{"host": "phab2002.codfw.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3714, "only_in_self": ["File[/usr/local/sbin/sync-phabricator-home-dirs]", "File[/usr/local/sbin/sync-phabricator-repos]"], "only_in_other": [], "resource_diffs": [{"resource": "Class[Profile::Phabricator::Main]", "parameters": "--- Class[Profile::Phabricator::Main].orig\n+++ Class[Profile::Phabricator::Main]\n\n@@\n-    passive_server => phab2002.codfw.wmnet\n+    passive_server => phab2003.codfw.wmnet\n"}, {"resource": "Rsync::Quickdatacopy[phabricator-repos]", "parameters": "--- Rsync::Quickdatacopy[phabricator-repos].orig\n+++ Rsync::Quickdatacopy[phabricator-repos]\n\n@@\n-    dest_host => phab2002.codfw.wmnet\n+    dest_host => phab2003.codfw.wmnet\n"}, {"resource": "Systemd::Unit[rsync-phabricator-repos.service]", "parameters": "--- Systemd::Unit[rsync-phabricator-repos.service].orig\n+++ Systemd::Unit[rsync-phabricator-repos.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-repos.timer]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-repos.timer].orig\n+++ File[/lib/systemd/system/rsync-phabricator-repos.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Timer[rsync-phabricator-home-dirs].orig\n+++ Systemd::Timer[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-phabricator-repos.timer]", "parameters": "--- Service[rsync-phabricator-repos.timer].orig\n+++ Service[rsync-phabricator-repos.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]']\n@@\n-    enable => True\n+    enable => False\n@@\n-    ensure => running\n+    ensure => stopped\n"}, {"resource": "Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]\n\n-    before => ['Service[rsync-phabricator-repos.timer]']\n"}, {"resource": "Systemd::Unit[rsync-phabricator-home-dirs.timer]", "parameters": "--- Systemd::Unit[rsync-phabricator-home-dirs.timer].orig\n+++ Systemd::Unit[rsync-phabricator-home-dirs.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-home-dirs.service]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-home-dirs.service].orig\n+++ File[/lib/systemd/system/rsync-phabricator-home-dirs.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-phabricator-home-dirs.timer]", "parameters": "--- Service[rsync-phabricator-home-dirs.timer].orig\n+++ Service[rsync-phabricator-home-dirs.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]']\n@@\n-    enable => True\n+    enable => False\n@@\n-    ensure => running\n+    ensure => stopped\n"}, {"resource": "Nftables::Service[rsyncd_access_srv-dumps]", "parameters": "--- Nftables::Service[rsyncd_access_srv-dumps].orig\n+++ Nftables::Service[rsyncd_access_srv-dumps]\n\n@@\n-    src_ips => ['10.192.27.6', '10.64.16.101', '208.80.154.142', '208.80.154.71', '2620:0:860:114:10:192:27:6', '2620:0:861:102:10:64:16:101', '2620:0:861:2:208:80:154:142', '2620:0:861:3:208:80:154:71']\n+    src_ips => ['10.192.27.12', '10.64.16.101', '208.80.154.142', '208.80.154.71', '2620:0:860:114:10:192:27:12', '2620:0:861:102:10:64:16:101', '2620:0:861:2:208:80:154:142', '2620:0:861:3:208:80:154:71']\n"}, {"resource": "Rsync::Server::Module[srv-dumps]", "parameters": "--- Rsync::Server::Module[srv-dumps].orig\n+++ Rsync::Server::Module[srv-dumps]\n\n@@\n-    hosts_allow => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    hosts_allow => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-home-dirs.timer].orig\n+++ File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/usr/local/sbin/sync-phabricator-home-dirs]", "content": "--- /usr/local/sbin/sync-phabricator-home-dirs.orig\n+++ /usr/local/sbin/sync-phabricator-home-dirs\n@@ -1,2 +0,0 @@\n-#!