Compilation results for idp2005.wikimedia.org: System changes detected

Catalog differences

Summary

Resources modified

• Apereo_cas::Service[airflow_analytics_product]

  Parameters differences:

  --- Apereo_cas::Service[airflow_analytics_product].orig
  +++ Apereo_cas::Service[airflow_analytics_product]
  
  +    mfa => []
  

• File[/etc/cas/services/icinga-1.json]

  Content differences:

  --- /etc/cas/services/icinga-1.json.orig
  +++ /etc/cas/services/icinga-1.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"icinga","serviceId":"https://icinga\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":1,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"properties":{"@class":"java.util.HashMap","httpHeaderEnableXFrameOptions":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceProperty","values":["java.util.HashSet",["false"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"icinga","serviceId":"https://icinga\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":1,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true},"properties":{"@class":"java.util.HashMap","httpHeaderEnableXFrameOptions":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceProperty","values":["java.util.HashSet",["false"]]}}}

• Apereo_cas::Service[test_kitchen]

  Parameters differences:

  --- Apereo_cas::Service[test_kitchen].orig
  +++ Apereo_cas::Service[test_kitchen]
  
  +    mfa => []
  

• Apereo_cas::Service[airflow_main]

  Parameters differences:

  --- Apereo_cas::Service[airflow_main].orig
  +++ Apereo_cas::Service[airflow_main]
  
  +    mfa => []
  

• Apereo_cas::Service[debmonitor]

  Parameters differences:

  --- Apereo_cas::Service[debmonitor].orig
  +++ Apereo_cas::Service[debmonitor]
  
  +    mfa => []
  

• File[/etc/cas/services/rt-19.json]

  Content differences:

  --- /etc/cas/services/rt-19.json.orig
  +++ /etc/cas/services/rt-19.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"rt","serviceId":"https://rt\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":19,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"rt","serviceId":"https://rt\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":19,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/test_kitchen_next-41.json]

  Content differences:

  --- /etc/cas/services/test_kitchen_next-41.json.orig
  +++ /etc/cas/services/test_kitchen_next-41.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"test_kitchen_next","serviceId":"https://test-kitchen-next\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":41,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"test_kitchen_next","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"test_kitchen_next","serviceId":"https://test-kitchen-next\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":41,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"test_kitchen_next","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[thanos]

  Parameters differences:

  --- Apereo_cas::Service[thanos].orig
  +++ Apereo_cas::Service[thanos]
  
  +    mfa => []
  

• File[/etc/cas/services/librenms-8.json]

  Content differences:

  --- /etc/cas/services/librenms-8.json.orig
  +++ /etc/cas/services/librenms-8.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"librenms","serviceId":"https://librenms\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":8,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"librenms","serviceId":"https://librenms\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":8,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/airflow_platform_eng-51.json]

  Content differences:

  --- /etc/cas/services/airflow_platform_eng-51.json.orig
  +++ /etc/cas/services/airflow_platform_eng-51.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_platform_eng","serviceId":"https://airflow-platform-eng\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":51,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_platform_eng","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_platform_eng","serviceId":"https://airflow-platform-eng\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":51,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_platform_eng","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[airflow_wmde]

  Parameters differences:

  --- Apereo_cas::Service[airflow_wmde].orig
  +++ Apereo_cas::Service[airflow_wmde]
  
  +    mfa => []
  

• Apereo_cas::Service[airflow_sre]

  Parameters differences:

  --- Apereo_cas::Service[airflow_sre].orig
  +++ Apereo_cas::Service[airflow_sre]
  
  +    mfa => []
  

• File[/etc/cas/services/idm-29.json]

  Content differences:

  --- /etc/cas/services/idm-29.json.orig
  +++ /etc/cas/services/idm-29.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"idm","serviceId":"https://idm\\.wikimedia\\.org\\/[\\w\\/]*","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":29,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"idm","clientSecret":"REMOVED","userProfileViewType":"NESTED","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"idm","serviceId":"https://idm\\.wikimedia\\.org\\/[\\w\\/]*","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":29,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"idm","clientSecret":"REMOVED","userProfileViewType":"NESTED","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/graphite-4.json]

  Content differences:

