Ben Vincent
b9465cd78b
- create classes for each class of in/out traffic - use hier_include to add firewall rules to each role
9 lines
222 B
Puppet
9 lines
222 B
Puppet
class firewall::rules::out::ceph_client (
|
|
Array[Stdlib::Port,1] $ports = [3300, 6789],
|
|
) {
|
|
nftables::rule {
|
|
'default_out-ceph_client':
|
|
content => "tcp dport { ${$ports.join(', ')}, 6800-7300 } accept",
|
|
}
|
|
}
|