse] action create (up to date)
    * ruby_block[wait for gitlab-workhorse service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/gitlab-workhorse/current] action touch (skipped due to only_if)
     (up to date)
  * consul_service[workhorse] action delete
    * file[/var/opt/gitlab/consul/config.d/workhorse-service.json] action delete (up to date)
     (up to date)
  * version_file[Create version file for Workhorse] action create
    * file[/var/opt/gitlab/gitlab-workhorse/VERSION] action create (up to date)
     (up to date)
  * template[/var/opt/gitlab/gitlab-workhorse/config.toml] action create (up to date)
Recipe: gitlab::mailroom_disable
  * service[mailroom] action nothing (skipped due to action :nothing)
  * runit_service[mailroom] action disable
    * ruby_block[disable mailroom] action run (skipped due to only_if)
     (up to date)
Recipe: gitlab::nginx
  * directory[/var/opt/gitlab/nginx] action create (up to date)
  * directory[/var/opt/gitlab/nginx/conf] action create (up to date)
  * directory[/var/log/gitlab/nginx] action create (up to date)
  * link[/var/opt/gitlab/nginx/logs] action create (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-http.conf] action create (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-smartcard-http.conf] action delete (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-health.conf] action create (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-pages.conf] action delete (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-registry.conf] action create (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-mattermost-http.conf] action delete (up to date)
  * template[/var/opt/gitlab/nginx/conf/gitlab-kas.conf] action delete (up to date)
  * template[/var/opt/gitlab/nginx/conf/nginx-status.conf] action create (up to date)
  * consul_service[nginx] action delete
    * file[/var/opt/gitlab/consul/config.d/nginx-service.json] action delete (up to date)
     (up to date)
  * template[/var/opt/gitlab/nginx/conf/nginx.conf] action create (up to date)
Recipe: nginx::enable
  * service[nginx] action nothing (skipped due to action :nothing)
  * runit_service[nginx] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/nginx] action create (up to date)
    * template[/opt/gitlab/sv/nginx/run] action create (up to date)
    * directory[/opt/gitlab/sv/nginx/log] action create (up to date)
    * directory[/opt/gitlab/sv/nginx/log/main] action create (up to date)
    * template[/opt/gitlab/sv/nginx/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_nginx] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/nginx/config] action create (up to date)
    * template[/opt/gitlab/sv/nginx/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/nginx/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for nginx service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/nginx/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/nginx/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/nginx/control] action create (up to date)
    * link[/opt/gitlab/init/nginx] action create (up to date)
    * file[/opt/gitlab/sv/nginx/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/nginx] action create (up to date)
    * ruby_block[wait for nginx service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/nginx/current] action touch (skipped due to only_if)
     (up to date)
  * execute[reload nginx] action nothing (skipped due to action :nothing)
Recipe: gitlab::remote-syslog_disable
  * service[remote-syslog] action nothing (skipped due to action :nothing)
  * runit_service[remote-syslog] action disable
    * ruby_block[disable remote-syslog] action run (skipped due to only_if)
     (up to date)
Recipe: gitlab::storage-check_disable
  * service[storage-check] action nothing (skipped due to action :nothing)
  * runit_service[storage-check] action disable
    * ruby_block[disable storage-check] action run (skipped due to only_if)
     (up to date)
Recipe: gitlab-pages::disable
  * service[gitlab-pages] action nothing (skipped due to action :nothing)
  * runit_service[gitlab-pages] action disable
    * ruby_block[disable gitlab-pages] action run (skipped due to only_if)
     (up to date)
Recipe: registry::enable
  * directory[create /var/opt/gitlab/registry] action create (up to date)
  * account[Docker registry user and group] action create
    * group[Docker registry user and group] action create (up to date)
    * linux_user[Docker registry user and group] action create (up to date)
     (up to date)
  * directory[create /var/opt/gitlab/registry and set the owner] action create (up to date)
  * directory[create /var/log/gitlab/registry and set the owner] action create (up to date)
  * env_dir[/opt/gitlab/etc/registry/env] action create
    * directory[/opt/gitlab/etc/registry/env] action create (up to date)
    * file[/opt/gitlab/etc/registry/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * directory[/var/opt/gitlab/gitlab-rails/shared/registry] action create (up to date)
  * file[/var/opt/gitlab/registry/gitlab-registry.crt] action create (up to date)
  * template[/var/opt/gitlab/registry/config.yml] action create (up to date)
  * service[registry] action nothing (skipped due to action :nothing)
  * runit_service[registry] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/registry] action create (up to date)
    * template[/opt/gitlab/sv/registry/run] action create (up to date)
    * directory[/opt/gitlab/sv/registry/log] action create (up to date)
    * directory[/opt/gitlab/sv/registry/log/main] action create (up to date)
    * template[/opt/gitlab/sv/registry/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_registry] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/registry/config] action create (up to date)
    * template[/opt/gitlab/sv/registry/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/registry/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for registry service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/registry/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/registry/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/registry/control] action create (up to date)
    * link[/opt/gitlab/init/registry] action create (up to date)
    * file[/opt/gitlab/sv/registry/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/registry] action create (up to date)
    * ruby_block[wait for registry service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/registry/current] action touch (skipped due to only_if)
     (up to date)
  * version_file[Create version file for Registry] action create
    * file[/var/opt/gitlab/registry/VERSION] action create (up to date)
     (up to date)
Recipe: mattermost::disable
  * service[mattermost] action nothing (skipped due to action :nothing)
  * runit_service[mattermost] action disable
    * ruby_block[disable mattermost] action run (skipped due to only_if)
     (up to date)
Recipe: letsencrypt::disable
  * crond_job[letsencrypt-renew] action delete
    * file[/var/opt/gitlab/crond/letsencrypt-renew] action delete (up to date)
     (up to date)
Recipe: gitlab::gitlab-healthcheck
  * template[/opt/gitlab/etc/gitlab-healthcheck-rc] action create (up to date)
Recipe: monitoring::user
  * account[Prometheus user and group] action create
    * group[Prometheus user and group] action create (up to date)
    * linux_user[Prometheus user and group] action create (up to date)
     (up to date)