  --- /etc/cas/services/graphite-4.json.orig
  +++ /etc/cas/services/graphite-4.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"graphite","serviceId":"https://graphite\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":4,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"graphite","serviceId":"https://graphite\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":4,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[airflow_fr_tech]

  Parameters differences:

  --- Apereo_cas::Service[airflow_fr_tech].orig
  +++ Apereo_cas::Service[airflow_fr_tech]
  
  +    mfa => []
  

• File[/etc/cas/services/growthbook-59.json]

  Content differences:

  --- /etc/cas/services/growthbook-59.json.orig
  +++ /etc/cas/services/growthbook-59.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"growthbook","serviceId":"https://growthbook\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":59,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org","cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org","cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"growthbook","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"growthbook","serviceId":"https://growthbook\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":59,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org","cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org","cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"growthbook","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[keystone]

  Parameters differences:

  --- Apereo_cas::Service[keystone].orig
  +++ Apereo_cas::Service[keystone]
  
  +    mfa => []
  

• Apereo_cas::Service[stream_internal]

  Parameters differences:

  --- Apereo_cas::Service[stream_internal].orig
  +++ Apereo_cas::Service[stream_internal]
  
  +    mfa => []
  

• Apereo_cas::Service[rt]

  Parameters differences:

  --- Apereo_cas::Service[rt].orig
  +++ Apereo_cas::Service[rt]
  
  +    mfa => []
  

• Apereo_cas::Service[debmonitor-next]

  Parameters differences:

  --- Apereo_cas::Service[debmonitor-next].orig
  +++ Apereo_cas::Service[debmonitor-next]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_analytics_product-52.json]

  Content differences:

  --- /etc/cas/services/airflow_analytics_product-52.json.orig
  +++ /etc/cas/services/airflow_analytics_product-52.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_analytics_product","serviceId":"https://airflow-analytics-product\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":52,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_analytics_product","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_analytics_product","serviceId":"https://airflow-analytics-product\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":52,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_analytics_product","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/test_kitchen-40.json]

  Content differences:

  --- /etc/cas/services/test_kitchen-40.json.orig
  +++ /etc/cas/services/test_kitchen-40.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"test_kitchen","serviceId":"https://test-kitchen\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":40,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"test_kitchen","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"test_kitchen","serviceId":"https://test-kitchen\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":40,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"test_kitchen","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/grafana-16.json]

  Content differences:

  --- /etc/cas/services/grafana-16.json.orig
  +++ /etc/cas/services/grafana-16.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"grafana","serviceId":"https://grafana(-next)?(-rw)?\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":16,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org","cn=grafana-admin,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"grafana","serviceId":"https://grafana(-next)?(-rw)?\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":16,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org","cn=grafana-admin,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/config-master-20.json]

  Content differences:

  --- /etc/cas/services/config-master-20.json.orig
  +++ /etc/cas/services/config-master-20.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"config-master","serviceId":"https://config-master\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":20,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"config-master","serviceId":"https://config-master\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":20,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/netbox_oidc-33.json]

  Content differences:

  --- /etc/cas/services/netbox_oidc-33.json.orig
  +++ /etc/cas/services/netbox_oidc-33.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"netbox_oidc","serviceId":"https://netbox(-next)?\\.wikimedia\\.org\\/[\\w\\/]*","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":33,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org","cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"netbox_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"netbox_oidc","serviceId":"https://netbox(-next)?\\.wikimedia\\.org\\/[\\w\\/]*","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":33,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org","cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"netbox_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[juniper]

  Parameters differences:

  --- Apereo_cas::Service[juniper].orig
  +++ Apereo_cas::Service[juniper]
  
  +    mfa => []
  

• Apereo_cas::Service[datahub]

  Parameters differences:

  --- Apereo_cas::Service[datahub].orig
  +++ Apereo_cas::Service[datahub]
  
  +    mfa => []
  

• File[/etc/cas/services/zarcillo-56.json]

  Content differences:

  --- /etc/cas/services/zarcillo-56.json.orig
  +++ /etc/cas/services/zarcillo-56.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"zarcillo","serviceId":"https://zarcillo\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":56,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"zarcillo","serviceId":"https://zarcillo\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":56,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[airflow_search]

  Parameters differences:

  --- Apereo_cas::Service[airflow_search].orig
  +++ Apereo_cas::Service[airflow_search]
  
