Compilation results for aphlict2001.codfw.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 2876 |
|---|---|
| Resources added: | 8 |
| Resources removed: | 0 |
| Resources modified: | 92 |
| Change percentage: | 3.48% |
Resources only in the new catalog
- Ferm::Service[ssh_from_cumin_masters]
- Ferm::Service[full_monitoring_metrics_access_tcp]
- Ferm::Service[deployment_ssh]
- Ferm::Service[notification_server]
- Ferm::Service[phab_aphlict_admin_port]
- Ferm::Service[ssh_from_bastion]
- Ferm::Service[envoy_tls_termination_src_sets]
- Ferm::Service[full_monitoring_metrics_access_udp]
Resources modified
- File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv4.nft].orig +++ File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv6.nft].orig +++ File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/INTERNAL_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/INTERNAL_ipv6.nft].orig +++ File[/etc/nftables/sets/INTERNAL_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv6.nft].orig +++ File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv6.nft].orig +++ File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/FRACK_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/FRACK_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/FRACK_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv6.nft].orig +++ File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/input/10_ssh-from-bastion.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_ssh-from-bastion.nft].orig +++ File[/etc/nftables/input/10_ssh-from-bastion.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]', 'Service[nftables]']
- File[/etc/nftables/sets/LINK_LOCAL_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LINK_LOCAL_ipv4.nft].orig +++ File[/etc/nftables/sets/LINK_LOCAL_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/NETWORK_INFRA_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/NETWORK_INFRA_ipv6.nft].orig +++ File[/etc/nftables/sets/NETWORK_INFRA_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- Ferm::Service[phab_aphlict_admin_port]
- Parameters differences:
--- Ferm::Service[phab_aphlict_admin_port].orig +++ Ferm::Service[phab_aphlict_admin_port] + proto => tcp + ensure => present + desc => + prio => 10 + notrack => False + srange => ['phab1004.eqiad.wmnet'] + port => 22281
- File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv4.nft].orig +++ File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- Ferm::Service[notification_server]
- Parameters differences:
--- Ferm::Service[notification_server].orig +++ Ferm::Service[notification_server] + ensure => present + proto => tcp + desc => + prio => 10 + notrack => False + port => 22280
- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft].orig +++ File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv6.nft].orig +++ File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/MONITORING_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MONITORING_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/MONITORING_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/notrack/10_envoy_tls_termination_src_sets.nft]
- Parameters differences:
--- File[/etc/nftables/notrack/10_envoy_tls_termination_src_sets.nft].orig +++ File[/etc/nftables/notrack/10_envoy_tls_termination_src_sets.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]', 'Service[nftables]']
- File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft].orig +++ File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- Ferm::Service[ssh_from_cumin_masters]
- Parameters differences:
--- Ferm::Service[ssh_from_cumin_masters].orig +++ Ferm::Service[ssh_from_cumin_masters] + proto => tcp + ensure => present + desc => + prio => 10 + src_sets => ['CUMIN_MASTERS'] + notrack => False + port => 22
- Ferm::Service[full_monitoring_metrics_access_udp]
- Parameters differences:
--- Ferm::Service[full_monitoring_metrics_access_udp].orig +++ Ferm::Service[full_monitoring_metrics_access_udp] + proto => udp + port_range => [1, 65535] + desc => + prio => 10 + ensure => present + notrack => False + srange => ['prometheus2005.codfw.wmnet', 'prometheus2006.codfw.wmnet', 'prometheus2007.codfw.wmnet', 'prometheus2008.codfw.wmnet', '208.80.154.78', '2620:0:861:3:208:80:154:78', '208.80.153.42', '2620:0:860:2:208:80:153:42']
- Ferm::Service[ssh_from_bastion]
- Parameters differences:
--- Ferm::Service[ssh_from_bastion].orig +++ Ferm::Service[ssh_from_bastion] + proto => tcp + ensure => present + desc => + prio => 10 + notrack => False + srange => ['208.80.155.110', '2620:0:861:4:208:80:155:110', '208.80.154.7', '2620:0:861:1:208:80:154:7', '208.80.153.110', '2a02:ec80:300:3:185:15:59:99', '185.15.59.99', '2620:0:860:4:208:80:153:110', '103.102.166.6', '2001:df2:e500:1:103:102:166:6', '185.15.58.6', '2a02:ec80:600:1:185:15:58:6', '195.200.68.99', '2a02:ec80:700:3:195:200:68:99'] + port => 22
- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft].orig +++ File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv4.nft].orig +++ File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/input/10_notification_server.nft]
