Imran Iqbal
6ebfc6f20c
test(zones_spec): check content of rendered zone files
4 vuotta sitten
Steven Daniele
cd4cec0089
feat: allow rich_rules to be specified as a dict
When specifying rich rules as a dictionary ipsets and services can be
specified as lists. They will be expanded out by the jinja template into
individual rich rules for the parent zone.
4 vuotta sitten
Imran Iqbal
cf21ccab97
chore(gitignore): update from the `template-formula` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/132
4 vuotta sitten
Imran Iqbal
d02f890fb4
chore(rubocop): move `LineLength` cop from `Metrics` to `Layout` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/129
4 vuotta sitten
semantic-release-bot
91362086a8
chore(release): 0.9.0 [skip ci]
# [0.9.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.8.0...v0.9.0 ) (2020-02-12)
### Features
* **zone.xml:** allow more services definition inside zone ([8d0172f
](8d0172f5c7
))
4 vuotta sitten
Imran Iqbal
0d0f191449
Merge pull request #36 from miska/master
Allow more services definition inside zone
4 vuotta sitten
semantic-release-bot
7ff891796a
chore(release): 0.8.0 [skip ci]
# [0.8.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.7.0...v0.8.0 ) (2020-02-12)
### Continuous Integration
* workaround issues with newly introduced `amazonlinux-1` [skip ci] ([ace3433
](ace343353d
))
* workaround issues with newly introduced `amazonlinux-1` [skip ci] ([b5a95f3
](b5a95f35ab
))
* **gemfile:** restrict `train` gem version until upstream fix [skip ci] ([908f5df
](908f5df86c
))
* **kitchen:** avoid using bootstrap for `master` instances [skip ci] ([0b82e43
](0b82e43a15
))
* **travis:** apply changes from build config validation [skip ci] ([6e1b876
](6e1b876298
))
* **travis:** opt-in to `dpl v2` to complete build config validation [skip ci] ([70dc9aa
](70dc9aa3b4
))
* **travis:** quote pathspecs used with `git ls-files` [skip ci] ([97afbb1
](97afbb1575
))
* **travis:** run `shellcheck` during lint job [skip ci] ([d8bede7
](d8bede7082
))
* **travis:** use `major.minor` for `semantic-release` version [skip ci] ([b96cc56
](b96cc569fe
))
* **travis:** use build config validation (beta) [skip ci] ([07e7900
](07e79001cd
))
### Features
* standardize license and hand over to saltstack formulas ([20cb8a6
](20cb8a60d3
))
4 vuotta sitten
David Bezuidenhout
20cb8a60d3
feat: standardize license and hand over to saltstack formulas
4 vuotta sitten
Imran Iqbal
ebd46bea31
Merge branch '20200212142439' into upstream
4 vuotta sitten
Imran Iqbal
ace343353d
ci: workaround issues with newly introduced `amazonlinux-1` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/127
4 vuotta sitten
Imran Iqbal
b5a95f35ab
ci: workaround issues with newly introduced `amazonlinux-1` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/127
4 vuotta sitten
Michal Hrusecky
8d0172f5c7
feat(zone.xml): allow more services definition inside zone
Now multiple sections ending with `services` can be defined for each in pillar
and all of them will get merged into one service block in the zone. The goal is
to keep backward compatibility while allowing different services to be defined
in different pillars. So basically have various parts of the pillar affecting
the firewall without need to define everything centrally. Helpful for the
exceptions to the rules.
4 vuotta sitten
Imran Iqbal
0b82e43a15
ci(kitchen): avoid using bootstrap for `master` instances [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/124
4 vuotta sitten
Imran Iqbal
b96cc569fe
ci(travis): use `major.minor` for `semantic-release` version [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/112
5 vuotta sitten
Imran Iqbal
908f5df86c
ci(gemfile): restrict `train` gem version until upstream fix [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/110
5 vuotta sitten
Imran Iqbal
97afbb1575
ci(travis): quote pathspecs used with `git ls-files` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/107
5 vuotta sitten
Imran Iqbal
d8bede7082
ci(travis): run `shellcheck` during lint job [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/106
5 vuotta sitten
Imran Iqbal
70dc9aa3b4
ci(travis): opt-in to `dpl v2` to complete build config validation [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/100
5 vuotta sitten
Imran Iqbal
6e1b876298
ci(travis): apply changes from build config validation [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/98
5 vuotta sitten
Imran Iqbal
07e79001cd
ci(travis): use build config validation (beta) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/97
5 vuotta sitten
semantic-release-bot
dc8a9df3b8
chore(release): 0.7.0 [skip ci]
# [0.7.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.6.2...v0.7.0 ) (2019-11-09)
### Bug Fixes
* **map.jinja:** fix `salt-lint` errors ([de4e191
](de4e1915fb
))
* **rubocop:** add fixes using `rubocop --safe-auto-correct` ([8136b75
](8136b75fa0
))
* **yamllint:** fix all errors ([0f808d6
](0f808d6afb
))
### Documentation
* **readme:** modify according to standard structure ([3df11fc
](3df11fc75c
))
* **readme:** move to `docs/` directory ([d47265f
](d47265f974
))
### Features
* **semantic-release:** implement for this formula ([c5f114d
](c5f114d886
))
5 vuotta sitten
Niels Abspoel
cf901ef465
Merge pull request #33 from myii/feat/implement-semantic-release
feat(semantic-release): implement for this formula
5 vuotta sitten
Imran Iqbal
3df11fc75c
docs(readme): modify according to standard structure
5 vuotta sitten
Imran Iqbal
d47265f974
docs(readme): move to `docs/` directory
5 vuotta sitten
Imran Iqbal
8136b75fa0
fix(rubocop): add fixes using `rubocop --safe-auto-correct`
5 vuotta sitten
Imran Iqbal
0f808d6afb
fix(yamllint): fix all errors
```bash
firewalld-formula$ yamllint -s .
