Fix interface name in rules
Revert "Make sure the special characters in bridge names are properly escaped"
This reverts commit 6b7be24846144590d36f7288ba0c5397a1b7b0ac.
Make sure the special characters in bridge names are properly escaped
This solves an issue with nftables giving a syntax error when the interface name contains ':'
Fix problem with interfaces that contain :
Temporarily use /bin/ for systemctl and echo paths in Debian 10
Debian Buster has symlinks from usrmerge that resolve to /bin/X,but systems upgraded from Stretch or earlier that haven't installedusrmerge will not have anything in /usr/bin/X.
This should be removed once every installation we have has had...
Merge remote-tracking branch 'upstream/master' into stretch_support
Merge pull request #73 from Koumbit/global_chain_not_hardcoded
start declaring the 'global' chain with module resources
create tests for presence of the "global" chain
the 'global' chain is a vestigial piece of early development on thismodule, but it can be useful for creating fast short-circuits likeblocking traffic that match a certain set of IPs.
in the current state we can't inject rules inside the 'global' chain...
Bump version to 1.1.2-rc0 (#72)
Manual MR due to travis_release being broken by necessity to approve.
https://github.com/voxpupuli/puppet-nftables/issues/61
Release 1.1.1 (#71)
Merge pull request #70 from cernops/issue69
Fix IP version filter for IPv6 traffic
Add unit test
Improve nftables::rule's documentation (#68)
Merge branch 'dev-debian_support' into stretch_support
Fix nftables::rules::out::nfs3 for nftables 0.9.0
Fix nftables::rules::nfs3 syntax to work with nftables 0.9.0
[blacksmith] Bump version to 1.1.1-rc0
Release 1.1.0 (#67)
Fix rubocop style error
Move configuration_path default to module data
Fix reloads on Debian Stretch
The paths for various binaries are slightly different
Rename nftables_configuration_path to configuration_path
Remove commented code from spec_helper
It's not necessary, and will be removed the next time modulesync is run.
Change configuration path form AbsolutePath to Unixpath
Mark Debian 9 as supported
Use /usr/sbin for nft binary path in systemd service
/sbin in Debian Buster is a symbolic link to /usr/sbin; however,in Debian Stretch it's a separate folder and the nft binary isin /usr/sbin/nft. Note: this commit probably breaks support forCentOS, but I'm not planning on requesting to merge this commit...
Support old-style facts for facter in Debian Stretch
Fix Debian data defaults
The module name prefix was missing in the hieradata. I removed the modificationsto spec_helper.rb that made the tests work with the erroneous data.
Revert "Use symbols for both lookups in os_facts"
This reverts commit 0877a8fd3646130f06b29e581a1ed2f990394094.
My initial tests were too hasty. `os_facts[:os][:family]` returnsan empty string. The original formulation was correct.
Load module data during spec tests
This allows tests that depend on the module data being loaded to pass.
Use symbols for both lookups in os_facts
The access does work this way and it seems preferable to beconsistent. The access using `os_facts['os']` does not work.
Merge pull request #60 from duritong/more_mail_client_rules
add some mail related outgoing rules
Add Debian as a supported OS
Add test cases for Debian
Convert puppet_nft systemd drop-in unit file to template
WIP: Start adding support for Debian
Merge pull request #63 from traylenator/badges
Add badges to README
Merge pull request #64 from traylenator/params
Enable parameter_documentation lint
Merge pull request #62 from glpatcern/master
Added Samba in rules
The linter checks that every parameter has been documented.
While corrections have been made to great many classes some morecomplicated examples have been left for now. Should be updatedas the files get touched.
https://github.com/domcleal/puppet-lint-param-docs
Removed unneeded parentheses
Updated docs
Co-authored-by: Nacho Barrientos <nacho@criptonita.com>
Merge pull request #53 from cernops/allrules_check
Check that all the predefined rules are declared in the all rules acceptance test
Made ctdb rule parameterized
Use a separate job file
Check that all rules are declared in the all rules acceptance test
Merge pull request #59 from cernops/issue58
Align simplerule and rule rulename requirements
Pull up rule regexp to type aliases
Added to tests
[blacksmith] Bump version to 1.0.1-rc0
Release 1.0.0 (#49)
Co-authored-by: duritong <peter.meier+github@immerda.ch>
Merge pull request #56 from traylenator/ports
Use Stdlib::Port everywhere in place of Integer
Use Stdlib::Port in place of Integer for ports
Fixes #37
Merge pull request #55 from traylenator/moredocs
Docs for nftables::set
Update manifests/set.pp
Merge pull request #42 from duritong/terminology
switch not the server naming
switch naming to puppetserver
Merge pull request #47 from cernops/issue45
Prefix custom tables with custom- so they're loaded
Merge pull request #48 from cernops/config_template
Several fixes for nftables::config
Merge pull request #50 from traylenator/moretests
Correct nfs3 invalid udp /tcp matching rule and more tests
Correct NFS udp and tcp port matching
There was a missing `th` from rule which from the examples in the manpage is meant to be there.
Cannot find the docs for what `th` does.
test that all classes can be included
test that bad configuration leaves service running
Merge pull request #52 from cernops/simplerule_reference
Remove a blank separating the doc string and the code
Otherwise the generator of the docs does not do the job :/
Merge pull request #51 from bastelfreak/puppet7
Enable Puppet 7 support
Merge pull request #33 from cernops/simplerule
Add nftables::simplerule
Validate table spec
Fix context name (removes dup)
Implement intended failure
Auto fill simple table configuration
Refresh REFERENCE
Relax type validation in template
It comes already validated from the calling class.
Align template parameters
Encapsulate addr-related exprs in Nftables::Addr
Encapsulate port-related exprs in Nftables::Port
Sort template parameters alphabetically
Implement nftables::simplerule::saddr
Mention nftables::simplerule in the README
Allow some other types of verdicts
Document nftables::simplerule's parameters
Recommend using nftables::rule
Implement nftables::simplerule::sport
Remove double spacing
Handle dport internally always as an array
Lint fixes
Remove optional modifier on $table
It does not really make sense to pass undef to nftables::rule
Correct error message
Re-document and add example
Implement nftables:;simplerule::counter