Recipe: monitoring::node-exporter
  * directory[/var/log/gitlab/node-exporter] action create (up to date)
  * directory[/opt/gitlab/etc/node-exporter/env] action create (up to date)
  * env_dir[/opt/gitlab/etc/node-exporter/env] action create
    * directory[/opt/gitlab/etc/node-exporter/env] action create (up to date)
    * file[/opt/gitlab/etc/node-exporter/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * directory[/var/opt/gitlab/node-exporter/textfile_collector] action create (up to date)
  * service[node-exporter] action nothing (skipped due to action :nothing)
  * runit_service[node-exporter] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/node-exporter] action create (up to date)
    * template[/opt/gitlab/sv/node-exporter/run] action create (up to date)
    * directory[/opt/gitlab/sv/node-exporter/log] action create (up to date)
    * directory[/opt/gitlab/sv/node-exporter/log/main] action create (up to date)
    * template[/opt/gitlab/sv/node-exporter/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_node-exporter] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/node-exporter/config] action create (up to date)
    * template[/opt/gitlab/sv/node-exporter/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/node-exporter/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for node-exporter service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/node-exporter/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/node-exporter/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/node-exporter/control] action create (up to date)
    * link[/opt/gitlab/init/node-exporter] action create (up to date)
    * file[/opt/gitlab/sv/node-exporter/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/node-exporter] action create (up to date)
    * ruby_block[wait for node-exporter service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/node-exporter/current] action touch (skipped due to only_if)
     (up to date)
  * consul_service[node-exporter] action delete
    * file[/var/opt/gitlab/consul/config.d/node-exporter-service.json] action delete (up to date)
     (up to date)
Recipe: monitoring::gitlab-exporter
  * directory[/var/opt/gitlab/gitlab-exporter] action create (up to date)
  * directory[/var/log/gitlab/gitlab-exporter] action create (up to date)
  * env_dir[/opt/gitlab/etc/gitlab-exporter/env] action create
    * directory[/opt/gitlab/etc/gitlab-exporter/env] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-exporter/env/MALLOC_CONF] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-exporter/env/RUBY_GC_HEAP_INIT_SLOTS] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-exporter/env/RUBY_GC_HEAP_FREE_SLOTS_MIN_RATIO] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-exporter/env/RUBY_GC_HEAP_FREE_SLOTS_MAX_RATIO] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-exporter/env/SSL_CERT_DIR] action create (up to date)
    * file[/opt/gitlab/etc/gitlab-exporter/env/SSL_CERT_FILE] action create (up to date)
     (up to date)
  * template[/var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml] action create (up to date)
  * version_file[Create version file for GitLab-Exporter] action create
    * file[/var/opt/gitlab/gitlab-exporter/RUBY_VERSION] action create (up to date)
     (up to date)
  * service[gitlab-exporter] action nothing (skipped due to action :nothing)
  * runit_service[gitlab-exporter] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/gitlab-exporter] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-exporter/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-exporter/log] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-exporter/log/main] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-exporter/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_gitlab-exporter] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/gitlab-exporter/config] action create (up to date)
    * template[/opt/gitlab/sv/gitlab-exporter/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/gitlab-exporter/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for gitlab-exporter service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/gitlab-exporter/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/gitlab-exporter/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/gitlab-exporter/control] action create (up to date)
    * link[/opt/gitlab/init/gitlab-exporter] action create (up to date)
    * file[/opt/gitlab/sv/gitlab-exporter/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/gitlab-exporter] action create (up to date)
    * ruby_block[wait for gitlab-exporter service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/gitlab-exporter/current] action touch (skipped due to only_if)
     (up to date)
  * consul_service[gitlab-exporter] action delete
    * file[/var/opt/gitlab/consul/config.d/gitlab-exporter-service.json] action delete (up to date)
     (up to date)
Recipe: monitoring::redis-exporter
  * directory[/var/log/gitlab/redis-exporter] action create (up to date)
  * directory[/opt/gitlab/etc/redis-exporter/env] action create (up to date)
  * env_dir[/opt/gitlab/etc/redis-exporter/env] action create
    * directory[/opt/gitlab/etc/redis-exporter/env] action create (up to date)
    * file[/opt/gitlab/etc/redis-exporter/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * service[redis-exporter] action nothing (skipped due to action :nothing)
  * runit_service[redis-exporter] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/redis-exporter] action create (up to date)
    * template[/opt/gitlab/sv/redis-exporter/run] action create (up to date)
    * directory[/opt/gitlab/sv/redis-exporter/log] action create (up to date)
    * directory[/opt/gitlab/sv/redis-exporter/log/main] action create (up to date)
    * template[/opt/gitlab/sv/redis-exporter/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_redis-exporter] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/redis-exporter/config] action create (up to date)
    * template[/opt/gitlab/sv/redis-exporter/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/redis-exporter/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for redis-exporter service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/redis-exporter/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/redis-exporter/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/redis-exporter/control] action create (up to date)
    * link[/opt/gitlab/init/redis-exporter] action create (up to date)
    * file[/opt/gitlab/sv/redis-exporter/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/redis-exporter] action create (up to date)
    * ruby_block[wait for redis-exporter service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/redis-exporter/current] action touch (skipped due to only_if)
     (up to date)
  * consul_service[redis-exporter] action delete
    * file[/var/opt/gitlab/consul/config.d/redis-exporter-service.json] action delete (up to date)
     (up to date)
Recipe: monitoring::prometheus
  * directory[/var/opt/gitlab/prometheus] action create (up to date)
  * directory[/var/opt/gitlab/prometheus/rules] action create (up to date)
  * directory[/var/log/gitlab/prometheus] action create (up to date)
  * directory[/opt/gitlab/etc/prometheus/env] action create (up to date)
  * env_dir[/opt/gitlab/etc/prometheus/env] action create
    * directory[/opt/gitlab/etc/prometheus/env] action create (up to date)