./pillar.example
2:1 warning missing document start "---" (document-start)
3:12 warning truthy value should be one of [false, true] (truthy)
12:13 warning truthy value should be one of [false, true] (truthy)
15:89 error line too long (108 > 88 characters) (line-length)
19:13 warning truthy value should be one of [false, true] (truthy)
30:89 error line too long (363 > 88 characters) (line-length)
96:89 error line too long (170 > 88 characters) (line-length)
108:15 error wrong indentation: expected 12 but found 14 (indentation)
115:13 error empty value in block mapping (empty-values)
116:2 error syntax error: found character '%' that cannot start any token
152:89 error line too long (112 > 88 characters) (line-length)
./firewalld/defaults.yaml
3:1 warning missing document start "---" (document-start)
```
5 vuotta sitten
Imran Iqbal
de4e1915fb
fix(map.jinja): fix `salt-lint` errors
```bash
Examining firewalld/map.jinja of type state
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:4
{## Start with defaults from defaults.yaml ##}
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:7
{##
[201] Trailing whitespace
firewalld/map.jinja:16
}, grain='os_family', merge=salt['pillar.get']('firewalld:lookup'))
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:19
{## Merge the flavor_map to the default settings ##}
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:22
{## Merge in salt:lookup pillar ##}
```
5 vuotta sitten
Imran Iqbal
c5f114d886
feat(semantic-release): implement for this formula
* Automated using https://github.com/myii/ssf-formula/pull/95
5 vuotta sitten
Imran Iqbal
db9597e398
Merge pull request #32 from Sxderp/pr-remove-unexpected-icmp-block-attribtue
Remove name attribute in icmp-block-inversion
5 vuotta sitten
Steven Daniele
12b696a8fe
Remove name attribute in icmp-block-inversion
Firewalld does not parse the name attribute.
Log message:
firewalld[1999]: ERROR: Failed to load zone file 'public.xml':
PARSE_ERROR: icmp-block-inversion: Unexpected attribute name
5 vuotta sitten
Imran Iqbal
9646ead4b4
Merge pull request #31 from Sxderp/pr-fix-block-inversion-key-name
Fix typo in icmp block inversion key name
5 vuotta sitten
Steven Daniele
64825e20ab
Fix typo in icmp block inversion key name
5 vuotta sitten
Niels Abspoel
ae1f2453d3
add updated firewalld.conf from 0.7.1
5 vuotta sitten
Niels Abspoel
4937787038
Merge pull request #29 from noelmcloughlin/arch
feat(linux): archlinux support (no osfinger grain)
5 vuotta sitten
N
ad37448038
feat(linux): archlinux support (no osfinger grain)
5 vuotta sitten
Imran Iqbal
46288d6b50
Merge pull request #28 from aboe76/update_test_images
update test images
5 vuotta sitten
Niels Abspoel
f560dcd1b4
add @myii recommendations
5 vuotta sitten
Niels Abspoel
d201f448c9
update test images
5 vuotta sitten
Imran Iqbal
6a546ca192
Merge pull request #27 from aboe76/improve_service
update service and zones with more options
5 vuotta sitten
Niels Abspoel
a438f30f50
fix spacing in closing tags
5 vuotta sitten
Niels Abspoel
9522826dcb
update gems
5 vuotta sitten
Niels Abspoel
87ecf4eea4
update gems
5 vuotta sitten
Niels Abspoel
18fc482853
update service and zones with more options
update kitchen travis
fix ipsets.sls
5 vuotta sitten
Javier Bértoli
f5c2acbd3a
Merge pull request #25 from aboe76/fix_travis
update kitchen.yml and Gemfile
6 vuotta sitten
Niels Abspoel
b05886c13e
update kitchen.yml and Gemfile
6 vuotta sitten
Niels Abspoel
22e301a218
Merge pull request #24 from valibud/master
Add support for inet6 ipsets.
6 vuotta sitten
Valentin Bud
d1d7a9186c
Add support for inet6 ipsets.
6 vuotta sitten
Niels Abspoel
a2d99c5957
Merge pull request #23 from netmanagers/master
Refactor ipset & backend
6 vuotta sitten
Javier Bértoli
951050008d
Update pillar.example
6 vuotta sitten
Javier Bértoli
15a48462f0
Refactor backend format, add backward compatibility, simple pkg testing
See https://github.com/saltstack-formulas/firewalld-formula/pull/21#pullrequestreview-146958098
6 vuotta sitten