{"host": "cephosd1003.eqiad.wmnet", "state": "diff", "description": "Differences to Puppet defined resources", "diff": {"full": {"total": 3407, "only_in_self": [], "only_in_other": ["Ferm::Service[bird_bfd_control]", "Ferm::Service[bird_bfd_echo]", "Ferm::Service[bird_bgp]", "Ferm::Service[ceph_daemons]", "Ferm::Service[ceph_mon_v1]", "Ferm::Service[ceph_mon_v2]", "Ferm::Service[envoy_tls_termination]", "Ferm::Service[envoy_tls_termination_src_sets]", "Ferm::Service[full_monitoring_metrics_access_tcp]", "Ferm::Service[full_monitoring_metrics_access_udp]", "Ferm::Service[ssh_from_bastion]", "Ferm::Service[ssh_from_cumin_masters]"], "resource_diffs": [{"resource": "Ferm::Service[ceph_daemons]", "parameters": "--- Ferm::Service[ceph_daemons].orig\n+++ Ferm::Service[ceph_daemons]\n\n+    notrack             => False\n+    desc                => \n+    before              => Class[Ceph::Common]\n+    srange              => ['10.64.130.13', '10.64.131.21', '10.64.132.23', '10.64.134.12', '10.64.135.21', '10.192.28.20', '10.192.42.14', '10.64.0.149', '10.64.0.156', '10.64.0.38', '10.64.0.45', '10.64.130.6', '10.64.132.8', '10.64.134.5', '10.64.136.7', '10.64.16.47', '10.64.169.6', '10.64.171.3', '10.64.183.5', '2620:0:860:115:10:192:28:20', '2620:0:860:121:10:192:42:14', '2620:0:861:101:10:64:0:149', '2620:0:861:101:10:64:0:156', '2620:0:861:101:10:64:0:38', '2620:0:861:101:10:64:0:45', '2620:0:861:102:10:64:16:47', '2620:0:861:109:10:64:130:6', '2620:0:861:10b:10:64:132:8', '2620:0:861:10d:10:64:134:5', '2620:0:861:10f:10:64:136:7', '2620:0:861:119:10:64:169:6', '2620:0:861:131:10:64:171:3', '2620:0:861:13d:10:64:183:5', '10.192.32.106', '10.64.0.127', '10.64.16.179', '10.64.32.136', '10.64.48.183', '2620:0:860:103:10:192:32:106', '2620:0:861:101:10:64:0:127', '2620:0:861:102:10:64:16:179', '2620:0:861:103:10:64:32:136', '2620:0:861:107:10:64:48:183']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    port_range          => [6800, 7300]\n+    ensure              => present\n+    src_sets            => ['AUX_KUBEPODS_NETWORKS', 'DSE_KUBEPODS_NETWORKS', 'ANALYTICS_NETWORKS']\n"}, {"resource": "Ferm::Service[ceph_mon_v2]", "parameters": "--- Ferm::Service[ceph_mon_v2].orig\n+++ Ferm::Service[ceph_mon_v2]\n\n+    notrack             => False\n+    port                => 3300\n+    desc                => \n+    before              => Class[Ceph::Common]\n+    srange              => ['10.64.130.13', '10.64.131.21', '10.64.132.23', '10.64.134.12', '10.64.135.21', '10.192.28.20', '10.192.42.14', '10.64.0.149', '10.64.0.156', '10.64.0.38', '10.64.0.45', '10.64.130.6', '10.64.132.8', '10.64.134.5', '10.64.136.7', '10.64.16.47', '10.64.169.6', '10.64.171.3', '10.64.183.5', '2620:0:860:115:10:192:28:20', '2620:0:860:121:10:192:42:14', '2620:0:861:101:10:64:0:149', '2620:0:861:101:10:64:0:156', '2620:0:861:101:10:64:0:38', '2620:0:861:101:10:64:0:45', '2620:0:861:102:10:64:16:47', '2620:0:861:109:10:64:130:6', '2620:0:861:10b:10:64:132:8', '2620:0:861:10d:10:64:134:5', '2620:0:861:10f:10:64:136:7', '2620:0:861:119:10:64:169:6', '2620:0:861:131:10:64:171:3', '2620:0:861:13d:10:64:183:5', '10.192.32.106', '10.64.0.127', '10.64.16.179', '10.64.32.136', '10.64.48.183', '2620:0:860:103:10:192:32:106', '2620:0:861:101:10:64:0:127', '2620:0:861:102:10:64:16:179', '2620:0:861:103:10:64:32:136', '2620:0:861:107:10:64:48:183']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n+    