{"host": "packager-etherpad01.packaging.eqiad1.wikimedia.cloud", "state": "diff", "description": "Differences to Puppet defined resources", "diff": {"full": {"total": 1309, "only_in_self": [], "only_in_other": ["Class[Profile::Firewall::Nftables_base_sets]", "Nftables::Service[package_builder_rsync]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]", "Nftables::Set[ANALYTICS_NETWORKS]", "Nftables::Set[AUX_KUBEPODS_NETWORKS]", "Nftables::Set[BASTION_HOSTS]", "Nftables::Set[CACHES]", "Nftables::Set[CLOUD_NETWORKS]", "Nftables::Set[CLOUD_NETWORKS_PUBLIC]", "Nftables::Set[CLOUD_PRIVATE_NETWORKS]", "Nftables::Set[CUMIN_MASTERS]", "Nftables::Set[DEPLOYMENT_HOSTS]", "Nftables::Set[DOMAIN_NETWORKS]", "Nftables::Set[DRUID_PUBLIC_HOSTS]", "Nftables::Set[DSE_KUBEPODS_NETWORKS]", "Nftables::Set[FRACK_NETWORKS]", "Nftables::Set[INTERNAL]", "Nftables::Set[KAFKAMON_HOSTS]", "Nftables::Set[KAFKA_BROKERS_JUMBO]", "Nftables::Set[KAFKA_BROKERS_LOGGING]", "Nftables::Set[KAFKA_BROKERS_MAIN]", "Nftables::Set[LABSTORE_HOSTS]", "Nftables::Set[LABS_NETWORKS]", "Nftables::Set[LINK_LOCAL]", "Nftables::Set[MGMT_NETWORKS]", "Nftables::Set[MLSERVE_KUBEPODS_NETWORKS]", "Nftables::Set[MLSTAGE_KUBEPODS_NETWORKS]", "Nftables::Set[MW_APPSERVER_NETWORKS]", "Nftables::Set[MYSQL_ROOT_CLIENTS]", "Nftables::Set[NETWORK_INFRA]", "Nftables::Set[PRODUCTION_NETWORKS]", "Nftables::Set[SANDBOX_NETWORKS]", "Nftables::Set[STAGING_KUBEPODS_NETWORKS]", "Nftables::Set[WIKIKUBE_KUBEPODS_NETWORKS]", "Nftables::Set[ZOOKEEPER_FLINK_HOSTS]", "Nftables::Set[ZOOKEEPER_HOSTS_MAIN]"], "resource_diffs": [{"resource": "Nftables::Set[KAFKA_BROKERS_MAIN]", "parameters": "--- Nftables::Set[KAFKA_BROKERS_MAIN].orig\n+++ Nftables::Set[KAFKA_BROKERS_MAIN]\n\n+    ensure => present\n+    hosts  => ['10.192.5.9', '2620:0:860:106:10:192:5:9', '10.192.22.6', '2620:0:860:112:10:192:22:6', '10.192.32.4', '2620:0:860:103:10:192:32:4', '10.192.48.33', '2620:0:860:104:10:192:48:33', '10.192.48.35', '2620:0:860:104:10:192:48:35', '10.64.0.101', '2620:0:861:101:10:64:0:101', '10.64.16.30', '2620:0:861:102:10:64:16:30', '10.64.32.45', '2620:0:861:103:10:64:32:45', '10.64.48.37', '2620:0:861:107:10:64:48:37', '10.64.152.5', '2620:0:861:120:10:64:152:5']\n"}, {"resource": "Nftables::Service[ssh-from-cumin-masters]", "parameters": "--- Nftables::Service[ssh-from-cumin-masters].orig\n+++ Nftables::Service[ssh-from-cumin-masters]\n\n+    proto    => tcp\n+    prio     => 10\n+    ensure   => present\n+    notrack  => False\n+    port     => 22\n+    desc     => \n+    src_sets => ['CUMIN_MASTERS']\n"}, {"resource": "Nftables::Set[PRODUCTION_NETWORKS]", "parameters": "--- Nftables::Set[PRODUCTION_NETWORKS].orig\n+++ Nftables::Set[PRODUCTION_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.128.0.0/24', '10.128.2.0/24', '10.132.0.0/24', '10.136.0.0/24', '10.136.1.0/24', '10.140.0.0/24', '10.140.1.0/24', '10.140.2.0/24', '10.192.0.0/22', '10.192.10.0/24', '10.192.11.0/24', '10.192.12.0/24', '10.192.13.0/24', '10.192.14.0/24', '10.192.15.0/24', '10.192.16.0/22', '10.192.20.0/24', '10.192.21.0/24', '10.192.22.0/24', '10.192.23.0/24', '10.192.24.0/23', '10.192.26.0/24', '10.192.27.0/24', '10.192.28.0/24', '10.192.29.0/24', '10.192.30.0/24', '10.192.31.0/24', '10.192.32.0/22', '10.192.36.0/24', '10.192.37.0/24', '10.192.38.0/24', '10.192.39.0/24', '10.192.4.0/24', '10.192.40.0/24', '10.192.41.0/24', '10.192.42.0/24', '10.192.43.0/24', '10.192.44.0/24', '10.192.45.0/24', '10.192.46.0/24', '10.192.47.0/24', '10.192.48.0/22', '10.192.5.0/24', '10.192.52.0/24', '10.192.56.0/24', '10.192.57.0/24', '10.192.58.0/24', '10.192.59.0/24', '10.192.6.0/24', '10.192.64.0/21', '10.192.7.0/24', '10.192.72.0/24', '10.192.76.0/24', '10.192.8.0/24', '10.192.80.0/20', '10.192.9.0/24', '10.192.96.0/21', '10.194.0.0/20', '10.194.128.0/17', '10.194.16.0/21', '10.194.61.0/24', '10.194.62.0/23', '10.194.64.0/20', '10.194.80.0/21', '10.2.1.0/24', '10.2.2.0/24', '10.2.3.0/24', '10.2.4.0/24', '10.2.5.0/24', '10.2.6.0/24', '10.2.7.0/24', '10.64.0.0/22', '10.64.130.0/24', '10.64.131.0/24', '10.64.132.0/24', '10.64.133.0/24', '10.64.134.0/24', '10.64.135.0/24', '10.64.136.0/24', '10.64.137.0/24', '10.64.138.0/24', '10.64.139.0/24', '10.64.140.0/24', '10.64.141.0/24', '10.64.142.0/24', '10.64.143.0/24', '10.64.144.0/24', '10.64.145.0/24', '10.64.148.0/24', '10.64.149.0/24', '10.64.150.0/24', '10.64.151.0/24', '10.64.152.0/24', '10.64.153.0/24', '10.64.154.0/24', '10.64.155.0/24', '10.64.156.0/24', '10.64.157.0/24', '10.64.158.0/24', '10.64.159.0/24', '10.64.16.0/22', '10.64.160.0/24', '10.64.161.0/24', '10.64.162.0/24', '10.64.163.0/24', '10.64.164.0/24', '10.64.165.0/24', '10.64.166.0/24', '10.64.167.0/24', '10.64.169.0/24', '10.64.170.0/24', '10.64.171.0/24', '10.64.172.0/24', '10.64.173.0/24', '10.64.174.0/24', '10.64.175.0/24', '10.64.176.0/24', '10.64.177.0/24', '10.64.178.0/24', '10.64.179.0/24', '10.64.180.0/24', '10.64.181.0/24', '10.64.182.0/24', '10.64.183.0/24', '10.64.184.0/24', '10.64.185.0/24', '10.64.186.0/24', '10.64.187.0/24', '10.64.188.0/24', '10.64.189.0/24', '10.64.190.0/24', '10.64.20.0/24', '10.64.21.0/24', '10.64.24.0/23', '10.64.32.0/22', '10.64.36.0/24', '10.64.48.0/22', '10.64.5.0/24', '10.64.53.0/24', '10.64.64.0/21', '10.64.72.0/24', '10.64.76.0/24', '10.67.0.0/20', '10.67.128.0/17', '10.67.16.0/21', '10.67.24.0/21', '10.67.32.0/20', '10.67.64.0/20', '10.67.80.0/21', '10.80.0.0/24', '10.80.1.0/24', '10.80.2.0/24', '103.102.166.0/28', '103.102.166.224/27', '185.15.58.0/27', '185.15.58.224/27', '185.15.58.32/27', '185.15.59.0/27', '185.15.59.224/27', '185.15.59.32/27', '185.15.59.96/27', '195.200.68.0/27', '195.200.68.224/27', '195.200.68.32/27', '195.200.68.96/27', '198.35.26.0/28', '198.35.26.96/27', '198.35.26.96/27', '2001:df2:e500:101::/64', '2001:df2:e500:1::/64', '2001:df2:e500:ed1a::/64', '208.80.152.128/27', '208.80.153.0/27', '208.80.153.224/27', '208.80.153.32/27', '208.80.153.64/27', '208.80.153.96/27', '208.80.154.0/26', '208.80.154.128/26', '208.80.154.224/27', '208.80.154.64/26', '208.80.155.96/27', '2620:0:860:100::/64', '2620:0:860:101::/64', '2620:0:860:102::/64', '2620:0:860:103::/64', '2620:0:860:104::/64', '2620:0:860:105::/64', '2620:0:860:106::/64', '2620:0:860:107::/64', '2620:0:860:108::/64', '2620:0:860:109::/64', '2620:0:860:10a::/64', '2620:0:860:10b::/64', '2620:0:860:10c::/64', '2620:0:860:10d::/64', '2620:0:860:10e::/64', '2620:0:860:10f::/64', '2620:0:860:110::/64', '2620:0:860:111::/64', '2620:0:860:112::/64', '2620:0:860:113::/64', '2620:0:860:114::/64', '2620:0:860:115::/64', '2620:0:860:116::/64', '2620:0:860:118::/64', '2620:0:860:119::/64', '2620:0:860:11a::/64', '2620:0:860:11b::/64', '2620:0:860:11c::/64', '2620:0:860:11d::/64', '2620:0:860:11e::/64', '2620:0:860:11f::/64', '2620:0:860:120::/64', '2620:0:860:121::/64', '2620:0:860:122::/64', '2620:0:860:123::/64', '2620:0:860:124::/64', '2620:0:860:125::/64', '2620:0:860:126::/64', '2620:0:860:127::/64', '2620:0:860:12b::/64', '2620:0:860:12c::/64', '2620:0:860:12d::/64', '2620:0:860:12e::/64', '2620:0:860:140::/64', '2620:0:860:1::/64', '2620:0:860:2::/64', '2620:0:860:300::/64', '2620:0:860:301::/64', '2620:0:860:302::/64', '2620:0:860:303::/64', '2620:0:860:304::/64', '2620:0:860:305::/64', '2620:0:860:307::/64', '2620:0:860:308::/64', '2620:0:860:3::/64', '2620:0:860:4::/64', '2620:0:860:5::/64', '2620:0:860:babe::/64', '2620:0:860:babf::/64', '2620:0:860:cabe::/64', '2620:0:860:cabf::/64', '2620:0:860:ed1a::/64', '2620:0:861:100::/64', '2620:0:861:101::/64', '2620:0:861:102::/64', '2620:0:861:103::/64', '2620:0:861:104::/64