    * file[/opt/gitlab/etc/prometheus/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * execute[reload prometheus] action nothing (skipped due to action :nothing)
  * file[Prometheus config] action create (up to date)
  * service[prometheus] action nothing (skipped due to action :nothing)
  * runit_service[prometheus] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/prometheus] action create (up to date)
    * template[/opt/gitlab/sv/prometheus/run] action create (up to date)
    * directory[/opt/gitlab/sv/prometheus/log] action create (up to date)
    * directory[/opt/gitlab/sv/prometheus/log/main] action create (up to date)
    * template[/opt/gitlab/sv/prometheus/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_prometheus] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/prometheus/config] action create (up to date)
    * template[/opt/gitlab/sv/prometheus/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/prometheus/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for prometheus service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/prometheus/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/prometheus/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/prometheus/control] action create (up to date)
    * link[/opt/gitlab/init/prometheus] action create (up to date)
    * file[/opt/gitlab/sv/prometheus/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/prometheus] action create (up to date)
    * ruby_block[wait for prometheus service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/prometheus/current] action touch (skipped due to only_if)
     (up to date)
  * consul_service[prometheus] action delete
    * file[/var/opt/gitlab/consul/config.d/prometheus-service.json] action delete (up to date)
     (up to date)
  * template[/var/opt/gitlab/prometheus/rules/gitlab.rules] action create (up to date)
  * template[/var/opt/gitlab/prometheus/rules/node.rules] action create (up to date)
Recipe: monitoring::alertmanager
  * directory[/var/opt/gitlab/alertmanager] action create (up to date)
  * directory[/var/log/gitlab/alertmanager] action create (up to date)
  * directory[/opt/gitlab/etc/alertmanager/env] action create (up to date)
  * env_dir[/opt/gitlab/etc/alertmanager/env] action create
    * directory[/opt/gitlab/etc/alertmanager/env] action create (up to date)
    * file[/opt/gitlab/etc/alertmanager/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * file[Alertmanager config] action create (up to date)
  * service[alertmanager] action nothing (skipped due to action :nothing)
  * runit_service[alertmanager] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/alertmanager] action create (up to date)
    * template[/opt/gitlab/sv/alertmanager/run] action create (up to date)
    * directory[/opt/gitlab/sv/alertmanager/log] action create (up to date)
    * directory[/opt/gitlab/sv/alertmanager/log/main] action create (up to date)
    * template[/opt/gitlab/sv/alertmanager/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_alertmanager] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/alertmanager/config] action create (up to date)
    * template[/opt/gitlab/sv/alertmanager/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/alertmanager/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for alertmanager service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/alertmanager/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/alertmanager/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/alertmanager/control] action create (up to date)
    * link[/opt/gitlab/init/alertmanager] action create (up to date)
    * file[/opt/gitlab/sv/alertmanager/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/alertmanager] action create (up to date)
    * ruby_block[wait for alertmanager service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/alertmanager/current] action touch (skipped due to only_if)
     (up to date)
Recipe: monitoring::postgres-exporter
  * directory[/var/log/gitlab/postgres-exporter] action create (up to date)
  * directory[/var/opt/gitlab/postgres-exporter] action create (up to date)
  * env_dir[/opt/gitlab/etc/postgres-exporter/env] action create
    * directory[/opt/gitlab/etc/postgres-exporter/env] action create (up to date)
    * file[/opt/gitlab/etc/postgres-exporter/env/SSL_CERT_DIR] action create (up to date)
    * file[/opt/gitlab/etc/postgres-exporter/env/DATA_SOURCE_NAME] action create (up to date)
     (up to date)
  * service[postgres-exporter] action nothing (skipped due to action :nothing)
  * runit_service[postgres-exporter] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/postgres-exporter] action create (up to date)
    * template[/opt/gitlab/sv/postgres-exporter/run] action create (up to date)
    * directory[/opt/gitlab/sv/postgres-exporter/log] action create (up to date)
    * directory[/opt/gitlab/sv/postgres-exporter/log/main] action create (up to date)
    * template[/opt/gitlab/sv/postgres-exporter/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_postgres-exporter] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/postgres-exporter/config] action create (up to date)
    * template[/opt/gitlab/sv/postgres-exporter/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/postgres-exporter/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for postgres-exporter service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/postgres-exporter/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/postgres-exporter/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/postgres-exporter/control] action create (up to date)
    * link[/opt/gitlab/init/postgres-exporter] action create (up to date)
    * file[/opt/gitlab/sv/postgres-exporter/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/postgres-exporter] action create (up to date)
    * ruby_block[wait for postgres-exporter service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/postgres-exporter/current] action touch (skipped due to only_if)
     (up to date)
  * template[/var/opt/gitlab/postgres-exporter/queries.yaml] action create (up to date)
  * consul_service[postgres-exporter] action delete
    * file[/var/opt/gitlab/consul/config.d/postgres-exporter-service.json] action delete (up to date)
     (up to date)
Recipe: monitoring::grafana
  * directory[/var/log/gitlab/grafana] action create (up to date)
  * directory[/var/opt/gitlab/grafana] action create (up to date)
  * directory[/var/opt/gitlab/grafana/provisioning] action create (up to date)
  * directory[/var/opt/gitlab/grafana/provisioning/dashboards] action create (up to date)
  * directory[/var/opt/gitlab/grafana/provisioning/datasources] action create (up to date)
  * directory[/var/opt/gitlab/grafana/provisioning/notifiers] action create (up to date)
  * file[/var/opt/gitlab/grafana/CVE_reset_status] action delete (up to date)
  * link[/var/opt/gitlab/grafana/conf] action create (up to date)
  * link[/var/opt/gitlab/grafana/public] action create (up to date)
  * directory[/opt/gitlab/etc/grafana/env] action create (up to date)
  * ruby_block[authorize Grafana with GitLab] action run[2023-06-16T13:07:30-04:00] WARN: Connecting to GitLab to generate new app_id and app_secret for GitLab Grafana.
[2023-06-16T13:07:51-04:00] WARN: Something went wrong while trying to update gitlab-secrets.json. Check the file permissions and try reconfiguring again.
[2023-06-16T13:07:51-04:00] INFO: ruby_block[authorize Grafana with GitLab] called

