Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / spec @ d0c972c3

Nom Taille Révision Âge Auteur Commentaire
  classes d0c972c3 plus de 4 ans Dan van der Ster Test NFS rules Signed-off-by: Dan van der Ster...
  defines 30462da1 plus de 4 ans Steve Traylen Reload rules atomically Background: The unit f...
default_facts.yml 266 octets ece9be27 plus de 4 ans tr Do PDK convert
default_module_facts.yml 2,18 ko fd0eaeca plus de 4 ans tr Add class bridges Allow traffic from any bridg...
spec_helper.rb 1,65 ko ece9be27 plus de 4 ans tr Do PDK convert

Dernières révisions

# Date Auteur Commentaire
d0c972c3 2020-12-02 05:37 Dan van der Ster

Test NFS rules

Signed-off-by: Dan van der Ster <>
f4e9e995 2020-12-02 05:37 Dan van der Ster

Test ceph rules

Signed-off-by: Dan van der Ster <>
72aad4a2 2020-11-29 13:22 keachi

Merge pull request #28 from traylenator/simplify

Do not test nftables::rules repeatadly
902ceaac 2020-11-29 13:18 keachi

Merge pull request #22 from cernops/log_limit

Set a customisable rate limit to the logging rules
300b7382 2020-11-27 05:21 Steve Traylen

Do not test nftables::rules repeatadly

Rather than testing the contents of nftable::rules just test
that nftables::rules instance is correct.

The existing test for the define nftables::rules is enough.

Motivation here is to make changes to nftables::rules easier to handle...
802d80d1 2020-11-27 03:35 Nacho Barrientos

Allow sourcing sets from Hiera
82d10659 2020-11-26 15:39 Nacho Barrientos

Allow disabling default NAT tables and chains
30462da1 2020-11-26 05:19 Steve Traylen

Reload rules atomically

Background: The unit file for nftables on CentOS 8 contains:

```
ExecStart=/sbin/nft -f /etc/sysconfig/nftables.conf
ExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'
ExecStop=/sbin/nft flush ruleset
```...
b10c6216 2020-11-24 10:37 Nacho Barrientos

Set a customisable rate limit to the logging rules
92461926 2020-11-24 07:53 duritong

Merge pull request #16 from cernops/icmp

Move ICMP stuff to separate classes allowing better customisation

Voir les révisions

Formats disponibles : Atom