  +    mfa => []
  

• Apereo_cas::Service[test_kitchen_next]

  Parameters differences:

  --- Apereo_cas::Service[test_kitchen_next].orig
  +++ Apereo_cas::Service[test_kitchen_next]
  
  +    mfa => []
  

• Apereo_cas::Service[spiderpig]

  Parameters differences:

  --- Apereo_cas::Service[spiderpig].orig
  +++ Apereo_cas::Service[spiderpig]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_main-54.json]

  Content differences:

  --- /etc/cas/services/airflow_main-54.json.orig
  +++ /etc/cas/services/airflow_main-54.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_main","serviceId":"https://airflow\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":54,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_main","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_main","serviceId":"https://airflow\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":54,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_main","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[airflow_ml]

  Parameters differences:

  --- Apereo_cas::Service[airflow_ml].orig
  +++ Apereo_cas::Service[airflow_ml]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_wikidata-58.json]

  Content differences:

  --- /etc/cas/services/airflow_wikidata-58.json.orig
  +++ /etc/cas/services/airflow_wikidata-58.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_wikidata","serviceId":"https://airflow-wikidata\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":58,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_wikidata","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_wikidata","serviceId":"https://airflow-wikidata\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":58,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_wikidata","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[yarn]

  Parameters differences:

  --- Apereo_cas::Service[yarn].orig
  +++ Apereo_cas::Service[yarn]
  
  +    mfa => []
  

• Apereo_cas::Service[superset_next_k8s]

  Parameters differences:

  --- Apereo_cas::Service[superset_next_k8s].orig
  +++ Apereo_cas::Service[superset_next_k8s]
  
  +    mfa => []
  

• Apereo_cas::Service[airflow_platform_eng]

  Parameters differences:

  --- Apereo_cas::Service[airflow_platform_eng].orig
  +++ Apereo_cas::Service[airflow_platform_eng]
  
  +    mfa => []
  

• File[/etc/cas/services/stream_internal-62.json]

  Content differences:

  --- /etc/cas/services/stream_internal-62.json.orig
  +++ /etc/cas/services/stream_internal-62.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"stream_internal","serviceId":"https://stream-internal\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":62,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"stream_internal","serviceId":"https://stream-internal\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":62,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/turnilo-11.json]

  Content differences:

  --- /etc/cas/services/turnilo-11.json.orig
  +++ /etc/cas/services/turnilo-11.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"turnilo","serviceId":"https://turnilo\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":11,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"turnilo","serviceId":"https://turnilo\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":11,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/alerts-15.json]

  Content differences:

  --- /etc/cas/services/alerts-15.json.orig
  +++ /etc/cas/services/alerts-15.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"alerts","serviceId":"https://alerts\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":15,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"alerts","serviceId":"https://alerts\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":15,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[piwik]

  Parameters differences:

  --- Apereo_cas::Service[piwik].orig
  +++ Apereo_cas::Service[piwik]
  
  +    mfa => []
  

• Apereo_cas::Service[gitlab_oidc]

  Parameters differences:

  --- Apereo_cas::Service[gitlab_oidc].orig
  +++ Apereo_cas::Service[gitlab_oidc]
  
  +    mfa => []
  

• Apereo_cas::Service[alerts]

  Parameters differences:

  --- Apereo_cas::Service[alerts].orig
  +++ Apereo_cas::Service[alerts]
  
  +    mfa => []
  

• Apereo_cas::Service[orchestrator]

  Parameters differences:

  --- Apereo_cas::Service[orchestrator].orig
  +++ Apereo_cas::Service[orchestrator]
  
  +    mfa => []
  

• Apereo_cas::Service[puppetboard]

  Parameters differences:

  --- Apereo_cas::Service[puppetboard].orig
  +++ Apereo_cas::Service[puppetboard]
  
  +    mfa => []
  

• Apereo_cas::Service[config-master]

  Parameters differences:

  --- Apereo_cas::Service[config-master].orig
  +++ Apereo_cas::Service[config-master]
  
  +    mfa => []
  

• Apereo_cas::Service[prometheus]

  Parameters differences:

  --- Apereo_cas::Service[prometheus].orig
  +++ Apereo_cas::Service[prometheus]
  
