{"host": "cloudcontrol1007.eqiad.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 4152, "only_in_self": [], "only_in_other": ["Class[Openstack::Apply_security_groups]", "Class[Profile::Openstack::Base::Cumin_access]", "Class[Profile::Openstack::Eqiad1::Cumin_access]", "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)]", "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]", "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)]", "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]", "File[/etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove]", "File[/etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg]", "File[/etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf]", "File[/etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf]", "File[/etc/sudoers.d/nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service]", "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]", "File[/usr/local/sbin/add-security-group-to-project]", "File[/var/lib/prometheus/node.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.prom]", "File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove]", "Logrotate::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]", "Monitoring::Exported_nagios_service[cloudcontrol1007 check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Monitoring::Service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Nrpe::Check[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Nrpe::Monitor_service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Nrpe::Plugin[check_systemd_unit_status]", "Prometheus::Alert::Rule[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status_00e32ad470e657aff39db13cbd480c20]", "Rsyslog::Conf[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Rsyslog::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]", "Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "Service[security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "Sudo::User[nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Monitor[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Service[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Syslog[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Timer::Job[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Timer::Job[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Timer[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Timer[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.service]", "Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.timer]"], "resource_diffs": [{"resource": "Systemd::Timer[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Systemd::Timer[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Systemd::Timer[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    unit_name          => nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service\n+    timer_intervals    => [{'start': 'OnUnitInactiveSec', 'interval': '5min'}, {'interval': '1s', 'start': 'OnActiveSec'}]\n+    splay              => 300\n+    ensure             => absent\n+    fixed_random_delay => True\n+    accuracy           => 15sec\n"}, {"resource": "Nrpe::Check[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Nrpe::Check[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Nrpe::Check[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    ensure  => absent\n+    command => /usr/local/lib/nagios/plugins/check_systemd_unit_status security_group_ssh-from-restricted-bastion_to_project_trove\n+    before  => Monitoring::Service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n"}, {"resource": "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service]", "content": "--- /lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service.orig\n+++ /lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service\n@@ -0,0 +1,9 @@\n+[Unit]\n+Description=Apply security group ssh-from-restricted-bastion to project trove\n+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+\n+[Service]\n+Type=oneshot\n+User=root\n+ExecStart=/usr/local/sbin/add-security-group-to-project --os-cloud novadmin  --security-group-name ssh-from-restricted-bastion --project-id trove\n+TimeoutStartSec=890", "parameters": "--- File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service].orig\n+++ File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service]\n\n+    mode   => 0444\n+    notify => Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)]\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "Sudo::User[nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Sudo::User[nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Sudo::User[nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    tag        => nrpe::check\n+    ensure     => absent\n+    privileges => []\n+    require    => ['Class[Sudo]']\n+    user       => nagios\n"}, {"resource": "Rsyslog::Conf[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Rsyslog::Conf[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Rsyslog::Conf[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    ensure   => absent\n+    mode     => 0444\n+    priority => 25\n"}, {"resource": "File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]", "parameters": "--- File[/usr/local/lib/nagios/plugins/check_systemd_unit_status].orig\n+++ File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]\n\n+    source  => puppet:///modules/systemd/check_systemd_unit_status\n+    tag     => nrpe::plugin\n+    mode    => 0555\n+    group   => root\n+    ensure  => file\n+    require => File[/usr/local/lib/nagios/plugins/]\n+    owner   => root\n"}, {"resource": "Prometheus::Alert::Rule[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status_00e32ad470e657aff39db13cbd480c20]", "parameters": "--- Prometheus::Alert::Rule[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status_00e32ad470e657aff39db13cbd480c20].orig\n+++ Prometheus::Alert::Rule[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status_00e32ad470e657aff39db13cbd480c20]\n\n+    severity           => info\n+    def_label_whitelst => ['team', 'severity']\n+    site               => eqiad\n+    team               => observability\n+    for                => 11m\n+    instance           => ops\n+    expr               => (nagios_nrpe_check_result{alert_rule_hash=\"00e32ad470e657aff39db13cbd480c20\",check_name=\"check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status\", status=~\"(WARNING|CRITICAL)\", severity=~\"(warning|critical)\"} > 0) * on (instance) group_left (team) role_owner\n+    logs               => https://logstash.wikimedia.org/app/dashboards#/view/2d343ac0-6df8-11f0-8e08-7fab0da52b33?