{"host": "vrts-1003.devtools.eqiad1.wikimedia.cloud", "state": "diff", "description": "Differences to Puppet defined resources", "diff": {"full": {"total": 1569, "only_in_self": [], "only_in_other": ["Nftables::Service[full-monitoring-metrics-access-tcp]", "Nftables::Service[full-monitoring-metrics-access-udp]", "Nftables::Service[rsyncd_access_vrts]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]", "Nftables::Service[vrts_http]", "Nftables::Service[vrts_smtp]"], "resource_diffs": [{"resource": "Nftables::Service[vrts_http]", "parameters": "--- Nftables::Service[vrts_http].orig\n+++ Nftables::Service[vrts_http]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    src_sets            => ['CACHES']\n+    desc                => \n+    notrack             => False\n+    port                => 80\n"}, {"resource": "Nftables::Service[ssh-from-bastion]", "parameters": "--- Nftables::Service[ssh-from-bastion].orig\n+++ Nftables::Service[ssh-from-bastion]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => ['172.16.1.220', '172.16.17.143', '172.16.18.237', '2a02:ec80:a000:1::156', '2a02:ec80:a000:1::442']\n+    port                => 22\n"}, {"resource": "Nftables::Service[ssh-from-cumin-masters]", "parameters": "--- Nftables::Service[ssh-from-cumin-masters].orig\n+++ Nftables::Service[ssh-from-cumin-masters]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    src_sets            => ['CUMIN_MASTERS']\n+    desc                => \n+    notrack             => False\n+    port                => 22\n"}, {"resource": "Nftables::Service[full-monitoring-metrics-access-tcp]", "parameters": "--- Nftables::Service[full-monitoring-metrics-access-tcp].orig\n+++ Nftables::Service[full-monitoring-metrics-access-tcp]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    port_range          => [1, 65535]\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => []\n"}, {"resource": "Nftables::Service[rsyncd_access_vrts]", "parameters": "--- Nftables::Service[rsyncd_access_vrts].orig\n+++ Nftables::Service[rsyncd_access_vrts]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => ['172.16.6.99']\n+    port                => [873, 1873]\n"}, {"resource": "Nftables::Service[full-monitoring-metrics-access-udp]", "parameters": "--- Nftables::Service[full-monitoring-metrics-access-udp].orig\n+++ Nftables::Service[full-monitoring-metrics-access-udp]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => udp\n+    port_range          => [1, 65535]\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => []\n"}, {"resource": "Nftables::Service[vrts_smtp]", "parameters": "--- Nftables::Service[vrts_smtp].orig\n+++ Nftables::Service[vrts_smtp]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    src_ips             => []\n+    port                => 25\n"}], "perc_changed": "0.89%"}, "core": null, "main": {"total": 1569, "only_in_self": [], "only_in_other": ["Nftables::Service[full-monitoring-metrics-access-tcp]", "Nftables::Service[full-monitoring-metrics-access-udp]", "Nftables::Service[rsyncd_access_vrts]", "Nftables::Service[ssh-from-bastion]", "Nftables::Service[ssh-from-cumin-masters]", "Nftables::Service[vrts_http]", "Nftables::Service[vrts_smtp]"], "resource_diffs": [], "perc_changed": "0.45%"}}}