{"host": "ganeti4005.ulsfo.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3195, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/nftables/input/10_bird-bgp.nft]", "content": "--- /etc/nftables/input/10_bird-bgp.nft.orig\n+++ /etc/nftables/input/10_bird-bgp.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.128.0.2, 10.128.0.3 } tcp dport { 179 } accept\n-ip6 saddr { 2620:0:863:101:fe00::1, 2620:0:863:101:fe00::2 } tcp dport { 179 } accept\n+ip saddr { 10.128.0.1 } tcp dport { 179 } accept\n+ip6 saddr { fe80::1 } tcp dport { 179 } accept"}, {"resource": "Class[Profile::Ganeti]", "parameters": "--- Class[Profile::Ganeti].orig\n+++ Class[Profile::Ganeti]\n\n-    neighbors_list => ['10.128.0.2', '2620:0:863:101:fe00::1', '10.128.0.3', '2620:0:863:101:fe00::2']\n"}, {"resource": "Firewall::Service[bird-bgp]", "parameters": "--- Firewall::Service[bird-bgp].orig\n+++ Firewall::Service[bird-bgp]\n\n@@\n-    srange => ['10.128.0.2', '2620:0:863:101:fe00::1', '10.128.0.3', '2620:0:863:101:fe00::2']\n+    srange => ['10.128.0.1', 'fe80::1']\n"}, {"resource": "Nftables::Service[bird-bgp]", "parameters": "--- Nftables::Service[bird-bgp].orig\n+++ Nftables::Service[bird-bgp]\n\n@@\n-    src_ips => ['10.128.0.2', '10.128.0.3', '2620:0:863:101:fe00::1', '2620:0:863:101:fe00::2']\n+    src_ips => ['10.128.0.1', 'fe80::1']\n"}, {"resource": "File[/etc/bird/bird.conf]", "content": "--- /etc/bird/bird.conf.orig\n+++ /etc/bird/bird.conf\n@@ -45,20 +45,7 @@\n         export all;\n     };\n     local as 64612;\n-    neighbor 10.128.0.2 external;\n-    # Linux socket API limitation on v4 (GUA to GUA session)\n-    # as we use a wildcard for the dynamic group, we need to use it everywhere\n-    interface range \"ens*\";\n-    source address 10.128.0.20;\n-    strict bind;\n-}\n-protocol bgp switch_v4_1 {\n-    ipv4 {\n-        import none;\n-        export all;\n-    };\n-    local as 64612;\n-    neighbor 10.128.0.3 external;\n+    neighbor 10.128.0.1 external;\n     # Linux socket API limitation on v4 (GUA to GUA session)\n     # as we use a wildcard for the dynamic group, we need to use it everywhere\n     interface range \"ens*\";\n@@ -72,16 +59,7 @@\n         export all;\n     };\n     local 2620:0:863:101:10:128:0:20 as 64612;\n-    neighbor 2620:0:863:101:fe00::1 external;\n-    interface \"ens3f0np0\";\n-}\n-protocol bgp switch_v6_1 {\n-    ipv6 {\n-        import none;\n-        export all;\n-    };\n-    local 2620:0:863:101:10:128:0:20 as 64612;\n-    neighbor 2620:0:863:101:fe00::2 external;\n+    neighbor fe80::1 external;\n     interface \"ens3f0np0\";\n }\n "}, {"resource": "Class[Bird]", "parameters": "--- Class[Bird].orig\n+++ Class[Bird]\n\n-    neighbors => ['10.128.0.2', '2620:0:863:101:fe00::1', '10.128.0.3', '2620:0:863:101:fe00::2']\n"}], "perc_changed": "0.19%"}, "core": {"total": 3195, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/bird/bird.conf]", "content": "--- /etc/bird/bird.conf.orig\n+++ /etc/bird/bird.conf\n@@ -45,20 +45,7 @@\n         export all;\n     };\n     local as 64612;\n-    neighbor 10.128.0.2 external;\n-    # Linux socket API limitation on v4 (GUA to GUA session)\n-    # as we use a wildcard for the dynamic group, we need to use it everywhere\n-    interface range \"ens*\";\n-    source address 10.128.0.20;\n-    strict bind;\n-}\n-protocol bgp switch_v4_1 {\n-    ipv4 {\n-        import none;\n-        export all;\n-    };\n-    local as 64612;\n-    neighbor 10.128.0.3 external;\n+    neighbor 10.128.0.1 external;\n     # Linux socket API limitation on v4 (GUA to GUA session)\n     # as we use a wildcard for the dynamic group, we need to use it everywhere\n     interface range \"ens*\";\n@@ -72,16 +59,7 @@\n         export all;\n     };\n     local 2620:0:863:101:10:128:0:20 as 64612;\n-    neighbor 2620:0:863:101:fe00::1 external;\n-    interface \"ens3f0np0\";\n-}\n-protocol bgp switch_v6_1 {\n-    ipv6 {\n-        import none;\n-        export all;\n-    };\n-    local 2620:0:863:101:10:128:0:20 as 64612;\n-    neighbor 2620:0:863:101:fe00::2 external;\n+    neighbor fe80::1 external;\n     interface \"ens3f0np0\";\n }\n "}, {"resource": "File[/etc/nftables/input/10_bird-bgp.nft]", "content": "--- /etc/nftables/input/10_bird-bgp.nft.orig\n+++ /etc/nftables/input/10_bird-bgp.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.128.0.2, 10.128.0.3 } tcp dport { 179 } accept\n-ip6 saddr { 2620:0:863:101:fe00::1, 2620:0:863:101:fe00::2 } tcp dport { 179 } accept\n+ip saddr { 10.128.0.1 } tcp dport { 179 } accept\n+ip6 saddr { fe80::1 } tcp dport { 179 } accept"}], "perc_changed": "0.06%"}, "main": {"total": 3195, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/bird/bird.conf]", "content": "--- /etc/bird/bird.conf.orig\n+++ /etc/bird/bird.conf\n@@ -45,20 +45,7 @@\n         export all;\n     };\n     local as 64612;\n-    neighbor 10.128.0.2 external;\n-    # Linux socket API limitation on v4 (GUA to GUA session)\n-    # as we use a wildcard for the dynamic group, we need to use it everywhere\n-    interface range \"ens*\";\n-    source address 10.128.0.20;\n-    strict bind;\n-}\n-protocol bgp switch_v4_1 {\n-    ipv4 {\n-        import none;\n-        export all;\n-    };\n-    local as 64612;\n-    neighbor 10.128.0.3 external;\n+    neighbor 10.128.0.1 external;\n     # Linux socket API limitation on v4 (GUA to GUA session)\n     # as we use a wildcard for the dynamic group, we need to use it everywhere\n     interface range \"ens*\";\n@@ -72,16 +59,7 @@\n         export all;\n     };\n     local 2620:0:863:101:10:128:0:20 as 64612;\n-    neighbor 2620:0:863:101:fe00::1 external;\n-    interface \"ens3f0np0\";\n-}\n-protocol bgp switch_v6_1 {\n-    ipv6 {\n-        import none;\n-        export all;\n-    };\n-    local 2620:0:863:101:10:128:0:20 as 64612;\n-    neighbor 2620:0:863:101:fe00::2 external;\n+    neighbor fe80::1 external;\n     interface \"ens3f0np0\";\n }\n "}, {"resource": "File[/etc/nftables/input/10_bird-bgp.nft]", "content": "--- /etc/nftables/input/10_bird-bgp.nft.orig\n+++ /etc/nftables/input/10_bird-bgp.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.128.0.2, 10.128.0.3 } tcp dport { 179 } accept\n-ip6 saddr { 2620:0:863:101:fe00::1, 2620:0:863:101:fe00::2 } tcp dport { 179 } accept\n+ip saddr { 10.128.0.1 } tcp dport { 179 } accept\n+ip6 saddr { fe80::1 } tcp dport { 179 } accept"}, {"resource": "Class[Profile::Ganeti]", "parameters": "--- Class[Profile::Ganeti].orig\n+++ Class[Profile::Ganeti]\n\n-    neighbors_list => ['10.128.0.2', '2620:0:863:101:fe00::1', '10.128.0.3', '2620:0:863:101:fe00::2']\n"}, {"resource": "Firewall::Service[bird-bgp]", "parameters": "--- Firewall::Service[bird-bgp].orig\n+++ Firewall::Service[bird-bgp]\n\n@@\n-    srange => ['10.128.0.2', '2620:0:863:101:fe00::1', '10.128.0.3', '2620:0:863:101:fe00::2']\n+    srange => ['10.128.0.1', 'fe80::1']\n"}, {"resource": "Nftables::Service[bird-bgp]", "parameters": "--- Nftables::Service[bird-bgp].orig\n+++ Nftables::Service[bird-bgp]\n\n@@\n-    src_ips => ['10.128.0.2', '10.128.0.3', '2620:0:863:101:fe00::1', '2620:0:863:101:fe00::2']\n+    src_ips => ['10.128.0.1', 'fe80::1']\n"}, {"resource": "Class[Bird]", "parameters": "--- Class[Bird].orig\n+++ Class[Bird]\n\n-    neighbors => ['10.128.0.2', '2620:0:863:101:fe00::1', '10.128.0.3', '2620:0:863:101:fe00::2']\n"}], "perc_changed": "0.19%"}}}