puppet nftables

Merge pull request #152 from bastelfreak/ubuntu

Add Ubuntu support

Merge pull request #151 from voxpupuli/modulesync

modulesync 5.3.0

Merge pull request #148 from duritong/split-conntrack-mgmt

split conntrack management into dedicated classes

Merge pull request #147 from traylenator/file

New nftables::file type to include raw file

[blacksmith] Bump version to 2.5.1-rc0

Release 2.5.0

Merge pull request #142 from luisfdez/feat/noflush-bridge

Add all nftables families as a valid noflush pattern

remove duplicate expect

this is handled by the next - more specific - expect anyways

[blacksmith] Bump version to 2.4.1-rc0

Release 2.4.0

chrony: Allow filtering for outgoing NTP servers

Add rule to allow outgoing whois queries

Update manifests/rules/pxp_agent.pp

Co-authored-by: Steve Traylen <steve.traylen@cern.ch>

Add class for pxp-agent firewalling

Merge pull request #137 from bastelfreak/rel230

Release 2.3.0

Merge pull request #134 from bastelfreak/dev-debian_support

Add Debian support

Merge pull request #136 from bastelfreak/debian2

systemctl: Use relative path

Merge pull request #133 from bastelfreak/echo

make path to echo configureable

Merge pull request #132 from bastelfreak/binary

make path to `nft` binary configureable

Merge pull request #131 from nbarrientos/next_rc

Prepare next release candidate

Merge pull request #130 from nbarrientos/release_221

Prepare release 2.2.1

Merge pull request #128 from traylenator/systemd

rspec mock systemd process on docker

rspec mock systemd process on docker

On docker rspec the service provider is autodetected as redhat
rather than systemd.

https://tickets.puppetlabs.com/browse/PUP-11167

That causes

```
error during compilation: Parameter enable failed on Service[firewalld]: Provider redhat must have features 'maskable' to set 'enable' to 'mask' (file: /builds/ai/it-puppet-module-nftables/code/spec/fixtures/modules/nftables/manifests/init.pp, line: 186)...

modulesync 5.2.0

Merge pull request #127 from nbarrientos/ibarrien_tw

[blacksmith] Bump version to 2.2.1-rc0

Prepare release 2.2.0

Add support for Arch Linux

Arch Linux stores the configuration in a different path and does not
provide firewalld without explicit installation.

This basically the same as #66 – I've reused their code since it hasn't
been merged in a while.

Ensure that nftables.service remains active after it exits

Some system-packages don't include it in the service-file and we expect
it. See #124.

Merge pull request #122 from hashworks/fix/referenceInitialExamples

Fix typos in initial reference examples

Merge pull request #121 from traylenator/paramdocs

vp-puppet-lint-plugin enables param-docs already

Make sure that the list of interfaces is mocked

If 'networking' is not removed from the facts, the values declared in
`default_module_facts.yml` win (the fact set contains two keys:
`:networking` and `'networking'`)

This test has always been wrong as the interfaces were never been...

Declare support for RHEL9, CentOS9 and OL9

rubocop - RSpec/RepeatedExampleGroupBody

rubocop:auto_correct results

Use protocol number instead of label

The label was `ospf` and will be `ospfigp` in the future. Instead of
creating a map use the protocol number to be compatible with newer
versions.

Pet rubocop

Fix .sync.yml

Typo introduced in 09cba1822af345c6fe7d4db1a49921f12a53cb31

Release 2.1.1-rc0

Prepare release 2.1.0

support a different table name for 'nat'
- Some applications (such as libvirt) still use iptables to inject firewall
rules
- iptables will refuse to update tables that were initially created with nft
- This commit allows defining the name of the 'nat' table in order to avoid...

Allow stdlib 8.0.0

switch from camptocamp/systemd to voxpupuli/systemd

fix datatype for $dport

Merge pull request #102 from cernops/issue100

Allow declaring the same set in several tables

Merge pull request #99 from bastelfreak/fixtures

pull fixtures from git and not forge

Merge pull request #98 from traylenator/rc

Release 2.0.1-rc0

Merge pull request #97 from cernops/release_140

Prepare release 2.0.0

Merge pull request #96 from cernops/issue95

Allow creating a totally empty firewall

Merge pull request #93 from cernops/ibarrien_saddr

Fix IPv4 source address type detection