root / manifests / rules / out / puppet.pp @ f9de4dee
Historique | Voir | Annoter | Télécharger (736 octets)
1 |
# @summary manage outgoing puppet |
---|---|
2 |
# @param puppetserver puppetserver hostname |
3 |
# @param puppetserver_port puppetserver port |
4 |
# |
5 |
class nftables::rules::out::puppet ( |
6 |
Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]] $puppetserver, |
7 |
Stdlib::Port $puppetserver_port = 8140, |
8 |
) { |
9 |
Array($puppetserver, true).each |$index,$ps| { |
10 |
nftables::rule { |
11 |
"default_out-puppet-${index}": |
12 |
} |
13 |
if $ps =~ Stdlib::IP::Address::V6 { |
14 |
Nftables::Rule["default_out-puppet-${index}"] { |
15 |
content => "ip6 daddr ${ps} tcp dport ${puppetserver_port} accept", |
16 |
} |
17 |
} else { |
18 |
Nftables::Rule["default_out-puppet-${index}"] { |
19 |
content => "ip daddr ${ps} tcp dport ${puppetserver_port} accept", |
20 |
} |
21 |
} |
22 |
} |
23 |
} |