[10:27:54] FYI you might have received admin_ng diff alerts and when running helmfile on the deploy host, found out that there was no pending diff. This was caused by adding gerrit.wikimedia.org to external services, which resolves to different LB IPs via anycast DNS. So deploy1003 reporte a diff when deploy2002 didn't [10:28:10] Thank you to atsukoito for figuring out the root cause [10:28:27] I just puppet-merged the fix