  +    mfa => []
  

• Apereo_cas::Service[idm]

  Parameters differences:

  --- Apereo_cas::Service[idm].orig
  +++ Apereo_cas::Service[idm]
  
  +    mfa => []
  

• Apereo_cas::Service[prometheus_oidc]

  Parameters differences:

  --- Apereo_cas::Service[prometheus_oidc].orig
  +++ Apereo_cas::Service[prometheus_oidc]
  
  +    mfa => []
  

• File[/etc/cas/services/thanos_oidc-35.json]

  Content differences:

  --- /etc/cas/services/thanos_oidc-35.json.orig
  +++ /etc/cas/services/thanos_oidc-35.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"thanos_oidc","serviceId":"https://thanos\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":35,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"thanos_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"thanos_oidc","serviceId":"https://thanos\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":35,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"thanos_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/airflow_analytics_test-44.json]

  Content differences:

  --- /etc/cas/services/airflow_analytics_test-44.json.orig
  +++ /etc/cas/services/airflow_analytics_test-44.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_analytics_test","serviceId":"https://airflow-analytics-test\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":44,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_analytics_test","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_analytics_test","serviceId":"https://airflow-analytics-test\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":44,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_analytics_test","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[librenms]

  Parameters differences:

  --- Apereo_cas::Service[librenms].orig
  +++ Apereo_cas::Service[librenms]
  
  +    mfa => []
  

• Apereo_cas::Service[zarcillo]

  Parameters differences:

  --- Apereo_cas::Service[zarcillo].orig
  +++ Apereo_cas::Service[zarcillo]
  
  +    mfa => []
  

• Apereo_cas::Service[jaeger]

  Parameters differences:

  --- Apereo_cas::Service[jaeger].orig
  +++ Apereo_cas::Service[jaeger]
  
  +    mfa => []
  

• Apereo_cas::Service[airflow_analytics_test]

  Parameters differences:

  --- Apereo_cas::Service[airflow_analytics_test].orig
  +++ Apereo_cas::Service[airflow_analytics_test]
  
  +    mfa => []
  

• Apereo_cas::Service[logstash_oidc]

  Parameters differences:

  --- Apereo_cas::Service[logstash_oidc].orig
  +++ Apereo_cas::Service[logstash_oidc]
  
  +    mfa => []
  

• File[/etc/cas/services/puppetboard-3.json]

  Content differences:

  --- /etc/cas/services/puppetboard-3.json.orig
  +++ /etc/cas/services/puppetboard-3.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"puppetboard","serviceId":"https://puppetboard(-next)?\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":3,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org","cn=ops-limited,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"puppetboard","serviceId":"https://puppetboard(-next)?\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":3,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org","cn=ops-limited,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[graphite]

  Parameters differences:

  --- Apereo_cas::Service[graphite].orig
  +++ Apereo_cas::Service[graphite]
  
  +    mfa => []
  

• File[/etc/cas/services/klaxon-21.json]

  Content differences:

  --- /etc/cas/services/klaxon-21.json.orig
  +++ /etc/cas/services/klaxon-21.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"klaxon","serviceId":"https://klaxon\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":21,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"klaxon","serviceId":"https://klaxon\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":21,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[airflow_research]

  Parameters differences:

  --- Apereo_cas::Service[airflow_research].orig
  +++ Apereo_cas::Service[airflow_research]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_sre-60.json]

  Content differences:

  --- /etc/cas/services/airflow_sre-60.json.orig
  +++ /etc/cas/services/airflow_sre-60.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_sre","serviceId":"https://airflow-sre\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":60,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_sre","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_sre","serviceId":"https://airflow-sre\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":60,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_sre","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/debmonitor-next-57.json]

  Content differences:

  --- /etc/cas/services/debmonitor-next-57.json.orig
  +++ /etc/cas/services/debmonitor-next-57.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"debmonitor-next","serviceId":"^https://debmonitor-next\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":57,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"debmonitor-next","serviceId":"^https://debmonitor-next\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":57,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/superset_next_k8s-38.json]

  Content differences:

  --- /etc/cas/services/superset_next_k8s-38.json.orig
  +++ /etc/cas/services/superset_next_k8s-38.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"superset_next_k8s","serviceId":"https://superset-next\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":38,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"superset_next_k8s","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"superset_next_k8s","serviceId":"https://superset-next\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":38,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"superset_next_k8s","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[turnilo]