src_sets            => ['AUX_KUBEPODS_NETWORKS', 'DSE_KUBEPODS_NETWORKS', 'ANALYTICS_NETWORKS']\n"}, {"resource": "Ferm::Service[ssh_from_cumin_masters]", "parameters": "--- Ferm::Service[ssh_from_cumin_masters].orig\n+++ Ferm::Service[ssh_from_cumin_masters]\n\n+    notrack             => False\n+    port                => 22\n+    desc                => \n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n+    src_sets            => ['CUMIN_MASTERS']\n"}, {"resource": "Ferm::Service[full_monitoring_metrics_access_tcp]", "parameters": "--- Ferm::Service[full_monitoring_metrics_access_tcp].orig\n+++ Ferm::Service[full_monitoring_metrics_access_tcp]\n\n+    notrack             => False\n+    desc                => \n+    srange              => ['prometheus1005.eqiad.wmnet', 'prometheus1006.eqiad.wmnet', 'prometheus1007.eqiad.wmnet', 'prometheus1008.eqiad.wmnet', '208.80.154.78', '2620:0:861:3:208:80:154:78', '208.80.153.42', '2620:0:860:2:208:80:153:42']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    port_range          => [1, 65535]\n+    ensure              => present\n"}, {"resource": "Ferm::Service[full_monitoring_metrics_access_udp]", "parameters": "--- Ferm::Service[full_monitoring_metrics_access_udp].orig\n+++ Ferm::Service[full_monitoring_metrics_access_udp]\n\n+    notrack             => False\n+    desc                => \n+    srange              => ['prometheus1005.eqiad.wmnet', 'prometheus1006.eqiad.wmnet', 'prometheus1007.eqiad.wmnet', 'prometheus1008.eqiad.wmnet', '208.80.154.78', '2620:0:861:3:208:80:154:78', '208.80.153.42', '2620:0:860:2:208:80:153:42']\n+    proto               => udp\n+    unrestricted_access => False\n+    prio                => 10\n+    port_range          => [1, 65535]\n+    ensure              => present\n"}, {"resource": "Ferm::Service[bird_bfd_control]", "parameters": "--- Ferm::Service[bird_bfd_control].orig\n+++ Ferm::Service[bird_bfd_control]\n\n+    notrack             => False\n+    port                => 3784\n+    desc                => \n+    srange              => ['10.64.132.1', '2620:0:861:10b::1']\n+    proto               => udp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n+    src_sets            => ['LINK_LOCAL']\n"}, {"resource": "Ferm::Service[ssh_from_bastion]", "parameters": "--- Ferm::Service[ssh_from_bastion].orig\n+++ Ferm::Service[ssh_from_bastion]\n\n+    notrack             => False\n+    port                => 22\n+    desc                => \n+    srange              => ['208.80.154.7', '2620:0:861:1:208:80:154:7', '208.80.153.110', '2a02:ec80:300:3:185:15:59:99', '185.15.59.99', '2620:0:860:4:208:80:153:110', '198.35.26.104', '2620:0:863:3:198:35:26:104', '103.102.166.103', '2001:df2:e500:3:103:102:166:103', '185.15.58.6', '2a02:ec80:600:1:185:15:58:6', '195.200.68.99', '2a02:ec80:700:3:195:200:68:99']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n"}, {"resource": "Ferm::Service[bird_bgp]", "parameters": "--- Ferm::Service[bird_bgp].orig\n+++ Ferm::Service[bird_bgp]\n\n+    notrack             => False\n+    port                => 179\n+    desc                => \n+    srange              => ['10.64.132.1', '2620:0:861:10b::1']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n"}, {"resource": "Ferm::Service[envoy_tls_termination_src_sets]", "parameters": "--- Ferm::Service[envoy_tls_termination_src_sets].orig\n+++ Ferm::Service[envoy_tls_termination_src_sets]\n\n+    notrack             => True\n+    port                => 443\n+    desc                => \n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n+    src_sets            => ['ANALYTICS_NETWORKS', 'DSE_KUBEPODS_NETWORKS', 'DEPLOYMENT_HOSTS']\n"}, {"resource": "Ferm::Service[bird_bfd_echo]", "parameters": "--- Ferm::Service[bird_bfd_echo].orig\n+++ Ferm::Service[bird_bfd_echo]\n\n+    notrack             => False\n+    port                => 3785\n+    desc                => \n+    srange              => ['10.64.132.1', '2620:0:861:10b::1']\n+    proto               => udp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n+    src_sets            => ['LINK_LOCAL']\n"}, {"resource": "Ferm::Service[envoy_tls_termination]", "parameters": "--- Ferm::Service[envoy_tls_termination].orig\n+++ Ferm::Service[envoy_tls_termination]\n\n+    notrack             => True\n+    port                => 443\n+    desc                => \n+    srange              => ['db1208.eqiad.wmnet']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n"}, {"resource": "Ferm::Service[ceph_mon_v1]", "parameters": "--- Ferm::Service[ceph_mon_v1].orig\n+++ Ferm::Service[ceph_mon_v1]\n\n+    notrack             => False\n+    port                => 6789\n+    desc                => \n+    before              => Class[Ceph::Common]\n+    srange              => ['10.64.130.13', '10.64.131.21', '10.64.132.23', '10.64.134.12', '10.64.135.21', '10.192.28.20', '10.192.42.14', '10.64.0.149', '10.64.0.156', '10.64.0.38', '10.64.0.45', '10.64.130.6', '10.64.132.8', '10.64.134.5', '10.64.136.7', '10.64.16.47', '10.64.169.6', '10.64.171.3', '10.64.183.5', '2620:0:860:115:10:192:28:20', '2620:0:860:121:10:192:42:14', '2620:0:861:101:10:64:0:149', '2620:0:861:101:10:64:0:156', '2620:0:861:101:10:64:0:38', '2620:0:861:101:10:64:0:45', '2620:0:861:102:10:64:16:47', '2620:0:861:109:10:64:130:6', '2620:0:861:10b:10:64:132:8', '2620:0:861:10d:10:64:134:5', '2620:0:861:10f:10:64:136:7', '2620:0:861:119:10:64:169:6', '2620:0:861:131:10:64:171:3', '2620:0:861:13d:10:64:183:5', '10.192.32.106', '10.64.0.127', '10.64.16.179', '10.64.32.136', '10.64.48.183', '2620:0:860:103:10:192:32:106', '2620:0:861:101:10:64:0:127', '2620:0:861:102:10:64:16:179', '2620:0:861:103:10:64:32:136', '2620:0:861:107:10:64:48:183']\n+    proto               => tcp\n+    unrestricted_access => False\n+    prio                => 10\n+    ensure              => present\n+    src_sets            => ['AUX_KUBEPODS_NETWORKS', 'DSE_KUBEPODS_NETWORKS', 'ANALYTICS_NETWORKS']\n"}], "perc_changed": "0.70%"}, "core": null, "main": {"total": 3407, "only_in_self": [], "only_in_other": ["Ferm::Service[bird_bfd_control]", "Ferm::Service[bird_bfd_echo]", "Ferm::Service[bird_bgp]", "Ferm::Service[ceph_daemons]", "Ferm::Service[ceph_mon_v1]", "Ferm::Service[ceph_mon_v2]", "Ferm::Service[envoy_tls_termination]", "Ferm::Service[envoy_tls_termination_src_sets]", "Ferm::Service[full_monitoring_metrics_access_tcp]", "Ferm::Service[full_monitoring_metrics_access_udp]", "Ferm::Service[ssh_from_bastion]", "Ferm::Service[ssh_from_cumin_masters]"], "resource_diffs": [], "perc_changed": "0.35%"}}}