add basic usage instructions right at the top
I couldn't figure out how to use this module when I looked at theREADME. It was quickly going into pretty arcane stuff like "inetfilter" and "ip nat table" which might make sense for the moduleauthors or people used to nftables/iptables, but are pretty...
Merge pull request #161 from bastelfreak/rocky
Add Rocky 8 and 9 support
Merge pull request #160 from nbarrientos/alma
Declare AlmaLinux8 and AlmaLinux9 support
Merge pull request #149 from hugendudel/netdev_support
Allow netdev as table family in defined type nftables::chain
Add acceptance test covering tables of type netdev
Merge pull request #159 from voxpupuli/maint/systemd-4.0.0
bump puppet/systemd to < 5.0.0
Merge pull request #157 from duritong/set-file-dir-mode-to-what-rpm-has
Align filemode on RedHat to distro default
The RPM acutally ships the configuration and directory with0600/0700 while this module sets the mode to 0640/0750.
However, this has the drawback that on new nftables RPM versions,we are setting it back to the modules mode and triggering an nft...
Merge pull request #156 from voxpupuli/modulesync
modulesync 5.4.0
[blacksmith] Bump version to 2.6.1-rc0
Merge pull request #154 from bastelfreak/rel260
Release 2.6.0
Merge pull request #153 from bastelfreak/hkp
Add class for outgoing HKP firewalling
Merge pull request #152 from bastelfreak/ubuntu
Add Ubuntu support
Merge pull request #151 from voxpupuli/modulesync
modulesync 5.3.0
Merge pull request #148 from duritong/split-conntrack-mgmt
split conntrack management into dedicated classes
split conntrack management into dedicated classes so they get consumeable
Merge pull request #147 from traylenator/file
New nftables::file type to include raw file
For example:
```puppetnftables::file{'geoip': content => "include \"/files/geoipsets/dbip/*.ipv4\"\n",}```
will right a file or content into the nftables configuration.
The file written will be included in configuration....
[blacksmith] Bump version to 2.5.1-rc0
Merge pull request #145 from voxpupuli/rel250
Release 2.5.0
Merge pull request #144 from duritong/fix-143-properly-escape-rulename
Properly escape bridge in rulename
Merge pull request #142 from luisfdez/feat/noflush-bridge
Add all nftables families as a valid noflush pattern
fix #143 - properly escape rulename for interfaces
remove duplicate expect
this is handled by the next - more specific - expect anyways
Add all families as a valid noflush pattern
nftables has more valid families than the ones currently accepted by themodule.
This patch adds support for all the families currently supported as perthe documentation at:https://wiki.nftables.org/wiki-nftables/index.php/Nftables_families
[blacksmith] Bump version to 2.4.1-rc0
Merge pull request #141 from bastelfreak/rel240
Release 2.4.0
Merge pull request #139 from bastelfreak/ntp
chrony: Allow filtering for outgoing NTP servers
Merge pull request #140 from bastelfreak/whois
Add rule to allow outgoing whois queries
Merge pull request #138 from bastelfreak/pxp
Add class for pxp-agent firewalling
Update manifests/rules/pxp_agent.pp
Co-authored-by: Steve Traylen <steve.traylen@cern.ch>
Add class for outgoing PXP connections
[blacksmith] Bump version to 2.3.1-rc0
Merge pull request #137 from bastelfreak/rel230
Release 2.3.0
Merge pull request #134 from bastelfreak/dev-debian_support
Add Debian support
Merge pull request #136 from bastelfreak/debian2
systemctl: Use relative path
Merge pull request #133 from bastelfreak/echo
make path to echo configureable
Merge pull request #132 from bastelfreak/binary
make path to `nft` binary configureable
Merge pull request #131 from nbarrientos/next_rc
Prepare next release candidate
Merge pull request #130 from nbarrientos/release_221
Prepare release 2.2.1
Merge pull request #128 from traylenator/systemd
rspec mock systemd process on docker
Merge pull request #129 from voxpupuli/modulesync
modulesync 5.2.0
On docker rspec the service provider is autodetected as redhatrather than systemd.
https://tickets.puppetlabs.com/browse/PUP-11167
That causes
```error during compilation: Parameter enable failed on Service[firewalld]: Provider redhat must have features 'maskable' to set 'enable' to 'mask' (file: /builds/ai/it-puppet-module-nftables/code/spec/fixtures/modules/nftables/manifests/init.pp, line: 186)...
Enable parameter_documentation/parameter_types checks
Migrate from deprecated mocha
Merge pull request #127 from nbarrientos/ibarrien_tw
Remove trailing whitespace
[blacksmith] Bump version to 2.2.1-rc0
Merge pull request #126 from voxpupuli/release/2_2_0
Prepare release 2.2.0
Merge pull request #124 from hashworks/feature/ArchLinuxSupport
Add support for Arch Linux
Arch Linux stores the configuration in a different path and does notprovide firewalld without explicit installation.
This basically the same as #66 – I've reused their code since it hasn'tbeen merged in a while.
Merge pull request #125 from hashworks/fix/serviceRemainAfterExit
Ensure that nftables.service remains active after it exits
Some system-packages don't include it in the service-file and we expectit. See #124.
Merge pull request #112 from keachi/ospf_protocol
Use protocol number instead of label
Merge pull request #122 from hashworks/fix/referenceInitialExamples
Fix typos in initial reference examples
Merge pull request #121 from traylenator/paramdocs
vp-puppet-lint-plugin enables param-docs already
Merge pull request #120 from nbarrientos/rhel9
Declare support for RHEL9, CentOS9 and OL9
Make sure that the list of interfaces is mocked
If 'networking' is not removed from the facts, the values declared in`default_module_facts.yml` win (the fact set contains two keys:`:networking` and `'networking'`)
This test has always been wrong as the interfaces were never been...
No need to enable puppet-lint-param-docs locally since version 3.0.0of voxpupuli-puppet-lint-plugins enables param-docs anyway.
https://github.com/voxpupuli/voxpupuli-puppet-lint-plugins/commit/5c207d586878162218e45ce50bcfd927588796c9
Merge pull request #118 from traylenator/rubocop
Rubocop corrections for rubocop 1.22.3
rubocop - RSpec/RepeatedExampleGroupBody
rubocop -f RSpec/RepeatedExampleGroupDescription
rubocop:auto_correct results
modulesync 5.1.0
The label was `ospf` and will be `ospfigp` in the future. Instead ofcreating a map use the protocol number to be compatible with newerversions.
Merge pull request #110 from voxpupuli/modulesync
modulesync 4.2.0
Pet rubocop
Fix .sync.yml
Typo introduced in 09cba1822af345c6fe7d4db1a49921f12a53cb31
Merge pull request #109 from cernops/ibarrien_rc
Release 2.1.1-rc0
Merge pull request #108 from cernops/release_210
Prepare release 2.1.0
Merge pull request #107 from figless/nat_table_name
support a different table name for 'nat'
support a different table name for 'nat'- Some applications (such as libvirt) still use iptables to inject firewall rules- iptables will refuse to update tables that were initially created with nft- This commit allows defining the name of the 'nat' table in order to avoid...