_g=(filters:!((query:(match_phrase:(event.module:check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status))),(query:(match_phrase:(host.name:{{$labels.instance|stripPort}})))))\n+    dashboard          => TODO\n+    description        => NRPE CHECK: Check unit status of security_group_ssh-from-restricted-bastion_to_project_trove\n+    summary            => NRPE CHECK: Check unit status of security_group_ssh-from-restricted-bastion_to_project_trove\n+    runbook            => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    alert_name         => nrpe_Check_unit_status_of_security_group_ssh_from_restricted_bastion_to_project_trove\n+    group              => nrpechecks\n+    ensure             => absent\n"}, {"resource": "Systemd::Monitor[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Systemd::Monitor[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Systemd::Monitor[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    check_interval => 10\n+    contact_group  => admins\n+    critical       => False\n+    notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    migration_task => T407130\n+    ensure         => absent\n+    retries        => 2\n"}, {"resource": "Service[security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "parameters": "--- Service[security_group_ssh-from-restricted-bastion_to_project_trove.timer].orig\n+++ Service[security_group_ssh-from-restricted-bastion_to_project_trove.timer]\n\n+    ensure   => stopped\n+    enable   => False\n+    provider => systemd\n+    before   => ['Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]']\n"}, {"resource": "Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "parameters": "--- Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service].orig\n+++ Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]\n\n+    unit              => nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service\n+    override_filename => puppet-override.conf\n+    ensure            => absent\n+    require           => ['Class[Systemd]']\n+    restart           => False\n+    override          => False\n"}, {"resource": "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "content": "--- /lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer.orig\n+++ /lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer\n@@ -0,0 +1,12 @@\n+[Unit]\n+Description=Periodic execution of security_group_ssh-from-restricted-bastion_to_project_trove.service\n+\n+[Timer]\n+Unit=security_group_ssh-from-restricted-bastion_to_project_trove.service\n+# Accuracy sets the maximum time interval around the execution time we want to allow\n+AccuracySec=15sec\n+OnCalendar=*-*-* *:00/30:00\n+RandomizedDelaySec=0\n+\n+[Install]\n+WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer].orig\n+++ File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer]\n\n+    mode   => 0444\n+    notify => Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "Nrpe::Monitor_service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Nrpe::Monitor_service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Nrpe::Monitor_service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    check_interval              => 10\n+    contact_group               => admins\n+    critical                    => False\n+    timeout                     => 10\n+    migration_task              => T407130\n+    alertmanager_team           => observability\n+    retries                     => 2\n+    description                 => Check unit status of security_group_ssh-from-restricted-bastion_to_project_trove\n+    notes_url                   => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    enable_nrpe2nodexp          => False\n+    retry_interval              => 1\n+    ensure                      => absent\n+    enable_icinga_check         => True\n+    nrpe_command                => /usr/local/lib/nagios/plugins/check_systemd_unit_status security_group_ssh-from-restricted-bastion_to_project_trove\n+    nrpe2nodexp_parse_perf_data => False\n"}, {"resource": "Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "parameters": "--- Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.timer].orig\n+++ Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.timer]\n\n+    unit              => security_group_ssh-from-restricted-bastion_to_project_trove.timer\n+    override_filename => puppet-override.conf\n+    ensure            => absent\n+    require           => ['Class[Systemd]']\n+    restart           => False\n+    override          => False\n"}, {"resource": "Class[Openstack::Apply_security_groups]", "parameters": "--- Class[Openstack::Apply_security_groups].orig\n+++ Class[Openstack::Apply_security_groups]\n\n+    ensure                     => absent\n+    project_and_security_group => {'trove': 'ssh-from-restricted-bastion'}\n"}, {"resource": "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)]", "parameters": "--- Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)].orig\n+++ Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)]\n\n+    refreshonly => True\n+    command     => /bin/systemctl daemon-reload\n"}, {"resource": "File[/etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf]", "content": "--- /etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf.orig\n+++ /etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf\n@@ -0,0 +1,10 @@\n+# rsyslog.conf(5) configuration file for services.