{"host": "idp2005.wikimedia.org", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2818, "only_in_self": [], "only_in_other": ["Apereo_cas::Service[stream_internal]", "File[/etc/cas/services/stream_internal-62.json]"], "resource_diffs": [{"resource": "Apereo_cas::Service[stream_internal]", "parameters": "--- Apereo_cas::Service[stream_internal].orig\n+++ Apereo_cas::Service[stream_internal]\n\n+    release_policy    => ReturnAllAttributeReleasePolicy\n+    service_class     => CasRegisteredService\n+    response_type     => code\n+    member_of_exclude => ^cn=tools(beta)?.*,ou=servicegroups,.*$\n+    service_id        => https://stream-internal\\.wikimedia\\.org(/.*)?\n+    id                => 62\n+    properties        => {}\n+    access_strategy   => DefaultRegisteredServiceAccessStrategy\n+    profile_format    => FLAT\n+    required_groups   => ['nda', 'wmf']\n"}, {"resource": "Class[Apereo_cas]", "parameters": "--- Class[Apereo_cas].orig\n+++ Class[Apereo_cas]\n\n@@\n-    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}}\n+    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'stream_internal': {'id': 62, 'service_id': 'https://stream-internal\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}}\n"}, {"resource": "File[/etc/cas/services/stream_internal-62.json]", "content": "--- /etc/cas/services/stream_internal-62.json.orig\n+++ /etc/cas/services/stream_internal-62.json\n@@ -0,0 +1 @@\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}", "parameters": "--- File[/etc/cas/services/stream_internal-62.json].orig\n+++ File[/etc/cas/services/stream_internal-62.json]\n\n+    ensure => file\n+    group  => root\n+    owner  => root\n"}, {"resource": "Class[Profile::Idp]", "parameters": "--- Class[Profile::Idp].orig\n+++ Class[Profile::Idp]\n\n@@\n-    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}}\n+    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'stream_internal': {'id': 62, 'service_id': 'https://stream-internal\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}}\n"}], "perc_changed": "0.21%"}, "core": {"total": 2818, "only_in_self": [], "only_in_other": ["File[/etc/cas/services/stream_internal-62.json]"], "resource_diffs": [], "perc_changed": "0.04%"}, "main": {"total": 2818, "only_in_self": [], "only_in_other": ["Apereo_cas::Service[stream_internal]", "File[/etc/cas/services/stream_internal-62.json]"], "resource_diffs": [{"resource": "Class[Apereo_cas]", "parameters": "--- Class[Apereo_cas].orig\n+++ Class[Apereo_cas]\n\n@@\n-    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}}\n+    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'stream_internal': {'id': 62, 'service_id': 'https://stream-internal\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}}\n"}, {"resource": "Class[Profile::Idp]", "parameters": "--- Class[Profile::Idp].orig\n+++ Class[Profile::Idp]\n\n@@\n-    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}}\n+    services => {'idm': {'client_secret': 'REMOVED', 'id': 29, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 30, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 31, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 32, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_oidc': {'client_secret': 'REMOVED', 'id': 33, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['ops', 'netbox-readonly-access', 'wmf']}, 'datahub': {'client_secret': 'REMOVED', 'id': 34, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 35, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'jaeger': {'client_secret': 'REMOVED', 'id': 36, 'service_class': 'OidcRegisteredService', 'service_id': 'https://trace\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_k8s': {'client_secret': 'REMOVED', 'id': 37, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'superset_next_k8s': {'client_secret': 'REMOVED', 'id': 38, 'service_class': 'OidcRegisteredService', 'service_id': 'https://superset-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 39, 'service_class': 'OidcRegisteredService', 'service_id': 'https://logstash\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 42, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'keystone': {'client_secret': 'REMOVED', 'id': 43, 'service_class': 'OidcRegisteredService', 'service_id': 'https://(keystone.)?openstack.*.wikimediacloud.org.*', 'response_type': 'id_token token'}, 'airflow_analytics_test': {'client_secret': 'REMOVED', 'id': 44, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wmde': {'client_secret': 'REMOVED', 'id': 46, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_research': {'client_secret': 'REMOVED', 'id': 47, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-research\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_search': {'client_secret': 'REMOVED', 'id': 48, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-search\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_analytics_product': {'client_secret': 'REMOVED', 'id': 52, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_platform_eng': {'client_secret': 'REMOVED', 'id': 51, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_ml': {'client_secret': 'REMOVED', 'id': 53, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_main': {'client_secret': 'REMOVED', 'id': 54, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_wikidata': {'client_secret': 'REMOVED', 'id': 58, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_sre': {'client_secret': 'REMOVED', 'id': 60, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_fr_tech': {'client_secret': 'REMOVED', 'id': 61, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'growthbook': {'client_secret': 'REMOVED', 'id': 59, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen': {'client_secret': 'REMOVED', 'id': 40, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 41, 'service_class': 'OidcRegisteredService', 'service_id': 'https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'icinga': {'id': 1, 'service_id': 'https://icinga\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf'], 'properties': {'@class': 'java.util.HashMap', 'httpHeaderEnableXFrameOptions': {'@class': 'org.apereo.cas.services.DefaultRegisteredServiceProperty', 'values': ['java.util.HashSet', ['false']]}}}, 'debmonitor': {'id': 2, 'service_id': '^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['wmf', 'nda']}, 'puppetboard': {'id': 3, 'service_id': 'https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops', 'ops-limited']}, 'graphite': {'id': 4, 'service_id': 'https://graphite\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'people': {'id': 7, 'service_id': 'https://people\\\\.wikimedia\\\\.org(/.*)?'}, 'librenms': {'id': 8, 'service_id': 'https://librenms\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'piwik': {'id': 9, 'service_id': 'https://piwik\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'yarn': {'id': 10, 'service_id': 'https://yarn\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo': {'id': 11, 'service_id': 'https://turnilo\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'thanos': {'id': 13, 'service_id': 'https://thanos\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'alerts': {'id': 15, 'service_id': 'https://alerts\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'grafana': {'id': 16, 'service_id': 'https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf', 'grafana-admin']}, 'orchestrator': {'id': 17, 'service_id': '^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'rt': {'id': 19, 'service_id': 'https://rt\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'config-master': {'id': 20, 'service_id': 'https://config-master\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'klaxon': {'id': 21, 'service_id': 'https://klaxon\\\\.wikimedia\\\\.org(/.*)?'}, 'wmcs_idp': {'id': 24, 'service_id': 'https://idp\\\\.wmcloud\\\\.org(/.*)?'}, 'prometheus': {'id': 27, 'service_id': 'https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'requestctl': {'id': 45, 'service_id': 'https://requestctl\\\\.wikimedia\\\\.org(/.*)?'}, 'spiderpig': {'id': 55, 'service_id': 'https://spiderpig\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['spiderpig-access', 'releng', 'ops']}, 'zarcillo': {'id': 56, 'service_id': 'https://zarcillo\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf']}, 'debmonitor-next': {'id': 57, 'service_id': '^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['ops']}, 'stream_internal': {'id': 62, 'service_id': 'https://stream-internal\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}}\n"}], "perc_changed": "0.14%"}}}