{"host": "idp2005.wikimedia.org", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2842, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Apereo_cas::Service[airflow_analytics_product]", "parameters": "--- Apereo_cas::Service[airflow_analytics_product].orig\n+++ Apereo_cas::Service[airflow_analytics_product]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/icinga-1.json]", "content": "--- /etc/cas/services/icinga-1.json.orig\n+++ /etc/cas/services/icinga-1.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"icinga\",\"serviceId\":\"https://icinga\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"properties\":{\"@class\":\"java.util.HashMap\",\"httpHeaderEnableXFrameOptions\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceProperty\",\"values\":[\"java.util.HashSet\",[\"false\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"icinga\",\"serviceId\":\"https://icinga\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true},\"properties\":{\"@class\":\"java.util.HashMap\",\"httpHeaderEnableXFrameOptions\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceProperty\",\"values\":[\"java.util.HashSet\",[\"false\"]]}}}"}, {"resource": "Apereo_cas::Service[test_kitchen]", "parameters": "--- Apereo_cas::Service[test_kitchen].orig\n+++ Apereo_cas::Service[test_kitchen]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_main]", "parameters": "--- Apereo_cas::Service[airflow_main].orig\n+++ Apereo_cas::Service[airflow_main]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[debmonitor]", "parameters": "--- Apereo_cas::Service[debmonitor].orig\n+++ Apereo_cas::Service[debmonitor]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/rt-19.json]", "content": "--- /etc/cas/services/rt-19.json.orig\n+++ /etc/cas/services/rt-19.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"rt\",\"serviceId\":\"https://rt\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":19,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"rt\",\"serviceId\":\"https://rt\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":19,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/test_kitchen_next-41.json]", "content": "--- /etc/cas/services/test_kitchen_next-41.json.orig\n+++ /etc/cas/services/test_kitchen_next-41.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen_next\",\"serviceId\":\"https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":41,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen_next\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen_next\",\"serviceId\":\"https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":41,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen_next\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[thanos]", "parameters": "--- Apereo_cas::Service[thanos].orig\n+++ Apereo_cas::Service[thanos]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/librenms-8.json]", "content": "--- /etc/cas/services/librenms-8.json.orig\n+++ /etc/cas/services/librenms-8.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"librenms\",\"serviceId\":\"https://librenms\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":8,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"librenms\",\"serviceId\":\"https://librenms\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":8,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_platform_eng-51.json]", "content": "--- /etc/cas/services/airflow_platform_eng-51.json.orig\n+++ /etc/cas/services/airflow_platform_eng-51.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_platform_eng\",\"serviceId\":\"https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":51,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_platform_eng\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_platform_eng\",\"serviceId\":\"https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":51,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_platform_eng\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_wmde]", "parameters": "--- Apereo_cas::Service[airflow_wmde].orig\n+++ Apereo_cas::Service[airflow_wmde]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_sre]", "parameters": "--- Apereo_cas::Service[airflow_sre].orig\n+++ Apereo_cas::Service[airflow_sre]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/idm-29.json]", "content": "--- /etc/cas/services/idm-29.json.orig\n+++ /etc/cas/services/idm-29.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"idm\",\"serviceId\":\"https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":29,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"idm\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"idm\",\"serviceId\":\"https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":29,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"idm\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/graphite-4.json]", "content": "--- /etc/cas/services/graphite-4.json.orig\n+++ /etc/cas/services/graphite-4.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"graphite\",\"serviceId\":\"https://graphite\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":4,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"graphite\",\"serviceId\":\"https://graphite\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":4,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_fr_tech]", "parameters": "--- Apereo_cas::Service[airflow_fr_tech].orig\n+++ Apereo_cas::Service[airflow_fr_tech]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/growthbook-59.json]", "content": "--- /etc/cas/services/growthbook-59.json.orig\n+++ /etc/cas/services/growthbook-59.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"growthbook\",\"serviceId\":\"https://growthbook\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":59,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"growthbook\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"growthbook\",\"serviceId\":\"https://growthbook\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":59,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"growthbook\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[keystone]", "parameters": "--- Apereo_cas::Service[keystone].orig\n+++ Apereo_cas::Service[keystone]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[stream_internal]", "parameters": "--- Apereo_cas::Service[stream_internal].orig\n+++ Apereo_cas::Service[stream_internal]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[rt]", "parameters": "--- Apereo_cas::Service[rt].orig\n+++ Apereo_cas::Service[rt]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[debmonitor-next]", "parameters": "--- Apereo_cas::Service[debmonitor-next].orig\n+++ Apereo_cas::Service[debmonitor-next]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_analytics_product-52.json]", "content": "--- /etc/cas/services/airflow_analytics_product-52.json.orig\n+++ /etc/cas/services/airflow_analytics_product-52.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_product\",\"serviceId\":\"https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":52,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_product\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_product\",\"serviceId\":\"https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":52,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_product\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/test_kitchen-40.json]", "content": "--- /etc/cas/services/test_kitchen-40.json.orig\n+++ /etc/cas/services/test_kitchen-40.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen\",\"serviceId\":\"https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":40,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen\",\"serviceId\":\"https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":40,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/grafana-16.json]", "content": "--- /etc/cas/services/grafana-16.json.orig\n+++ /etc/cas/services/grafana-16.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"grafana\",\"serviceId\":\"https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":16,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=grafana-admin,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"grafana\",\"serviceId\":\"https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":16,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=grafana-admin,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/config-master-20.json]", "content": "--- /etc/cas/services/config-master-20.json.orig\n+++ /etc/cas/services/config-master-20.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"config-master\",\"serviceId\":\"https://config-master\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":20,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"config-master\",\"serviceId\":\"https://config-master\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":20,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/netbox_oidc-33.json]", "content": "--- /etc/cas/services/netbox_oidc-33.json.orig\n+++ /etc/cas/services/netbox_oidc-33.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"netbox_oidc\",\"serviceId\":\"https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":33,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"netbox_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"netbox_oidc\",\"serviceId\":\"https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":33,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"netbox_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[juniper]", "parameters": "--- Apereo_cas::Service[juniper].orig\n+++ Apereo_cas::Service[juniper]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[datahub]", "parameters": "--- Apereo_cas::Service[datahub].orig\n+++ Apereo_cas::Service[datahub]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/zarcillo-56.json]", "content": "--- /etc/cas/services/zarcillo-56.json.orig\n+++ /etc/cas/services/zarcillo-56.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"zarcillo\",\"serviceId\":\"https://zarcillo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":56,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"zarcillo\",\"serviceId\":\"https://zarcillo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":56,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_search]", "parameters": "--- Apereo_cas::Service[airflow_search].orig\n+++ Apereo_cas::Service[airflow_search]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[test_kitchen_next]", "parameters": "--- Apereo_cas::Service[test_kitchen_next].orig\n+++ Apereo_cas::Service[test_kitchen_next]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[spiderpig]", "parameters": "--- Apereo_cas::Service[spiderpig].orig\n+++ Apereo_cas::Service[spiderpig]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_main-54.json]", "content": "--- /etc/cas/services/airflow_main-54.json.orig\n+++ /etc/cas/services/airflow_main-54.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_main\",\"serviceId\":\"https://airflow\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":54,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_main\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_main\",\"serviceId\":\"https://airflow\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":54,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_main\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_ml]", "parameters": "--- Apereo_cas::Service[airflow_ml].orig\n+++ Apereo_cas::Service[airflow_ml]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_wikidata-58.json]", "content": "--- /etc/cas/services/airflow_wikidata-58.json.orig\n+++ /etc/cas/services/airflow_wikidata-58.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wikidata\",\"serviceId\":\"https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":58,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wikidata\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wikidata\",\"serviceId\":\"https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":58,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wikidata\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[yarn]", "parameters": "--- Apereo_cas::Service[yarn].orig\n+++ Apereo_cas::Service[yarn]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[superset_next_k8s]", "parameters": "--- Apereo_cas::Service[superset_next_k8s].orig\n+++ Apereo_cas::Service[superset_next_k8s]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_platform_eng]", "parameters": "--- Apereo_cas::Service[airflow_platform_eng].orig\n+++ Apereo_cas::Service[airflow_platform_eng]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/stream_internal-62.json]", "content": "--- /etc/cas/services/stream_internal-62.json.orig\n+++ /etc/cas/services/stream_internal-62.