Compilation results for clouddumps1001.wikimedia.org: None system changes detected

You can retrieve this result from host.json.

Catalog differences

Summary

Total Resources:	3724
Resources added:	11
Resources removed:	0
Resources modified:	11
Change percentage:	0.59%

Resources only in the new catalog

Nftables::Service[ssh-from-bastion]
Nftables::Service[full-monitoring-metrics-access-udp]
Nftables::Service[dumps-nfs-access]
Nftables::Service[dumps_rsyncd_phabricator]
Nftables::Service[deployment-ssh]
Nftables::Service[full-monitoring-metrics-access-tcp]
Nftables::Service[dumps_rsyncd_public]
Nftables::Service[ssh_dse-K8s_pods]
Nftables::Service[https_dse-K8s_pods]
Nftables::Service[dumps_rsync_lb_health]
Nftables::Service[ssh-from-cumin-masters]

Resources modified

Nftables::Service[dumps_rsyncd_public]

Parameters differences:

--- Nftables::Service[dumps_rsyncd_public].orig
+++ Nftables::Service[dumps_rsyncd_public]

+    notrack             => False
+    port                => 873
+    desc                => 
+    src_ips             => ['128.153.145.19', '130.239.18.154', '154.29.79.173', '154.29.79.173', '163.237.219.7', '194.71.11.163', '194.71.11.163', '194.71.11.165', '194.71.11.165', '194.71.11.173', '194.71.11.173', '200.236.31.1', '2001:4978:1000:1499::7', '2001:6b0:19::163', '2001:6b0:19::163', '2001:6b0:19::165', '2001:6b0:19::165', '2001:6b0:19::173', '2001:6b0:19::173', '2001:6b0:e:2018::154', '2605:6480:c051:100::1', '2801:82:80ff:8000::2', '72.135.249.90']
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    qos                 => low
+    ensure              => present

Nftables::Service[dumps_rsyncd_phabricator]

Parameters differences:

--- Nftables::Service[dumps_rsyncd_phabricator].orig
+++ Nftables::Service[dumps_rsyncd_phabricator]

+    notrack             => False
+    port                => 873
+    desc                => 
+    src_ips             => ['10.64.16.101', '2620:0:861:102:10:64:16:101']
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present

Nftables::Service[ssh_dse-K8s_pods]

Parameters differences:

--- Nftables::Service[ssh_dse-K8s_pods].orig
+++ Nftables::Service[ssh_dse-K8s_pods]

+    notrack             => False
+    port                => 22
+    desc                => 
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present
+    src_sets            => ['DSE_KUBEPODS_NETWORKS']

Nftables::Service[full-monitoring-metrics-access-tcp]

Parameters differences:

--- Nftables::Service[full-monitoring-metrics-access-tcp].orig
+++ Nftables::Service[full-monitoring-metrics-access-tcp]

+    notrack             => False
+    desc                => 
+    src_ips             => ['10.64.0.82', '10.64.16.62', '10.64.32.85', '10.64.48.171', '208.80.153.42', '208.80.154.78', '2620:0:860:2:208:80:153:42', '2620:0:861:101:10:64:0:82', '2620:0:861:102:10:64:16:62', '2620:0:861:103:10:64:32:85', '2620:0:861:107:10:64:48:171', '2620:0:861:3:208:80:154:78']
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    port_range          => [1, 65535]
+    ensure              => present

Nftables::Service[ssh-from-bastion]

Parameters differences:

--- Nftables::Service[ssh-from-bastion].orig
+++ Nftables::Service[ssh-from-bastion]

+    notrack             => False
+    port                => 22
+    desc                => 
+    src_ips             => ['103.102.166.103', '185.15.58.6', '185.15.59.99', '195.200.68.99', '198.35.26.104', '2001:df2:e500:3:103:102:166:103', '208.80.153.110', '208.80.154.7', '2620:0:860:4:208:80:153:110', '2620:0:861:1:208:80:154:7', '2620:0:863:3:198:35:26:104', '2a02:ec80:300:3:185:15:59:99', '2a02:ec80:600:1:185:15:58:6', '2a02:ec80:700:3:195:200:68:99']
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present

