--- Firewall::Service[opensearch-inter-node-9700].orig
+++ Firewall::Service[opensearch-inter-node-9700]
+ proto => tcp
+ port => 9700
+ srange => ['cloudelastic1007.eqiad.wmnet', 'cloudelastic1008.eqiad.wmnet', 'cloudelastic1009.eqiad.wmnet', 'cloudelastic1010.eqiad.wmnet', 'cloudelastic1011.eqiad.wmnet', 'cloudelastic1012.eqiad.wmnet']
+ notrack => True
+ ensure => present
+ prio => 10
+ desc =>
File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_opensearch_inter_node_9300].orig
+++ File[/etc/ferm/conf.d/10_opensearch_inter_node_9300]
+ notify => Service[ferm]
+ group => root
+ tag => ferm
+ owner => root
+ mode => 0400
+ ensure => present
+ require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_opensearch_inter_node_9300.orig
+++ /etc/ferm/conf.d/10_opensearch_inter_node_9300
@@ -0,0 +1,8 @@
+# Autogenerated by puppet. DO NOT EDIT BY HAND!
+#
+#
+&R_SERVICE(tcp, 9300, (10.64.0.96 10.64.133.3 10.64.154.16 10.64.16.10 10.64.164.13 10.64.179.5 2620:0:861:101:10:64:0:96 2620:0:861:102:10:64:16:10 2620:0:861:10c:10:64:133:3 2620:0:861:122:10:64:154:16 2620:0:861:12c:10:64:164:13 2620:0:861:139:10:64:179:5));
+
+
+
+&NO_TRACK(tcp, 9300);
- File[/etc/ferm/conf.d/10_opensearch-inter-node-9500]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_opensearch-inter-node-9500].orig
+++ File[/etc/ferm/conf.d/10_opensearch-inter-node-9500]
- notify => Service[ferm]
- group => root
- tag => ferm
- owner => root
- mode => 0400
- ensure => present
- require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_opensearch-inter-node-9500.orig
+++ /etc/ferm/conf.d/10_opensearch-inter-node-9500
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 9500, @resolve((cloudelastic1007.eqiad.wmnet cloudelastic1008.eqiad.wmnet cloudelastic1009.eqiad.wmnet cloudelastic1010.eqiad.wmnet cloudelastic1011.eqiad.wmnet cloudelastic1012.eqiad.wmnet)));
-
-
-
-&NO_TRACK(tcp, 9500);
- Ferm::Service[opensearch-inter-node-9500]
- Parameters differences:
--- Ferm::Service[opensearch-inter-node-9500].orig
+++ Ferm::Service[opensearch-inter-node-9500]
- proto => tcp
- port => 9500
- srange => @resolve((cloudelastic1007.eqiad.wmnet cloudelastic1008.eqiad.wmnet cloudelastic1009.eqiad.wmnet cloudelastic1010.eqiad.wmnet cloudelastic1011.eqiad.wmnet cloudelastic1012.eqiad.wmnet))
- notrack => True
- ensure => present
- prio => 10
- desc =>
- File[/etc/ferm/conf.d/10_opensearch_inter_node_9500]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_opensearch_inter_node_9500].orig
+++ File[/etc/ferm/conf.d/10_opensearch_inter_node_9500]
+ notify => Service[ferm]
+ group => root
+ tag => ferm
+ owner => root
+ mode => 0400
+ ensure => present
+ require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_opensearch_inter_node_9500.orig
+++ /etc/ferm/conf.d/10_opensearch_inter_node_9500
@@ -0,0 +1,8 @@
+# Autogenerated by puppet. DO NOT EDIT BY HAND!