/bin/sh\n-/usr/bin/rsync  --delete -a    rsync://phab1004.eqiad.wmnet/phabricator-home-dirs /srv/homes/", "parameters": "--- File[/usr/local/sbin/sync-phabricator-home-dirs].orig\n+++ File[/usr/local/sbin/sync-phabricator-home-dirs]\n\n-    owner  => root\n-    mode   => 0755\n-    group  => root\n-    ensure => present\n"}, {"resource": "Systemd::Timer::Job[rsync-phabricator-repos]", "parameters": "--- Systemd::Timer::Job[rsync-phabricator-repos].orig\n+++ Systemd::Timer::Job[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Service[rsync-phabricator-repos]", "parameters": "--- Systemd::Service[rsync-phabricator-repos].orig\n+++ Systemd::Service[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[ssh_cluster]", "parameters": "--- Ferm::Service[ssh_cluster].orig\n+++ Ferm::Service[ssh_cluster]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet']\n"}, {"resource": "Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]\n\n-    before => ['Service[rsync-phabricator-home-dirs.timer]']\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Logrotate::Conf[rsync-phabricator-repos]", "parameters": "--- Logrotate::Conf[rsync-phabricator-repos].orig\n+++ Logrotate::Conf[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/rsync-phabricator-repos]", "parameters": "--- File[/etc/logrotate.d/rsync-phabricator-repos].orig\n+++ File[/etc/logrotate.d/rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[rsyncd_access_srv_dumps]", "parameters": "--- Ferm::Service[rsyncd_access_srv_dumps].orig\n+++ Ferm::Service[rsyncd_access_srv_dumps]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "Systemd::Unit[rsync-phabricator-repos.timer]", "parameters": "--- Systemd::Unit[rsync-phabricator-repos.timer].orig\n+++ Systemd::Unit[rsync-phabricator-repos.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-repos.service]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-repos.service].orig\n+++ File[/lib/systemd/system/rsync-phabricator-repos.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-phabricator-repos]", "parameters": "--- File[/var/log/rsync-phabricator-repos].orig\n+++ File[/var/log/rsync-phabricator-repos]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[rsync-phabricator-home-dirs.service]", "parameters": "--- Systemd::Unit[rsync-phabricator-home-dirs.service].orig\n+++ Systemd::Unit[rsync-phabricator-home-dirs.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Firewall::Service[rsyncd_access_srv-dumps]", "parameters": "--- Firewall::Service[rsyncd_access_srv-dumps].orig\n+++ Firewall::Service[rsyncd_access_srv-dumps]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "Class[Profile::Phabricator::Datasync]", "parameters": "--- Class[Profile::Phabricator::Datasync].orig\n+++ Class[Profile::Phabricator::Datasync]\n\n@@\n-    passive_server      => phab2002.codfw.wmnet\n+    passive_server      => phab2003.codfw.wmnet\n@@\n-    dumps_rsync_clients => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    dumps_rsync_clients => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "File[/usr/local/sbin/sync-phabricator-repos]", "content": "--- /usr/local/sbin/sync-phabricator-repos.orig\n+++ /usr/local/sbin/sync-phabricator-repos\n@@ -1,2 +0,0 @@\n-#!/bin/sh\n-/usr/bin/rsync  --delete -a    rsync://phab1004.eqiad.wmnet/phabricator-repos /srv/repos/", "parameters": "--- File[/usr/local/sbin/sync-phabricator-repos].orig\n+++ File[/usr/local/sbin/sync-phabricator-repos]\n\n-    owner  => root\n-    mode   => 0755\n-    group  => root\n-    ensure => present\n"}, {"resource": "Systemd::Timer::Job[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Timer::Job[rsync-phabricator-home-dirs].orig\n+++ Systemd::Timer::Job[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-phabricator-home-dirs]", "parameters": "--- File[/var/log/rsync-phabricator-home-dirs].orig\n+++ File[/var/log/rsync-phabricator-home-dirs]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[phabricator-home-dirs]", "parameters": "--- Rsync::Quickdatacopy[phabricator-home-dirs].orig\n+++ Rsync::Quickdatacopy[phabricator-home-dirs]\n\n@@\n-    dest_host => phab2002.codfw.wmnet\n+    dest_host => phab2003.codfw.wmnet\n"}, {"resource": "File[/etc/logrotate.d/rsync-phabricator-home-dirs]", "parameters": "--- File[/etc/logrotate.d/rsync-phabricator-home-dirs].orig\n+++ File[/etc/logrotate.d/rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Service[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Service[rsync-phabricator-home-dirs].orig\n+++ Systemd::Service[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nftables::Service[ssh_cluster]", "parameters": "--- Nftables::Service[ssh_cluster].orig\n+++ Nftables::Service[ssh_cluster]\n\n@@\n-    src_ips => ['10.192.27.6', '10.64.16.101', '2620:0:860:114:10:192:27:6', '2620:0:861:102:10:64:16:101']\n+    src_ips => ['10.192.27.12', '10.64.16.101', '2620:0:860:114:10:192:27:12', '2620:0:861:102:10:64:16:101']\n"}, {"resource": "Firewall::Service[ssh_cluster]", "parameters": "--- Firewall::Service[ssh_cluster].orig\n+++ Firewall::Service[ssh_cluster]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet']\n"}, {"resource": "Rsyslog::Conf[rsync-phabricator-repos]", "parameters": "--- Rsyslog::Conf[rsync-phabricator-repos].orig\n+++ Rsyslog::Conf[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer[rsync-phabricator-repos]", "parameters": "--- Systemd::Timer[rsync-phabricator-repos].orig\n+++ Systemd::Timer[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-srv-dumps]", "content": "--- /etc/rsyncd.conf-srv-dumps.orig\n+++ /etc/rsyncd.conf-srv-dumps\n@@ -16,5 +16,5 @@\n \n \n \n-hosts allow = phab1004.eqiad.wmnet phab2002.codfw.wmnet clouddumps1001.wikimedia.org clouddumps1002.wikimedia.org localhost\n+hosts allow = phab1004.eqiad.wmnet phab2003.codfw.wmnet clouddumps1001.wikimedia.org clouddumps1002.wikimedia.org localhost\n "}, {"resource": "Systemd::Syslog[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Syslog[rsync-phabricator-home-dirs].orig\n+++ Systemd::Syslog[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Syslog[rsync-phabricator-repos]", "parameters": "--- Systemd::Syslog[rsync-phabricator-repos].orig\n+++ Systemd::Syslog[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsyslog::Conf[rsync-phabricator-home-dirs]", "parameters": "--- Rsyslog::Conf[rsync-phabricator-home-dirs].orig\n+++ Rsyslog::Conf[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/nftables/input/10_rsyncd_access_srv-dumps.nft]", "content": "--- /etc/nftables/input/10_rsyncd_access_srv-dumps.nft.orig\n+++ /etc/nftables/input/10_rsyncd_access_srv-dumps.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.192.27.6, 10.64.16.101, 208.80.154.142, 208.80.154.71 } tcp dport { 873, 1873 } accept\n-ip6 saddr { 2620:0:860:114:10:192:27:6, 2620:0:861:102:10:64:16:101, 2620:0:861:2:208:80:154:142, 2620:0:861:3:208:80:154:71 } tcp dport { 873, 1873 } accept\n+ip saddr { 10.192.27.12, 10.64.16.101, 208.80.154.142, 208.80.154.71 } tcp dport { 873, 1873 } accept\n+ip6 saddr { 2620:0:860:114:10:192:27:12, 2620:0:861:102:10:64:16:101, 2620:0:861:2:208:80:154:142, 2620:0:861:3:208:80:154:71 } tcp dport { 873, 1873 } accept"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-srv-dumps]"}, {"resource": "Logrotate::Conf[rsync-phabricator-home-dirs]", "parameters": "--- Logrotate::Conf[rsync-phabricator-home-dirs].orig\n+++ Logrotate::Conf[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/nftables/input/10_ssh_cluster.nft]", "content": "--- /etc/nftables/input/10_ssh_cluster.nft.orig\n+++ /etc/nftables/input/10_ssh_cluster.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.192.27.6, 10.64.16.101 } tcp dport { 22 } accept\n-ip6 saddr { 2620:0:860:114:10:192:27:6, 2620:0:861:102:10:64:16:101 } tcp dport { 22 } accept\n+ip saddr { 10.192.27.12, 10.64.16.101 } tcp dport { 22 } accept\n+ip6 saddr { 2620:0:860:114:10:192:27:12, 2620:0:861:102:10:64:16:101 } tcp dport { 22 } accept"}], "perc_changed": "1.32%"}, "core": {"total": 3714, "only_in_self": ["File[/usr/local/sbin/sync-phabricator-home-dirs]", "File[/usr/local/sbin/sync-phabricator-repos]"], "only_in_other": [], "resource_diffs": [{"resource": "File[/var/log/rsync-phabricator-home-dirs]", "parameters": "--- File[/var/log/rsync-phabricator-home-dirs].orig\n+++ File[/var/log/rsync-phabricator-home-dirs]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-repos.timer]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-repos.timer].orig\n+++ File[/lib/systemd/system/rsync-phabricator-repos.