Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / manifests / rules / out / puppet.pp @ 64404839

Historique | Voir | Annoter | Télécharger (736 octets)

1
# @summary manage outgoing puppet
2
# @param puppetserver puppetserver hostname
3
# @param puppetserver_port puppetserver port
4
#
5
class nftables::rules::out::puppet (
6
  Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]] $puppetserver,
7
  Stdlib::Port $puppetserver_port = 8140,
8
) {
9
  Array($puppetserver, true).each |$index,$ps| {
10
    nftables::rule {
11
      "default_out-puppet-${index}":
12
    }
13
    if $ps =~ Stdlib::IP::Address::V6 {
14
      Nftables::Rule["default_out-puppet-${index}"] {
15
        content => "ip6 daddr ${ps} tcp dport ${puppetserver_port} accept",
16
      }
17
    } else {
18
      Nftables::Rule["default_out-puppet-${index}"] {
19
        content => "ip daddr ${ps} tcp dport ${puppetserver_port} accept",
20
      }
21
    }
22
  }
23
}