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/turnilo-11.json]", "content": "--- /etc/cas/services/turnilo-11.json.orig\n+++ /etc/cas/services/turnilo-11.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"turnilo\",\"serviceId\":\"https://turnilo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":11,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"turnilo\",\"serviceId\":\"https://turnilo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":11,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/alerts-15.json]", "content": "--- /etc/cas/services/alerts-15.json.orig\n+++ /etc/cas/services/alerts-15.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"alerts\",\"serviceId\":\"https://alerts\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":15,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"alerts\",\"serviceId\":\"https://alerts\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":15,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[piwik]", "parameters": "--- Apereo_cas::Service[piwik].orig\n+++ Apereo_cas::Service[piwik]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[gitlab_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_oidc].orig\n+++ Apereo_cas::Service[gitlab_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[alerts]", "parameters": "--- Apereo_cas::Service[alerts].orig\n+++ Apereo_cas::Service[alerts]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[orchestrator]", "parameters": "--- Apereo_cas::Service[orchestrator].orig\n+++ Apereo_cas::Service[orchestrator]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[puppetboard]", "parameters": "--- Apereo_cas::Service[puppetboard].orig\n+++ Apereo_cas::Service[puppetboard]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[config-master]", "parameters": "--- Apereo_cas::Service[config-master].orig\n+++ Apereo_cas::Service[config-master]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[prometheus]", "parameters": "--- Apereo_cas::Service[prometheus].orig\n+++ Apereo_cas::Service[prometheus]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[idm]", "parameters": "--- Apereo_cas::Service[idm].orig\n+++ Apereo_cas::Service[idm]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[prometheus_oidc]", "parameters": "--- Apereo_cas::Service[prometheus_oidc].orig\n+++ Apereo_cas::Service[prometheus_oidc]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/thanos_oidc-35.json]", "content": "--- /etc/cas/services/thanos_oidc-35.json.orig\n+++ /etc/cas/services/thanos_oidc-35.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"thanos_oidc\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":35,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"thanos_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"thanos_oidc\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":35,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"thanos_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_analytics_test-44.json]", "content": "--- /etc/cas/services/airflow_analytics_test-44.json.orig\n+++ /etc/cas/services/airflow_analytics_test-44.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_test\",\"serviceId\":\"https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":44,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_test\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_test\",\"serviceId\":\"https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":44,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_test\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[librenms]", "parameters": "--- Apereo_cas::Service[librenms].orig\n+++ Apereo_cas::Service[librenms]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[zarcillo]", "parameters": "--- Apereo_cas::Service[zarcillo].orig\n+++ Apereo_cas::Service[zarcillo]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[jaeger]", "parameters": "--- Apereo_cas::Service[jaeger].orig\n+++ Apereo_cas::Service[jaeger]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_analytics_test]", "parameters": "--- Apereo_cas::Service[airflow_analytics_test].orig\n+++ Apereo_cas::Service[airflow_analytics_test]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[logstash_oidc]", "parameters": "--- Apereo_cas::Service[logstash_oidc].orig\n+++ Apereo_cas::Service[logstash_oidc]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/puppetboard-3.json]", "content": "--- /etc/cas/services/puppetboard-3.json.orig\n+++ /etc/cas/services/puppetboard-3.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":3,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":3,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[graphite]", "parameters": "--- Apereo_cas::Service[graphite].orig\n+++ Apereo_cas::Service[graphite]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/klaxon-21.json]", "content": "--- /etc/cas/services/klaxon-21.json.orig\n+++ /etc/cas/services/klaxon-21.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"klaxon\",\"serviceId\":\"https://klaxon\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":21,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"klaxon\",\"serviceId\":\"https://klaxon\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":21,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_research]", "parameters": "--- Apereo_cas::Service[airflow_research].orig\n+++ Apereo_cas::Service[airflow_research]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_sre-60.json]", "content": "--- /etc/cas/services/airflow_sre-60.json.orig\n+++ /etc/cas/services/airflow_sre-60.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_sre\",\"serviceId\":\"https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":60,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_sre\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_sre\",\"serviceId\":\"https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":60,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_sre\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/debmonitor-next-57.json]", "content": "--- /etc/cas/services/debmonitor-next-57.json.orig\n+++ /etc/cas/services/debmonitor-next-57.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor-next\",\"serviceId\":\"^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":57,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor-next\",\"serviceId\":\"^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":57,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/superset_next_k8s-38.json]", "content": "--- /etc/cas/services/superset_next_k8s-38.json.orig\n+++ /etc/cas/services/superset_next_k8s-38.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_next_k8s\",\"serviceId\":\"https://superset-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":38,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_next_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_next_k8s\",\"serviceId\":\"https://superset-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":38,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_next_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[turnilo]", "parameters": "--- Apereo_cas::Service[turnilo].orig\n+++ Apereo_cas::Service[turnilo]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_ml-53.json]", "content": "--- /etc/cas/services/airflow_ml-53.json.orig\n+++ /etc/cas/services/airflow_ml-53.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_ml\",\"serviceId\":\"https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":53,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_ml\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_ml\",\"serviceId\":\"https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":53,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_ml\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[grafana]", "parameters": "--- Apereo_cas::Service[grafana].orig\n+++ Apereo_cas::Service[grafana]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/debmonitor-2.json]", "content": "--- /etc/cas/services/debmonitor-2.json.orig\n+++ /etc/cas/services/debmonitor-2.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor\",\"serviceId\":\"^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":2,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=nda,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor\",\"serviceId\":\"^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":2,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=nda,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/yarn-10.json]", "content": "--- /etc/cas/services/yarn-10.json.orig\n+++ /etc/cas/services/yarn-10.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"yarn\",\"serviceId\":\"https://yarn\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":10,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"yarn\",\"serviceId\":\"https://yarn\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":10,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[superset_k8s]", "parameters": "--- Apereo_cas::Service[superset_k8s].orig\n+++ Apereo_cas::Service[superset_k8s]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_wmde-46.json]", "content": "--- /etc/cas/services/airflow_wmde-46.json.orig\n+++ /etc/cas/services/airflow_wmde-46.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wmde\",\"serviceId\":\"https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":46,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wmde\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wmde\",\"serviceId\":\"https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":46,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wmde\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/jaeger-36.json]", "content": "--- /etc/cas/services/jaeger-36.json.orig\n+++ /etc/cas/services/jaeger-36.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"jaeger\",\"serviceId\":\"https://trace\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":36,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"jaeger\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"jaeger\",\"serviceId\":\"https://trace\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":36,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"jaeger\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/keystone-43.json]", "content": "--- /etc/cas/services/keystone-43.json.orig\n+++ /etc/cas/services/keystone-43.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"keystone\",\"serviceId\":\"https://(keystone.)?openstack.*.wikimediacloud.org.*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":43,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"keystone\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"id_token token\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"keystone\",\"serviceId\":\"https://(keystone.)?openstack.*.wikimediacloud.org.*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":43,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"keystone\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"id_token token\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/gitlab_oidc-31.json]", "content": "--- /etc/cas/services/gitlab_oidc-31.json.orig\n+++ /etc/cas/services/gitlab_oidc-31.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_oidc\",\"serviceId\":\"https://gitlab\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":31,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"gitlab_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_oidc\",\"serviceId\":\"https://gitlab\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":31,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"gitlab_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_search-48.json]", "content": "--- /etc/cas/services/airflow_search-48.json.orig\n+++ /etc/cas/services/airflow_search-48.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_search\",\"serviceId\":\"https://airflow-search\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":48,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_search\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_search\",\"serviceId\":\"https://airflow-search\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":48,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_search\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[netbox_oidc]", "parameters": "--- Apereo_cas::Service[netbox_oidc].orig\n+++ Apereo_cas::Service[netbox_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[kafka-ui]", "parameters": "--- Apereo_cas::Service[kafka-ui].orig\n+++ Apereo_cas::Service[kafka-ui]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[icinga]", "parameters": "--- Apereo_cas::Service[icinga].orig\n+++ Apereo_cas::Service[icinga]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/spiderpig-55.json]", "content": "--- /etc/cas/services/spiderpig-55.json.orig\n+++ /etc/cas/services/spiderpig-55.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"spiderpig\",\"serviceId\":\"https://spiderpig\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":55,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org\",\"cn=releng,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"spiderpig\",\"serviceId\":\"https://spiderpig\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":55,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org\",\"cn=releng,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/logstash_oidc-39.json]", "content": "--- /etc/cas/services/logstash_oidc-39.json.orig\n+++ /etc/cas/services/logstash_oidc-39.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"logstash_oidc\",\"serviceId\":\"https://logstash\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":39,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=logstash-access,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"logstash_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"logstash_oidc\",\"serviceId\":\"https://logstash\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":39,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=logstash-access,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"logstash_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/kafka-ui-63.json]", "content": "--- /etc/cas/services/kafka-ui-63.json.orig\n+++ /etc/cas/services/kafka-ui-63.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"kafka-ui\",\"serviceId\":\"https://kafka\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":63,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"kafka-ui\",\"serviceId\":\"https://kafka\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":63,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[growthbook]", "parameters": "--- Apereo_cas::Service[growthbook].orig\n+++ Apereo_cas::Service[growthbook]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_fr_tech-61.json]", "content": "--- /etc/cas/services/airflow_fr_tech-61.json.orig\n+++ /etc/cas/services/airflow_fr_tech-61.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_fr_tech\",\"serviceId\":\"https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":61,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_fr_tech\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_fr_tech\",\"serviceId\":\"https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":61,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_fr_tech\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/datahub-34.json]", "content": "--- /etc/cas/services/datahub-34.json.orig\n+++ /etc/cas/services/datahub-34.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"datahub\",\"serviceId\":\"https://datahub\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":34,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"datahub\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"datahub\",\"serviceId\":\"https://datahub\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":34,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"datahub\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[thanos_oidc]", "parameters": "--- Apereo_cas::Service[thanos_oidc].orig\n+++ Apereo_cas::Service[thanos_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[people]", "parameters": "--- Apereo_cas::Service[people].orig\n+++ Apereo_cas::Service[people]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[gitlab_replica_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_replica_oidc].orig\n+++ Apereo_cas::Service[gitlab_replica_oidc]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/people-7.json]", "content": "--- /etc/cas/services/people-7.json.orig\n+++ /etc/cas/services/people-7.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"people\",\"serviceId\":\"https://people\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":7,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"people\",\"serviceId\":\"https://people\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":7,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/prometheus_oidc-42.json]", "content": "--- /etc/cas/services/prometheus_oidc-42.json.orig\n+++ /etc/cas/services/prometheus_oidc-42.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"prometheus_oidc\",\"serviceId\":\"https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":42,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"prometheus_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"prometheus_oidc\",\"serviceId\":\"https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":42,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"prometheus_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/piwik-9.json]", "content": "--- /etc/cas/services/piwik-9.json.orig\n+++ /etc/cas/services/piwik-9.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"piwik\",\"serviceId\":\"https://piwik\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":9,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"piwik\",\"serviceId\":\"https://piwik\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":9,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/requestctl-45.json]", "content": "--- /etc/cas/services/requestctl-45.json.orig\n+++ /etc/cas/services/requestctl-45.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"requestctl\",\"serviceId\":\"https://requestctl\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":45,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"requestctl\",\"serviceId\":\"https://requestctl\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":45,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[klaxon]", "parameters": "--- Apereo_cas::Service[klaxon].orig\n+++ Apereo_cas::Service[klaxon]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/superset_k8s-37.json]", "content": "--- /etc/cas/services/superset_k8s-37.json.orig\n+++ /etc/cas/services/superset_k8s-37.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_k8s\",\"serviceId\":\"https://superset\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":37,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_k8s\",\"serviceId\":\"https://superset\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":37,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/prometheus-27.json]", "content": "--- /etc/cas/services/prometheus-27.json.orig\n+++ /etc/cas/services/prometheus-27.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"prometheus\",\"serviceId\":\"https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":27,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"prometheus\",\"serviceId\":\"https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":27,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[wmcs_idp]", "parameters": "--- Apereo_cas::Service[wmcs_idp].orig\n+++ Apereo_cas::Service[wmcs_idp]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/wmcs_idp-24.json]", "content": "--- /etc/cas/services/wmcs_idp-24.json.orig\n+++ /etc/cas/services/wmcs_idp-24.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"wmcs_idp\",\"serviceId\":\"https://idp\\\\.wmcloud\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":24,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"wmcs_idp\",\"serviceId\":\"https://idp\\\\.wmcloud\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":24,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_research-47.json]", "content": "--- /etc/cas/services/airflow_research-47.json.orig\n+++ /etc/cas/services/airflow_research-47.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_research\",\"serviceId\":\"https://airflow-research\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":47,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_research\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_research\",\"serviceId\":\"https://airflow-research\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":47,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_research\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/orchestrator-17.json]", "content": "--- /etc/cas/services/orchestrator-17.json.orig\n+++ /etc/cas/services/orchestrator-17.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"orchestrator\",\"serviceId\":\"^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":17,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"orchestrator\",\"serviceId\":\"^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":17,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_wikidata]", "parameters": "--- Apereo_cas::Service[airflow_wikidata].orig\n+++ Apereo_cas::Service[airflow_wikidata]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/gitlab_replica_oidc-32.json]", "content": "--- /etc/cas/services/gitlab_replica_oidc-32.json.orig\n+++ /etc/cas/services/gitlab_replica_oidc-32.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_replica_oidc\",\"serviceId\":\"https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":32,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"gitlab_replica_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_replica_oidc\",\"serviceId\":\"https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":32,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"gitlab_replica_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/thanos-13.json]", "content": "--- /etc/cas/services/thanos-13.json.orig\n+++ /etc/cas/services/thanos-13.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"thanos\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":13,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"thanos\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":13,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/juniper-30.json]", "content": "--- /etc/cas/services/juniper-30.json.orig\n+++ /etc/cas/services/juniper-30.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"juniper\",\"serviceId\":\"https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":30,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"juniper\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"juniper\",\"serviceId\":\"https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":30,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"juniper\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[requestctl]", "parameters": "--- Apereo_cas::Service[requestctl].orig\n+++ Apereo_cas::Service[requestctl]\n\n+    mfa => []\n"}], "perc_changed": "3.59%"}, "core": {"total": 2842, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/cas/services/icinga-1.json]", "content": "--- /etc/cas/services/icinga-1.json.orig\n+++ /etc/cas/services/icinga-1.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"icinga\",\"serviceId\":\"https://icinga\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"properties\":{\"@class\":\"java.util.HashMap\",\"httpHeaderEnableXFrameOptions\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceProperty\",\"values\":[\"java.util.HashSet\",[\"false\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"icinga\",\"serviceId\":\"https://icinga\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true},\"properties\":{\"@class\":\"java.util.HashMap\",\"httpHeaderEnableXFrameOptions\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceProperty\",\"values\":[\"java.util.HashSet\",[\"false\"]]}}}"}, {"resource": "File[/etc/cas/services/puppetboard-3.json]", "content": "--- /etc/cas/services/puppetboard-3.json.orig\n+++ /etc/cas/services/puppetboard-3.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":3,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":3,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/klaxon-21.json]", "content": "--- /etc/cas/services/klaxon-21.json.orig\n+++ /etc/cas/services/klaxon-21.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"klaxon\",\"serviceId\":\"https://klaxon\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":21,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"klaxon\",\"serviceId\":\"https://klaxon\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":21,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_sre-60.json]", "content": "--- /etc/cas/services/airflow_sre-60.json.orig\n+++ /etc/cas/services/airflow_sre-60.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_sre\",\"serviceId\":\"https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":60,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_sre\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_sre\",\"serviceId\":\"https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":60,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_sre\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/debmonitor-next-57.json]", "content": "--- /etc/cas/services/debmonitor-next-57.json.orig\n+++ /etc/cas/services/debmonitor-next-57.