{"host": "idp-test2005.wikimedia.org", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 2899, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Class[Apereo_cas]", "parameters": "--- Class[Apereo_cas].orig\n+++ Class[Apereo_cas]\n\n@@\n-    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn']}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n+    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn'], 'selective_mfa': True}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n"}, {"resource": "Apereo_cas::Service[gitlab_replica_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_replica_oidc].orig\n+++ Apereo_cas::Service[gitlab_replica_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[logstash_oidc]", "parameters": "--- Apereo_cas::Service[logstash_oidc].orig\n+++ Apereo_cas::Service[logstash_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[datahub_staging]", "parameters": "--- Apereo_cas::Service[datahub_staging].orig\n+++ Apereo_cas::Service[datahub_staging]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[idm_dev]", "parameters": "--- Apereo_cas::Service[idm_dev].orig\n+++ Apereo_cas::Service[idm_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[turnilo_next]", "parameters": "--- Apereo_cas::Service[turnilo_next].orig\n+++ Apereo_cas::Service[turnilo_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[netbox_dev]", "parameters": "--- Apereo_cas::Service[netbox_dev].orig\n+++ Apereo_cas::Service[netbox_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[idp_cloud_dev]", "parameters": "--- Apereo_cas::Service[idp_cloud_dev].orig\n+++ Apereo_cas::Service[idp_cloud_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[prometheus_oidc]", "parameters": "--- Apereo_cas::Service[prometheus_oidc].orig\n+++ Apereo_cas::Service[prometheus_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[alerts]", "parameters": "--- Apereo_cas::Service[alerts].orig\n+++ Apereo_cas::Service[alerts]\n\n+    selective_mfa => False\n"}, {"resource": "Class[Profile::Idp]", "parameters": "--- Class[Profile::Idp].orig\n+++ Class[Profile::Idp]\n\n@@\n-    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn']}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n+    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn'], 'selective_mfa': True}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n"}, {"resource": "Apereo_cas::Service[puppetboard]", "parameters": "--- Apereo_cas::Service[puppetboard].orig\n+++ Apereo_cas::Service[puppetboard]\n\n+    selective_mfa => True\n"}, {"resource": "File[/etc/cas/services/puppetboard-1.json]", "content": "--- /etc/cas/services/puppetboard-1.json.orig\n+++ /etc/cas/services/puppetboard-1.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\",\"cn=idptest-users,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"mfa-webauthn\"]],\"bypassEnabled\":false,\"forExecution\":true}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\",\"cn=idptest-users,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"mfa-webauthn\"]],\"bypassEnabled\":false,\"forExecution\":true,\"principalAttributeNameTrigger\":\"mfa-method\",\"principalAttributeValueToMatch\":\"mfa-gauth|mfa-webauthn\"}}"}, {"resource": "Apereo_cas::Service[airflow_test_k8s]", "parameters": "--- Apereo_cas::Service[airflow_test_k8s].orig\n+++ Apereo_cas::Service[airflow_test_k8s]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[phabricator_dev]", "parameters": "--- Apereo_cas::Service[phabricator_dev].orig\n+++ Apereo_cas::Service[phabricator_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[netbox_next]", "parameters": "--- Apereo_cas::Service[netbox_next].orig\n+++ Apereo_cas::Service[netbox_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[juniper]", "parameters": "--- Apereo_cas::Service[juniper].orig\n+++ Apereo_cas::Service[juniper]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[gitlab_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_oidc].orig\n+++ Apereo_cas::Service[gitlab_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[growthbook_next]", "parameters": "--- Apereo_cas::Service[growthbook_next].orig\n+++ Apereo_cas::Service[growthbook_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[thanos_oidc]", "parameters": "--- Apereo_cas::Service[thanos_oidc].orig\n+++ Apereo_cas::Service[thanos_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[test_kitchen_next]", "parameters": "--- Apereo_cas::Service[test_kitchen_next].orig\n+++ Apereo_cas::Service[test_kitchen_next]\n\n+    selective_mfa => False\n"}], "perc_changed": "0.72%"}, "core": {"total": 2899, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "File[/etc/cas/services/puppetboard-1.json]", "content": "--- /etc/cas/services/puppetboard-1.json.orig\n+++ /etc/cas/services/puppetboard-1.