  Parameters differences:

  --- Apereo_cas::Service[turnilo].orig
  +++ Apereo_cas::Service[turnilo]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_ml-53.json]

  Content differences:

  --- /etc/cas/services/airflow_ml-53.json.orig
  +++ /etc/cas/services/airflow_ml-53.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_ml","serviceId":"https://airflow-ml\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":53,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_ml","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_ml","serviceId":"https://airflow-ml\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":53,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_ml","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[grafana]

  Parameters differences:

  --- Apereo_cas::Service[grafana].orig
  +++ Apereo_cas::Service[grafana]
  
  +    mfa => []
  

• File[/etc/cas/services/debmonitor-2.json]

  Content differences:

  --- /etc/cas/services/debmonitor-2.json.orig
  +++ /etc/cas/services/debmonitor-2.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"debmonitor","serviceId":"^https://debmonitor\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":2,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=wmf,ou=groups,dc=wikimedia,dc=org","cn=nda,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"debmonitor","serviceId":"^https://debmonitor\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":2,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=wmf,ou=groups,dc=wikimedia,dc=org","cn=nda,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/yarn-10.json]

  Content differences:

  --- /etc/cas/services/yarn-10.json.orig
  +++ /etc/cas/services/yarn-10.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"yarn","serviceId":"https://yarn\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":10,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"yarn","serviceId":"https://yarn\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":10,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[superset_k8s]

  Parameters differences:

  --- Apereo_cas::Service[superset_k8s].orig
  +++ Apereo_cas::Service[superset_k8s]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_wmde-46.json]

  Content differences:

  --- /etc/cas/services/airflow_wmde-46.json.orig
  +++ /etc/cas/services/airflow_wmde-46.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_wmde","serviceId":"https://airflow-wmde\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":46,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_wmde","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_wmde","serviceId":"https://airflow-wmde\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":46,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_wmde","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/jaeger-36.json]

  Content differences:

  --- /etc/cas/services/jaeger-36.json.orig
  +++ /etc/cas/services/jaeger-36.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"jaeger","serviceId":"https://trace\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":36,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"jaeger","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"jaeger","serviceId":"https://trace\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":36,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"jaeger","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/keystone-43.json]

  Content differences:

  --- /etc/cas/services/keystone-43.json.orig
  +++ /etc/cas/services/keystone-43.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"keystone","serviceId":"https://(keystone.)?openstack.*.wikimediacloud.org.*","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":43,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"keystone","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["id_token token"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"keystone","serviceId":"https://(keystone.)?openstack.*.wikimediacloud.org.*","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":43,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"keystone","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["id_token token"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/gitlab_oidc-31.json]

  Content differences:

  --- /etc/cas/services/gitlab_oidc-31.json.orig
  +++ /etc/cas/services/gitlab_oidc-31.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"gitlab_oidc","serviceId":"https://gitlab\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":31,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"gitlab_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"gitlab_oidc","serviceId":"https://gitlab\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":31,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"gitlab_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/airflow_search-48.json]

  Content differences:

  --- /etc/cas/services/airflow_search-48.json.orig
  +++ /etc/cas/services/airflow_search-48.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_search","serviceId":"https://airflow-search\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":48,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_search","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_search","serviceId":"https://airflow-search\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":48,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_search","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[netbox_oidc]

  Parameters differences:

  --- Apereo_cas::Service[netbox_oidc].orig
  +++ Apereo_cas::Service[netbox_oidc]
  
  +    mfa => []
  

• Apereo_cas::Service[kafka-ui]

  Parameters differences:

  --- Apereo_cas::Service[kafka-ui].orig
  +++ Apereo_cas::Service[kafka-ui]
  
  +    mfa => []
  

• Apereo_cas::Service[icinga]

  Parameters differences:

  --- Apereo_cas::Service[icinga].orig
  +++ Apereo_cas::Service[icinga]
  
  +    mfa => []
  

• File[/etc/cas/services/spiderpig-55.json]

  Content differences:

