--- Ferm::Service[elastic_inter_node_9300].orig
+++ Ferm::Service[elastic_inter_node_9300]
+ notrack => True
+ srange => ['tools-elastic-4.tools.eqiad1.wikimedia.cloud', 'tools-elastic-5.tools.eqiad1.wikimedia.cloud', 'tools-elastic-6.tools.eqiad1.wikimedia.cloud']
+ port => 9300
+ prio => 10
+ unrestricted_access => False
+ ensure => present
+ desc =>
+ proto => tcp
Firewall::Service[elastic-inter-node-9300]
- Parameters differences:
--- Firewall::Service[elastic-inter-node-9300].orig
+++ Firewall::Service[elastic-inter-node-9300]
+ notrack => True
+ srange => ['tools-elastic-4.tools.eqiad1.wikimedia.cloud', 'tools-elastic-5.tools.eqiad1.wikimedia.cloud', 'tools-elastic-6.tools.eqiad1.wikimedia.cloud']
+ port => 9300
+ prio => 10
+ unrestricted_access => False
+ ensure => present
+ desc =>
+ proto => tcp
- Ferm::Service[elastic-inter-node-9300]
- Parameters differences:
--- Ferm::Service[elastic-inter-node-9300].orig
+++ Ferm::Service[elastic-inter-node-9300]
- notrack => True
- srange => @resolve((tools-elastic-4.tools.eqiad1.wikimedia.cloud tools-elastic-5.tools.eqiad1.wikimedia.cloud tools-elastic-6.tools.eqiad1.wikimedia.cloud))
- port => 9300
- prio => 10
- unrestricted_access => False
- ensure => present
- desc =>
- proto => tcp
- File[/etc/ferm/conf.d/10_elastic_inter_node_9300]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_elastic_inter_node_9300].orig
+++ File[/etc/ferm/conf.d/10_elastic_inter_node_9300]
+ tag => ferm
+ group => root
+ require => File[/etc/ferm/conf.d]
+ notify => Service[ferm]
+ owner => root
+ mode => 0400
+ ensure => present
- Content differences:
--- /etc/ferm/conf.d/10_elastic_inter_node_9300.orig
+++ /etc/ferm/conf.d/10_elastic_inter_node_9300
@@ -0,0 +1,8 @@
+# Autogenerated by puppet. DO NOT EDIT BY HAND!
+#
+#
+&R_SERVICE(tcp, 9300, (172.16.0.95 172.16.2.132 172.16.6.181));
+
+
+
+&NO_TRACK(tcp, 9300);
- Nftables::Service[elastic-inter-node-9300]
- Parameters differences:
--- Nftables::Service[elastic-inter-node-9300].orig
+++ Nftables::Service[elastic-inter-node-9300]
+ src_ips => ['172.16.0.95', '172.16.2.132', '172.16.6.181']
+ notrack => True
+ port => 9300
+ prio => 10
+ unrestricted_access => False
+ ensure => present
+ desc =>
+ proto => tcp
- File[/etc/ferm/conf.d/10_elastic-inter-node-9300]
- Parameters differences:
--- File[/etc/ferm/conf.d/10_elastic-inter-node-9300].orig
+++ File[/etc/ferm/conf.d/10_elastic-inter-node-9300]
- tag => ferm
- group => root
- require => File[/etc/ferm/conf.d]
- notify => Service[ferm]
- owner => root
- mode => 0400
- ensure => present
- Content differences:
--- /etc/ferm/conf.d/10_elastic-inter-node-9300.orig
+++ /etc/ferm/conf.d/10_elastic-inter-node-9300
@@ -1,8 +0,0 @@
-# Autogenerated by puppet. DO NOT EDIT BY HAND!
-#
-#
-&R_SERVICE(tcp, 9300, @resolve((tools-elastic-4.tools.eqiad1.wikimedia.cloud tools-elastic-5.tools.eqiad1.wikimedia.cloud tools-elastic-6.tools.eqiad1.wikimedia.cloud)));
-
-
-
-&NO_TRACK(tcp, 9300);
Relevant files