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor-next\",\"serviceId\":\"^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":57,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor-next\",\"serviceId\":\"^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":57,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/rt-19.json]", "content": "--- /etc/cas/services/rt-19.json.orig\n+++ /etc/cas/services/rt-19.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"rt\",\"serviceId\":\"https://rt\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":19,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"rt\",\"serviceId\":\"https://rt\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":19,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/superset_next_k8s-38.json]", "content": "--- /etc/cas/services/superset_next_k8s-38.json.orig\n+++ /etc/cas/services/superset_next_k8s-38.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_next_k8s\",\"serviceId\":\"https://superset-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":38,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_next_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_next_k8s\",\"serviceId\":\"https://superset-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":38,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_next_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/test_kitchen_next-41.json]", "content": "--- /etc/cas/services/test_kitchen_next-41.json.orig\n+++ /etc/cas/services/test_kitchen_next-41.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen_next\",\"serviceId\":\"https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":41,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen_next\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen_next\",\"serviceId\":\"https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":41,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen_next\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/librenms-8.json]", "content": "--- /etc/cas/services/librenms-8.json.orig\n+++ /etc/cas/services/librenms-8.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"librenms\",\"serviceId\":\"https://librenms\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":8,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"librenms\",\"serviceId\":\"https://librenms\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":8,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_ml-53.json]", "content": "--- /etc/cas/services/airflow_ml-53.json.orig\n+++ /etc/cas/services/airflow_ml-53.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_ml\",\"serviceId\":\"https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":53,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_ml\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_ml\",\"serviceId\":\"https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":53,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_ml\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_platform_eng-51.json]", "content": "--- /etc/cas/services/airflow_platform_eng-51.json.orig\n+++ /etc/cas/services/airflow_platform_eng-51.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_platform_eng\",\"serviceId\":\"https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":51,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_platform_eng\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_platform_eng\",\"serviceId\":\"https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":51,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_platform_eng\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/debmonitor-2.json]", "content": "--- /etc/cas/services/debmonitor-2.json.orig\n+++ /etc/cas/services/debmonitor-2.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor\",\"serviceId\":\"^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":2,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=nda,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor\",\"serviceId\":\"^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":2,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=nda,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/yarn-10.json]", "content": "--- /etc/cas/services/yarn-10.json.orig\n+++ /etc/cas/services/yarn-10.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"yarn\",\"serviceId\":\"https://yarn\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":10,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"yarn\",\"serviceId\":\"https://yarn\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":10,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/idm-29.json]", "content": "--- /etc/cas/services/idm-29.json.orig\n+++ /etc/cas/services/idm-29.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"idm\",\"serviceId\":\"https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":29,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"idm\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"idm\",\"serviceId\":\"https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":29,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"idm\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_wmde-46.json]", "content": "--- /etc/cas/services/airflow_wmde-46.json.orig\n+++ /etc/cas/services/airflow_wmde-46.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wmde\",\"serviceId\":\"https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":46,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wmde\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wmde\",\"serviceId\":\"https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":46,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wmde\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/jaeger-36.json]", "content": "--- /etc/cas/services/jaeger-36.json.orig\n+++ /etc/cas/services/jaeger-36.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"jaeger\",\"serviceId\":\"https://trace\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":36,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"jaeger\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"jaeger\",\"serviceId\":\"https://trace\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":36,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"jaeger\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/keystone-43.json]", "content": "--- /etc/cas/services/keystone-43.json.orig\n+++ /etc/cas/services/keystone-43.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"keystone\",\"serviceId\":\"https://(keystone.)?openstack.*.wikimediacloud.org.*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":43,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"keystone\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"id_token token\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"keystone\",\"serviceId\":\"https://(keystone.)?openstack.*.wikimediacloud.org.*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":43,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"keystone\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"id_token token\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/graphite-4.json]", "content": "--- /etc/cas/services/graphite-4.json.orig\n+++ /etc/cas/services/graphite-4.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"graphite\",\"serviceId\":\"https://graphite\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":4,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"graphite\",\"serviceId\":\"https://graphite\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":4,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/gitlab_oidc-31.json]", "content": "--- /etc/cas/services/gitlab_oidc-31.json.orig\n+++ /etc/cas/services/gitlab_oidc-31.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_oidc\",\"serviceId\":\"https://gitlab\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":31,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"gitlab_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_oidc\",\"serviceId\":\"https://gitlab\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":31,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"gitlab_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_search-48.json]", "content": "--- /etc/cas/services/airflow_search-48.json.orig\n+++ /etc/cas/services/airflow_search-48.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_search\",\"serviceId\":\"https://airflow-search\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":48,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_search\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_search\",\"serviceId\":\"https://airflow-search\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":48,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_search\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/growthbook-59.json]", "content": "--- /etc/cas/services/growthbook-59.json.orig\n+++ /etc/cas/services/growthbook-59.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"growthbook\",\"serviceId\":\"https://growthbook\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":59,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"growthbook\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"growthbook\",\"serviceId\":\"https://growthbook\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":59,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"growthbook\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/spiderpig-55.json]", "content": "--- /etc/cas/services/spiderpig-55.json.orig\n+++ /etc/cas/services/spiderpig-55.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"spiderpig\",\"serviceId\":\"https://spiderpig\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":55,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org\",\"cn=releng,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"spiderpig\",\"serviceId\":\"https://spiderpig\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":55,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org\",\"cn=releng,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/logstash_oidc-39.json]", "content": "--- /etc/cas/services/logstash_oidc-39.json.orig\n+++ /etc/cas/services/logstash_oidc-39.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"logstash_oidc\",\"serviceId\":\"https://logstash\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":39,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=logstash-access,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"logstash_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"logstash_oidc\",\"serviceId\":\"https://logstash\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":39,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=logstash-access,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"logstash_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_analytics_product-52.json]", "content": "--- /etc/cas/services/airflow_analytics_product-52.json.orig\n+++ /etc/cas/services/airflow_analytics_product-52.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_product\",\"serviceId\":\"https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":52,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_product\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_product\",\"serviceId\":\"https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":52,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_product\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/test_kitchen-40.json]", "content": "--- /etc/cas/services/test_kitchen-40.json.orig\n+++ /etc/cas/services/test_kitchen-40.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen\",\"serviceId\":\"https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":40,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen\",\"serviceId\":\"https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":40,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/kafka-ui-63.json]", "content": "--- /etc/cas/services/kafka-ui-63.json.orig\n+++ /etc/cas/services/kafka-ui-63.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"kafka-ui\",\"serviceId\":\"https://kafka\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":63,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"kafka-ui\",\"serviceId\":\"https://kafka\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":63,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/grafana-16.json]", "content": "--- /etc/cas/services/grafana-16.json.orig\n+++ /etc/cas/services/grafana-16.