    - execute the ruby block authorize Grafana with GitLab
  * ruby_block[populate Grafana configuration options] action run[2023-06-16T13:07:51-04:00] INFO: ruby_block[populate Grafana configuration options] called

    - execute the ruby block populate Grafana configuration options
  * env_dir[/opt/gitlab/etc/grafana/env] action create
    * directory[/opt/gitlab/etc/grafana/env] action create (up to date)
    * file[/opt/gitlab/etc/grafana/env/SSL_CERT_DIR] action create (up to date)
     (up to date)
  * template[/var/opt/gitlab/grafana/grafana.ini] action create (up to date)
  * file[/var/opt/gitlab/grafana/provisioning/dashboards/gitlab_dashboards.yml] action create (up to date)
  * file[/var/opt/gitlab/grafana/provisioning/datasources/gitlab_datasources.yml] action create (up to date)
  * service[grafana] action nothing (skipped due to action :nothing)
  * runit_service[grafana] action enable
    * ruby_block[restart_service] action nothing (skipped due to action :nothing)
    * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
    * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/sv/grafana] action create (up to date)
    * template[/opt/gitlab/sv/grafana/run] action create (up to date)
    * directory[/opt/gitlab/sv/grafana/log] action create (up to date)
    * directory[/opt/gitlab/sv/grafana/log/main] action create (up to date)
    * template[/opt/gitlab/sv/grafana/log/config] action create (up to date)
    * ruby_block[verify_chown_persisted_on_grafana] action nothing (skipped due to action :nothing)
    * link[/var/log/gitlab/grafana/config] action create (up to date)
    * template[/opt/gitlab/sv/grafana/log/run] action create (up to date)
    * directory[/opt/gitlab/sv/grafana/env] action create (up to date)
    * ruby_block[Delete unmanaged env files for grafana service] action run (skipped due to only_if)
    * template[/opt/gitlab/sv/grafana/check] action create (skipped due to only_if)
    * template[/opt/gitlab/sv/grafana/finish] action create (skipped due to only_if)
    * directory[/opt/gitlab/sv/grafana/control] action create (up to date)
    * link[/opt/gitlab/init/grafana] action create (up to date)
    * file[/opt/gitlab/sv/grafana/down] action nothing (skipped due to action :nothing)
    * directory[/opt/gitlab/service] action create (up to date)
    * link[/opt/gitlab/service/grafana] action create (up to date)
    * ruby_block[wait for grafana service socket] action run (skipped due to not_if)
    * file[/var/log/gitlab/grafana/current] action touch (skipped due to only_if)
     (up to date)
Recipe: gitlab::database_reindexing_disable
  * crond_job[database-reindexing] action delete
    * file[/var/opt/gitlab/crond/database-reindexing] action delete (up to date)
     (up to date)
[2023-06-16T13:07:52-04:00] INFO: Cinc Client Run complete in 42.557311161 seconds

Running handlers:
[2023-06-16T13:07:52-04:00] INFO: Running report handlers
Running handlers complete
[2023-06-16T13:07:52-04:00] INFO: Report handlers complete
Infra Phase complete, 4/884 resources updated in 44 seconds
[2023-06-16T13:07:52-04:00] WARN: This release of Cinc Client became end of life (EOL) on May 1st 2023. Please update to a supported release to receive new features, bug fixes, and security updates.
Running reconfigure: OK
Waiting for Database to be running.
Database upgrade is complete, running vacuumdb analyze
Toggling deploy page:rm -f /opt/gitlab/embedded/service/gitlab-rails/public/index.html
Toggling deploy page: OK
Toggling services:ok: run: alertmanager: (pid 27747) 0s
ok: run: gitaly: (pid 27755) 0s
ok: run: gitlab-exporter: (pid 27768) 1s
ok: run: gitlab-kas: (pid 27770) 0s
ok: run: grafana: (pid 27780) 1s
ok: run: logrotate: (pid 27788) 0s
ok: run: node-exporter: (pid 27794) 1s
ok: run: postgres-exporter: (pid 27799) 0s
ok: run: prometheus: (pid 27805) 0s
ok: run: redis-exporter: (pid 27814) 1s
ok: run: registry: (pid 27821) 0s
ok: run: sidekiq: (pid 27829) 1s
Toggling services: OK
==== Upgrade has completed ====
Please verify everything is working and run the following if so
sudo rm -rf /var/opt/gitlab/postgresql/data.12
sudo rm -f /var/opt/gitlab/postgresql-version.old