', '2620:0:861:105::/64', '2620:0:861:106::/64', '2620:0:861:107::/64', '2620:0:861:108::/64', '2620:0:861:109::/64', '2620:0:861:10a::/64', '2620:0:861:10b::/64', '2620:0:861:10c::/64', '2620:0:861:10d::/64', '2620:0:861:10e::/64', '2620:0:861:10f::/64', '2620:0:861:110::/64', '2620:0:861:111::/64', '2620:0:861:112::/64', '2620:0:861:113::/64', '2620:0:861:114::/64', '2620:0:861:115::/64', '2620:0:861:116::/64', '2620:0:861:117::/64', '2620:0:861:118::/64', '2620:0:861:119::/64', '2620:0:861:11a::/64', '2620:0:861:11c::/64', '2620:0:861:11d::/64', '2620:0:861:11e::/64', '2620:0:861:11f::/64', '2620:0:861:120::/64', '2620:0:861:121::/64', '2620:0:861:122::/64', '2620:0:861:123::/64', '2620:0:861:124::/64', '2620:0:861:125::/64', '2620:0:861:126::/64', '2620:0:861:127::/64', '2620:0:861:128::/64', '2620:0:861:129::/64', '2620:0:861:12a::/64', '2620:0:861:12b::/64', '2620:0:861:12c::/64', '2620:0:861:12d::/64', '2620:0:861:12e::/64', '2620:0:861:12f::/64', '2620:0:861:131::/64', '2620:0:861:132::/64', '2620:0:861:133::/64', '2620:0:861:134::/64', '2620:0:861:135::/64', '2620:0:861:136::/64', '2620:0:861:137::/64', '2620:0:861:138::/64', '2620:0:861:139::/64', '2620:0:861:13a::/64', '2620:0:861:13b::/64', '2620:0:861:13c::/64', '2620:0:861:13d::/64', '2620:0:861:13e::/64', '2620:0:861:13f::/64', '2620:0:861:140::/64', '2620:0:861:141::/64', '2620:0:861:142::/64', '2620:0:861:143::/64', '2620:0:861:144::/64', '2620:0:861:145::/64', '2620:0:861:1::/64', '2620:0:861:2::/64', '2620:0:861:300::/64', '2620:0:861:301::/116', '2620:0:861:302::/64', '2620:0:861:303::/116', '2620:0:861:304::/116', '2620:0:861:305::/64', '2620:0:861:3::/64', '2620:0:861:4::/64', '2620:0:861:babe::/64', '2620:0:861:babf::/116', '2620:0:861:cabe::/64', '2620:0:861:cabf::/116', '2620:0:861:ed1a::/64', '2620:0:863:101::/64', '2620:0:863:103::/64', '2620:0:863:1::/64', '2620:0:863:3::/64', '2620:0:863:ed1a::/64', '2a02:ec80:300:101::/64', '2a02:ec80:300:102::/64', '2a02:ec80:300:103::/64', '2a02:ec80:300:1::/64', '2a02:ec80:300:2::/64', '2a02:ec80:300:3::/64', '2a02:ec80:300:ed1a::/64', '2a02:ec80:600:101::/64', '2a02:ec80:600:102::/64', '2a02:ec80:600:1::/64', '2a02:ec80:600:2::/64', '2a02:ec80:600:ed1a::/64', '2a02:ec80:700:101::/64', '2a02:ec80:700:102::/64', '2a02:ec80:700:103::/64', '2a02:ec80:700:1::/64', '2a02:ec80:700:2::/64', '2a02:ec80:700:3::/64', '2a02:ec80:700:ed1a::/64']\n"}, {"resource": "Nftables::Set[BASTION_HOSTS]", "parameters": "--- Nftables::Set[BASTION_HOSTS].orig\n+++ Nftables::Set[BASTION_HOSTS]\n\n+    ensure => present\n+    hosts  => ['172.16.17.143', '2a02:ec80:a000:1::156', '172.16.18.237', '2a02:ec80:a000:1::442', '172.16.1.220']\n"}, {"resource": "Nftables::Set[MYSQL_ROOT_CLIENTS]", "parameters": "--- Nftables::Set[MYSQL_ROOT_CLIENTS].orig\n+++ Nftables::Set[MYSQL_ROOT_CLIENTS]\n\n+    ensure => present\n+    hosts  => ['10.64.16.90', '10.192.16.191', '10.64.16.154', '10.192.32.49', '208.80.155.103', '208.80.154.9', '10.64.0.20']\n"}, {"resource": "Nftables::Set[INTERNAL]", "parameters": "--- Nftables::Set[INTERNAL].orig\n+++ Nftables::Set[INTERNAL]\n\n+    ensure => present\n+    hosts  => ['10.0.0.0/8', '2620:0:860:100::/56', '2620:0:861:100::/56', '2620:0:863:100::/56', '2a02:ec80:300:100::/56', '2a02:ec80:600:100::/56', '2a02:ec80:700:100::/56', '2001:df2:e500:100::/56', '2a02:ec80:ff00:100::/56']\n"}, {"resource": "Nftables::Set[KAFKA_BROKERS_JUMBO]", "parameters": "--- Nftables::Set[KAFKA_BROKERS_JUMBO].orig\n+++ Nftables::Set[KAFKA_BROKERS_JUMBO]\n\n+    ensure => present\n+    hosts  => ['10.64.130.10', '2620:0:861:109:10:64:130:10', '10.64.131.16', '2620:0:861:10a:10:64:131:16', '10.64.132.21', '2620:0:861:10b:10:64:132:21', '10.64.134.9', '2620:0:861:10d:10:64:134:9', '10.64.135.16', '2620:0:861:10e:10:64:135:16', '10.64.136.11', '2620:0:861:10f:10:64:136:11', '10.64.154.15', '2620:0:861:122:10:64:154:15', '10.64.160.16', '2620:0:861:128:10:64:160:16', '10.64.0.126', '2620:0:861:101:10:64:0:126']\n"}, {"resource": "Nftables::Set[SANDBOX_NETWORKS]", "parameters": "--- Nftables::Set[SANDBOX_NETWORKS].orig\n+++ Nftables::Set[SANDBOX_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['103.102.166.16/28', '185.15.59.72/29', '195.200.68.64/29', '198.35.26.240/28', '2001:df2:e500:201::/64', '208.80.152.240/28', '208.80.155.64/28', '2620:0:860:201::/64', '2620:0:861:202::/64', '2620:0:863:201::/64', '2a02:ec80:300:202::/64', '2a02:ec80:700:201::/64']\n"}, {"resource": "Nftables::Set[STAGING_KUBEPODS_NETWORKS]", "parameters": "--- Nftables::Set[STAGING_KUBEPODS_NETWORKS].orig\n+++ Nftables::Set[STAGING_KUBEPODS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.64.64.0/21', '2620:0:861:babe::/64', '10.192.64.0/21', '2620:0:860:babe::/64']\n"}, {"resource": "Nftables::Set[DRUID_PUBLIC_HOSTS]", "parameters": "--- Nftables::Set[DRUID_PUBLIC_HOSTS].orig\n+++ Nftables::Set[DRUID_PUBLIC_HOSTS]\n\n+    ensure => present\n+    hosts  => ['10.64.131.9', '2620:0:861:10a:10:64:131:9', '10.64.132.12', '2620:0:861:10b:10:64:132:12', '10.64.135.9', '2620:0:861:10e:10:64:135:9', '10.64.32.101', '2620:0:861:103:10:64:32:101', '10.64.48.185', '2620:0:861:107:10:64:48:185']\n"}, {"resource": "Nftables::Set[DEPLOYMENT_HOSTS]", "parameters": "--- Nftables::Set[DEPLOYMENT_HOSTS].orig\n+++ Nftables::Set[DEPLOYMENT_HOSTS]\n\n+    ensure => present\n+    hosts  => ['10.64.16.93', '2620:0:861:102:10:64:16:93', '10.192.32.7', '2620:0:860:103:10:192:32:7']\n"}, {"resource": "Nftables::Set[CLOUD_NETWORKS_PUBLIC]", "parameters": "--- Nftables::Set[CLOUD_NETWORKS_PUBLIC].orig\n+++ Nftables::Set[CLOUD_NETWORKS_PUBLIC]\n\n+    ensure => present\n+    hosts  => ['185.15.56.0/25', '185.15.56.160/28', '185.15.57.0/29', '185.15.57.16/29', '185.15.57.24/29', '2a02:ec80:a000:4000::/64', '2a02:ec80:a100:4000::/64']\n"}, {"resource": "Nftables::Set[WIKIKUBE_KUBEPODS_NETWORKS]", "parameters": "--- Nftables::Set[WIKIKUBE_KUBEPODS_NETWORKS].orig\n+++ Nftables::Set[WIKIKUBE_KUBEPODS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.67.128.0/17', '2620:0:861:cabe::/64', '10.194.128.0/17', '2620:0:860:cabe::/64']\n"}, {"resource": "Nftables::Set[CLOUD_NETWORKS]", "parameters": "--- Nftables::Set[CLOUD_NETWORKS].orig\n+++ Nftables::Set[CLOUD_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['172.16.0.0/21', '172.16.128.0/24', '172.16.129.0/24', '172.16.130.0/24', '172.16.131.0/24', '172.16.16.0/21', '172.16.24.0/24', '172.16.8.0/21', '172.20.1.0/24', '172.20.2.0/24', '172.20.254.0/24', '172.20.255.0/24', '172.20.3.0/24', '172.20.4.0/24', '172.20.5.0/24', '185.15.56.0/25', '185.15.56.160/28', '185.15.57.0/29', '185.15.57.16/29', '185.15.57.24/29', '2a02:ec80:a000:100::/64', '2a02:ec80:a000:1::/64', '2a02:ec80:a000:201::/64', '2a02:ec80:a000:202::/64', '2a02:ec80:a000:203::/64', '2a02:ec80:a000:204::/64', '2a02:ec80:a000:2ff::/64', '2a02:ec80:a000:4000::/64', '2a02:ec80:a100:100::/64', '2a02:ec80:a100:1::/64', '2a02:ec80:a100:205::/64', '2a02:ec80:a100:2ff::/64', '2a02:ec80:a100:4000::/64']\n"}, {"resource": "Nftables::Set[ANALYTICS_NETWORKS]", "parameters": "--- Nftables::Set[ANALYTICS_NETWORKS].orig\n+++ Nftables::Set[ANALYTICS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.64.137.0/24', '10.64.138.0/24', '10.64.139.0/24', '10.64.140.0/24', '10.64.142.0/24', '10.64.143.0/24', '10.64.144.0/24', '10.64.145.0/24', '10.64.153.0/24', '10.64.155.0/24', '10.64.157.0/24', '10.64.159.0/24', '10.64.161.0/24', '10.64.163.0/24', '10.64.165.0/24', '10.64.167.0/24', '10.64.170.0/24', '10.64.172.0/24', '10.64.174.0/24', '10.64.176.0/24', '10.64.178.0/24', '10.64.180.0/24', '10.64.182.0/24', '10.64.184.0/24', '10.64.186.0/24', '10.64.188.0/24', '10.64.190.0/24', '10.64.21.0/24', '10.64.36.0/24', '10.64.5.0/24', '10.64.53.0/24', '2620:0:861:100::/64', '2620:0:861:104::/64', '2620:0:861:105::/64', '2620:0:861:106::/64', '2620:0:861:108::/64', '2620:0:861:110::/64', '2620:0:861:111::/64', '2620:0:861:112::/64', '2620:0:861:114::/64', '2620:0:861:115::/64', '2620:0:861:116::/64', '2620:0:861:117::/64', '2620:0:861:11a::/64', '2620:0:861:121::/64', '2620:0:861:123::/64', '2620:0:861:125::/64', '2620:0:861:127::/64', '2620:0:861:129::/64', '2620:0:861:12b::/64', '2620:0:861:12d::/64', '2620:0:861:12f::/64', '2620:0:861:132::/64', '2620:0:861:134::/64', '2620:0:861:136::/64', '2620:0:861:138::/64', '2620:0:861:13a::/64', '2620:0:861:13c::/64', '2620:0:861:13e::/64', '2620:0:861:141::/64', '2620:0:861:143::/64', '2620:0:861:145::/64']\n"}, {"resource": "Nftables::Set[NETWORK_INFRA]", "parameters": "--- Nftables::Set[NETWORK_INFRA].orig\n+++ Nftables::Set[NETWORK_INFRA]\n\n+    ensure => present\n+    hosts  => ['185.15.59.128/27', '2a02:ec80:300:fe00::/55', '198.35.26.128/27', '2620:0:863:fe00::/55', '208.80.153.192/27', '2620:0:860:fe00::/55', '10.192.255.0/24', '2620:0:860:13f::/64', '10.192.253.0/24', '2620:0:860:139::/64', '208.80.154.192/27', '2620:0:861:fe00::/55', '10.64.146.0/24', '2620:0:861:11b::/128', '10.64.168.0/24', '2620:0:861:130::/64', '10.64.147.0/24', '103.102.166.128/27', '2001:df2:e500:fe00::/55', '185.15.58.128/27', '2a02:ec80:600:fe00::/55', '195.200.68.128/27', '2a02:ec80:700:fe00::/55']\n"}, {"resource": "Nftables::Set[MGMT_NETWORKS]", "parameters": "--- Nftables::Set[MGMT_NETWORKS].orig\n+++ Nftables::Set[MGMT_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.65.0.0/16', '10.128.128.0/17', '10.193.0.0/16', '10.80.128.0/17', '10.132.128.0/17', '10.136.128.0/17', '10.140.128.0/17']\n"}, {"resource": "Nftables::Set[CUMIN_MASTERS]", "parameters": "--- Nftables::Set[CUMIN_MASTERS].orig\n+++ Nftables::Set[CUMIN_MASTERS]\n\n+    ensure => present\n+    hosts  => ['172.16.1.220']\n"}, {"resource": "Nftables::Set[ZOOKEEPER_HOSTS_MAIN]", "parameters": "--- Nftables::Set[ZOOKEEPER_HOSTS_MAIN].orig\n+++ Nftables::Set[ZOOKEEPER_HOSTS_MAIN]\n\n+    ensure => present\n+    hosts  => ['10.64.0.207', '2620:0:861:101:10:64:0:207', '10.64.16.110', '2620:0:861:102:10:64:16:110', '10.64.48.154', '2620:0:861:107:10:64:48:154', '10.192.16.45', '2620:0:860:102:10:192:16:45', '10.192.32.52', '2620:0:860:103:10:192:32:52', '10.192.48.59', '2620:0:860:104:10:192:48:59']\n"}, {"resource": "Nftables::Set[MLSTAGE_KUBEPODS_NETWORKS]", "parameters": "--- Nftables::Set[MLSTAGE_KUBEPODS_NETWORKS].orig\n+++ Nftables::Set[MLSTAGE_KUBEPODS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.194.61.0/24', '2620:0:860:302::/64']\n"}, {"resource": "Nftables::Service[ssh-from-bastion]", "parameters": "--- Nftables::Service[ssh-from-bastion].orig\n+++ Nftables::Service[ssh-from-bastion]\n\n+    proto   => tcp\n+    prio    => 10\n+    ensure  => present\n+    notrack => False\n+    port    => 22\n+    desc    => \n+    src_ips => ['172.16.1.220', '172.16.17.143', '172.16.18.237', '2a02:ec80:a000:1::156', '2a02:ec80:a000:1::442']\n"}, {"resource": "Nftables::Set[LABSTORE_HOSTS]", "parameters": "--- Nftables::Set[LABSTORE_HOSTS].orig\n+++ Nftables::Set[LABSTORE_HOSTS]\n\n+    ensure => present\n+    hosts  => ['208.80.154.142', '2620:0:861:2:208:80:154:142', '208.80.154.71', '2620:0:861:3:208:80:154:71']\n"}, {"resource": "Class[Profile::Firewall::Nftables_base_sets]", "parameters": "--- Class[Profile::Firewall::Nftables_base_sets].orig\n+++ Class[Profile::Firewall::Nftables_base_sets]\n\n+    install_hosts         => {}\n+    labstore_hosts        => ['208.80.154.142', '2620:0:861:2:208:80:154:142', '208.80.154.71', '2620:0:861:3:208:80:154:71']\n+    