Projet

Général

Profil

Révision 804b96e4

ID804b96e49d302a77515571e47c5854e800168536
Parent 3f2f50c9
Enfant cae79123

Ajouté par Nacho Barrientos il y a environ 4 ans

Prepare release 1.3.0

Voir les différences:

CHANGELOG.md
4 4
Each new release typically also includes the latest modulesync defaults.
5 5
These should not affect the functionality of the module.
6 6

  
7
## [v1.2.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.2.0) (2021-03-02)
7
## [v1.3.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.3.0) (2021-03-25)
8

  
9
[Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.2.0...v1.3.0)
10

  
11
**Implemented enhancements:**
12

  
13
- Add rules for QEMU/libvirt guests \(bridged virtual networking\) [\#85](https://github.com/voxpupuli/puppet-nftables/pull/85) ([nbarrientos](https://github.com/nbarrientos))
14
- Add nftables.version to structured fact. [\#84](https://github.com/voxpupuli/puppet-nftables/pull/84) ([traylenator](https://github.com/traylenator))
15
- Add rules for Apache ActiveMQ [\#82](https://github.com/voxpupuli/puppet-nftables/pull/82) ([nbarrientos](https://github.com/nbarrientos))
16
- Add Docker-CE default rules [\#80](https://github.com/voxpupuli/puppet-nftables/pull/80) ([luisfdez](https://github.com/luisfdez))
17

  
18
**Merged pull requests:**
19

  
20
- Fix sections and add a pointer to code snippets for Emacs [\#81](https://github.com/voxpupuli/puppet-nftables/pull/81) ([nbarrientos](https://github.com/nbarrientos))
21

  
22
## [v1.2.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.2.0) (2021-03-03)
8 23

  
9 24
[Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.1.1...v1.2.0)
10 25

  
REFERENCE.md
17 17
Enable this option to support Ceph's Monitor Daemon.
18 18
* [`nftables::rules::dhcpv6_client`](#nftablesrulesdhcpv6_client): allow DHCPv6 requests in to a host
19 19
* [`nftables::rules::dns`](#nftablesrulesdns): manage in dns
20
* [`nftables::rules::docker_ce`](#nftablesrulesdocker_ce): Default firewall configuration for Docker-CE
20 21
* [`nftables::rules::http`](#nftablesruleshttp): manage in http
21 22
* [`nftables::rules::https`](#nftablesruleshttps): manage in https
22 23
* [`nftables::rules::icinga2`](#nftablesrulesicinga2): manage in icinga2
......
446 447

  
447 448
Default value: `[53]`
448 449

  
450
### <a name="nftablesrulesdocker_ce"></a>`nftables::rules::docker_ce`
451

  
452
The configuration distributed in this class represents the default firewall
453
configuration done by docker-ce when the iptables integration is enabled.
454

  
455
This class is needed as the default docker-ce rules added to ip-filter conflict
456
with the inet-filter forward rules set by default in this module.
457

  
458
When using this class 'docker::iptables: false' should be set.
459

  
460
#### Parameters
461

  
462
The following parameters are available in the `nftables::rules::docker_ce` class:
463

  
464
* [`docker_interface`](#docker_interface)
465
* [`docker_prefix`](#docker_prefix)
466
* [`manage_docker_chains`](#manage_docker_chains)
467
* [`manage_base_chains`](#manage_base_chains)
468

  
469
##### <a name="docker_interface"></a>`docker_interface`
470

  
471
Data type: `String[1]`
472

  
473
Interface name used by docker.
474

  
475
Default value: `'docker0'`
476

  
477
##### <a name="docker_prefix"></a>`docker_prefix`
478

  
479
Data type: `Stdlib::IP::Address::V4::CIDR`
480

  
481
The address space used by docker.
482

  
483
Default value: `'172.17.0.0/16'`
484

  
485
##### <a name="manage_docker_chains"></a>`manage_docker_chains`
486

  
487
Data type: `Boolean`
488

  
489
Flag to control whether the class should create the docker related chains.
490

  
491
Default value: ``true``
492

  
493
##### <a name="manage_base_chains"></a>`manage_base_chains`
494

  
495
Data type: `Boolean`
496

  
497
Flag to control whether the class should create the base common chains.
498

  
499
Default value: ``true``
500

  
449 501
### <a name="nftablesruleshttp"></a>`nftables::rules::http`
450 502

  
451 503
manage in http
metadata.json
1 1
{
2 2
  "name": "puppet-nftables",
3
  "version": "1.2.1-rc0",
3
  "version": "1.3.0",
4 4
  "author": "Vox Pupuli",
5 5
  "summary": "Puppet nftables module",
6 6
  "license": "Apache-2.0",

Formats disponibles : Unified diff