  --- /etc/cas/services/spiderpig-55.json.orig
  +++ /etc/cas/services/spiderpig-55.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"spiderpig","serviceId":"https://spiderpig\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":55,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org","cn=releng,ou=groups,dc=wikimedia,dc=org","cn=ops,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"spiderpig","serviceId":"https://spiderpig\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":55,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org","cn=releng,ou=groups,dc=wikimedia,dc=org","cn=ops,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/logstash_oidc-39.json]

  Content differences:

  --- /etc/cas/services/logstash_oidc-39.json.orig
  +++ /etc/cas/services/logstash_oidc-39.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"logstash_oidc","serviceId":"https://logstash\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":39,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=logstash-access,ou=groups,dc=wikimedia,dc=org","cn=ops,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"logstash_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"logstash_oidc","serviceId":"https://logstash\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":39,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=logstash-access,ou=groups,dc=wikimedia,dc=org","cn=ops,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"logstash_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/kafka-ui-63.json]

  Content differences:

  --- /etc/cas/services/kafka-ui-63.json.orig
  +++ /etc/cas/services/kafka-ui-63.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"kafka-ui","serviceId":"https://kafka\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":63,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"kafka-ui","serviceId":"https://kafka\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":63,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[growthbook]

  Parameters differences:

  --- Apereo_cas::Service[growthbook].orig
  +++ Apereo_cas::Service[growthbook]
  
  +    mfa => []
  

• File[/etc/cas/services/airflow_fr_tech-61.json]

  Content differences:

  --- /etc/cas/services/airflow_fr_tech-61.json.orig
  +++ /etc/cas/services/airflow_fr_tech-61.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_fr_tech","serviceId":"https://airflow-fr-tech\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":61,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_fr_tech","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_fr_tech","serviceId":"https://airflow-fr-tech\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":61,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_fr_tech","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/datahub-34.json]

  Content differences:

  --- /etc/cas/services/datahub-34.json.orig
  +++ /etc/cas/services/datahub-34.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"datahub","serviceId":"https://datahub\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":34,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"datahub","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"datahub","serviceId":"https://datahub\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":34,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"datahub","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[thanos_oidc]

  Parameters differences:

  --- Apereo_cas::Service[thanos_oidc].orig
  +++ Apereo_cas::Service[thanos_oidc]
  
  +    mfa => []
  

• Apereo_cas::Service[people]

  Parameters differences:

  --- Apereo_cas::Service[people].orig
  +++ Apereo_cas::Service[people]
  
  +    mfa => []
  

• Apereo_cas::Service[gitlab_replica_oidc]

  Parameters differences:

  --- Apereo_cas::Service[gitlab_replica_oidc].orig
  +++ Apereo_cas::Service[gitlab_replica_oidc]
  
  +    mfa => []
  

• File[/etc/cas/services/people-7.json]

  Content differences:

  --- /etc/cas/services/people-7.json.orig
  +++ /etc/cas/services/people-7.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"people","serviceId":"https://people\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":7,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"people","serviceId":"https://people\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":7,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/prometheus_oidc-42.json]

  Content differences:

  --- /etc/cas/services/prometheus_oidc-42.json.orig
  +++ /etc/cas/services/prometheus_oidc-42.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"prometheus_oidc","serviceId":"https://prometheus-(.+)\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":42,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"prometheus_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"prometheus_oidc","serviceId":"https://prometheus-(.+)\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":42,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"prometheus_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/piwik-9.json]

  Content differences:

  --- /etc/cas/services/piwik-9.json.orig
  +++ /etc/cas/services/piwik-9.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"piwik","serviceId":"https://piwik\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":9,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"piwik","serviceId":"https://piwik\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":9,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/requestctl-45.json]

  Content differences:

  --- /etc/cas/services/requestctl-45.json.orig
  +++ /etc/cas/services/requestctl-45.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"requestctl","serviceId":"https://requestctl\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":45,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"requestctl","serviceId":"https://requestctl\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":45,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[klaxon]

  Parameters differences:

  --- Apereo_cas::Service[klaxon].orig
  +++ Apereo_cas::Service[klaxon]
  
  +    mfa => []
  

• File[/etc/cas/services/superset_k8s-37.json]

  Content differences:

  --- /etc/cas/services/superset_k8s-37.json.orig
  +++ /etc/cas/services/superset_k8s-37.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"superset_k8s","serviceId":"https://superset\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":37,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"superset_k8s","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"superset_k8s","serviceId":"https://superset\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":37,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"superset_k8s","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/prometheus-27.json]

