{"host": "toolsbeta-redis-4.toolsbeta.eqiad1.wikimedia.cloud", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 1091, "only_in_self": ["Ferm::Service[toolforge-redis-access]", "Ferm::Service[toolforge-redis-prometheus]", "Ferm::Service[toolforge-redis-sentinel-internal]", "File[/etc/ferm/conf.d/10_toolforge-redis-access]", "File[/etc/ferm/conf.d/10_toolforge-redis-prometheus]", "File[/etc/ferm/conf.d/10_toolforge-redis-sentinel-internal]"], "only_in_other": ["Ferm::Service[toolforge_redis_access]", "Ferm::Service[toolforge_redis_sentinel_internal]", "File[/etc/ferm/conf.d/10_toolforge_redis_access]", "File[/etc/ferm/conf.d/10_toolforge_redis_sentinel_internal]", "Firewall::Service[toolforge-redis-access]", "Firewall::Service[toolforge-redis-sentinel-internal]", "Nftables::Service[toolforge-redis-access]", "Nftables::Service[toolforge-redis-sentinel-internal]"], "resource_diffs": [{"resource": "Ferm::Service[toolforge-redis-prometheus]", "parameters": "--- Ferm::Service[toolforge-redis-prometheus].orig\n+++ Ferm::Service[toolforge-redis-prometheus]\n\n-    proto               => tcp\n-    ensure              => present\n-    desc                => \n-    srange              => @resolve((toolsbeta-prometheus-2.toolsbeta.eqiad1.wikimedia.cloud))\n-    prio                => 10\n-    unrestricted_access => False\n-    port                => 9121\n-    notrack             => False\n"}, {"resource": "File[/etc/ferm/conf.d/10_toolforge_redis_access]", "content": "--- /etc/ferm/conf.d/10_toolforge_redis_access.orig\n+++ /etc/ferm/conf.d/10_toolforge_redis_access\n@@ -0,0 +1,6 @@\n+# Autogenerated by puppet. DO NOT EDIT BY HAND!\n+#\n+# \n+&SERVICE(tcp, 6379);\n+\n+", "parameters": "--- File[/etc/ferm/conf.d/10_toolforge_redis_access].orig\n+++ File[/etc/ferm/conf.d/10_toolforge_redis_access]\n\n+    mode    => 0400\n+    require => File[/etc/ferm/conf.d]\n+    tag     => ferm\n+    ensure  => present\n+    group   => root\n+    notify  => Service[ferm]\n+    owner   => root\n"}, {"resource": "Firewall::Service[toolforge-redis-sentinel-internal]", "parameters": "--- Firewall::Service[toolforge-redis-sentinel-internal].orig\n+++ Firewall::Service[toolforge-redis-sentinel-internal]\n\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    srange              => ['toolsbeta-redis-4.toolsbeta.eqiad1.wikimedia.cloud', 'toolsbeta-redis-5.toolsbeta.eqiad1.wikimedia.cloud', 'toolsbeta-redis-6.toolsbeta.eqiad1.wikimedia.cloud']\n+    prio                => 10\n+    unrestricted_access => False\n+    port                => 26379\n+    notrack             => False\n"}, {"resource": "File[/etc/ferm/conf.d/10_toolforge-redis-prometheus]", "content": "--- /etc/ferm/conf.d/10_toolforge-redis-prometheus.orig\n+++ /etc/ferm/conf.d/10_toolforge-redis-prometheus\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 9121, @resolve((toolsbeta-prometheus-2.toolsbeta.eqiad1.wikimedia.cloud)));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_toolforge-redis-prometheus].orig\n+++ File[/etc/ferm/conf.d/10_toolforge-redis-prometheus]\n\n-    mode    => 0400\n-    require => File[/etc/ferm/conf.d]\n-    tag     => ferm\n-    ensure  => present\n-    group   => root\n-    notify  => Service[ferm]\n-    owner   => root\n"}, {"resource": "Ferm::Service[toolforge_redis_sentinel_internal]", "parameters": "--- Ferm::Service[toolforge_redis_sentinel_internal].orig\n+++ Ferm::Service[toolforge_redis_sentinel_internal]\n\n+    proto               => tcp\n+    ensure              => present\n+    