\n+# This file is managed by Puppet.\n+if $programname startswith \"security_group_ssh-from-restricted-bastion_to_project_trove\" then {\n+    action(\n+        type=\"omfile\" file=\"/var/log/security_group_ssh-from-restricted-bastion_to_project_trove/syslog.log\"\n+        fileOwner=\"root\" fileGroup=\"root\"\n+        fileCreateMode=\"0644\"\n+    )\n+    & stop\n+}", "parameters": "--- File[/etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf].orig\n+++ File[/etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf]\n\n+    mode   => 0444\n+    notify => Service[rsyslog]\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "content": "--- /lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service.orig\n+++ /lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service\n@@ -0,0 +1,11 @@\n+[Unit]\n+Description=execution of nrpe2nodexp for the check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status command.\n+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+\n+[Service]\n+Type=oneshot\n+User=nagios\n+\n+Group=prometheus-node-exporter\n+SyslogIdentifier=nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status\n+ExecStart=-/usr/local/bin/nrpe2nodexp --alert-rule-hash \"00e32ad470e657aff39db13cbd480c20\" --timeout 10 --check-command \"check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status\"", "parameters": "--- File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service].orig\n+++ File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]\n\n+    mode   => 0444\n+    notify => Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)]\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "parameters": "--- Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer].orig\n+++ Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]\n\n+    ensure   => stopped\n+    enable   => False\n+    provider => systemd\n+    before   => ['Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]']\n"}, {"resource": "Systemd::Timer[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Systemd::Timer[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Systemd::Timer[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    unit_name          => security_group_ssh-from-restricted-bastion_to_project_trove.service\n+    timer_intervals    => [{'start': 'OnCalendar', 'interval': '*-*-* *:00/30:00'}]\n+    splay              => 0\n+    ensure             => absent\n+    fixed_random_delay => False\n+    accuracy           => 15sec\n"}, {"resource": "Class[Profile::Openstack::Base::Cumin_access]", "parameters": "--- Class[Profile::Openstack::Base::Cumin_access].orig\n+++ Class[Profile::Openstack::Base::Cumin_access]\n\n+    openstack_control_nodes                     => [{'host_fqdn': 'cloudcontrol1006.eqiad.wmnet', 'cloud_private_fqdn': 'cloudcontrol1006.private.eqiad.wikimedia.cloud'}, {'host_fqdn': 'cloudcontrol1007.eqiad.wmnet', 'cloud_private_fqdn': 'cloudcontrol1007.private.eqiad.wikimedia.cloud'}, {'host_fqdn': 'cloudcontrol1011.eqiad.wmnet', 'cloud_private_fqdn': 'cloudcontrol1011.private.eqiad.wikimedia.cloud'}]\n+    project_and_security_group_for_cumin_access => {'trove': 'ssh-from-restricted-bastion'}\n"}, {"resource": "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]", "parameters": "--- Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)].orig\n+++ Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]\n\n+    refreshonly => True\n+    command     => /bin/systemctl daemon-reload\n"}, {"resource": "Systemd::Service[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Systemd::Service[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Systemd::Service[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    migration_task           => T407130\n+    monitoring_enabled       => False\n+    monitoring_critical      => False\n+    require                  => Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.service]\n+    restart                  => False\n+    override                 => False\n+    monitoring_contact_group => admins\n+    service_params           => {}\n+    unit_type                => timer\n+    ensure                   => absent\n"}, {"resource": "Systemd::Timer::Job[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Systemd::Timer::Job[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Systemd::Timer::Job[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    send_mail                 => False\n+    monitoring_contact_groups => admins\n+    send_mail_only_on_error   => True\n+    logfile_name              => syslog.log\n+    description               => Apply security group ssh-from-restricted-bastion to project trove\n+    logging_enabled           => True\n+    logfile_group             => root\n+    environment               => {}\n+    logfile_perms             => all\n+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    max_runtime_seconds       => 890\n+    logfile_basedir           => /var/log\n+    monitoring_enabled        => True\n+    require                   => ['File[/usr/local/sbin/add-security-group-to-project]']\n+    syslog_match_startswith   => True\n+    success_exit_status       => []\n+    command                   => /usr/local/sbin/add-security-group-to-project --os-cloud novadmin  --security-group-name ssh-from-restricted-bastion --project-id trove\n+    user                      => root\n+    syslog_force_stop         => True\n+    ignore_errors             => False\n+    private_tmp               => False\n+    ensure                    => absent\n+    interval                  => {'start': 'OnCalendar', 'interval': '*-*-* *:00/30:00'}\n+    send_mail_to              => root@cloudcontrol1007.eqiad.wmnet\n+    fixed_random_delay        => False\n"}, {"resource": "Systemd::Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Systemd::Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Systemd::Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    migration_task           => T407130\n+    monitoring_enabled       => False\n+    monitoring_critical      => False\n+    require                  => Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]\n+    restart                  => False\n+    override                 => False\n+    monitoring_contact_group => admins\n+    service_params           => {}\n+    unit_type                => timer\n+    ensure                   => absent\n"}, {"resource": "File[/var/lib/prometheus/node.