monitoring_hosts      => []\n+    kafkamon_hosts        => ['10.64.32.11', '2620:0:861:103:10:64:32:11', '10.192.16.139', '2620:0:860:102:10:192:16:139']\n+    cumin_masters         => ['172.16.1.220']\n+    kafka_brokers_main    => ['10.192.5.9', '2620:0:860:106:10:192:5:9', '10.192.22.6', '2620:0:860:112:10:192:22:6', '10.192.32.4', '2620:0:860:103:10:192:32:4', '10.192.48.33', '2620:0:860:104:10:192:48:33', '10.192.48.35', '2620:0:860:104:10:192:48:35', '10.64.0.101', '2620:0:861:101:10:64:0:101', '10.64.16.30', '2620:0:861:102:10:64:16:30', '10.64.32.45', '2620:0:861:103:10:64:32:45', '10.64.48.37', '2620:0:861:107:10:64:48:37', '10.64.152.5', '2620:0:861:120:10:64:152:5']\n+    lb_health_checks      => []\n+    bastion_hosts         => ['172.16.17.143', '2a02:ec80:a000:1::156', '172.16.18.237', '2a02:ec80:a000:1::442', '172.16.1.220']\n+    zookeeper_hosts_main  => ['10.64.0.207', '2620:0:861:101:10:64:0:207', '10.64.16.110', '2620:0:861:102:10:64:16:110', '10.64.48.154', '2620:0:861:107:10:64:48:154', '10.192.16.45', '2620:0:860:102:10:192:16:45', '10.192.32.52', '2620:0:860:103:10:192:32:52', '10.192.48.59', '2620:0:860:104:10:192:48:59']\n+    prometheus_nodes      => []\n+    cache_hosts           => ['172.16.19.232', '2a02:ec80:a000:1::2f3', '172.16.17.55', '2a02:ec80:a000:1::31d']\n+    kafka_brokers_jumbo   => ['10.64.130.10', '2620:0:861:109:10:64:130:10', '10.64.131.16', '2620:0:861:10a:10:64:131:16', '10.64.132.21', '2620:0:861:10b:10:64:132:21', '10.64.134.9', '2620:0:861:10d:10:64:134:9', '10.64.135.16', '2620:0:861:10e:10:64:135:16', '10.64.136.11', '2620:0:861:10f:10:64:136:11', '10.64.154.15', '2620:0:861:122:10:64:154:15', '10.64.160.16', '2620:0:861:128:10:64:160:16', '10.64.0.126', '2620:0:861:101:10:64:0:126']\n+    mysql_root_clients    => ['10.64.16.90', '10.192.16.191', '10.64.16.154', '10.192.32.49', '208.80.155.103', '208.80.154.9', '10.64.0.20']\n+    kafka_brokers_logging => ['10.64.16.205', '2620:0:861:102:10:64:16:205', '10.64.32.142', '2620:0:861:103:10:64:32:142', '10.64.48.66', '2620:0:861:107:10:64:48:66', '10.64.131.13', '2620:0:861:10a:10:64:131:13', '10.64.135.13', '2620:0:861:10e:10:64:135:13', '10.192.0.94', '2620:0:860:101:10:192:0:94', '10.192.16.50', '2620:0:860:102:10:192:16:50', '10.192.32.24', '2620:0:860:103:10:192:32:24', '10.192.16.38', '2620:0:860:102:10:192:16:38', '10.192.48.85', '2620:0:860:104:10:192:48:85']\n+    zookeeper_flink_hosts => ['10.64.16.9', '2620:0:861:102:10:64:16:9', '10.64.0.8', '2620:0:861:101:10:64:0:8', '10.64.32.41', '2620:0:861:103:10:64:32:41', '10.192.16.227', '2620:0:860:102:10:192:16:227', '10.192.32.179', '2620:0:860:103:10:192:32:179', '10.192.48.219', '2620:0:860:104:10:192:48:219']\n+    druid_public_hosts    => ['10.64.131.9', '2620:0:861:10a:10:64:131:9', '10.64.132.12', '2620:0:861:10b:10:64:132:12', '10.64.135.9', '2620:0:861:10e:10:64:135:9', '10.64.32.101', '2620:0:861:103:10:64:32:101', '10.64.48.185', '2620:0:861:107:10:64:48:185']\n+    install_hosts6        => {}\n+    deployment_hosts      => ['10.64.16.93', '2620:0:861:102:10:64:16:93', '10.192.32.7', '2620:0:860:103:10:192:32:7']\n"}, {"resource": "Nftables::Set[LINK_LOCAL]", "parameters": "--- Nftables::Set[LINK_LOCAL].orig\n+++ Nftables::Set[LINK_LOCAL]\n\n+    ensure => present\n+    hosts  => ['169.254.0.0/16', 'fe80::/10']\n"}, {"resource": "Nftables::Set[DOMAIN_NETWORKS]", "parameters": "--- Nftables::Set[DOMAIN_NETWORKS].orig\n+++ Nftables::Set[DOMAIN_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['172.16.0.0/21', '172.16.128.0/24', '172.16.129.0/24', '172.16.130.0/24', '172.16.131.0/24', '172.16.16.0/21', '172.16.24.0/24', '172.16.8.0/21', '172.20.1.0/24', '172.20.2.0/24', '172.20.254.0/24', '172.20.255.0/24', '172.20.3.0/24', '172.20.4.0/24', '172.20.5.0/24', '185.15.56.0/25', '185.15.56.160/28', '185.15.57.0/29', '185.15.57.16/29', '185.15.57.24/29', '2a02:ec80:a000:100::/64', '2a02:ec80:a000:1::/64', '2a02:ec80:a000:201::/64', '2a02:ec80:a000:202::/64', '2a02:ec80:a000:203::/64', '2a02:ec80:a000:204::/64', '2a02:ec80:a000:2ff::/64', '2a02:ec80:a000:4000::/64', '2a02:ec80:a100:100::/64', '2a02:ec80:a100:1::/64', '2a02:ec80:a100:205::/64', '2a02:ec80:a100:2ff::/64', '2a02:ec80:a100:4000::/64']\n"}, {"resource": "Nftables::Set[DSE_KUBEPODS_NETWORKS]", "parameters": "--- Nftables::Set[DSE_KUBEPODS_NETWORKS].orig\n+++ Nftables::Set[DSE_KUBEPODS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.67.24.0/21', '2620:0:861:302::/64', '10.192.96.0/21', '2620:0:860:308::/64']\n"}, {"resource": "Nftables::Set[CLOUD_PRIVATE_NETWORKS]", "parameters": "--- Nftables::Set[CLOUD_PRIVATE_NETWORKS].orig\n+++ Nftables::Set[CLOUD_PRIVATE_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['172.20.1.0/24', '172.20.2.0/24', '172.20.3.0/24', '172.20.4.0/24', '2a02:ec80:a000:201::/64', '2a02:ec80:a000:202::/64', '2a02:ec80:a000:203::/64', '2a02:ec80:a000:204::/64', '172.20.5.0/24', '2a02:ec80:a100:205::/64']\n"}, {"resource": "Nftables::Set[LABS_NETWORKS]", "parameters": "--- Nftables::Set[LABS_NETWORKS].orig\n+++ Nftables::Set[LABS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['172.16.0.0/21', '172.16.128.0/24', '172.16.129.0/24', '172.16.130.0/24', '172.16.131.0/24', '172.16.16.0/21', '172.16.24.0/24', '172.16.8.0/21', '172.20.1.0/24', '172.20.2.0/24', '172.20.254.0/24', '172.20.255.0/24', '172.20.3.0/24', '172.20.4.0/24', '172.20.5.0/24', '185.15.56.0/25', '185.15.56.160/28', '185.15.57.0/29', '185.15.57.16/29', '185.15.57.24/29', '2a02:ec80:a000:100::/64', '2a02:ec80:a000:1::/64', '2a02:ec80:a000:201::/64', '2a02:ec80:a000:202::/64', '2a02:ec80:a000:203::/64', '2a02:ec80:a000:204::/64', '2a02:ec80:a000:2ff::/64', '2a02:ec80:a000:4000::/64', '2a02:ec80:a100:100::/64', '2a02:ec80:a100:1::/64', '2a02:ec80:a100:205::/64', '2a02:ec80:a100:2ff::/64', '2a02:ec80:a100:4000::/64']\n"}, {"resource": "Nftables::Set[MW_APPSERVER_NETWORKS]", "parameters": "--- Nftables::Set[MW_APPSERVER_NETWORKS].orig\n+++ Nftables::Set[MW_APPSERVER_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['172.16.0.0/21', '172.16.128.0/24', '172.16.129.0/24', '172.16.130.0/24', '172.16.131.0/24', '172.16.16.0/21', '172.16.24.0/24', '172.16.8.0/21', '172.20.1.0/24', '172.20.2.0/24', '172.20.254.0/24', '172.20.255.0/24', '172.20.3.0/24', '172.20.4.0/24', '172.20.5.0/24', '185.15.56.0/25', '185.15.56.160/28', '185.15.57.0/29', '185.15.57.16/29', '185.15.57.24/29', '2a02:ec80:a000:100::/64', '2a02:ec80:a000:1::/64', '2a02:ec80:a000:201::/64', '2a02:ec80:a000:202::/64', '2a02:ec80:a000:203::/64', '2a02:ec80:a000:204::/64', '2a02:ec80:a000:2ff::/64', '2a02:ec80:a000:4000::/64', '2a02:ec80:a100:100::/64', '2a02:ec80:a100:1::/64', '2a02:ec80:a100:205::/64', '2a02:ec80:a100:2ff::/64', '2a02:ec80:a100:4000::/64', '127.0.0.1']\n"}, {"resource": "Nftables::Set[KAFKA_BROKERS_LOGGING]", "parameters": "--- Nftables::Set[KAFKA_BROKERS_LOGGING].orig\n+++ Nftables::Set[KAFKA_BROKERS_LOGGING]\n\n+    ensure => present\n+    hosts  => ['10.64.16.205', '2620:0:861:102:10:64:16:205', '10.64.32.142', '2620:0:861:103:10:64:32:142', '10.64.48.66', '2620:0:861:107:10:64:48:66', '10.64.131.13', '2620:0:861:10a:10:64:131:13', '10.64.135.13', '2620:0:861:10e:10:64:135:13', '10.192.0.94', '2620:0:860:101:10:192:0:94', '10.192.16.50', '2620:0:860:102:10:192:16:50', '10.192.32.24', '2620:0:860:103:10:192:32:24', '10.192.16.38', '2620:0:860:102:10:192:16:38', '10.192.48.85', '2620:0:860:104:10:192:48:85']\n"}, {"resource": "Nftables::Set[MLSERVE_KUBEPODS_NETWORKS]", "parameters": "--- Nftables::Set[MLSERVE_KUBEPODS_NETWORKS].orig\n+++ Nftables::Set[MLSERVE_KUBEPODS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.67.16.0/21', '2620:0:861:300::/64', '10.194.16.0/21', '2620:0:860:300::/64']\n"}, {"resource": "Nftables::Set[ZOOKEEPER_FLINK_HOSTS]", "parameters": "--- Nftables::Set[ZOOKEEPER_FLINK_HOSTS].orig\n+++ Nftables::Set[ZOOKEEPER_FLINK_HOSTS]\n\n+    ensure => present\n+    hosts  => ['10.64.16.9', '2620:0:861:102:10:64:16:9', '10.64.0.8', '2620:0:861:101:10:64:0:8', '10.64.32.41', '2620:0:861:103:10:64:32:41', '10.192.16.227', '2620:0:860:102:10:192:16:227', '10.192.32.179', '2620:0:860:103:10:192:32:179', '10.192.48.219', '2620:0:860:104:10:192:48:219']\n"}, {"resource": "Nftables::Service[package_builder_rsync]", "parameters": "--- Nftables::Service[package_builder_rsync].orig\n+++ Nftables::Service[package_builder_rsync]\n\n+    proto    => tcp\n+    prio     => 10\n+    ensure   => present\n+    notrack  => False\n+    port     => 873\n+    desc     => \n+    src_sets => ['DOMAIN_NETWORKS']\n"}, {"resource": "Nftables::Set[AUX_KUBEPODS_NETWORKS]", "parameters": "--- Nftables::Set[AUX_KUBEPODS_NETWORKS].orig\n+++ Nftables::Set[AUX_KUBEPODS_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.67.80.0/21', '2620:0:861:305::/64', '10.194.80.0/21', '2620:0:860:305::/64']\n"}, {"resource": "Nftables::Set[KAFKAMON_HOSTS]", "parameters": "--- Nftables::Set[KAFKAMON_HOSTS].orig\n+++ Nftables::Set[KAFKAMON_HOSTS]\n\n+    ensure => present\n+    hosts  => ['10.64.32.11', '2620:0:861:103:10:64:32:11', '10.192.16.139', '2620:0:860:102:10:192:16:139']\n"}, {"resource": "Nftables::Set[CACHES]", "parameters": "--- Nftables::Set[CACHES].orig\n+++ Nftables::Set[CACHES]\n\n+    ensure => present\n+    hosts  => ['172.16.19.232', '2a02:ec80:a000:1::2f3', '172.16.17.55', '2a02:ec80:a000:1::31d']\n"}, {"resource": "Nftables::Set[FRACK_NETWORKS]", "parameters": "--- Nftables::Set[FRACK_NETWORKS].orig\n+++ Nftables::Set[FRACK_NETWORKS]\n\n+    ensure => present\n+    hosts  => ['10.195.0.0/27', '10.195.0.128/29', '10.195.0.32/27', '10.195.0.64/28', '10.195.0.80/29', '10.195.0.96/27', '10.195.1.0/25', '10.64.40.0/27', '10.64.40.160/27', '10.64.40.192/26', '10.64.40.32/27', '10.64.40.64/27', '10.64.40.96/27', '208.80.152.224/28', '208.80.155.0/27']\n"}], "perc_changed": "5.65%"}, "core": null, "main": {"total": 1309, "only_in_self": [], "only_in_other": ["Class[Profile::Firewall::Nftables_base_sets]", "Nftables::Service[package_builder_rsync]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]", "Nftables::Set[ANALYTICS_NETWORKS]", "Nftables::Set[AUX_KUBEPODS_NETWORKS]", "Nftables::Set[BASTION_HOSTS]", "Nftables::Set[CACHES]", "Nftables::Set[CLOUD_NETWORKS]", "Nftables::Set[CLOUD_NETWORKS_PUBLIC]", "Nftables::Set[CLOUD_PRIVATE_NETWORKS]", "Nftables::Set[CUMIN_MASTERS]", "Nftables::Set[DEPLOYMENT_HOSTS]", "Nftables::Set[DOMAIN_NETWORKS]", "Nftables::Set[DRUID_PUBLIC_HOSTS]", "Nftables::Set[DSE_KUBEPODS_NETWORKS]", "Nftables::Set[FRACK_NETWORKS]", "Nftables::Set[INTERNAL]", "Nftables::Set[KAFKAMON_HOSTS]", "Nftables::Set[KAFKA_BROKERS_JUMBO]", "Nftables::Set[KAFKA_BROKERS_LOGGING]", "Nftables::Set[KAFKA_BROKERS_MAIN]", "Nftables::Set[LABSTORE_HOSTS]", "Nftables::Set[LABS_NETWORKS]", "Nftables::Set[LINK_LOCAL]", "Nftables::Set[MGMT_NETWORKS]", "Nftables::Set[MLSERVE_KUBEPODS_NETWORKS]", "Nftables::Set[MLSTAGE_KUBEPODS_NETWORKS]", "Nftables::Set[MW_APPSERVER_NETWORKS]", "Nftables::Set[MYSQL_ROOT_CLIENTS]", "Nftables::Set[NETWORK_INFRA]", "Nftables::Set[PRODUCTION_NETWORKS]", "Nftables::Set[SANDBOX_NETWORKS]", "Nftables::Set[STAGING_KUBEPODS_NETWORKS]", "Nftables::Set[WIKIKUBE_KUBEPODS_NETWORKS]", "Nftables::Set[ZOOKEEPER_FLINK_HOSTS]", "Nftables::Set[ZOOKEEPER_HOSTS_MAIN]"], "resource_diffs": [], "perc_changed": "2.83%"}}}