desc                => \n+    srange              => ['toolsbeta-redis-4.toolsbeta.eqiad1.wikimedia.cloud', 'toolsbeta-redis-5.toolsbeta.eqiad1.wikimedia.cloud', 'toolsbeta-redis-6.toolsbeta.eqiad1.wikimedia.cloud']\n+    prio                => 10\n+    unrestricted_access => False\n+    port                => 26379\n+    notrack             => False\n"}, {"resource": "File[/etc/ferm/conf.d/10_toolforge_redis_sentinel_internal]", "content": "--- /etc/ferm/conf.d/10_toolforge_redis_sentinel_internal.orig\n+++ /etc/ferm/conf.d/10_toolforge_redis_sentinel_internal\n@@ -0,0 +1,6 @@\n+# Autogenerated by puppet. DO NOT EDIT BY HAND!\n+#\n+# \n+&R_SERVICE(tcp, 26379, (172.16.0.132 172.16.4.80 172.16.5.133));\n+\n+", "parameters": "--- File[/etc/ferm/conf.d/10_toolforge_redis_sentinel_internal].orig\n+++ File[/etc/ferm/conf.d/10_toolforge_redis_sentinel_internal]\n\n+    mode    => 0400\n+    require => File[/etc/ferm/conf.d]\n+    tag     => ferm\n+    ensure  => present\n+    group   => root\n+    notify  => Service[ferm]\n+    owner   => root\n"}, {"resource": "Nftables::Service[toolforge-redis-access]", "parameters": "--- Nftables::Service[toolforge-redis-access].orig\n+++ Nftables::Service[toolforge-redis-access]\n\n+    unrestricted_access => False\n+    prio                => 10\n+    proto               => tcp\n+    ensure              => present\n+    port                => 6379\n+    notrack             => False\n+    desc                => \n"}, {"resource": "File[/etc/ferm/conf.d/10_toolforge-redis-sentinel-internal]", "content": "--- /etc/ferm/conf.d/10_toolforge-redis-sentinel-internal.orig\n+++ /etc/ferm/conf.d/10_toolforge-redis-sentinel-internal\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&R_SERVICE(tcp, 26379, @resolve((toolsbeta-redis-4.toolsbeta.eqiad1.wikimedia.cloud toolsbeta-redis-5.toolsbeta.eqiad1.wikimedia.cloud toolsbeta-redis-6.toolsbeta.eqiad1.wikimedia.cloud)));\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_toolforge-redis-sentinel-internal].orig\n+++ File[/etc/ferm/conf.d/10_toolforge-redis-sentinel-internal]\n\n-    mode    => 0400\n-    require => File[/etc/ferm/conf.d]\n-    tag     => ferm\n-    ensure  => present\n-    group   => root\n-    notify  => Service[ferm]\n-    owner   => root\n"}, {"resource": "Ferm::Service[toolforge-redis-access]", "parameters": "--- Ferm::Service[toolforge-redis-access].orig\n+++ Ferm::Service[toolforge-redis-access]\n\n-    unrestricted_access => False\n-    prio                => 10\n-    proto               => tcp\n-    ensure              => present\n-    port                => 6379\n-    notrack             => False\n-    desc                => \n"}, {"resource": "Ferm::Service[toolforge_redis_access]", "parameters": "--- Ferm::Service[toolforge_redis_access].orig\n+++ Ferm::Service[toolforge_redis_access]\n\n+    unrestricted_access => False\n+    prio                => 10\n+    proto               => tcp\n+    ensure              => present\n+    port                => 6379\n+    notrack             => False\n+    desc                => \n"}, {"resource": "Class[Profile::Toolforge::Redis_sentinel]", "parameters": "--- Class[Profile::Toolforge::Redis_sentinel].orig\n+++ Class[Profile::Toolforge::Redis_sentinel]\n\n-    prometheus_nodes => ['toolsbeta-prometheus-2.toolsbeta.eqiad1.wikimedia.cloud']\n"}, {"resource": "Ferm::Service[toolforge-redis-sentinel-internal]", "parameters": "--- Ferm::Service[toolforge-redis-sentinel-internal].orig\n+++ Ferm::Service[toolforge-redis-sentinel-internal]\n\n-    proto               => tcp\n-    ensure              => present\n-    desc                => \n-    srange              => @resolve((toolsbeta-redis-4.toolsbeta.eqiad1.wikimedia.cloud toolsbeta-redis-5.toolsbeta.eqiad1.wikimedia.cloud toolsbeta-redis-6.toolsbeta.eqiad1.wikimedia.cloud))\n-    prio                => 10\n-    unrestricted_access => False\n-    port                => 26379\n-    notrack             => False\n"}, {"resource": "Nftables::Service[toolforge-redis-sentinel-internal]", "parameters": "--- Nftables::Service[toolforge-redis-sentinel-internal].orig\n+++ Nftables::Service[toolforge-redis-sentinel-internal]\n\n+    proto               => tcp\n+    ensure              => present\n+    src_ips             => ['172.16.0.132', '172.16.4.80', '172.16.5.133']\n+    desc                => \n+    unrestricted_access => False\n+    prio                => 10\n+    port                => 26379\n+    notrack             => False\n"}, {"resource": "Firewall::Service[toolforge-redis-access]", "parameters": "--- Firewall::Service[toolforge-redis-access].orig\n+++ Firewall::Service[toolforge-redis-access]\n\n+    unrestricted_access => False\n+    prio                => 10\n+    proto               => tcp\n+    ensure              => present\n+    port                => 6379\n+    notrack             => False\n+    desc                => \n"}, {"resource": "File[/etc/ferm/conf.d/10_toolforge-redis-access]", "content": "--- /etc/ferm/conf.d/10_toolforge-redis-access.orig\n+++ /etc/ferm/conf.d/10_toolforge-redis-access\n@@ -1,6 +0,0 @@\n-# Autogenerated by puppet. DO NOT EDIT BY HAND!\n-#\n-# \n-&SERVICE(tcp, 6379);\n-\n-", "parameters": "--- File[/etc/ferm/conf.d/10_toolforge-redis-access].orig\n+++ File[/etc/ferm/conf.d/10_toolforge-redis-access]\n\n-    mode    => 0400\n-    require => File[/etc/ferm/conf.d]\n-    tag     => ferm\n-    ensure  => present\n-    group   => root\n-    notify  => Service[ferm]\n-    owner   => root\n"}], "perc_changed": "2.66%"}, "core": {"total": 1091, "only_in_self": ["File[/etc/ferm/conf.d/10_toolforge-redis-access]", "File[/etc/ferm/conf.d/10_toolforge-redis-prometheus]", "File[/etc/ferm/conf.d/10_toolforge-redis-sentinel-internal]"], "only_in_other": ["File[/etc/ferm/conf.d/10_toolforge_redis_access]", "File[/etc/ferm/conf.d/10_toolforge_redis_sentinel_internal]"], "resource_diffs": [], "perc_changed": "0.46%"}, "main": {"total": 1091, "only_in_self": ["Ferm::Service[toolforge-redis-access]", "Ferm::Service[toolforge-redis-prometheus]", "Ferm::Service[toolforge-redis-sentinel-internal]", "File[/etc/ferm/conf.d/10_toolforge-redis-access]", "File[/etc/ferm/conf.d/10_toolforge-redis-prometheus]", "File[/etc/ferm/conf.d/10_toolforge-redis-sentinel-internal]"], "only_in_other": ["Ferm::Service[toolforge_redis_access]", "Ferm::Service[toolforge_redis_sentinel_internal]", "File[/etc/ferm/conf.d/10_toolforge_redis_access]", "File[/etc/ferm/conf.d/10_toolforge_redis_sentinel_internal]", "Firewall::Service[toolforge-redis-access]", "Firewall::Service[toolforge-redis-sentinel-internal]", "Nftables::Service[toolforge-redis-access]", "Nftables::Service[toolforge-redis-sentinel-internal]"], "resource_diffs": [{"resource": "Class[Profile::Toolforge::Redis_sentinel]", "parameters": "--- Class[Profile::Toolforge::Redis_sentinel].orig\n+++ Class[Profile::Toolforge::Redis_sentinel]\n\n-    prometheus_nodes => ['toolsbeta-prometheus-2.toolsbeta.eqiad1.wikimedia.cloud']\n"}], "perc_changed": "1.37%"}}}