puppet nftables

# @summary Open call back port for AFS clients

# @param saddr list of source network ranges to a

# @example

# class{'nftables::rules::afs3_callback':

#   saddr => ['192.168.0.0/16', '10.0.0.222']

# }

#

class nftables::rules::afs3_callback (

  Array[Stdlib::IP::Address::V4,1] $saddr = ['0.0.0.0/0'],

) {

  nftables::rule{'default_in-afs3_callback':

    content =>  "ip saddr { ${saddr.join(', ')} } udp dport 7001 accept";

  }

}

require 'spec_helper'

describe 'nftables::rules::afs3_callback' do

  on_supported_os.each do |os, os_facts|

    context "on #{os}" do

      let(:facts) { os_facts }

      context 'default options' do

        it { is_expected.to compile }

        it { is_expected.to contain_nftables__rule('default_in-afs3_callback') }

        it { is_expected.to contain_nftables__rule('default_in-afs3_callback').with_content('ip saddr { 0.0.0.0/0 } udp dport 7001 accept') }

      end

      context 'with saddr set' do

        let(:params) do

          {

            saddr: ['192.168.0.0/16', '1.2.3.4'],

          }

        end

        it { is_expected.to compile }

        it { is_expected.to contain_nftables__rule('default_in-afs3_callback') }

        it { is_expected.to contain_nftables__rule('default_in-afs3_callback').with_content('ip saddr { 192.168.0.0/16, 1.2.3.4 } udp dport 7001 accept') }

      end

    end

  end

end