Compilation results for cephosd1001.eqiad.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 3437 |
|---|---|
| Resources added: | 0 |
| Resources removed: | 0 |
| Resources modified: | 6 |
| Change percentage: | 0.17% |
Resources modified
- Class[Profile::Tlsproxy::Envoy]
- Parameters differences:
--- Class[Profile::Tlsproxy::Envoy].orig +++ Class[Profile::Tlsproxy::Envoy] @@ - firewall_srange => ['db1208.eqiad.wmnet'] + firewall_srange => ['db1208.eqiad.wmnet', 'wdqs1029.eqiad.wmnet', 'wdqs1030.eqiad.wmnet', 'wdqs1031.eqiad.wmnet', 'wdqs1032.eqiad.wmnet']
- File[/etc/nftables/input/10_envoy_tls_termination.nft]
- Content differences:
--- /etc/nftables/input/10_envoy_tls_termination.nft.orig +++ /etc/nftables/input/10_envoy_tls_termination.nft @@ -1,3 +1,4 @@ # Managed by puppet # -ip saddr { 10.64.0.163 } tcp dport { 443 } accept +ip saddr { 10.64.0.12, 10.64.0.163, 10.64.16.34, 10.64.32.8, 10.64.48.8 } tcp dport { 443 } accept +ip6 saddr { 2620:0:861:101:10:64:0:12, 2620:0:861:102:10:64:16:34, 2620:0:861:103:10:64:32:8, 2620:0:861:107:10:64:48:8 } tcp dport { 443 } accept
- Ferm::Service[envoy_tls_termination]
- Parameters differences:
--- Ferm::Service[envoy_tls_termination].orig +++ Ferm::Service[envoy_tls_termination] @@ - srange => ['db1208.eqiad.wmnet'] + srange => ['db1208.eqiad.wmnet', 'wdqs1029.eqiad.wmnet', 'wdqs1030.eqiad.wmnet', 'wdqs1031.eqiad.wmnet', 'wdqs1032.eqiad.wmnet']
- File[/etc/nftables/notrack/10_envoy_tls_termination.nft]
- Content differences:
--- /etc/nftables/notrack/10_envoy_tls_termination.nft.orig +++ /etc/nftables/notrack/10_envoy_tls_termination.nft @@ -1,3 +1,4 @@ # Managed by puppet # -ip saddr { 10.64.0.163 } tcp dport { 443 } notrack +ip saddr { 10.64.0.12, 10.64.0.163, 10.64.16.34, 10.64.32.8, 10.64.48.8 } tcp dport { 443 } notrack +ip6 saddr { 2620:0:861:101:10:64:0:12, 2620:0:861:102:10:64:16:34, 2620:0:861:103:10:64:32:8, 2620:0:861:107:10:64:48:8 } tcp dport { 443 } notrack
- Nftables::Service[envoy_tls_termination]
- Parameters differences:
--- Nftables::Service[envoy_tls_termination].orig +++ Nftables::Service[envoy_tls_termination] @@ - src_ips => ['10.64.0.163'] + src_ips => ['10.64.0.12', '10.64.0.163', '10.64.16.34', '10.64.32.8', '10.64.48.8', '2620:0:861:101:10:64:0:12', '2620:0:861:102:10:64:16:34', '2620:0:861:103:10:64:32:8', '2620:0:861:107:10:64:48:8']
- Firewall::Service[envoy_tls_termination]
- Parameters differences:
--- Firewall::Service[envoy_tls_termination].orig +++ Firewall::Service[envoy_tls_termination] @@ - srange => ['db1208.eqiad.wmnet'] + srange => ['db1208.eqiad.wmnet', 'wdqs1029.eqiad.wmnet', 'wdqs1030.eqiad.wmnet', 'wdqs1031.eqiad.wmnet', 'wdqs1032.eqiad.wmnet']
- Firewall::Service[envoy_tls_termination]
- File[/etc/nftables/notrack/10_envoy_tls_termination.nft]
- File[/etc/nftables/input/10_envoy_tls_termination.nft]
- Parameters differences: