openstack
/
puppet-tripleo
Code Issues Proposed changes
RETIRED, Lightweight composition layer for Puppet TripleO
817 Commits 3 Branches 39 Tags 63 MiB
Go to file
Emilien Macchi 8c99073890 firewall: add IPv6 support 
This patch adds support for ip6tables rules in TripleO, in a intuitive
and flexible fashion.

1) Default firewal rules 'source' parameter to undef.
   It was 0.0.0.0/0 before but now undef, so we don't need complex logic to
   support ipv6 rules. undef will create empty source, which is the same as
   0.0.0.0/0 or ::/0.

2) Automatically convert icmp rules to ipv6-icmp for ipv6 rules.

3) Automatically create IPv6 rules like it's for IPv4.

4) Only create rules that can be created, depending on
   source/destination ip version.

This patch should be backward compatible and adds a layer of security
for IPv6 deployments. If previous deployments were manually creating
Ipv6 rules, it's possible that this patch will override them. Our
framework is able to configure any rule, so it shouldn't be a problem
for upgrades.

Co-Authored-By: Ben Nemec <bnemec@redhat.com>
Closes-Bug: #1654050
Change-Id: I98a00a9ae265d3e5854632e749cc8c3a1647298c
 		2017-01-05 16:09:43 -05:00
lib Avoid Yum/RPM prefetch in norpm provider 2017-01-02 16:46:48 -05:00
manifests firewall: add IPv6 support 2017-01-05 16:09:43 -05:00
releasenotes Merge "Adds ability to populate SSH Banner text" 2017-01-04 02:37:57 +00:00
spec firewall: add IPv6 support 2017-01-05 16:09:43 -05:00
templates Update websocket service name in config template 2016-10-06 12:44:48 +01:00
.gitignore Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
.gitreview Update .gitreview file for project rename 2015-06-12 23:12:30 +00:00
.sync.yml Initial msync run for all Puppet OpenStack modules 2015-08-18 14:30:54 +02:00
Gemfile Switch puppet-tripleo to use puppet-openstack_spec_helper 2016-09-22 21:26:23 -04:00
LICENSE Add basic structure for a Puppet module 2015-02-02 11:39:21 -05:00
Puppetfile_extras Switch puppet-tripleo to use puppet-openstack_spec_helper 2016-09-22 21:26:23 -04:00
README.md Show team and repo badges on README 2016-11-25 17:16:13 +01:00
Rakefile Switch puppet-tripleo to use puppet-openstack_spec_helper 2016-09-22 21:26:23 -04:00
metadata.json Merge "Fix puppet version for requirements in metadata" 2016-12-23 19:43:06 +00:00
setup.cfg Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
setup.py Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
test-requirements.txt Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
tox.ini Add basic structure for ReNo 2016-12-03 13:16:33 +00:00

README.md

Team and repository tags

Team and repository tags

puppet-tripleo

Lightweight composition layer for Puppet TripleO.