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-phabricator-repos.timer]", "parameters": "--- Service[rsync-phabricator-repos.timer].orig\n+++ Service[rsync-phabricator-repos.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]']\n@@\n-    enable => True\n+    enable => False\n@@\n-    ensure => running\n+    ensure => stopped\n"}, {"resource": "Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]\n\n-    before => ['Service[rsync-phabricator-repos.timer]']\n"}, {"resource": "File[/etc/logrotate.d/rsync-phabricator-home-dirs]", "parameters": "--- File[/etc/logrotate.d/rsync-phabricator-home-dirs].orig\n+++ File[/etc/logrotate.d/rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-home-dirs.service]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-home-dirs.service].orig\n+++ File[/lib/systemd/system/rsync-phabricator-home-dirs.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-phabricator-home-dirs.timer]", "parameters": "--- Service[rsync-phabricator-home-dirs.timer].orig\n+++ Service[rsync-phabricator-home-dirs.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]']\n@@\n-    enable => True\n+    enable => False\n@@\n-    ensure => running\n+    ensure => stopped\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-home-dirs.timer].orig\n+++ File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]\n\n-    before => ['Service[rsync-phabricator-home-dirs.timer]']\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-srv-dumps]", "content": "--- /etc/rsyncd.conf-srv-dumps.orig\n+++ /etc/rsyncd.conf-srv-dumps\n@@ -16,5 +16,5 @@\n \n \n \n-hosts allow = phab1004.eqiad.wmnet phab2002.codfw.wmnet clouddumps1001.wikimedia.org clouddumps1002.wikimedia.org localhost\n+hosts allow = phab1004.eqiad.wmnet phab2003.codfw.wmnet clouddumps1001.wikimedia.org clouddumps1002.wikimedia.org localhost\n "}, {"resource": "File[/etc/logrotate.d/rsync-phabricator-repos]", "parameters": "--- File[/etc/logrotate.d/rsync-phabricator-repos].orig\n+++ File[/etc/logrotate.d/rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/nftables/input/10_rsyncd_access_srv-dumps.nft]", "content": "--- /etc/nftables/input/10_rsyncd_access_srv-dumps.nft.orig\n+++ /etc/nftables/input/10_rsyncd_access_srv-dumps.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.192.27.6, 10.64.16.101, 208.80.154.142, 208.80.154.71 } tcp dport { 873, 1873 } accept\n-ip6 saddr { 2620:0:860:114:10:192:27:6, 2620:0:861:102:10:64:16:101, 2620:0:861:2:208:80:154:142, 2620:0:861:3:208:80:154:71 } tcp dport { 873, 1873 } accept\n+ip saddr { 10.192.27.12, 10.64.16.101, 208.80.154.142, 208.80.154.71 } tcp dport { 873, 1873 } accept\n+ip6 saddr { 2620:0:860:114:10:192:27:12, 2620:0:861:102:10:64:16:101, 2620:0:861:2:208:80:154:142, 2620:0:861:3:208:80:154:71 } tcp dport { 873, 1873 } accept"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-repos.service]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-repos.service].orig\n+++ File[/lib/systemd/system/rsync-phabricator-repos.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-phabricator-repos]", "parameters": "--- File[/var/log/rsync-phabricator-repos].orig\n+++ File[/var/log/rsync-phabricator-repos]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "File[/etc/nftables/input/10_ssh_cluster.nft]", "content": "--- /etc/nftables/input/10_ssh_cluster.nft.orig\n+++ /etc/nftables/input/10_ssh_cluster.