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"grafana\",\"serviceId\":\"https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":16,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=grafana-admin,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"grafana\",\"serviceId\":\"https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":16,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=grafana-admin,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/config-master-20.json]", "content": "--- /etc/cas/services/config-master-20.json.orig\n+++ /etc/cas/services/config-master-20.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"config-master\",\"serviceId\":\"https://config-master\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":20,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"config-master\",\"serviceId\":\"https://config-master\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":20,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/netbox_oidc-33.json]", "content": "--- /etc/cas/services/netbox_oidc-33.json.orig\n+++ /etc/cas/services/netbox_oidc-33.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"netbox_oidc\",\"serviceId\":\"https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":33,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"netbox_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"netbox_oidc\",\"serviceId\":\"https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":33,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"netbox_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_fr_tech-61.json]", "content": "--- /etc/cas/services/airflow_fr_tech-61.json.orig\n+++ /etc/cas/services/airflow_fr_tech-61.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_fr_tech\",\"serviceId\":\"https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":61,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_fr_tech\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_fr_tech\",\"serviceId\":\"https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":61,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_fr_tech\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/datahub-34.json]", "content": "--- /etc/cas/services/datahub-34.json.orig\n+++ /etc/cas/services/datahub-34.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"datahub\",\"serviceId\":\"https://datahub\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":34,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"datahub\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"datahub\",\"serviceId\":\"https://datahub\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":34,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"datahub\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/zarcillo-56.json]", "content": "--- /etc/cas/services/zarcillo-56.json.orig\n+++ /etc/cas/services/zarcillo-56.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"zarcillo\",\"serviceId\":\"https://zarcillo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":56,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"zarcillo\",\"serviceId\":\"https://zarcillo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":56,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_main-54.json]", "content": "--- /etc/cas/services/airflow_main-54.json.orig\n+++ /etc/cas/services/airflow_main-54.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_main\",\"serviceId\":\"https://airflow\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":54,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_main\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_main\",\"serviceId\":\"https://airflow\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":54,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_main\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/people-7.json]", "content": "--- /etc/cas/services/people-7.json.orig\n+++ /etc/cas/services/people-7.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"people\",\"serviceId\":\"https://people\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":7,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"people\",\"serviceId\":\"https://people\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":7,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/prometheus_oidc-42.json]", "content": "--- /etc/cas/services/prometheus_oidc-42.json.orig\n+++ /etc/cas/services/prometheus_oidc-42.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"prometheus_oidc\",\"serviceId\":\"https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":42,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"prometheus_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"prometheus_oidc\",\"serviceId\":\"https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":42,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"prometheus_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/piwik-9.json]", "content": "--- /etc/cas/services/piwik-9.json.orig\n+++ /etc/cas/services/piwik-9.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"piwik\",\"serviceId\":\"https://piwik\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":9,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"piwik\",\"serviceId\":\"https://piwik\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":9,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_wikidata-58.json]", "content": "--- /etc/cas/services/airflow_wikidata-58.json.orig\n+++ /etc/cas/services/airflow_wikidata-58.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wikidata\",\"serviceId\":\"https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":58,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wikidata\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wikidata\",\"serviceId\":\"https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":58,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wikidata\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/requestctl-45.json]", "content": "--- /etc/cas/services/requestctl-45.json.orig\n+++ /etc/cas/services/requestctl-45.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"requestctl\",\"serviceId\":\"https://requestctl\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":45,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"requestctl\",\"serviceId\":\"https://requestctl\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":45,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/superset_k8s-37.json]", "content": "--- /etc/cas/services/superset_k8s-37.json.orig\n+++ /etc/cas/services/superset_k8s-37.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_k8s\",\"serviceId\":\"https://superset\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":37,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_k8s\",\"serviceId\":\"https://superset\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":37,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/stream_internal-62.json]", "content": "--- /etc/cas/services/stream_internal-62.json.orig\n+++ /etc/cas/services/stream_internal-62.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/turnilo-11.json]", "content": "--- /etc/cas/services/turnilo-11.json.orig\n+++ /etc/cas/services/turnilo-11.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"turnilo\",\"serviceId\":\"https://turnilo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":11,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"turnilo\",\"serviceId\":\"https://turnilo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":11,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/prometheus-27.json]", "content": "--- /etc/cas/services/prometheus-27.json.orig\n+++ /etc/cas/services/prometheus-27.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"prometheus\",\"serviceId\":\"https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":27,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"prometheus\",\"serviceId\":\"https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":27,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/alerts-15.json]", "content": "--- /etc/cas/services/alerts-15.json.orig\n+++ /etc/cas/services/alerts-15.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"alerts\",\"serviceId\":\"https://alerts\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":15,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"alerts\",\"serviceId\":\"https://alerts\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":15,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/wmcs_idp-24.json]", "content": "--- /etc/cas/services/wmcs_idp-24.json.orig\n+++ /etc/cas/services/wmcs_idp-24.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"wmcs_idp\",\"serviceId\":\"https://idp\\\\.wmcloud\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":24,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"wmcs_idp\",\"serviceId\":\"https://idp\\\\.wmcloud\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":24,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_research-47.json]", "content": "--- /etc/cas/services/airflow_research-47.json.orig\n+++ /etc/cas/services/airflow_research-47.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_research\",\"serviceId\":\"https://airflow-research\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":47,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_research\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_research\",\"serviceId\":\"https://airflow-research\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":47,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_research\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/orchestrator-17.json]", "content": "--- /etc/cas/services/orchestrator-17.json.orig\n+++ /etc/cas/services/orchestrator-17.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"orchestrator\",\"serviceId\":\"^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":17,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"orchestrator\",\"serviceId\":\"^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":17,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/gitlab_replica_oidc-32.json]", "content": "--- /etc/cas/services/gitlab_replica_oidc-32.json.orig\n+++ /etc/cas/services/gitlab_replica_oidc-32.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_replica_oidc\",\"serviceId\":\"https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":32,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"gitlab_replica_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_replica_oidc\",\"serviceId\":\"https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":32,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"gitlab_replica_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/thanos-13.json]", "content": "--- /etc/cas/services/thanos-13.json.orig\n+++ /etc/cas/services/thanos-13.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"thanos\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":13,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"thanos\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":13,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/juniper-30.json]", "content": "--- /etc/cas/services/juniper-30.json.orig\n+++ /etc/cas/services/juniper-30.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"juniper\",\"serviceId\":\"https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":30,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"juniper\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"juniper\",\"serviceId\":\"https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":30,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"juniper\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/thanos_oidc-35.json]", "content": "--- /etc/cas/services/thanos_oidc-35.json.orig\n+++ /etc/cas/services/thanos_oidc-35.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"thanos_oidc\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":35,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"thanos_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"thanos_oidc\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":35,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"thanos_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_analytics_test-44.json]", "content": "--- /etc/cas/services/airflow_analytics_test-44.json.orig\n+++ /etc/cas/services/airflow_analytics_test-44.