Nftables::Service[dumps-nfs-access]

Parameters differences:

--- Nftables::Service[dumps-nfs-access].orig
+++ Nftables::Service[dumps-nfs-access]

+    notrack             => False
+    port                => 2049
+    desc                => 
+    src_ips             => ['10.192.16.26', '10.192.16.94', '10.64.0.12', '10.64.138.6', '10.64.16.199', '10.64.16.238', '10.64.16.34', '10.64.21.12', '10.64.21.17', '10.64.32.8', '10.64.36.14', '10.64.48.239', '10.64.48.8', '10.64.5.35', '185.15.56.0/25', '185.15.56.160/28', '185.15.57.0/29', '185.15.57.16/29', '185.15.57.24/29', '2620:0:860:102:10:192:16:26', '2620:0:860:102:10:192:16:94', '2620:0:861:100:10:64:138:6', '2620:0:861:101:10:64:0:12', '2620:0:861:102:10:64:16:199', '2620:0:861:102:10:64:16:238', '2620:0:861:102:10:64:16:34', '2620:0:861:103:10:64:32:8', '2620:0:861:104:10:64:5:35', '2620:0:861:105:10:64:21:12', '2620:0:861:105:10:64:21:17', '2620:0:861:106:10:64:36:14', '2620:0:861:107:10:64:48:239', '2620:0:861:107:10:64:48:8', '2a02:ec80:a000:4000::/64', '2a02:ec80:a100:4000::/64']
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present

Nftables::Service[dumps_rsync_lb_health]

Parameters differences:

--- Nftables::Service[dumps_rsync_lb_health].orig
+++ Nftables::Service[dumps_rsync_lb_health]

+    notrack             => False
+    port                => [873]
+    desc                => 
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present
+    src_sets            => ['DOMAIN_NETWORKS']

Nftables::Service[ssh-from-cumin-masters]

Parameters differences:

--- Nftables::Service[ssh-from-cumin-masters].orig
+++ Nftables::Service[ssh-from-cumin-masters]

+    notrack             => False
+    port                => 22
+    desc                => 
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present
+    src_sets            => ['CUMIN_MASTERS']

Nftables::Service[full-monitoring-metrics-access-udp]

Parameters differences:

--- Nftables::Service[full-monitoring-metrics-access-udp].orig
+++ Nftables::Service[full-monitoring-metrics-access-udp]

+    notrack             => False
+    desc                => 
+    src_ips             => ['10.64.0.82', '10.64.16.62', '10.64.32.85', '10.64.48.171', '208.80.153.42', '208.80.154.78', '2620:0:860:2:208:80:153:42', '2620:0:861:101:10:64:0:82', '2620:0:861:102:10:64:16:62', '2620:0:861:103:10:64:32:85', '2620:0:861:107:10:64:48:171', '2620:0:861:3:208:80:154:78']
+    proto               => udp
+    unrestricted_access => False
+    prio                => 10
+    port_range          => [1, 65535]
+    ensure              => present

Nftables::Service[deployment-ssh]

Parameters differences:

--- Nftables::Service[deployment-ssh].orig
+++ Nftables::Service[deployment-ssh]

+    notrack             => False
+    port                => 22
+    desc                => 
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present
+    src_sets            => ['DEPLOYMENT_HOSTS']

Nftables::Service[https_dse-K8s_pods]

Parameters differences:

--- Nftables::Service[https_dse-K8s_pods].orig
+++ Nftables::Service[https_dse-K8s_pods]

+    notrack             => False
+    port                => 443
+    desc                => 
+    proto               => tcp
+    unrestricted_access => False
+    prio                => 10
+    ensure              => present
+    src_sets            => ['DSE_KUBEPODS_NETWORKS']

Compilation results for clouddumps1001.wikimedia.org: None system changes detected

Catalog differences

Summary

Resources only in the new catalog

Resources modified

Relevant files