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.192.27.6, 10.64.16.101 } tcp dport { 22 } accept\n-ip6 saddr { 2620:0:860:114:10:192:27:6, 2620:0:861:102:10:64:16:101 } tcp dport { 22 } accept\n+ip saddr { 10.192.27.12, 10.64.16.101 } tcp dport { 22 } accept\n+ip6 saddr { 2620:0:860:114:10:192:27:12, 2620:0:861:102:10:64:16:101 } tcp dport { 22 } accept"}], "perc_changed": "0.51%"}, "main": {"total": 3714, "only_in_self": ["File[/usr/local/sbin/sync-phabricator-home-dirs]", "File[/usr/local/sbin/sync-phabricator-repos]"], "only_in_other": [], "resource_diffs": [{"resource": "Systemd::Unit[rsync-phabricator-home-dirs.service]", "parameters": "--- Systemd::Unit[rsync-phabricator-home-dirs.service].orig\n+++ Systemd::Unit[rsync-phabricator-home-dirs.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Firewall::Service[rsyncd_access_srv-dumps]", "parameters": "--- Firewall::Service[rsyncd_access_srv-dumps].orig\n+++ Firewall::Service[rsyncd_access_srv-dumps]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "Class[Profile::Phabricator::Main]", "parameters": "--- Class[Profile::Phabricator::Main].orig\n+++ Class[Profile::Phabricator::Main]\n\n@@\n-    passive_server => phab2002.codfw.wmnet\n+    passive_server => phab2003.codfw.wmnet\n"}, {"resource": "Rsync::Quickdatacopy[phabricator-repos]", "parameters": "--- Rsync::Quickdatacopy[phabricator-repos].orig\n+++ Rsync::Quickdatacopy[phabricator-repos]\n\n@@\n-    dest_host => phab2002.codfw.wmnet\n+    dest_host => phab2003.codfw.wmnet\n"}, {"resource": "Class[Profile::Phabricator::Datasync]", "parameters": "--- Class[Profile::Phabricator::Datasync].orig\n+++ Class[Profile::Phabricator::Datasync]\n\n@@\n-    passive_server      => phab2002.codfw.wmnet\n+    passive_server      => phab2003.codfw.wmnet\n@@\n-    dumps_rsync_clients => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    dumps_rsync_clients => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "Systemd::Timer::Job[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Timer::Job[rsync-phabricator-home-dirs].orig\n+++ Systemd::Timer::Job[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[rsync-phabricator-repos.service]", "parameters": "--- Systemd::Unit[rsync-phabricator-repos.service].orig\n+++ Systemd::Unit[rsync-phabricator-repos.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/var/log/rsync-phabricator-home-dirs]", "parameters": "--- File[/var/log/rsync-phabricator-home-dirs].orig\n+++ File[/var/log/rsync-phabricator-home-dirs]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-repos.timer]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-repos.timer].orig\n+++ File[/lib/systemd/system/rsync-phabricator-repos.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Timer[rsync-phabricator-home-dirs].orig\n+++ Systemd::Timer[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsync::Quickdatacopy[phabricator-home-dirs]", "parameters": "--- Rsync::Quickdatacopy[phabricator-home-dirs].orig\n+++ Rsync::Quickdatacopy[phabricator-home-dirs]\n\n@@\n-    dest_host => phab2002.codfw.wmnet\n+    dest_host => phab2003.codfw.wmnet\n"}, {"resource": "Service[rsync-phabricator-repos.timer]", "parameters": "--- Service[rsync-phabricator-repos.timer].orig\n+++ Service[rsync-phabricator-repos.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]']\n@@\n-    enable => True\n+    enable => False\n@@\n-    ensure => running\n+    ensure => stopped\n"}, {"resource": "Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]\n\n-    before => ['Service[rsync-phabricator-repos.timer]']\n"}, {"resource": "Systemd::Service[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Service[rsync-phabricator-home-dirs].orig\n+++ Systemd::Service[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Unit[rsync-phabricator-home-dirs.timer]", "parameters": "--- Systemd::Unit[rsync-phabricator-home-dirs.timer].orig\n+++ Systemd::Unit[rsync-phabricator-home-dirs.