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_test\",\"serviceId\":\"https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":44,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_test\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_test\",\"serviceId\":\"https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":44,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_test\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}], "perc_changed": "1.79%"}, "main": {"total": 2842, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Apereo_cas::Service[logstash_oidc]", "parameters": "--- Apereo_cas::Service[logstash_oidc].orig\n+++ Apereo_cas::Service[logstash_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_analytics_product]", "parameters": "--- Apereo_cas::Service[airflow_analytics_product].orig\n+++ Apereo_cas::Service[airflow_analytics_product]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/icinga-1.json]", "content": "--- /etc/cas/services/icinga-1.json.orig\n+++ /etc/cas/services/icinga-1.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"icinga\",\"serviceId\":\"https://icinga\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"properties\":{\"@class\":\"java.util.HashMap\",\"httpHeaderEnableXFrameOptions\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceProperty\",\"values\":[\"java.util.HashSet\",[\"false\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"icinga\",\"serviceId\":\"https://icinga\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true},\"properties\":{\"@class\":\"java.util.HashMap\",\"httpHeaderEnableXFrameOptions\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceProperty\",\"values\":[\"java.util.HashSet\",[\"false\"]]}}}"}, {"resource": "Apereo_cas::Service[test_kitchen]", "parameters": "--- Apereo_cas::Service[test_kitchen].orig\n+++ Apereo_cas::Service[test_kitchen]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/puppetboard-3.json]", "content": "--- /etc/cas/services/puppetboard-3.json.orig\n+++ /etc/cas/services/puppetboard-3.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":3,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard(-next)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":3,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_main]", "parameters": "--- Apereo_cas::Service[airflow_main].orig\n+++ Apereo_cas::Service[airflow_main]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[debmonitor]", "parameters": "--- Apereo_cas::Service[debmonitor].orig\n+++ Apereo_cas::Service[debmonitor]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[graphite]", "parameters": "--- Apereo_cas::Service[graphite].orig\n+++ Apereo_cas::Service[graphite]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/klaxon-21.json]", "content": "--- /etc/cas/services/klaxon-21.json.orig\n+++ /etc/cas/services/klaxon-21.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"klaxon\",\"serviceId\":\"https://klaxon\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":21,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"klaxon\",\"serviceId\":\"https://klaxon\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":21,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_research]", "parameters": "--- Apereo_cas::Service[airflow_research].orig\n+++ Apereo_cas::Service[airflow_research]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_sre-60.json]", "content": "--- /etc/cas/services/airflow_sre-60.json.orig\n+++ /etc/cas/services/airflow_sre-60.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_sre\",\"serviceId\":\"https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":60,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_sre\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_sre\",\"serviceId\":\"https://airflow-sre\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":60,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_sre\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/debmonitor-next-57.json]", "content": "--- /etc/cas/services/debmonitor-next-57.json.orig\n+++ /etc/cas/services/debmonitor-next-57.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor-next\",\"serviceId\":\"^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":57,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor-next\",\"serviceId\":\"^https://debmonitor-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":57,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/rt-19.json]", "content": "--- /etc/cas/services/rt-19.json.orig\n+++ /etc/cas/services/rt-19.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"rt\",\"serviceId\":\"https://rt\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":19,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"rt\",\"serviceId\":\"https://rt\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":19,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/superset_next_k8s-38.json]", "content": "--- /etc/cas/services/superset_next_k8s-38.json.orig\n+++ /etc/cas/services/superset_next_k8s-38.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_next_k8s\",\"serviceId\":\"https://superset-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":38,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_next_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_next_k8s\",\"serviceId\":\"https://superset-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":38,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_next_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/test_kitchen_next-41.json]", "content": "--- /etc/cas/services/test_kitchen_next-41.json.orig\n+++ /etc/cas/services/test_kitchen_next-41.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen_next\",\"serviceId\":\"https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":41,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen_next\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen_next\",\"serviceId\":\"https://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":41,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen_next\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[thanos]", "parameters": "--- Apereo_cas::Service[thanos].orig\n+++ Apereo_cas::Service[thanos]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/librenms-8.json]", "content": "--- /etc/cas/services/librenms-8.json.orig\n+++ /etc/cas/services/librenms-8.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"librenms\",\"serviceId\":\"https://librenms\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":8,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"librenms\",\"serviceId\":\"https://librenms\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":8,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[turnilo]", "parameters": "--- Apereo_cas::Service[turnilo].orig\n+++ Apereo_cas::Service[turnilo]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_ml-53.json]", "content": "--- /etc/cas/services/airflow_ml-53.json.orig\n+++ /etc/cas/services/airflow_ml-53.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_ml\",\"serviceId\":\"https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":53,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_ml\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_ml\",\"serviceId\":\"https://airflow-ml\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":53,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_ml\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_platform_eng-51.json]", "content": "--- /etc/cas/services/airflow_platform_eng-51.json.orig\n+++ /etc/cas/services/airflow_platform_eng-51.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_platform_eng\",\"serviceId\":\"https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":51,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_platform_eng\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_platform_eng\",\"serviceId\":\"https://airflow-platform-eng\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":51,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_platform_eng\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_wmde]", "parameters": "--- Apereo_cas::Service[airflow_wmde].orig\n+++ Apereo_cas::Service[airflow_wmde]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_sre]", "parameters": "--- Apereo_cas::Service[airflow_sre].orig\n+++ Apereo_cas::Service[airflow_sre]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[grafana]", "parameters": "--- Apereo_cas::Service[grafana].orig\n+++ Apereo_cas::Service[grafana]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/debmonitor-2.json]", "content": "--- /etc/cas/services/debmonitor-2.json.orig\n+++ /etc/cas/services/debmonitor-2.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor\",\"serviceId\":\"^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":2,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=nda,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"debmonitor\",\"serviceId\":\"^https://debmonitor\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":2,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=nda,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/yarn-10.json]", "content": "--- /etc/cas/services/yarn-10.json.orig\n+++ /etc/cas/services/yarn-10.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"yarn\",\"serviceId\":\"https://yarn\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":10,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"yarn\",\"serviceId\":\"https://yarn\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":10,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/idm-29.json]", "content": "--- /etc/cas/services/idm-29.json.orig\n+++ /etc/cas/services/idm-29.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"idm\",\"serviceId\":\"https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":29,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"idm\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"idm\",\"serviceId\":\"https://idm\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":29,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"idm\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[superset_k8s]", "parameters": "--- Apereo_cas::Service[superset_k8s].orig\n+++ Apereo_cas::Service[superset_k8s]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_wmde-46.json]", "content": "--- /etc/cas/services/airflow_wmde-46.json.orig\n+++ /etc/cas/services/airflow_wmde-46.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wmde\",\"serviceId\":\"https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":46,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wmde\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wmde\",\"serviceId\":\"https://airflow-wmde\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":46,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wmde\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/jaeger-36.json]", "content": "--- /etc/cas/services/jaeger-36.json.orig\n+++ /etc/cas/services/jaeger-36.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"jaeger\",\"serviceId\":\"https://trace\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":36,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"jaeger\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"jaeger\",\"serviceId\":\"https://trace\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":36,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"jaeger\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/keystone-43.json]", "content": "--- /etc/cas/services/keystone-43.json.orig\n+++ /etc/cas/services/keystone-43.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"keystone\",\"serviceId\":\"https://(keystone.)?openstack.*.wikimediacloud.org.*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":43,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"keystone\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"id_token token\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"keystone\",\"serviceId\":\"https://(keystone.)?openstack.*.wikimediacloud.org.*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":43,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"keystone\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"id_token token\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/graphite-4.json]", "content": "--- /etc/cas/services/graphite-4.json.orig\n+++ /etc/cas/services/graphite-4.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"graphite\",\"serviceId\":\"https://graphite\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":4,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"graphite\",\"serviceId\":\"https://graphite\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":4,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/gitlab_oidc-31.json]", "content": "--- /etc/cas/services/gitlab_oidc-31.json.orig\n+++ /etc/cas/services/gitlab_oidc-31.