[root@gitlab-eng1 /root]# 

Repeating output in /var/log/gitlab/postgres/current Grepped for ERROR for brevity, but there are STATEMENTS as well in full log.

2023-06-16_17:07:51.76993 ERROR:  relation "application_settings" does not exist at character 454
2023-06-16_17:07:51.77219 ERROR:  relation "application_settings" does not exist at character 454
2023-06-16_17:08:04.45180 ERROR:  relation "licenses" does not exist at character 22
2023-06-16_17:08:04.45254 ERROR:  relation "licenses" does not exist at character 22
2023-06-16_17:08:04.45306 ERROR:  relation "ci_builds" does not exist at character 33
2023-06-16_17:08:04.45353 ERROR:  relation "licenses" does not exist at character 22
2023-06-16_17:08:04.45404 ERROR:  relation "ci_builds" does not exist at character 33
2023-06-16_17:08:04.47457 ERROR:  relation "projects" does not exist at character 22
2023-06-16_17:08:04.47590 ERROR:  relation "projects" does not exist at character 22
2023-06-16_17:08:04.47774 ERROR:  relation "uploads" does not exist at character 22
2023-06-16_17:08:04.47873 ERROR:  relation "users" does not exist at character 93
2023-06-16_17:08:04.47941 ERROR:  relation "projects" does not exist at character 50
2023-06-16_17:08:04.48161 ERROR:  relation "namespaces" does not exist at character 77
2023-06-16_17:08:04.48261 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.48376 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.48556 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.48655 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.48852 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.48911 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.48965 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49011 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49063 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49242 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49301 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49349 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49408 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49466 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49523 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49579 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49635 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49683 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49730 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.49779 ERROR:  relation "container_repositories" does not exist at character 22
2023-06-16_17:08:04.50257 ERROR:  relation "container_repositories" does not exist at character 22

Looking for public schema

[root@gitlab-eng1 /root]# gitlab-psql
psql (13.11)
Type "help" for help.

gitlabhq_production=# \dt public.*;
Did not find any relation named "public.*".

Results of GitLab environment info

Expand for output related to GitLab environment info
[root@gitlab-eng1 /root]# gitlab-rake gitlab:env:info

System information
System:		RedHatEnterpriseServer 7.9
Current User:	git
Using RVM:	no
Ruby Version:	3.0.6p216
Gem Version:	3.2.33
Bundler Version:2.3.15
Rake Version:	13.0.6
Redis Version:	6.2.11
Sidekiq Version:6.5.7
Go Version:	unknown
rake aborted!
ActiveRecord::StatementInvalid: PG::UndefinedTable: ERROR:  relation "namespaces" does not exist
LINE 8:  WHERE a.attrelid = '"namespaces"'::regclass
                            ^
/opt/gitlab/embedded/service/gitlab-rails/lib/gitlab/database/schema_cache_with_renamed_table.rb:25:in `columns'
/opt/gitlab/embedded/service/gitlab-rails/lib/gitlab/database/schema_cache_with_renamed_table.rb:29:in `columns_hash'
/opt/gitlab/embedded/service/gitlab-rails/lib/tasks/gitlab/info.rake:47:in `block (3 levels) in '
/opt/gitlab/embedded/bin/bundle:23:in `load'
/opt/gitlab/embedded/bin/bundle:23:in `'

