root / manifests / rules / out / puppet.pp @ 09b07e56
Historique | Voir | Annoter | Télécharger (583 octets)
1 |
# manage outgoing puppet |
---|---|
2 |
class nftables::rules::out::puppet ( |
3 |
Variant[String,Array[String,1]] $puppetmaster, |
4 |
Integer $puppetserver_port = 8140, |
5 |
) { |
6 |
any2array($puppetmaster).each |$index,$pm| { |
7 |
nftables::rule { |
8 |
"default_out-puppet-${index}": |
9 |
} |
10 |
if $pm =~ /:/ { |
11 |
Nftables::Rule["default_out-puppet-${index}"] { |
12 |
content => "ip6 daddr ${pm} tcp dport ${puppetserver_port} accept", |
13 |
} |
14 |
} else { |
15 |
Nftables::Rule["default_out-puppet-${index}"] { |
16 |
content => "ip daddr ${pm} tcp dport ${puppetserver_port} accept", |
17 |
} |
18 |
} |
19 |
} |
20 |
} |