root / manifests / rules / out / puppet.pp @ 04176b0e
Historique | Voir | Annoter | Télécharger (631 octets)
1 |
# manage outgoing puppet |
---|---|
2 |
class nftables::rules::out::puppet ( |
3 |
Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]] $puppetserver, |
4 |
Integer $puppetserver_port = 8140, |
5 |
) { |
6 |
Array($puppetserver, true).each |$index,$ps| { |
7 |
nftables::rule { |
8 |
"default_out-puppet-${index}": |
9 |
} |
10 |
if $ps =~ Stdlib::IP::Address::V6 { |
11 |
Nftables::Rule["default_out-puppet-${index}"] { |
12 |
content => "ip6 daddr ${ps} tcp dport ${puppetserver_port} accept", |
13 |
} |
14 |
} else { |
15 |
Nftables::Rule["default_out-puppet-${index}"] { |
16 |
content => "ip daddr ${ps} tcp dport ${puppetserver_port} accept", |
17 |
} |
18 |
} |
19 |
} |
20 |
} |