{"host": "tools-puppetdb-2.tools.eqiad1.wikimedia.cloud", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 1259, "only_in_self": ["Ferm::Conf[cumin-project-defs]", "Ferm::Service[puppetdb-cumin]", "File[/etc/ferm/conf.d/01_cumin-project-defs]", "File[/etc/ferm/conf.d/10_puppetdb-cumin]"], "only_in_other": ["Ferm::Service[ssh_from_cumin_project_masters]", "File[/etc/ferm/conf.d/10_ssh_from_cumin_project_masters]", "Firewall::Service[ssh-from-cumin-project-masters]", "Nftables::Service[ssh-from-cumin-project-masters]"], "resource_diffs": [{"resource": "Ferm::Service[ssh_from_cumin_project_masters]", "parameters": "--- Ferm::Service[ssh_from_cumin_project_masters].orig\n+++ Ferm::Service[ssh_from_cumin_project_masters]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    srange              => ['172.16.5.85']\n+    notrack             => False\n+    port                => 22\n"}, {"resource": "File[/etc/ferm/conf.d/01_cumin-project-defs]", "content": "--- /etc/ferm/conf.d/01_cumin-project-defs.orig\n+++ /etc/ferm/conf.d/01_cumin-project-defs\n@@ -1 +0,0 @@\n-@def $CUMIN_MASTERS = (172.16.1.220 172.16.5.85);", "parameters": "--- File[/etc/ferm/conf.d/01_cumin-project-defs].orig\n+++ File[/etc/ferm/conf.d/01_cumin-project-defs]\n\n-    owner   => root\n-    tag     => ferm\n-    mode    => 0400\n-    notify  => Service[ferm]\n-    group   => root\n-    ensure  => present\n-    require => File[/etc/ferm/conf.d]\n"}, {"resource": "Ferm::Conf[cumin-project-defs]", "parameters": "--- Ferm::Conf[cumin-project-defs].orig\n+++ Ferm::Conf[cumin-project-defs]\n\n-    prio   => 01\n-    ensure => present\n"}, {"resource": "File[/etc/ferm/conf.d/10_puppetdb-cumin]", "content": "--- /etc/ferm/conf.d/10_puppetdb-cumin.orig\n+++ /etc/ferm/conf.d/10_puppetdb-cumin\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 443, $CUMIN_MASTERS);\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_puppetdb-cumin].orig\n+++ File[/etc/ferm/conf.d/10_puppetdb-cumin]\n\n-    owner   => root\n-    tag     => ferm\n-    mode    => 0400\n-    notify  => Service[ferm]\n-    group   => root\n-    ensure  => present\n-    require => File[/etc/ferm/conf.d]\n"}, {"resource": "Firewall::Service[ssh-from-cumin-project-masters]", "parameters": "--- Firewall::Service[ssh-from-cumin-project-masters].orig\n+++ Firewall::Service[ssh-from-cumin-project-masters]\n\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    srange              => ['172.16.5.85']\n+    notrack             => False\n+    port                => 22\n"}, {"resource": "Ferm::Service[puppetdb-cumin]", "parameters": "--- Ferm::Service[puppetdb-cumin].orig\n+++ Ferm::Service[puppetdb-cumin]\n\n-    prio                => 10\n-    unrestricted_access => False\n-    proto               => tcp\n-    ensure              => present\n-    desc                => \n-    srange              => $CUMIN_MASTERS\n-    notrack             => False\n-    port                => 443\n"}, {"resource": "File[/etc/ferm/conf.d/10_ssh_from_cumin_project_masters]", "content": "--- /etc/ferm/conf.d/10_ssh_from_cumin_project_masters.orig\n+++ /etc/ferm/conf.d/10_ssh_from_cumin_project_masters\n@@ -0,0 +1,6 @@\n+# Autogenerated by puppet. DO NOT EDIT BY HAND!\n+#\n+# \n+&R_SERVICE(tcp, 22, (172.16.5.85));\n+\n+", "parameters": "--- File[/etc/ferm/conf.d/10_ssh_from_cumin_project_masters].orig\n+++ File[/etc/ferm/conf.d/10_ssh_from_cumin_project_masters]\n\n+    owner   => root\n+    tag     => ferm\n+    mode    => 0400\n+    notify  => Service[ferm]\n+    group   => root\n+    ensure  => present\n+    require => File[/etc/ferm/conf.d]\n"}, {"resource": "Nftables::Service[ssh-from-cumin-project-masters]", "parameters": "--- Nftables::Service[ssh-from-cumin-project-masters].orig\n+++ Nftables::Service[ssh-from-cumin-project-masters]\n\n+    src_ips             => ['172.16.5.85']\n+    prio                => 10\n+    unrestricted_access => False\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    notrack             => False\n+    port                => 22\n"}], "perc_changed": "1.27%"}, "core": {"total": 1259, "only_in_self": ["File[/etc/ferm/conf.d/01_cumin-project-defs]", "File[/etc/ferm/conf.d/10_puppetdb-cumin]"], "only_in_other": ["File[/etc/ferm/conf.d/10_ssh_from_cumin_project_masters]"], "resource_diffs": [], "perc_changed": "0.24%"}, "main": {"total": 1259, "only_in_self": ["Ferm::Conf[cumin-project-defs]", "Ferm::Service[puppetdb-cumin]", "File[/etc/ferm/conf.d/01_cumin-project-defs]", "File[/etc/ferm/conf.d/10_puppetdb-cumin]"], "only_in_other": ["Ferm::Service[ssh_from_cumin_project_masters]", "File[/etc/ferm/conf.d/10_ssh_from_cumin_project_masters]", "Firewall::Service[ssh-from-cumin-project-masters]", "Nftables::Service[ssh-from-cumin-project-masters]"], "resource_diffs": [], "perc_changed": "0.64%"}}}