puppet nftables

class nftables::services::dhcpv6_client inherits nftables {

  if $nftables::out_all {

    fail('All outgoing traffic is allowed, you might want to use only nftables::rules::dhcpv6_client')

  }

  include nftables::rules::dhcpv6_client

  include nftables::rules::out::dhcpv6_client

}

require 'spec_helper'

describe 'nftables::services::dhcpv6_client' do

  on_supported_os.each do |os, os_facts|

    context "on #{os}" do

      let(:facts) { os_facts }

      context 'normal behaviour' do

        it { is_expected.to compile }

        it { is_expected.to contain_class('nftables::rules::dhcpv6_client') }

        it { is_expected.to contain_class('nftables::rules::out::dhcpv6_client') }

      end

      context 'out_all enabled' do

        let(:pre_condition) { 'class{\'nftables\': out_all => true}' }

        it { is_expected.not_to compile }

      end

    end

  end

end