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_oidc\",\"serviceId\":\"https://gitlab\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":31,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"gitlab_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_oidc\",\"serviceId\":\"https://gitlab\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":31,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"gitlab_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_search-48.json]", "content": "--- /etc/cas/services/airflow_search-48.json.orig\n+++ /etc/cas/services/airflow_search-48.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_search\",\"serviceId\":\"https://airflow-search\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":48,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_search\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_search\",\"serviceId\":\"https://airflow-search\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":48,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_search\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_fr_tech]", "parameters": "--- Apereo_cas::Service[airflow_fr_tech].orig\n+++ Apereo_cas::Service[airflow_fr_tech]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/growthbook-59.json]", "content": "--- /etc/cas/services/growthbook-59.json.orig\n+++ /etc/cas/services/growthbook-59.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"growthbook\",\"serviceId\":\"https://growthbook\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":59,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"growthbook\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"growthbook\",\"serviceId\":\"https://growthbook\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":59,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=growthbook-admin,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-customelevatedaccess,ou=groups,dc=wikimedia,dc=org\",\"cn=growthbook-readonly,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"growthbook\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[keystone]", "parameters": "--- Apereo_cas::Service[keystone].orig\n+++ Apereo_cas::Service[keystone]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[netbox_oidc]", "parameters": "--- Apereo_cas::Service[netbox_oidc].orig\n+++ Apereo_cas::Service[netbox_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[kafka-ui]", "parameters": "--- Apereo_cas::Service[kafka-ui].orig\n+++ Apereo_cas::Service[kafka-ui]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[icinga]", "parameters": "--- Apereo_cas::Service[icinga].orig\n+++ Apereo_cas::Service[icinga]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[stream_internal]", "parameters": "--- Apereo_cas::Service[stream_internal].orig\n+++ Apereo_cas::Service[stream_internal]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/spiderpig-55.json]", "content": "--- /etc/cas/services/spiderpig-55.json.orig\n+++ /etc/cas/services/spiderpig-55.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"spiderpig\",\"serviceId\":\"https://spiderpig\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":55,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org\",\"cn=releng,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"spiderpig\",\"serviceId\":\"https://spiderpig\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":55,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=spiderpig-access,ou=groups,dc=wikimedia,dc=org\",\"cn=releng,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[rt]", "parameters": "--- Apereo_cas::Service[rt].orig\n+++ Apereo_cas::Service[rt]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/logstash_oidc-39.json]", "content": "--- /etc/cas/services/logstash_oidc-39.json.orig\n+++ /etc/cas/services/logstash_oidc-39.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"logstash_oidc\",\"serviceId\":\"https://logstash\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":39,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=logstash-access,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"logstash_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"logstash_oidc\",\"serviceId\":\"https://logstash\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":39,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=logstash-access,ou=groups,dc=wikimedia,dc=org\",\"cn=ops,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"logstash_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[debmonitor-next]", "parameters": "--- Apereo_cas::Service[debmonitor-next].orig\n+++ Apereo_cas::Service[debmonitor-next]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_analytics_product-52.json]", "content": "--- /etc/cas/services/airflow_analytics_product-52.json.orig\n+++ /etc/cas/services/airflow_analytics_product-52.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_product\",\"serviceId\":\"https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":52,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_product\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_product\",\"serviceId\":\"https://airflow-analytics-product\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":52,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_product\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/test_kitchen-40.json]", "content": "--- /etc/cas/services/test_kitchen-40.json.orig\n+++ /etc/cas/services/test_kitchen-40.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen\",\"serviceId\":\"https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":40,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"test_kitchen\",\"serviceId\":\"https://test-kitchen\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":40,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"test_kitchen\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/kafka-ui-63.json]", "content": "--- /etc/cas/services/kafka-ui-63.json.orig\n+++ /etc/cas/services/kafka-ui-63.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"kafka-ui\",\"serviceId\":\"https://kafka\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":63,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"kafka-ui\",\"serviceId\":\"https://kafka\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":63,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[growthbook]", "parameters": "--- Apereo_cas::Service[growthbook].orig\n+++ Apereo_cas::Service[growthbook]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/grafana-16.json]", "content": "--- /etc/cas/services/grafana-16.json.orig\n+++ /etc/cas/services/grafana-16.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"grafana\",\"serviceId\":\"https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":16,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=grafana-admin,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"grafana\",\"serviceId\":\"https://grafana(-next)?(-rw)?\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":16,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\",\"cn=grafana-admin,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/config-master-20.json]", "content": "--- /etc/cas/services/config-master-20.json.orig\n+++ /etc/cas/services/config-master-20.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"config-master\",\"serviceId\":\"https://config-master\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":20,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"config-master\",\"serviceId\":\"https://config-master\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":20,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/netbox_oidc-33.json]", "content": "--- /etc/cas/services/netbox_oidc-33.json.orig\n+++ /etc/cas/services/netbox_oidc-33.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"netbox_oidc\",\"serviceId\":\"https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":33,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"netbox_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"netbox_oidc\",\"serviceId\":\"https://netbox(-next)?\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":33,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=netbox-readonly-access,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"netbox_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[juniper]", "parameters": "--- Apereo_cas::Service[juniper].orig\n+++ Apereo_cas::Service[juniper]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[datahub]", "parameters": "--- Apereo_cas::Service[datahub].orig\n+++ Apereo_cas::Service[datahub]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_fr_tech-61.json]", "content": "--- /etc/cas/services/airflow_fr_tech-61.json.orig\n+++ /etc/cas/services/airflow_fr_tech-61.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_fr_tech\",\"serviceId\":\"https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":61,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_fr_tech\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_fr_tech\",\"serviceId\":\"https://airflow-fr-tech\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":61,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_fr_tech\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/datahub-34.json]", "content": "--- /etc/cas/services/datahub-34.json.orig\n+++ /etc/cas/services/datahub-34.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"datahub\",\"serviceId\":\"https://datahub\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":34,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"datahub\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"datahub\",\"serviceId\":\"https://datahub\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":34,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"datahub\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/zarcillo-56.json]", "content": "--- /etc/cas/services/zarcillo-56.json.orig\n+++ /etc/cas/services/zarcillo-56.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"zarcillo\",\"serviceId\":\"https://zarcillo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":56,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"zarcillo\",\"serviceId\":\"https://zarcillo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":56,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_search]", "parameters": "--- Apereo_cas::Service[airflow_search].orig\n+++ Apereo_cas::Service[airflow_search]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[thanos_oidc]", "parameters": "--- Apereo_cas::Service[thanos_oidc].orig\n+++ Apereo_cas::Service[thanos_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[test_kitchen_next]", "parameters": "--- Apereo_cas::Service[test_kitchen_next].orig\n+++ Apereo_cas::Service[test_kitchen_next]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[spiderpig]", "parameters": "--- Apereo_cas::Service[spiderpig].orig\n+++ Apereo_cas::Service[spiderpig]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/airflow_main-54.json]", "content": "--- /etc/cas/services/airflow_main-54.json.orig\n+++ /etc/cas/services/airflow_main-54.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_main\",\"serviceId\":\"https://airflow\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":54,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_main\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_main\",\"serviceId\":\"https://airflow\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":54,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_main\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[people]", "parameters": "--- Apereo_cas::Service[people].orig\n+++ Apereo_cas::Service[people]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_ml]", "parameters": "--- Apereo_cas::Service[airflow_ml].orig\n+++ Apereo_cas::Service[airflow_ml]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[gitlab_replica_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_replica_oidc].orig\n+++ Apereo_cas::Service[gitlab_replica_oidc]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/people-7.json]", "content": "--- /etc/cas/services/people-7.json.orig\n+++ /etc/cas/services/people-7.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"people\",\"serviceId\":\"https://people\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":7,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"people\",\"serviceId\":\"https://people\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":7,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/prometheus_oidc-42.json]", "content": "--- /etc/cas/services/prometheus_oidc-42.json.orig\n+++ /etc/cas/services/prometheus_oidc-42.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"prometheus_oidc\",\"serviceId\":\"https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":42,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"prometheus_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"prometheus_oidc\",\"serviceId\":\"https://prometheus-(.