{"host": "phabricator-bookworm-3.devtools.eqiad1.wikimedia.cloud", "state": "diff", "description": "Differences to Puppet defined resources", "diff": {"full": {"total": 1287, "only_in_self": [], "only_in_other": ["Nftables::Service[deployment-ssh]", "Nftables::Service[full-monitoring-metrics-access-tcp]", "Nftables::Service[full-monitoring-metrics-access-udp]", "Nftables::Service[phabricator-migration-rsync]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]"], "resource_diffs": [{"resource": "Nftables::Service[ssh-from-bastion]", "parameters": "--- Nftables::Service[ssh-from-bastion].orig\n+++ Nftables::Service[ssh-from-bastion]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => ['172.16.1.220', '172.16.17.143', '172.16.18.237', '2a02:ec80:a000:1::156', '2a02:ec80:a000:1::442']\n+    port                => 22\n"}, {"resource": "Nftables::Service[ssh-from-cumin-masters]", "parameters": "--- Nftables::Service[ssh-from-cumin-masters].orig\n+++ Nftables::Service[ssh-from-cumin-masters]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    src_sets            => ['CUMIN_MASTERS']\n+    desc                => \n+    notrack             => False\n+    port                => 22\n"}, {"resource": "Nftables::Service[phabricator-migration-rsync]", "parameters": "--- Nftables::Service[phabricator-migration-rsync].orig\n+++ Nftables::Service[phabricator-migration-rsync]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => ['172.16.4.197']\n+    port                => [873]\n"}, {"resource": "Nftables::Service[full-monitoring-metrics-access-tcp]", "parameters": "--- Nftables::Service[full-monitoring-metrics-access-tcp].orig\n+++ Nftables::Service[full-monitoring-metrics-access-tcp]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    port_range          => [1, 65535]\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => []\n"}, {"resource": "Nftables::Service[full-monitoring-metrics-access-udp]", "parameters": "--- Nftables::Service[full-monitoring-metrics-access-udp].orig\n+++ Nftables::Service[full-monitoring-metrics-access-udp]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => udp\n+    port_range          => [1, 65535]\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => []\n"}, {"resource": "Nftables::Service[deployment-ssh]", "parameters": "--- Nftables::Service[deployment-ssh].orig\n+++ Nftables::Service[deployment-ssh]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    src_sets            => ['DEPLOYMENT_HOSTS']\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    port                => 22\n"}], "perc_changed": "0.93%"}, "core": null, "main": {"total": 1287, "only_in_self": [], "only_in_other": ["Nftables::Service[deployment-ssh]", "Nftables::Service[full-monitoring-metrics-access-tcp]", "Nftables::Service[full-monitoring-metrics-access-udp]", "Nftables::Service[phabricator-migration-rsync]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]"], "resource_diffs": [], "perc_changed": "0.47%"}}}