+#
+#
+&R_SERVICE(tcp, 9500, (10.64.0.96 10.64.133.3 10.64.154.16 10.64.16.10 10.64.164.13 10.64.179.5 2620:0:861:101:10:64:0:96 2620:0:861:102:10:64:16:10 2620:0:861:10c:10:64:133:3 2620:0:861:122:10:64:154:16 2620:0:861:12c:10:64:164:13 2620:0:861:139:10:64:179:5));
+
+
+
+&NO_TRACK(tcp, 9500);
- Firewall::Service[opensearch-inter-node-9300]
- Parameters differences:
--- Firewall::Service[opensearch-inter-node-9300].orig
+++ Firewall::Service[opensearch-inter-node-9300]
+ proto => tcp
+ port => 9300
+ srange => ['cloudelastic1007.eqiad.wmnet', 'cloudelastic1008.eqiad.wmnet', 'cloudelastic1009.eqiad.wmnet', 'cloudelastic1010.eqiad.wmnet', 'cloudelastic1011.eqiad.wmnet', 'cloudelastic1012.eqiad.wmnet']
+ notrack => True
+ ensure => present
+ prio => 10
+ desc =>
- Firewall::Service[opensearch-inter-node-9500]
- Parameters differences:
--- Firewall::Service[opensearch-inter-node-9500].orig
+++ Firewall::Service[opensearch-inter-node-9500]
+ proto => tcp
+ port => 9500
+ srange => ['cloudelastic1007.eqiad.wmnet', 'cloudelastic1008.eqiad.wmnet', 'cloudelastic1009.eqiad.wmnet', 'cloudelastic1010.eqiad.wmnet', 'cloudelastic1011.eqiad.wmnet', 'cloudelastic1012.eqiad.wmnet']
+ notrack => True
+ ensure => present
+ prio => 10
+ desc =>
- Ferm::Service[opensearch_inter_node_9500]
- Parameters differences:
--- Ferm::Service[opensearch_inter_node_9500].orig
+++ Ferm::Service[opensearch_inter_node_9500]
+ proto => tcp
+ port => 9500
+ srange => ['cloudelastic1007.eqiad.wmnet', 'cloudelastic1008.eqiad.wmnet', 'cloudelastic1009.eqiad.wmnet', 'cloudelastic1010.eqiad.wmnet', 'cloudelastic1011.eqiad.wmnet', 'cloudelastic1012.eqiad.wmnet']
+ notrack => True
+ ensure => present
+ prio => 10
+ desc =>
- Ferm::Service[opensearch_inter_node_9700]
- Parameters differences:
--- Ferm::Service[opensearch_inter_node_9700].orig
+++ Ferm::Service[opensearch_inter_node_9700]
+ proto => tcp
+ port => 9700
+ srange => ['cloudelastic1007.eqiad.wmnet', 'cloudelastic1008.eqiad.wmnet', 'cloudelastic1009.eqiad.wmnet', 'cloudelastic1010.eqiad.wmnet', 'cloudelastic1011.eqiad.wmnet', 'cloudelastic1012.eqiad.wmnet']
+ notrack => True
+ ensure => present
+ prio => 10
+ desc =>
- File[/etc/ferm/conf.d/10_opensearch-inter-node-9700]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_opensearch-inter-node-9700].orig
+++ File[/etc/ferm/conf.d/10_opensearch-inter-node-9700]
- notify => Service[ferm]
- group => root
- tag => ferm
- owner => root
- mode => 0400
- ensure => present
- require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_opensearch-inter-node-9700.orig
+++ /etc/ferm/conf.d/10_opensearch-inter-node-9700
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 9700, @resolve((cloudelastic1007.eqiad.wmnet cloudelastic1008.eqiad.wmnet cloudelastic1009.eqiad.wmnet cloudelastic1010.eqiad.wmnet cloudelastic1011.eqiad.wmnet cloudelastic1012.eqiad.wmnet)));
-
-
-
-&NO_TRACK(tcp, 9700);
- Ferm::Service[opensearch-inter-node-9700]
- Parameters differences:
--- Ferm::Service[opensearch-inter-node-9700].orig
+++ Ferm::Service[opensearch-inter-node-9700]
- proto => tcp
- port => 9700
- srange => @resolve((cloudelastic1007.eqiad.wmnet cloudelastic1008.eqiad.wmnet cloudelastic1009.eqiad.wmnet cloudelastic1010.eqiad.wmnet cloudelastic1011.eqiad.wmnet cloudelastic1012.eqiad.wmnet))
- notrack => True
- ensure => present
- prio => 10
- desc =>
- File[/etc/ferm/conf.d/10_opensearch-inter-node-9300]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_opensearch-inter-node-9300].orig
+++ File[/etc/ferm/conf.d/10_opensearch-inter-node-9300]
- notify => Service[ferm]
- group => root
- tag => ferm
- owner => root
- mode => 0400
- ensure => present
- require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_opensearch-inter-node-9300.orig
+++ /etc/ferm/conf.d/10_opensearch-inter-node-9300
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 9300, @resolve((cloudelastic1007.eqiad.wmnet cloudelastic1008.eqiad.wmnet cloudelastic1009.eqiad.wmnet cloudelastic1010.eqiad.wmnet cloudelastic1011.eqiad.wmnet cloudelastic1012.eqiad.wmnet)));
-
-
-
-&NO_TRACK(tcp, 9300);
- Ferm::Service[opensearch-inter-node-9300]
- Parameters differences:
--- Ferm::Service[opensearch-inter-node-9300].orig
+++ Ferm::Service[opensearch-inter-node-9300]
- proto => tcp
- port => 9300
- srange => @resolve((cloudelastic1007.eqiad.wmnet cloudelastic1008.eqiad.wmnet cloudelastic1009.eqiad.wmnet cloudelastic1010.eqiad.wmnet cloudelastic1011.eqiad.wmnet cloudelastic1012.eqiad.wmnet))
- notrack => True
- ensure => present
- prio => 10
- desc =>
- Ferm::Service[opensearch_inter_node_9300]
- Parameters differences:
--- Ferm::Service[opensearch_inter_node_9300].orig
+++ Ferm::Service[opensearch_inter_node_9300]
+ proto => tcp
+ port => 9300
+ srange => ['cloudelastic1007.eqiad.wmnet', 'cloudelastic1008.eqiad.wmnet', 'cloudelastic1009.eqiad.wmnet', 'cloudelastic1010.eqiad.wmnet', 'cloudelastic1011.eqiad.wmnet', 'cloudelastic1012.eqiad.wmnet']
+ notrack => True
+ ensure => present
+ prio => 10
+ desc =>