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.prom]", "parameters": "--- File[/var/lib/prometheus/node.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.prom].orig\n+++ File[/var/lib/prometheus/node.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.prom]\n\n+    ensure => absent\n+    owner  => root\n+    group  => root\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg]", "content": "--- /etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg.orig\n+++ /etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg\n@@ -0,0 +1,2 @@\n+# File generated by puppet. DO NOT edit by hand\n+command[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]=/usr/local/lib/nagios/plugins/check_systemd_unit_status security_group_ssh-from-restricted-bastion_to_project_trove", "parameters": "--- File[/etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg].orig\n+++ File[/etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg]\n\n+    tag     => nrpe::check\n+    mode    => 0444\n+    notify  => Service[nagios-nrpe-server]\n+    group   => root\n+    ensure  => absent\n+    require => Package[nagios-nrpe-server]\n+    owner   => root\n"}, {"resource": "File[/etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf]", "content": "--- /etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf.orig\n+++ /etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf\n@@ -0,0 +1,10 @@\n+# SPDX-License-Identifier: Apache-2.0\n+if $programname contains \"nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status\" then {\n+    if ($msg contains \"\\\"ecs.version\\\": \\\"1.7.0\\\"\") then {\n+        # Send logs to kafka\n+        set $.log_outputs = \"kafka ecs_170 local\";\n+    } else {\n+        # Filter out non-relevant nrpe2nodexp messages\n+        stop\n+    }\n+}", "parameters": "--- File[/etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf].orig\n+++ File[/etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf]\n\n+    mode   => 0444\n+    notify => Service[rsyslog]\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "Logrotate::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Logrotate::Conf[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Logrotate::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    ensure => absent\n"}, {"resource": "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)]", "parameters": "--- Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)].orig\n+++ Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)]\n\n+    refreshonly => True\n+    command     => /bin/systemctl daemon-reload\n"}, {"resource": "File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    force  => True\n+    mode   => 0755\n+    backup => False\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "Systemd::Timer::Job[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Systemd::Timer::Job[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Systemd::Timer::Job[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    syslog_identifier         => nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status\n+    monitoring_contact_groups => admins\n+    send_mail                 => False\n+    send_mail_only_on_error   => True\n+    logfile_name              => syslog.log\n+    description               => execution of nrpe2nodexp for the check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status command.\n+    splay                     => 300\n+    group                     => prometheus-node-exporter\n+    logging_enabled           => False\n+    logfile_group             => root\n+    environment               => {}\n+    logfile_perms             => all\n+    monitoring_notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    logfile_basedir           => /var/log\n+    monitoring_enabled        => False\n+    success_exit_status       => []\n+    syslog_match_startswith   => True\n+    command                   => /usr/local/bin/nrpe2nodexp --alert-rule-hash \"00e32ad470e657aff39db13cbd480c20\" --timeout 10 --check-command \"check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status\"\n+    user                      => nagios\n+    syslog_force_stop         => True\n+    ignore_errors             => True\n+    private_tmp               => False\n+    ensure                    => absent\n+    interval                  => [{'start': 'OnUnitInactiveSec', 'interval': '5min'}]\n+    send_mail_to              => root@cloudcontrol1007.eqiad.wmnet\n+    fixed_random_delay        => True\n"}, {"resource": "Monitoring::Service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Monitoring::Service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Monitoring::Service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    contact_group  => admins\n+    check_interval => 10\n+    critical       => False\n+    migration_task => T407130\n+    check_command  => nrpe_check!check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status!10\n+    freshness      => 36000\n+    host           => cloudcontrol1007\n+    config_dir     => /etc/nagios\n+    