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/rsync-phabricator-home-dirs]", "parameters": "--- File[/etc/logrotate.d/rsync-phabricator-home-dirs].orig\n+++ File[/etc/logrotate.d/rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-home-dirs.service]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-home-dirs.service].orig\n+++ File[/lib/systemd/system/rsync-phabricator-home-dirs.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Service[rsync-phabricator-home-dirs.timer]", "parameters": "--- Service[rsync-phabricator-home-dirs.timer].orig\n+++ Service[rsync-phabricator-home-dirs.timer]\n\n+    before => ['Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]']\n@@\n-    enable => True\n+    enable => False\n@@\n-    ensure => running\n+    ensure => stopped\n"}, {"resource": "Nftables::Service[rsyncd_access_srv-dumps]", "parameters": "--- Nftables::Service[rsyncd_access_srv-dumps].orig\n+++ Nftables::Service[rsyncd_access_srv-dumps]\n\n@@\n-    src_ips => ['10.192.27.6', '10.64.16.101', '208.80.154.142', '208.80.154.71', '2620:0:860:114:10:192:27:6', '2620:0:861:102:10:64:16:101', '2620:0:861:2:208:80:154:142', '2620:0:861:3:208:80:154:71']\n+    src_ips => ['10.192.27.12', '10.64.16.101', '208.80.154.142', '208.80.154.71', '2620:0:860:114:10:192:27:12', '2620:0:861:102:10:64:16:101', '2620:0:861:2:208:80:154:142', '2620:0:861:3:208:80:154:71']\n"}, {"resource": "Rsync::Server::Module[srv-dumps]", "parameters": "--- Rsync::Server::Module[srv-dumps].orig\n+++ Rsync::Server::Module[srv-dumps]\n\n@@\n-    hosts_allow => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    hosts_allow => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-home-dirs.timer].orig\n+++ File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Nftables::Service[ssh_cluster]", "parameters": "--- Nftables::Service[ssh_cluster].orig\n+++ Nftables::Service[ssh_cluster]\n\n@@\n-    src_ips => ['10.192.27.6', '10.64.16.101', '2620:0:860:114:10:192:27:6', '2620:0:861:102:10:64:16:101']\n+    src_ips => ['10.192.27.12', '10.64.16.101', '2620:0:860:114:10:192:27:12', '2620:0:861:102:10:64:16:101']\n"}, {"resource": "Systemd::Timer::Job[rsync-phabricator-repos]", "parameters": "--- Systemd::Timer::Job[rsync-phabricator-repos].orig\n+++ Systemd::Timer::Job[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Firewall::Service[ssh_cluster]", "parameters": "--- Firewall::Service[ssh_cluster].orig\n+++ Firewall::Service[ssh_cluster]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet']\n"}, {"resource": "Systemd::Service[rsync-phabricator-repos]", "parameters": "--- Systemd::Service[rsync-phabricator-repos].orig\n+++ Systemd::Service[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[ssh_cluster]", "parameters": "--- Ferm::Service[ssh_cluster].orig\n+++ Ferm::Service[ssh_cluster]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet']\n"}, {"resource": "Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]", "parameters": "--- Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)].orig\n+++ Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]\n\n-    before => ['Service[rsync-phabricator-home-dirs.timer]']\n"}, {"resource": "Rsyslog::Conf[rsync-phabricator-repos]", "parameters": "--- Rsyslog::Conf[rsync-phabricator-repos].orig\n+++ Rsyslog::Conf[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Timer[rsync-phabricator-repos]", "parameters": "--- Systemd::Timer[rsync-phabricator-repos].orig\n+++ Systemd::Timer[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]", "parameters": "--- File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf].orig\n+++ File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Concat_fragment[/etc/rsyncd.conf-srv-dumps]", "content": "--- /etc/rsyncd.conf-srv-dumps.orig\n+++ /etc/rsyncd.conf-srv-dumps\n@@ -16,5 +16,5 @@\n \n \n \n-hosts allow = phab1004.eqiad.wmnet phab2002.codfw.wmnet