Caused by:
PG::UndefinedTable: ERROR:  relation "namespaces" does not exist
LINE 8:  WHERE a.attrelid = '"namespaces"'::regclass
                            ^
/opt/gitlab/embedded/service/gitlab-rails/lib/gitlab/database/schema_cache_with_renamed_table.rb:25:in `columns'
/opt/gitlab/embedded/service/gitlab-rails/lib/gitlab/database/schema_cache_with_renamed_table.rb:29:in `columns_hash'
/opt/gitlab/embedded/service/gitlab-rails/lib/tasks/gitlab/info.rake:47:in `block (3 levels) in '
/opt/gitlab/embedded/bin/bundle:23:in `load'
/opt/gitlab/embedded/bin/bundle:23:in `'
Tasks: TOP => gitlab:env:info
(See full trace by running task with --trace)


Results of GitLab application Check

Expand for output related to the GitLab application check

Checking GitLab subtasks ...

Checking GitLab Shell ...

GitLab Shell: ... GitLab Shell version >= 14.18.0 ? ... OK (14.18.0) Running /opt/gitlab/embedded/service/gitlab-shell/bin/check Internal API available: FAILED - Internal API unreachable gitlab-shell self-check failed Try fixing it: Make sure GitLab is running; Check the gitlab-shell configuration file: sudo -u git -H editor /opt/gitlab/embedded/service/gitlab-shell/config.yml Please fix the error above and rerun the checks.

Checking GitLab Shell ... Finished

Checking Gitaly ...

Gitaly: ... default ... OK

Checking Gitaly ... Finished

Checking Sidekiq ...

Sidekiq: ... Running? ... no Try fixing it: sudo -u git -H RAILS_ENV=production bin/background_jobs start For more information see: doc/install/installation.md in section "Install Init Script" see log/sidekiq.log for possible errors Please fix the error above and rerun the checks.

Checking Sidekiq ... Finished

Checking Incoming Email ...

Incoming Email: ... Reply by email is disabled in config/gitlab.yml

Checking Incoming Email ... Finished

Checking LDAP ...

LDAP: ... Server: ldapdirectory LDAP authentication... Success LDAP users with access to your GitLab server (only showing the first 100 results) User output sanitized. Found 100 users of 100 limit.

Checking LDAP ... Finished

Checking GitLab App ...

Database config exists? ... yes All migrations up? ... yes Database contains orphaned GroupMembers? ... Exception: PG::UndefinedTable: ERROR: relation "members" does not exist LINE 8: WHERE a.attrelid = '"members"'::regclass ^

GitLab config exists? ... yes GitLab config up to date? ... yes Cable config exists? ... yes Resque config exists? ... yes Log directory writable? ... yes Tmp directory writable? ... yes Uploads directory exists? ... yes Uploads directory has correct permissions? ... yes Uploads directory tmp has correct permissions? ... skipped (no tmp uploads folder yet) Systemd unit files or init script exist? ... skipped (omnibus-gitlab has neither init script nor systemd units) Systemd unit files or init script up-to-date? ... skipped (omnibus-gitlab has neither init script nor systemd units) Projects have namespace: ... Exception: PG::UndefinedTable: ERROR: relation "projects" does not exist LINE 8: WHERE a.attrelid = '"projects"'::regclass ^

Redis version >= 6.0.0? ... yes Ruby version >= 2.7.2 ? ... yes (3.0.6) Git user has default SSH configuration? ... yes Active users: ... Exception: PG::UndefinedTable: ERROR: relation "users" does not exist LINE 8: WHERE a.attrelid = '"users"'::regclass ^

Is authorized keys file accessible? ... yes GitLab configured to store new projects in hashed storage? ... no Try fixing it: Please enable the setting Use hashed storage paths for newly created and renamed projects in GitLab's Admin panel to avoid security issues and ensure data integrity. For more information see: doc/administration/repository_storage_types.md All projects are in hashed storage? ... Exception: PG::UndefinedTable: ERROR: relation "projects" does not exist LINE 8: WHERE a.attrelid = '"projects"'::regclass ^

Checking GitLab App ... Finished

Checking GitLab subtasks ... Finished

Edited by Ron Aughenbaugh