puppet nftables

Release 2.4.0

chrony: Allow filtering for outgoing NTP servers

Add rule to allow outgoing whois queries

Update manifests/rules/pxp_agent.pp

Co-authored-by: Steve Traylen <steve.traylen@cern.ch>

Add class for pxp-agent firewalling

Merge pull request #137 from bastelfreak/rel230

Release 2.3.0

Merge pull request #134 from bastelfreak/dev-debian_support

Add Debian support

Merge pull request #136 from bastelfreak/debian2

systemctl: Use relative path

Merge pull request #133 from bastelfreak/echo

make path to echo configureable

Merge pull request #132 from bastelfreak/binary

make path to `nft` binary configureable

Merge pull request #131 from nbarrientos/next_rc

Prepare next release candidate

Merge pull request #130 from nbarrientos/release_221

Prepare release 2.2.1

Merge pull request #128 from traylenator/systemd

rspec mock systemd process on docker

rspec mock systemd process on docker

On docker rspec the service provider is autodetected as redhat
rather than systemd.

https://tickets.puppetlabs.com/browse/PUP-11167

That causes

```
error during compilation: Parameter enable failed on Service[firewalld]: Provider redhat must have features 'maskable' to set 'enable' to 'mask' (file: /builds/ai/it-puppet-module-nftables/code/spec/fixtures/modules/nftables/manifests/init.pp, line: 186)...

modulesync 5.2.0

Merge pull request #127 from nbarrientos/ibarrien_tw

[blacksmith] Bump version to 2.2.1-rc0

Prepare release 2.2.0

Add support for Arch Linux

Arch Linux stores the configuration in a different path and does not
provide firewalld without explicit installation.

This basically the same as #66 – I've reused their code since it hasn't
been merged in a while.

Ensure that nftables.service remains active after it exits

Some system-packages don't include it in the service-file and we expect
it. See #124.

Merge pull request #122 from hashworks/fix/referenceInitialExamples

Fix typos in initial reference examples

Merge pull request #121 from traylenator/paramdocs

vp-puppet-lint-plugin enables param-docs already

Make sure that the list of interfaces is mocked

If 'networking' is not removed from the facts, the values declared in
`default_module_facts.yml` win (the fact set contains two keys:
`:networking` and `'networking'`)

This test has always been wrong as the interfaces were never been...

Declare support for RHEL9, CentOS9 and OL9

rubocop - RSpec/RepeatedExampleGroupBody

rubocop:auto_correct results

Use protocol number instead of label

The label was `ospf` and will be `ospfigp` in the future. Instead of
creating a map use the protocol number to be compatible with newer
versions.

Pet rubocop

Fix .sync.yml

Typo introduced in 09cba1822af345c6fe7d4db1a49921f12a53cb31

Release 2.1.1-rc0

Prepare release 2.1.0

support a different table name for 'nat'
- Some applications (such as libvirt) still use iptables to inject firewall
rules
- iptables will refuse to update tables that were initially created with nft
- This commit allows defining the name of the 'nat' table in order to avoid...

Allow stdlib 8.0.0

switch from camptocamp/systemd to voxpupuli/systemd

fix datatype for $dport

Merge pull request #102 from cernops/issue100

Allow declaring the same set in several tables

Merge pull request #99 from bastelfreak/fixtures

pull fixtures from git and not forge

Merge pull request #98 from traylenator/rc

Release 2.0.1-rc0

Merge pull request #97 from cernops/release_140

Prepare release 2.0.0

Merge pull request #96 from cernops/issue95

Allow creating a totally empty firewall

Merge pull request #93 from cernops/ibarrien_saddr

Fix IPv4 source address type detection

Merge pull request #92 from traylenator/everything

Drop Puppet 5, puppetlabs/concat 7.x, puppetlabs/stdlib 7.x, camptocamp/systemd: 3.x

Merge remote-tracking branch 'kenyon/bump-concat' into everything

puppetlabs/stdlib: Allow 7.x

Merge pull request #88 from cernops/dotfiles_yas_link

Amend link to Yasnippets

Merge pull request #87 from cernops/bump_rc

Release 1.3.1-rc0

Merge pull request #86 from cernops/release_1_3_0

Prepare release 1.3.0

Merge pull request #85 from cernops/qemu

Add rules for QEMU/libvirt guests (bridged virtual networking)

Merge pull request #80 from luisfdez/dockerce

Add Docker-CE default rules

Merge pull request #84 from traylenator/version

Add nftables.version to structured fact.