retries        => 2\n+    description    => Check unit status of security_group_ssh-from-restricted-bastion_to_project_trove\n+    notes_url      => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    passive        => False\n+    retry_interval => 1\n+    ensure         => absent\n"}, {"resource": "Monitoring::Exported_nagios_service[cloudcontrol1007 check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- Monitoring::Exported_nagios_service[cloudcontrol1007 check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ Monitoring::Exported_nagios_service[cloudcontrol1007 check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    check_interval         => 10\n+    notification_interval  => 0\n+    notification_options   => c,r,f\n+    contact_groups         => admins\n+    passive_checks_enabled => 1\n+    notification_period    => 24x7\n+    retry_interval         => 1\n+    max_check_attempts     => 2\n+    check_command          => nrpe_check!check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status!10\n+    active_checks_enabled  => 1\n+    notifications_enabled  => 1\n+    servicegroups          => wmcs_eqiad\n+    notes_url              => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state\n+    check_freshness        => 0\n+    service_description    => Check unit status of security_group_ssh-from-restricted-bastion_to_project_trove\n+    is_volatile            => 0\n+    host_name              => cloudcontrol1007\n+    ensure                 => absent\n+    check_period           => 24x7\n"}, {"resource": "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "content": "--- /lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer.orig\n+++ /lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer\n@@ -0,0 +1,14 @@\n+[Unit]\n+Description=Periodic execution of nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service\n+\n+[Timer]\n+Unit=nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service\n+# Accuracy sets the maximum time interval around the execution time we want to allow\n+AccuracySec=15sec\n+OnUnitInactiveSec=5min\n+OnActiveSec=1s\n+RandomizedDelaySec=300\n+FixedRandomDelay=true\n+\n+[Install]\n+WantedBy=multi-user.target", "parameters": "--- File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer].orig\n+++ File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]\n\n+    mode   => 0444\n+    notify => Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "File[/etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove]", "content": "--- /etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove.orig\n+++ /etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove\n@@ -0,0 +1,12 @@\n+# logrotate(8) config for security_group_ssh-from-restricted-bastion_to_project_trove\n+\n+/var/log/security_group_ssh-from-restricted-bastion_to_project_trove/*.log {\n+    daily\n+    copytruncate\n+    missingok\n+    compress\n+    delaycompress\n+    notifempty\n+    rotate 15\n+    size 256M\n+}", "parameters": "--- File[/etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ File[/etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    ensure => absent\n+    mode   => 0444\n+    owner  => root\n+    group  => root\n"}, {"resource": "Systemd::Syslog[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Systemd::Syslog[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Systemd::Syslog[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    readable_by            => all\n+    log_filename           => syslog.log\n+    owner                  => root\n+    programname_comparison => startswith\n+    group                  => root\n+    base_dir               => /var/log\n+    ensure                 => absent\n+    force_stop             => True\n"}, {"resource": "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]", "parameters": "--- Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)].orig\n+++ Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]\n\n+    refreshonly => True\n+    command     => /bin/systemctl daemon-reload\n"}, {"resource": "Nrpe::Plugin[check_systemd_unit_status]", "parameters": "--- Nrpe::Plugin[check_systemd_unit_status].orig\n+++ Nrpe::Plugin[check_systemd_unit_status]\n\n+    source => puppet:///modules/systemd/check_systemd_unit_status\n+    ensure => present\n"}, {"resource": "File[/usr/local/sbin/add-security-group-to-project]", "parameters": "--- File[/usr/local/sbin/add-security-group-to-project].orig\n+++ File[/usr/local/sbin/add-security-group-to-project]\n\n+    source => puppet:///modules/openstack/nova/add-security-group-to-project.py\n+    mode   => 0755\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "File[/etc/sudoers.d/nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "parameters": "--- File[/etc/sudoers.d/nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status].orig\n+++ File[/etc/sudoers.d/nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]\n\n+    ensure  => absent\n+    require => Package[nagios-nrpe-server]\n+    owner   => root\n+    group   => root\n"}, {"resource": "Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "parameters": "--- Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer].orig\n+++ Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]\n\n+    unit              => nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer\n+    override_filename => puppet-override.conf\n+    ensure            => absent\n+    require           => ['Class[Systemd]']\n+    restart           => False\n+    override          => False\n"}, {"resource": "Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.service]", "parameters": "--- Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.service].orig\n+++ Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.service]\n\n+    unit              => security_group_ssh-from-restricted-bastion_to_project_trove.service\n+    override_filename => puppet-override.conf\n+    ensure            => absent\n+    require           => ['Class[Systemd]']\n+    restart           => False\n+    override          => False\n"}, {"resource": "Class[Profile::Openstack::Eqiad1::Cumin_access]", "parameters": "--- Class[Profile::Openstack::Eqiad1::Cumin_access].orig\n+++ Class[Profile::Openstack::Eqiad1::Cumin_access]\n\n+    openstack_control_nodes                     => [{'host_fqdn': 'cloudcontrol1006.eqiad.wmnet', 'cloud_private_fqdn': 'cloudcontrol1006.private.eqiad.wikimedia.cloud'}, {'host_fqdn': 'cloudcontrol1007.eqiad.wmnet', 'cloud_private_fqdn': 'cloudcontrol1007.private.eqiad.wikimedia.cloud'}, {'host_fqdn': 'cloudcontrol1011.eqiad.wmnet', 'cloud_private_fqdn': 'cloudcontrol1011.private.eqiad.wikimedia.cloud'}]\n+    project_and_security_group_for_cumin_access => {'trove': 'ssh-from-restricted-bastion'}\n"}, {"resource": "Rsyslog::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]", "parameters": "--- Rsyslog::Conf[security_group_ssh-from-restricted-bastion_to_project_trove].orig\n+++ Rsyslog::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]\n\n+    mode     => 0444\n+    ensure   => absent\n+    require  => File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove]\n+    priority => 40\n"}], "perc_changed": "2.12%"}, "core": {"total": 4152, "only_in_self": [], "only_in_other": ["Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)]", "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]", "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)]", "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]", "File[/etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove]", "File[/etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg]", "File[/etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf]", "File[/etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf]", "File[/etc/sudoers.d/nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service]", "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]", "File[/usr/local/sbin/add-security-group-to-project]", "File[/var/lib/prometheus/node.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.prom]", "File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove]", "Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "Service[security_group_ssh-from-restricted-bastion_to_project_trove.timer]"], "resource_diffs": [], "perc_changed": "0.46%"}, "main": {"total": 4152, "only_in_self": [], "only_in_other": ["Class[Openstack::Apply_security_groups]", "Class[Profile::Openstack::Base::Cumin_access]", "Class[Profile::Openstack::Eqiad1::Cumin_access]", "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service)]", "Exec[systemd daemon-reload for nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer (nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer)]", "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.service (security_group_ssh-from-restricted-bastion_to_project_trove.service)]", "Exec[systemd daemon-reload for security_group_ssh-from-restricted-bastion_to_project_trove.timer (security_group_ssh-from-restricted-bastion_to_project_trove.timer)]", "File[/etc/logrotate.d/security_group_ssh-from-restricted-bastion_to_project_trove]", "File[/etc/nagios/nrpe.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.cfg]", "File[/etc/rsyslog.d/25-nrpe2nodexp-check-security-group-ssh-from-restricted-bastion-to-project-trove-status.conf]", "File[/etc/rsyslog.d/40-security-group-ssh-from-restricted-bastion-to-project-trove.conf]", "File[/etc/sudoers.d/nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "File[/lib/systemd/system/nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.service]", "File[/lib/systemd/system/security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "File[/usr/local/lib/nagios/plugins/check_systemd_unit_status]", "File[/usr/local/sbin/add-security-group-to-project]", "File[/var/lib/prometheus/node.d/check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status.prom]", "File[/var/log/security_group_ssh-from-restricted-bastion_to_project_trove]", "Logrotate::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]", "Monitoring::Exported_nagios_service[cloudcontrol1007 check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Monitoring::Service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Nrpe::Check[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Nrpe::Monitor_service[check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Nrpe::Plugin[check_systemd_unit_status]", "Prometheus::Alert::Rule[check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status_00e32ad470e657aff39db13cbd480c20]", "Rsyslog::Conf[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Rsyslog::Conf[security_group_ssh-from-restricted-bastion_to_project_trove]", "Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "Service[security_group_ssh-from-restricted-bastion_to_project_trove.timer]", "Sudo::User[nrpe-check_check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Monitor[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Service[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Service[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Syslog[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Timer::Job[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Timer::Job[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Timer[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status]", "Systemd::Timer[security_group_ssh-from-restricted-bastion_to_project_trove]", "Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.service]", "Systemd::Unit[nrpe2nodexp-check_security_group_ssh-from-restricted-bastion_to_project_trove_status.timer]", "Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.service]", "Systemd::Unit[security_group_ssh-from-restricted-bastion_to_project_trove.timer]"], "resource_diffs": [], "perc_changed": "1.06%"}}}