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\",\"cn=idptest-users,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"mfa-webauthn\"]],\"bypassEnabled\":false,\"forExecution\":true}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\",\"cn=idptest-users,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"mfa-webauthn\"]],\"bypassEnabled\":false,\"forExecution\":true,\"principalAttributeNameTrigger\":\"mfa-method\",\"principalAttributeValueToMatch\":\"mfa-gauth|mfa-webauthn\"}}"}], "perc_changed": "0.03%"}, "main": {"total": 2899, "only_in_self": [], "only_in_other": [], "resource_diffs": [{"resource": "Class[Profile::Idp]", "parameters": "--- Class[Profile::Idp].orig\n+++ Class[Profile::Idp]\n\n@@\n-    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn']}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n+    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn'], 'selective_mfa': True}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n"}, {"resource": "Apereo_cas::Service[puppetboard]", "parameters": "--- Apereo_cas::Service[puppetboard].orig\n+++ Apereo_cas::Service[puppetboard]\n\n+    selective_mfa => True\n"}, {"resource": "Class[Apereo_cas]", "parameters": "--- Class[Apereo_cas].orig\n+++ Class[Apereo_cas]\n\n@@\n-    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn']}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n+    services => {'idm_dev': {'client_secret': 'REMOVED', 'id': 3, 'service_class': 'OidcRegisteredService', 'service_id': 'https://idm-test\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'profile_format': 'NESTED'}, 'juniper': {'client_secret': 'REMOVED', 'id': 7, 'service_class': 'OidcRegisteredService', 'service_id': 'https://apigw\\\\.juniper\\\\.net/css-asset/1\\\\.0', 'profile_format': 'NESTED'}, 'gitlab_oidc': {'client_secret': 'REMOVED', 'id': 5, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab\\\\.wikimedia\\\\.org(/.*)?'}, 'gitlab_replica_oidc': {'client_secret': 'REMOVED', 'id': 6, 'service_class': 'OidcRegisteredService', 'service_id': 'https://gitlab-replica(-a|-b)\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'netbox_next': {'client_secret': 'REMOVED', 'id': 4, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-next\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'netbox-readonly-access']}, 'netbox_dev': {'client_secret': 'REMOVED', 'id': 12, 'service_class': 'OidcRegisteredService', 'service_id': 'https://netbox-dev\\\\.wikimedia\\\\.org\\\\/[\\\\w\\\\/]*', 'required_groups': ['wmf', 'nda']}, 'datahub_staging': {'client_secret': 'REMOVED', 'id': 8, 'service_class': 'OidcRegisteredService', 'service_id': 'https://datahub-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'thanos_oidc': {'client_secret': 'REMOVED', 'id': 9, 'service_class': 'OidcRegisteredService', 'service_id': 'https://thanos\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'logstash_oidc': {'client_secret': 'REMOVED', 'id': 10, 'service_class': 'OidcRegisteredService', 'service_id': 'https://beta-logs(-idp)?\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'logstash-access', 'ops']}, 'prometheus_oidc': {'client_secret': 'REMOVED', 'id': 13, 'service_class': 'OidcRegisteredService', 'service_id': 'https://prometheus-(.+)\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'airflow_test_k8s': {'client_secret': 'REMOVED', 'id': 14, 'service_class': 'OidcRegisteredService', 'service_id': 'https://airflow-test-k8s\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['wmf', 'nda']}, 'alerts': {'client_secret': 'REMOVED', 'id': 15, 'service_class': 'OidcRegisteredService', 'service_id': 'https://alerts\\\\.o11y\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'phabricator_dev': {'client_secret': 'REMOVED', 'id': 16, 'service_class': 'OidcRegisteredService', 'service_id': 'https://phabricator\\\\.wmcloud\\\\.org(/.*)?', 'required_groups': []}, 'growthbook_next': {'client_secret': 'REMOVED', 'id': 17, 'service_class': 'OidcRegisteredService', 'service_id': 'https://growthbook-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['growthbook-admin', 'growthbook-customelevatedaccess', 'growthbook-readonly']}, 'test_kitchen_next': {'client_secret': 'REMOVED', 'id': 11, 'service_class': 'OidcRegisteredService', 'service_id': 'http://test-kitchen-next\\\\.wikimedia\\\\.org(/.*)?', 'required_groups': ['nda', 'wmf']}, 'turnilo_next': {'client_secret': 'REMOVED', 'id': 19, 'service_id': 'https://turnilo-next\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['nda', 'wmf']}, 'puppetboard': {'id': 1, 'service_id': 'https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?', 'member_of_exclude': '^cn=tools(beta)?.*,ou=servicegroups,.