+)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":42,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"prometheus_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/piwik-9.json]", "content": "--- /etc/cas/services/piwik-9.json.orig\n+++ /etc/cas/services/piwik-9.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"piwik\",\"serviceId\":\"https://piwik\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":9,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"piwik\",\"serviceId\":\"https://piwik\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":9,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_wikidata-58.json]", "content": "--- /etc/cas/services/airflow_wikidata-58.json.orig\n+++ /etc/cas/services/airflow_wikidata-58.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wikidata\",\"serviceId\":\"https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":58,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wikidata\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_wikidata\",\"serviceId\":\"https://airflow-wikidata\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":58,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_wikidata\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[yarn]", "parameters": "--- Apereo_cas::Service[yarn].orig\n+++ Apereo_cas::Service[yarn]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[superset_next_k8s]", "parameters": "--- Apereo_cas::Service[superset_next_k8s].orig\n+++ Apereo_cas::Service[superset_next_k8s]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/requestctl-45.json]", "content": "--- /etc/cas/services/requestctl-45.json.orig\n+++ /etc/cas/services/requestctl-45.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"requestctl\",\"serviceId\":\"https://requestctl\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":45,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"requestctl\",\"serviceId\":\"https://requestctl\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":45,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[klaxon]", "parameters": "--- Apereo_cas::Service[klaxon].orig\n+++ Apereo_cas::Service[klaxon]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/superset_k8s-37.json]", "content": "--- /etc/cas/services/superset_k8s-37.json.orig\n+++ /etc/cas/services/superset_k8s-37.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_k8s\",\"serviceId\":\"https://superset\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":37,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"superset_k8s\",\"serviceId\":\"https://superset\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":37,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"superset_k8s\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_platform_eng]", "parameters": "--- Apereo_cas::Service[airflow_platform_eng].orig\n+++ Apereo_cas::Service[airflow_platform_eng]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/stream_internal-62.json]", "content": "--- /etc/cas/services/stream_internal-62.json.orig\n+++ /etc/cas/services/stream_internal-62.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"stream_internal\",\"serviceId\":\"https://stream-internal\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":62,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/turnilo-11.json]", "content": "--- /etc/cas/services/turnilo-11.json.orig\n+++ /etc/cas/services/turnilo-11.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"turnilo\",\"serviceId\":\"https://turnilo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":11,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"turnilo\",\"serviceId\":\"https://turnilo\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":11,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/prometheus-27.json]", "content": "--- /etc/cas/services/prometheus-27.json.orig\n+++ /etc/cas/services/prometheus-27.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"prometheus\",\"serviceId\":\"https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":27,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"prometheus\",\"serviceId\":\"https://prometheus-[^.]+\\\\.wikimedia.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":27,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/alerts-15.json]", "content": "--- /etc/cas/services/alerts-15.json.orig\n+++ /etc/cas/services/alerts-15.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"alerts\",\"serviceId\":\"https://alerts\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":15,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"alerts\",\"serviceId\":\"https://alerts\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":15,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[wmcs_idp]", "parameters": "--- Apereo_cas::Service[wmcs_idp].orig\n+++ Apereo_cas::Service[wmcs_idp]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/wmcs_idp-24.json]", "content": "--- /etc/cas/services/wmcs_idp-24.json.orig\n+++ /etc/cas/services/wmcs_idp-24.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"wmcs_idp\",\"serviceId\":\"https://idp\\\\.wmcloud\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":24,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"wmcs_idp\",\"serviceId\":\"https://idp\\\\.wmcloud\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":24,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_research-47.json]", "content": "--- /etc/cas/services/airflow_research-47.json.orig\n+++ /etc/cas/services/airflow_research-47.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_research\",\"serviceId\":\"https://airflow-research\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":47,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_research\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_research\",\"serviceId\":\"https://airflow-research\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":47,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_research\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/orchestrator-17.json]", "content": "--- /etc/cas/services/orchestrator-17.json.orig\n+++ /etc/cas/services/orchestrator-17.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"orchestrator\",\"serviceId\":\"^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":17,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"orchestrator\",\"serviceId\":\"^https://orchestrator\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":17,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[airflow_wikidata]", "parameters": "--- Apereo_cas::Service[airflow_wikidata].orig\n+++ Apereo_cas::Service[airflow_wikidata]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[piwik]", "parameters": "--- Apereo_cas::Service[piwik].orig\n+++ Apereo_cas::Service[piwik]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[gitlab_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_oidc].orig\n+++ Apereo_cas::Service[gitlab_oidc]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[alerts]", "parameters": "--- Apereo_cas::Service[alerts].orig\n+++ Apereo_cas::Service[alerts]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[orchestrator]", "parameters": "--- Apereo_cas::Service[orchestrator].orig\n+++ Apereo_cas::Service[orchestrator]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[puppetboard]", "parameters": "--- Apereo_cas::Service[puppetboard].orig\n+++ Apereo_cas::Service[puppetboard]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/gitlab_replica_oidc-32.json]", "content": "--- /etc/cas/services/gitlab_replica_oidc-32.json.orig\n+++ /etc/cas/services/gitlab_replica_oidc-32.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_replica_oidc\",\"serviceId\":\"https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":32,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"gitlab_replica_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"gitlab_replica_oidc\",\"serviceId\":\"https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":32,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"gitlab_replica_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[config-master]", "parameters": "--- Apereo_cas::Service[config-master].orig\n+++ Apereo_cas::Service[config-master]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[prometheus]", "parameters": "--- Apereo_cas::Service[prometheus].orig\n+++ Apereo_cas::Service[prometheus]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[idm]", "parameters": "--- Apereo_cas::Service[idm].orig\n+++ Apereo_cas::Service[idm]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/thanos-13.json]", "content": "--- /etc/cas/services/thanos-13.json.orig\n+++ /etc/cas/services/thanos-13.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"thanos\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":13,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"thanos\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":13,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[prometheus_oidc]", "parameters": "--- Apereo_cas::Service[prometheus_oidc].orig\n+++ Apereo_cas::Service[prometheus_oidc]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/juniper-30.json]", "content": "--- /etc/cas/services/juniper-30.json.orig\n+++ /etc/cas/services/juniper-30.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"juniper\",\"serviceId\":\"https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":30,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"juniper\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"juniper\",\"serviceId\":\"https://apigw-stage\\\\.juniper\\\\.net/css-asset/1\\\\.0\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":30,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\"},\"clientId\":\"juniper\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"NESTED\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[requestctl]", "parameters": "--- Apereo_cas::Service[requestctl].orig\n+++ Apereo_cas::Service[requestctl]\n\n+    mfa => []\n"}, {"resource": "File[/etc/cas/services/thanos_oidc-35.json]", "content": "--- /etc/cas/services/thanos_oidc-35.json.orig\n+++ /etc/cas/services/thanos_oidc-35.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"thanos_oidc\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":35,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"thanos_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"thanos_oidc\",\"serviceId\":\"https://thanos\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":35,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"thanos_oidc\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "File[/etc/cas/services/airflow_analytics_test-44.json]", "content": "--- /etc/cas/services/airflow_analytics_test-44.json.orig\n+++ /etc/cas/services/airflow_analytics_test-44.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_test\",\"serviceId\":\"https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":44,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_test\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]]}\n+{\"@class\":\"org.apereo.cas.services.OidcRegisteredService\",\"name\":\"airflow_analytics_test\",\"serviceId\":\"https://airflow-analytics-test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\"},\"id\":44,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=nda,ou=groups,dc=wikimedia,dc=org\",\"cn=wmf,ou=groups,dc=wikimedia,dc=org\"]]}},\"clientId\":\"airflow_analytics_test\",\"clientSecret\":\"REMOVED\",\"userProfileViewType\":\"FLAT\",\"bypassApprovalPrompt\":true,\"supportedResponseTypes\":[\"java.util.HashSet\",[\"code\"]],\"supportedGrantTypes\":[\"java.util.HashSet\",[\"authorization_code\"]],\"scopes\":[\"java.util.HashSet\",[\"profile\",\"openid\",\"email\",\"groups\",\"memberOf\"]],\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"\"]],\"bypassEnabled\":false,\"forExecution\":true}}"}, {"resource": "Apereo_cas::Service[librenms]", "parameters": "--- Apereo_cas::Service[librenms].orig\n+++ Apereo_cas::Service[librenms]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[zarcillo]", "parameters": "--- Apereo_cas::Service[zarcillo].orig\n+++ Apereo_cas::Service[zarcillo]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[jaeger]", "parameters": "--- Apereo_cas::Service[jaeger].orig\n+++ Apereo_cas::Service[jaeger]\n\n+    mfa => []\n"}, {"resource": "Apereo_cas::Service[airflow_analytics_test]", "parameters": "--- Apereo_cas::Service[airflow_analytics_test].orig\n+++ Apereo_cas::Service[airflow_analytics_test]\n\n+    mfa => []\n"}], "perc_changed": "3.59%"}}}