clouddumps1001.wikimedia.org clouddumps1002.wikimedia.org localhost\n+hosts allow = phab1004.eqiad.wmnet phab2003.codfw.wmnet clouddumps1001.wikimedia.org clouddumps1002.wikimedia.org localhost\n "}, {"resource": "Systemd::Syslog[rsync-phabricator-home-dirs]", "parameters": "--- Systemd::Syslog[rsync-phabricator-home-dirs].orig\n+++ Systemd::Syslog[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Systemd::Syslog[rsync-phabricator-repos]", "parameters": "--- Systemd::Syslog[rsync-phabricator-repos].orig\n+++ Systemd::Syslog[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Rsyslog::Conf[rsync-phabricator-home-dirs]", "parameters": "--- Rsyslog::Conf[rsync-phabricator-home-dirs].orig\n+++ Rsyslog::Conf[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Logrotate::Conf[rsync-phabricator-repos]", "parameters": "--- Logrotate::Conf[rsync-phabricator-repos].orig\n+++ Logrotate::Conf[rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/logrotate.d/rsync-phabricator-repos]", "parameters": "--- File[/etc/logrotate.d/rsync-phabricator-repos].orig\n+++ File[/etc/logrotate.d/rsync-phabricator-repos]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Ferm::Service[rsyncd_access_srv_dumps]", "parameters": "--- Ferm::Service[rsyncd_access_srv_dumps].orig\n+++ Ferm::Service[rsyncd_access_srv_dumps]\n\n@@\n-    srange => ['phab1004.eqiad.wmnet', 'phab2002.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n+    srange => ['phab1004.eqiad.wmnet', 'phab2003.codfw.wmnet', 'clouddumps1001.wikimedia.org', 'clouddumps1002.wikimedia.org']\n"}, {"resource": "Systemd::Unit[rsync-phabricator-repos.timer]", "parameters": "--- Systemd::Unit[rsync-phabricator-repos.timer].orig\n+++ Systemd::Unit[rsync-phabricator-repos.timer]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/nftables/input/10_rsyncd_access_srv-dumps.nft]", "content": "--- /etc/nftables/input/10_rsyncd_access_srv-dumps.nft.orig\n+++ /etc/nftables/input/10_rsyncd_access_srv-dumps.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.192.27.6, 10.64.16.101, 208.80.154.142, 208.80.154.71 } tcp dport { 873, 1873 } accept\n-ip6 saddr { 2620:0:860:114:10:192:27:6, 2620:0:861:102:10:64:16:101, 2620:0:861:2:208:80:154:142, 2620:0:861:3:208:80:154:71 } tcp dport { 873, 1873 } accept\n+ip saddr { 10.192.27.12, 10.64.16.101, 208.80.154.142, 208.80.154.71 } tcp dport { 873, 1873 } accept\n+ip6 saddr { 2620:0:860:114:10:192:27:12, 2620:0:861:102:10:64:16:101, 2620:0:861:2:208:80:154:142, 2620:0:861:3:208:80:154:71 } tcp dport { 873, 1873 } accept"}, {"resource": "File[/lib/systemd/system/rsync-phabricator-repos.service]", "parameters": "--- File[/lib/systemd/system/rsync-phabricator-repos.service].orig\n+++ File[/lib/systemd/system/rsync-phabricator-repos.service]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "Concat::Fragment[/etc/rsyncd.conf-srv-dumps]"}, {"resource": "File[/var/log/rsync-phabricator-repos]", "parameters": "--- File[/var/log/rsync-phabricator-repos].orig\n+++ File[/var/log/rsync-phabricator-repos]\n\n@@\n-    ensure => directory\n+    ensure => absent\n"}, {"resource": "Logrotate::Conf[rsync-phabricator-home-dirs]", "parameters": "--- Logrotate::Conf[rsync-phabricator-home-dirs].orig\n+++ Logrotate::Conf[rsync-phabricator-home-dirs]\n\n@@\n-    ensure => present\n+    ensure => absent\n"}, {"resource": "File[/etc/nftables/input/10_ssh_cluster.nft]", "content": "--- /etc/nftables/input/10_ssh_cluster.nft.orig\n+++ /etc/nftables/input/10_ssh_cluster.nft\n@@ -1,4 +1,4 @@\n # Managed by puppet\n # \n-ip saddr { 10.192.27.6, 10.64.16.101 } tcp dport { 22 } accept\n-ip6 saddr { 2620:0:860:114:10:192:27:6, 2620:0:861:102:10:64:16:101 } tcp dport { 22 } accept\n+ip saddr { 10.192.27.12, 10.64.16.101 } tcp dport { 22 } accept\n+ip6 saddr { 2620:0:860:114:10:192:27:12, 2620:0:861:102:10:64:16:101 } tcp dport { 22 } accept"}], "perc_changed": "1.27%"}}}