/ - Diff - puppet nftables - Koumbit's Redmine

Révision 13f4e4c6

ID	13f4e4c6c32f04ede16f32c4f28e0801fe32df06
Parent	b3040dd8
Enfant	c868cae3

Ajouté par Steve Traylen il y a plus de 4 ans

Docs for nftables::set

     The following parameters are available in the `nftables::rules::out::puppet` class.
     ##### `puppetmaster`
     ##### `puppetserver`
     Data type: `Variant[String,Array[String,1]]`
     Data type: `Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]]`
-...
     The following parameters are available in the `nftables::config` defined type.
     ##### `tablespec`
     Data type: `Pattern[/^\w+-\w+$/]`
     Default value: `$title`
     ##### `content`
     Data type: `Optional[String]`
-...
     Default value: ``undef``
     ##### `prefix`
     Data type: `String`
     Default value: `'custom-'`
     ### `nftables::rule`
     manage a chain rule
-...
     manage a named set
     #### Examples
     ##### simple set
     ```puppet
     nftables::set{'my_set':
       type       => 'ipv4_addr',
       flags      => ['interval'],
       elements   => ['192.168.0.1/24', '10.0.0.2'],
       auto_merge => true,
+    }
     ```
     #### Parameters
     The following parameters are available in the `nftables::set` defined type.
-...
     Data type: `Enum['present','absent']`
     should the set be created.
     Default value: `'present'`
-...
     Data type: `Pattern[/^[-a-zA-Z0-9_]+$/]`
     name of set, equal to to title.
     Default value: `$title`
-...
     Data type: `Pattern[/^\d\d$/]`
     concat ordering.
     Default value: `'10'`
-...
     Data type: `Optional[Enum['ipv4_addr', 'ipv6_addr', 'ether_addr', 'inet_proto', 'inet_service', 'mark']]`
     type of set.
     Default value: ``undef``
-...
     Data type: `String`
     table to add set to.
     Default value: `'inet-filter'`
-...
     Data type: `Array[Enum['constant', 'dynamic', 'interval', 'timeout'], 0, 4]`
     specify flags for set
     Default value: `[]`
-...
     Data type: `Optional[Integer]`
     timeout in seconds
     Default value: ``undef``
-...
     Data type: `Optional[Integer]`
     garbage collection interval.
     Default value: ``undef``
-...
     Data type: `Optional[Array[String]]`
     initialize the set with some elements in it.
     Default value: ``undef``
-...
     Data type: `Optional[Integer]`
     limits the maximum number of elements of the set.
     Default value: ``undef``
-...
     Data type: `Optional[Enum['performance', 'memory']]`
     determines set selection policy.
     Default value: ``undef``
-...
     Data type: `Boolean`
+    ?
     Default value: ``false``
-...
     Data type: `Optional[String]`
     specify content of set.
     Default value: ``undef``
-...
     Data type: `Optional[Variant[String,Array[String,1]]]`
     specify source of set.
     Default value: ``undef``
-...
     The following parameters are available in the `nftables::simplerule` defined type.
     ##### `ensure`
     Data type: `Enum['present','absent']`
     Should the rule be created.
     Default value: `'present'`
     ##### `rulename`
     Data type: `Pattern[/^[-a-zA-Z0-9_]+$/]`
-...
     Default value: ``false``
     ##### `ensure`
     Data type: `Enum['present','absent']`
     Default value: `'present'`
     ## Data types
     ### `Nftables::Addr`

     # manage a named set
     # @summary  manage a named set
+    #
     # @example simple set
     #  nftables::set{'my_set':
     #    type       => 'ipv4_addr',
     #    flags      => ['interval'],
     #    elements   => ['192.168.0.1/24', '10.0.0.2'],
     #    auto_merge => true,
     #  }
+    #
     # @param ensure should the set be created.
     # @param setname name of set, equal to to title.
     # @param order concat ordering.
     # @param type type of set.
     # @param table table to add set to.
     # @param flags specify flags for set
     # @param timeout timeout in seconds
     # @param gc_interval garbage collection interval.
     # @param elements initialize the set with some elements in it.
     # @param size  limits the maximum number of elements of the set.
     # @param policy determines set selection policy.
     # @param auto_merge ?
     # @param content specify content of set.
     # @param source specify source of set.
     define nftables::set (
       Enum['present','absent'] $ensure = 'present',
       Pattern[/^[-a-zA-Z0-9_]+$/] $setname = $title,

     #     daddr   => '2001:1458::/32',
     #     sport   => 541,
     #   }
     # @param ensure
     #   Should the rule be created.
+    #
     # @param rulename
     #   The symbolic name for the rule to add. Defaults to the resource's title.

Formats disponibles : Unified diff

Projet

Général

Profil

puppet nftables

Révision 13f4e4c6