*$', 'required_groups': ['ops', 'ops-limited', 'idptest-users'], 'mfa': ['mfa-webauthn'], 'selective_mfa': True}, 'idp_cloud_dev': {'id': 2, 'service_id': 'https://idp-dev\\\\.wmcloud\\\\.org(/.*)?'}}\n"}, {"resource": "Apereo_cas::Service[gitlab_replica_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_replica_oidc].orig\n+++ Apereo_cas::Service[gitlab_replica_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "File[/etc/cas/services/puppetboard-1.json]", "content": "--- /etc/cas/services/puppetboard-1.json.orig\n+++ /etc/cas/services/puppetboard-1.json\n@@ -1 +1 @@\n-{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\",\"cn=idptest-users,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"mfa-webauthn\"]],\"bypassEnabled\":false,\"forExecution\":true}}\n+{\"@class\":\"org.apereo.cas.services.CasRegisteredService\",\"name\":\"puppetboard\",\"serviceId\":\"https://puppetboard-(idp|saml)test\\\\.wikimedia\\\\.org(/.*)?\",\"attributeReleasePolicy\":{\"@class\":\"org.apereo.cas.services.ReturnAllAttributeReleasePolicy\",\"attributeFilter\":{\"@class\":\"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter\",\"patterns\":{\"@class\":\"java.util.TreeMap\",\"memberOf\":\"^cn=tools(beta)?.*,ou=servicegroups,.*$\"},\"excludeUnmappedAttributes\":false,\"completeMatch\":false,\"caseInsensitive\":true,\"order\":0},\"allowedAttributes\":[\"java.util.HashSet\",[\"cn\",\"sn\",\"mail\",\"memberOf\",\"uid\"]]},\"id\":1,\"accessStrategy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy\",\"requiredAttributes\":{\"@class\":\"java.util.HashMap\",\"memberOf\":[\"java.util.HashSet\",[\"cn=ops,ou=groups,dc=wikimedia,dc=org\",\"cn=ops-limited,ou=groups,dc=wikimedia,dc=org\",\"cn=idptest-users,ou=groups,dc=wikimedia,dc=org\"]]}},\"multifactorPolicy\":{\"@class\":\"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy\",\"multifactorAuthenticationProviders\":[\"java.util.LinkedHashSet\",[\"mfa-webauthn\"]],\"bypassEnabled\":false,\"forExecution\":true,\"principalAttributeNameTrigger\":\"mfa-method\",\"principalAttributeValueToMatch\":\"mfa-gauth|mfa-webauthn\"}}"}, {"resource": "Apereo_cas::Service[logstash_oidc]", "parameters": "--- Apereo_cas::Service[logstash_oidc].orig\n+++ Apereo_cas::Service[logstash_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[airflow_test_k8s]", "parameters": "--- Apereo_cas::Service[airflow_test_k8s].orig\n+++ Apereo_cas::Service[airflow_test_k8s]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[phabricator_dev]", "parameters": "--- Apereo_cas::Service[phabricator_dev].orig\n+++ Apereo_cas::Service[phabricator_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[datahub_staging]", "parameters": "--- Apereo_cas::Service[datahub_staging].orig\n+++ Apereo_cas::Service[datahub_staging]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[idm_dev]", "parameters": "--- Apereo_cas::Service[idm_dev].orig\n+++ Apereo_cas::Service[idm_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[turnilo_next]", "parameters": "--- Apereo_cas::Service[turnilo_next].orig\n+++ Apereo_cas::Service[turnilo_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[netbox_dev]", "parameters": "--- Apereo_cas::Service[netbox_dev].orig\n+++ Apereo_cas::Service[netbox_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[idp_cloud_dev]", "parameters": "--- Apereo_cas::Service[idp_cloud_dev].orig\n+++ Apereo_cas::Service[idp_cloud_dev]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[netbox_next]", "parameters": "--- Apereo_cas::Service[netbox_next].orig\n+++ Apereo_cas::Service[netbox_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[juniper]", "parameters": "--- Apereo_cas::Service[juniper].orig\n+++ Apereo_cas::Service[juniper]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[prometheus_oidc]", "parameters": "--- Apereo_cas::Service[prometheus_oidc].orig\n+++ Apereo_cas::Service[prometheus_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[gitlab_oidc]", "parameters": "--- Apereo_cas::Service[gitlab_oidc].orig\n+++ Apereo_cas::Service[gitlab_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[growthbook_next]", "parameters": "--- Apereo_cas::Service[growthbook_next].orig\n+++ Apereo_cas::Service[growthbook_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[thanos_oidc]", "parameters": "--- Apereo_cas::Service[thanos_oidc].orig\n+++ Apereo_cas::Service[thanos_oidc]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[test_kitchen_next]", "parameters": "--- Apereo_cas::Service[test_kitchen_next].orig\n+++ Apereo_cas::Service[test_kitchen_next]\n\n+    selective_mfa => False\n"}, {"resource": "Apereo_cas::Service[alerts]", "parameters": "--- Apereo_cas::Service[alerts].orig\n+++ Apereo_cas::Service[alerts]\n\n+    selective_mfa => False\n"}], "perc_changed": "0.72%"}}}