{"host": "cloudinfra-db04.cloudinfra.eqiad1.wikimedia.cloud", "state": "diff", "description": "Differences to Puppet defined resources", "diff": {"full": {"total": 1119, "only_in_self": [], "only_in_other": ["Nftables::Service[enc-clients]", "Nftables::Service[mariadb_replication]", "Nftables::Service[proxies]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]"], "resource_diffs": [{"resource": "Nftables::Service[ssh-from-bastion]", "parameters": "--- Nftables::Service[ssh-from-bastion].orig\n+++ Nftables::Service[ssh-from-bastion]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => ['172.16.1.220', '172.16.17.143', '172.16.18.237', '2a02:ec80:a000:1::156', '2a02:ec80:a000:1::442']\n+    port                => 22\n"}, {"resource": "Nftables::Service[ssh-from-cumin-masters]", "parameters": "--- Nftables::Service[ssh-from-cumin-masters].orig\n+++ Nftables::Service[ssh-from-cumin-masters]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    src_sets            => ['CUMIN_MASTERS']\n+    desc                => \n+    notrack             => False\n+    port                => 22\n"}, {"resource": "Nftables::Service[enc-clients]", "parameters": "--- Nftables::Service[enc-clients].orig\n+++ Nftables::Service[enc-clients]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => True\n+    src_ips             => ['172.16.16.237', '172.16.18.70', '2a02:ec80:a000:1::296', '2a02:ec80:a000:1::399']\n+    port                => 3306\n"}, {"resource": "Nftables::Service[proxies]", "parameters": "--- Nftables::Service[proxies].orig\n+++ Nftables::Service[proxies]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => True\n+    src_ips             => ['172.16.17.55', '172.16.19.232', '2a02:ec80:a000:1::2f3', '2a02:ec80:a000:1::31d']\n+    port                => 3306\n"}, {"resource": "Nftables::Service[mariadb_replication]", "parameters": "--- Nftables::Service[mariadb_replication].orig\n+++ Nftables::Service[mariadb_replication]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => True\n+    src_ips             => ['172.16.2.35', '172.16.3.121']\n+    port                => 3306\n"}], "perc_changed": "0.89%"}, "core": null, "main": {"total": 1119, "only_in_self": [], "only_in_other": ["Nftables::Service[enc-clients]", "Nftables::Service[mariadb_replication]", "Nftables::Service[proxies]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]"], "resource_diffs": [], "perc_changed": "0.45%"}}}