root / manifests / rules / out / puppet.pp @ ba5e15bd
Historique | Voir | Annoter | Télécharger (587 octets)
1 |
# manage outgoing puppet |
---|---|
2 |
class nftables::rules::out::puppet( |
3 |
Variant[String,Array[String,1]] |
4 |
$puppetmaster, |
5 |
Integer |
6 |
$puppetserver_port = 8140, |
7 |
) { |
8 |
any2array($puppetmaster).each |$index,$pm| { |
9 |
nftables::rule{ |
10 |
"default_out-puppet-${index}": |
11 |
} |
12 |
if $pm =~ /:/ { |
13 |
nftables::rule["default_out-puppet-${index}"]{ |
14 |
content => "ip6 daddr ${pm} tcp dport ${puppetserver_port} accept", |
15 |
} |
16 |
} else { |
17 |
nftables::rule["default_out-puppet-${index}"]{ |
18 |
content => "ip daddr ${pm} tcp dport ${puppetserver_port} accept", |
19 |
} |
20 |
} |
21 |
} |
22 |
} |