--- Firewall::Service[orchestrator].orig
+++ Firewall::Service[orchestrator]
- ensure => present
- desc =>
- srange => ['dborch1002.wikimedia.org', 'dborch1003.eqiad.wmnet']
- notrack => True
- port => 3306
- proto => tcp
- unrestricted_access => False
- prio => 10
Ferm::Service[mariadb_dba]
- Parameters differences:
--- Ferm::Service[mariadb_dba].orig
+++ Ferm::Service[mariadb_dba]
- desc =>
- ensure => present
- notrack => False
- port => 3307
- src_sets => ['MYSQL_ROOT_CLIENTS']
- proto => tcp
- unrestricted_access => False
- prio => 10
- Ferm::Service[mariadb_internal]
- Parameters differences:
--- Ferm::Service[mariadb_internal].orig
+++ Ferm::Service[mariadb_internal]
- ensure => present
- desc =>
- notrack => True
- port => 3306
- src_sets => ['INTERNAL']
- proto => tcp
- unrestricted_access => False
- prio => 10
- File[/etc/ferm/conf.d/10_mariadb_dba]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_mariadb_dba].orig
+++ File[/etc/ferm/conf.d/10_mariadb_dba]
- group => root
- ensure => present
- owner => root
- mode => 0400
- notify => Service[ferm]
- tag => ferm
- require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_mariadb_dba.orig
+++ /etc/ferm/conf.d/10_mariadb_dba
@@ -1,6 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 3307, $MYSQL_ROOT_CLIENTS);
-
-
- Firewall::Service[mariadb_dba]
- Parameters differences:
--- Firewall::Service[mariadb_dba].orig
+++ Firewall::Service[mariadb_dba]
- desc =>
- ensure => present
- notrack => False
- port => 3307
- src_sets => ['MYSQL_ROOT_CLIENTS']
- proto => tcp
- unrestricted_access => False
- prio => 10
- File[/etc/ferm/conf.d/10_mariadb_internal]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_mariadb_internal].orig
+++ File[/etc/ferm/conf.d/10_mariadb_internal]
- group => root
- ensure => present
- owner => root
- mode => 0400
- notify => Service[ferm]
- tag => ferm
- require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_mariadb_internal.orig
+++ /etc/ferm/conf.d/10_mariadb_internal
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 3306, $INTERNAL);
-
-
-
-&NO_TRACK(tcp, 3306);
- Firewall::Service[mariadb_internal]
- Parameters differences:
--- Firewall::Service[mariadb_internal].orig
+++ Firewall::Service[mariadb_internal]
- ensure => present
- desc =>
- notrack => True
- port => 3306
- src_sets => ['INTERNAL']
- proto => tcp
- unrestricted_access => False
- prio => 10
- File[/etc/ferm/conf.d/10_orchestrator]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_orchestrator].orig
+++ File[/etc/ferm/conf.d/10_orchestrator]
- group => root
- ensure => present
- owner => root
- mode => 0400
- notify => Service[ferm]
- tag => ferm
- require => File[/etc/ferm/conf.d]
- Content differences:
--- /etc/ferm/conf.d/10_orchestrator.orig
+++ /etc/ferm/conf.d/10_orchestrator
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 3306, (10.64.0.20 208.80.154.9));
-
-
-
-&NO_TRACK(tcp, 3306);
- Ferm::Service[orchestrator]
- Parameters differences:
--- Ferm::Service[orchestrator].orig
+++ Ferm::Service[orchestrator]
- ensure => present
- desc =>
- srange => ['dborch1002.wikimedia.org', 'dborch1003.eqiad.wmnet']
- notrack => True
- port => 3306
- proto => tcp
- unrestricted_access => False
- prio => 10