  Content differences:

  --- /etc/cas/services/prometheus-27.json.orig
  +++ /etc/cas/services/prometheus-27.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"prometheus","serviceId":"https://prometheus-[^.]+\\.wikimedia.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":27,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"prometheus","serviceId":"https://prometheus-[^.]+\\.wikimedia.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":27,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[wmcs_idp]

  Parameters differences:

  --- Apereo_cas::Service[wmcs_idp].orig
  +++ Apereo_cas::Service[wmcs_idp]
  
  +    mfa => []
  

• File[/etc/cas/services/wmcs_idp-24.json]

  Content differences:

  --- /etc/cas/services/wmcs_idp-24.json.orig
  +++ /etc/cas/services/wmcs_idp-24.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"wmcs_idp","serviceId":"https://idp\\.wmcloud\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":24,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"wmcs_idp","serviceId":"https://idp\\.wmcloud\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":24,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/airflow_research-47.json]

  Content differences:

  --- /etc/cas/services/airflow_research-47.json.orig
  +++ /etc/cas/services/airflow_research-47.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_research","serviceId":"https://airflow-research\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":47,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_research","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"airflow_research","serviceId":"https://airflow-research\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":47,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"airflow_research","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/orchestrator-17.json]

  Content differences:

  --- /etc/cas/services/orchestrator-17.json.orig
  +++ /etc/cas/services/orchestrator-17.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"orchestrator","serviceId":"^https://orchestrator\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":17,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"orchestrator","serviceId":"^https://orchestrator\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":17,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[airflow_wikidata]

  Parameters differences:

  --- Apereo_cas::Service[airflow_wikidata].orig
  +++ Apereo_cas::Service[airflow_wikidata]
  
  +    mfa => []
  

• File[/etc/cas/services/gitlab_replica_oidc-32.json]

  Content differences:

  --- /etc/cas/services/gitlab_replica_oidc-32.json.orig
  +++ /etc/cas/services/gitlab_replica_oidc-32.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"gitlab_replica_oidc","serviceId":"https://gitlab-replica(-a|-b)\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":32,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"gitlab_replica_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"gitlab_replica_oidc","serviceId":"https://gitlab-replica(-a|-b)\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":32,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"clientId":"gitlab_replica_oidc","clientSecret":"REMOVED","userProfileViewType":"FLAT","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/thanos-13.json]

  Content differences:

  --- /etc/cas/services/thanos-13.json.orig
  +++ /etc/cas/services/thanos-13.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.CasRegisteredService","name":"thanos","serviceId":"https://thanos\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":13,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}}}
  +{"@class":"org.apereo.cas.services.CasRegisteredService","name":"thanos","serviceId":"https://thanos\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":13,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=nda,ou=groups,dc=wikimedia,dc=org","cn=wmf,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• File[/etc/cas/services/juniper-30.json]

  Content differences:

  --- /etc/cas/services/juniper-30.json.orig
  +++ /etc/cas/services/juniper-30.json
  @@ -1 +1 @@
  -{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"juniper","serviceId":"https://apigw-stage\\.juniper\\.net/css-asset/1\\.0","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":30,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"juniper","clientSecret":"REMOVED","userProfileViewType":"NESTED","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]]}
  +{"@class":"org.apereo.cas.services.OidcRegisteredService","name":"juniper","serviceId":"https://apigw-stage\\.juniper\\.net/css-asset/1\\.0","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy"},"id":30,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy"},"clientId":"juniper","clientSecret":"REMOVED","userProfileViewType":"NESTED","bypassApprovalPrompt":true,"supportedResponseTypes":["java.util.HashSet",["code"]],"supportedGrantTypes":["java.util.HashSet",["authorization_code"]],"scopes":["java.util.HashSet",["profile","openid","email","groups","memberOf"]],"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",[""]],"bypassEnabled":false,"forExecution":true}}

• Apereo_cas::Service[requestctl]

  Parameters differences:

  --- Apereo_cas::Service[requestctl].orig
  +++ Apereo_cas::Service[requestctl]
  
  +    mfa => []
  

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Core Diff
• Standard Diff