- Parameters differences:
--- File[/etc/nftables/input/10_notification_server.nft].orig +++ File[/etc/nftables/input/10_notification_server.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]', 'Service[nftables]']
- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv6.nft].orig +++ File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv4.nft].orig +++ File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv6.nft].orig +++ File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv6.nft].orig +++ File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft].orig +++ File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv6.nft].orig +++ File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- Ferm::Service[envoy_tls_termination_src_sets]
- Parameters differences:
--- Ferm::Service[envoy_tls_termination_src_sets].orig +++ Ferm::Service[envoy_tls_termination_src_sets] + proto => tcp + ensure => present + desc => + prio => 10 + src_sets => ['CACHES'] + notrack => True + port => 443
- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft].orig +++ File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/BASTION_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/BASTION_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/BASTION_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft].orig +++ File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv4.nft].orig +++ File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/CACHES_ipv6.nft]
- Parameters differences:
--- File[/etc/nftables/sets/CACHES_ipv6.nft].orig +++ File[/etc/nftables/sets/CACHES_ipv6.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv4.nft]
- Parameters differences:
--- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv4.nft].orig +++ File[/etc/nftables/sets/LABSTORE_HOSTS_ipv4.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- Ferm::Service[deployment_ssh]
- Parameters differences:
--- Ferm::Service[deployment_ssh].orig +++ Ferm::Service[deployment_ssh] + ensure => present + proto => tcp + desc => + prio => 10 + src_sets => ['DEPLOYMENT_HOSTS'] + notrack => False + port => 22
- File[/etc/nftables/100_base_puppet.nft]
- Parameters differences:
--- File[/etc/nftables/100_base_puppet.nft].orig +++ File[/etc/nftables/100_base_puppet.nft] @@ - notify => Service[nftables] + notify => ['Service[nftables]']
- File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv6.nft]
- Parameters differences:
- File[/etc/nftables/sets/KAFKA_BROKERS_MAIN_ipv6.nft]
- File[/etc/nftables/100_base_puppet.nft]
- Ferm::Service[deployment_ssh]
- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/CACHES_ipv6.nft]
- File[/etc/nftables/sets/SANDBOX_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/STAGING_KUBEPODS_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv6.nft]
- File[/etc/nftables/sets/BASTION_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/LABSTORE_HOSTS_ipv6.nft]
- Ferm::Service[envoy_tls_termination_src_sets]
- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv6.nft]
- File[/etc/nftables/sets/ZOOKEEPER_HOSTS_MAIN_ipv4.nft]
- File[/etc/nftables/sets/KAFKAMON_HOSTS_ipv6.nft]
- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv6.nft]
- File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv4.nft]
- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv6.nft]
- File[/etc/nftables/input/10_notification_server.nft]
- File[/etc/nftables/sets/DEPLOYMENT_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv4.nft]
- File[/etc/nftables/sets/ANALYTICS_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/CLOUD_NETWORKS_PUBLIC_ipv4.nft]
- Ferm::Service[ssh_from_bastion]
- Ferm::Service[full_monitoring_metrics_access_udp]
- Ferm::Service[ssh_from_cumin_masters]
- File[/etc/nftables/sets/INSTALL_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/KAFKA_BROKERS_JUMBO_ipv4.nft]
- File[/etc/nftables/notrack/10_envoy_tls_termination_src_sets.nft]
- File[/etc/nftables/sets/MONITORING_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/AUX_KUBEPODS_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/WIKIKUBE_KUBEPODS_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/DSE_KUBEPODS_NETWORKS_ipv6.nft]
- File[/etc/nftables/sets/MLSERVE_KUBEPODS_NETWORKS_ipv6.nft]
- Ferm::Service[notification_server]
- File[/etc/nftables/sets/MYSQL_ROOT_CLIENTS_ipv4.nft]
- File[/etc/nftables/sets/LABS_NETWORKS_ipv4.nft]
- Ferm::Service[phab_aphlict_admin_port]
- File[/etc/nftables/sets/NETWORK_INFRA_ipv6.nft]
- File[/etc/nftables/sets/LINK_LOCAL_ipv4.nft]
- File[/etc/nftables/input/10_ssh-from-bastion.nft]
- File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv6.nft]
- File[/etc/nftables/sets/FRACK_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/DRUID_PUBLIC_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/ZOOKEEPER_FLINK_HOSTS_ipv4.nft]
- File[/etc/nftables/sets/DOMAIN_NETWORKS_ipv4.nft]
- File[/etc/nftables/sets/PROMETHEUS_HOSTS_ipv6.nft]
- File[/etc/nftables/sets/LOAD_BALANCER_HEALTH_CHECKS_ipv6.nft]
- File[/etc/nftables/sets/INTERNAL_ipv6.nft]
- File[/etc/nftables/sets/KAFKA_BROKERS_LOGGING_ipv6.nft]
- Parameters differences: