--- Nftables::Service[rsyncd_access_published-destination].orig
+++ Nftables::Service[rsyncd_access_published-destination]
+ notrack => False
+ port => [873, 1873]
+ desc =>
+ src_ips => ['10.64.138.6', '10.64.21.12', '10.64.21.17', '10.64.36.12', '10.64.36.14', '10.64.5.35', '208.80.154.142', '208.80.154.71', '2620:0:861:100:10:64:138:6', '2620:0:861:104:10:64:5:35', '2620:0:861:105:10:64:21:12', '2620:0:861:105:10:64:21:17', '2620:0:861:106:10:64:36:12', '2620:0:861:106:10:64:36:14', '2620:0:861:2:208:80:154:142', '2620:0:861:3:208:80:154:71']
+ proto => tcp
+ unrestricted_access => False
+ prio => 10
+ ensure => present
Nftables::Service[ssh-from-cumin-masters]
- Parameters differences:
--- Nftables::Service[ssh-from-cumin-masters].orig
+++ Nftables::Service[ssh-from-cumin-masters]
+ notrack => False
+ port => 22
+ desc =>
+ proto => tcp
+ unrestricted_access => False
+ prio => 10
+ ensure => present
+ src_sets => ['CUMIN_MASTERS']
- Nftables::Service[full-monitoring-metrics-access-udp]
- Parameters differences:
--- Nftables::Service[full-monitoring-metrics-access-udp].orig
+++ Nftables::Service[full-monitoring-metrics-access-udp]
+ notrack => False
+ desc =>
+ src_ips => ['10.64.0.82', '10.64.16.62', '10.64.32.85', '10.64.48.171', '208.80.153.42', '208.80.154.78', '2620:0:860:2:208:80:153:42', '2620:0:861:101:10:64:0:82', '2620:0:861:102:10:64:16:62', '2620:0:861:103:10:64:32:85', '2620:0:861:107:10:64:48:171', '2620:0:861:3:208:80:154:78']
+ proto => udp
+ unrestricted_access => False
+ prio => 10
+ port_range => [1, 65535]
+ ensure => present
- Nftables::Service[deployment-ssh]
- Parameters differences:
--- Nftables::Service[deployment-ssh].orig
+++ Nftables::Service[deployment-ssh]
+ notrack => False
+ port => 22
+ desc =>
+ proto => tcp
+ unrestricted_access => False
+ prio => 10
+ ensure => present
+ src_sets => ['DEPLOYMENT_HOSTS']
- Nftables::Service[statistics-web]
- Parameters differences:
--- Nftables::Service[statistics-web].orig
+++ Nftables::Service[statistics-web]
+ proto => tcp
+ notrack => False
+ unrestricted_access => False
+ port => 80
+ prio => 10
+ desc =>
+ ensure => present
- Nftables::Service[envoy_tls_termination_src_sets]
- Parameters differences:
--- Nftables::Service[envoy_tls_termination_src_sets].orig
+++ Nftables::Service[envoy_tls_termination_src_sets]
+ notrack => True
+ port => 8443
+ desc =>
+ proto => tcp
+ unrestricted_access => False
+ prio => 10
+ ensure => present
+ src_sets => ['CACHES', 'DSE_KUBEPODS_NETWORKS', 'WIKIKUBE_KUBEPODS_NETWORKS']