Imran Iqbal
cb01f13091
Merge pull request #45 from myii/feat/support-AllowZoneDrifting
feat(firewalld.conf): support configuration of `AllowZoneDrifting`
4 anos atrás
Imran Iqbal
0ff53ffb27
feat(firewalld.conf): support configuration of `AllowZoneDrifting`
Close #44 .
Configuration description taken from:
* https://firewalld.org/documentation/man-pages/firewalld.conf.html
4 anos atrás
Imran Iqbal
d32059bd2b
chore(gemfile+lock): update to latest gem versions (2020-W43) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/273
4 anos atrás
Imran Iqbal
118eacff45
ci(pre-commit): finalise `rstcheck` configuration [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/267
4 anos atrás
Dafydd Jones
90cf74209a
chore(commitlint): add `{body,footer,header}-max(-line)-length` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/265
4 anos atrás
Imran Iqbal
662630d5aa
chore(gemfile+lock): update to latest gem versions (2020-W41) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/263
4 anos atrás
Imran Iqbal
c7e4dee62a
ci(pre-commit): enable/disable `rstcheck` as relevant [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/262
4 anos atrás
Dafydd Jones
9254027396
ci(pre-commit): add to formula [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/259
4 anos atrás
Imran Iqbal
0e7f431952
chore(gemfile.lock): update to latest gem versions (2020-W27) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/235
4 anos atrás
Imran Iqbal
515b3a8a40
chore(gemfile.lock): update to latest gem versions (2020-W26) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/233
4 anos atrás
Imran Iqbal
e7dcb91931
chore(gemfile.lock): update to latest gem versions (2020-W25) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/229
4 anos atrás
Imran Iqbal
a33cd641e2
ci(kitchen): use `saltimages` Docker Hub where available [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/223
4 anos atrás
Imran Iqbal
ff53511110
chore(gemfile.lock): update to latest gem versions [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/222
4 anos atrás
Imran Iqbal
642d4606d8
chore(gemfile.lock): update to latest gem versions [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/221
4 anos atrás
Imran Iqbal
0d2c0a7700
chore(gemfile.lock): update to latest gem versions [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/202
4 anos atrás
Imran Iqbal
b6c60b27b9
ci(travis): add notifications => zulip [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/191
4 anos atrás
Imran Iqbal
6fa7f7a09d
chore(codeowners): update `semantic-release` related files [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/174
4 anos atrás
Imran Iqbal
183b48a248
chore(codeowners): add to repo [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/173
4 anos atrás
Imran Iqbal
93853b643f
ci(workflows/commitlint): add to repo [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/172
4 anos atrás
Imran Iqbal
24e115cacb
ci(kitchen+travis): remove `master-py2-arch-base-latest` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/167
4 anos atrás
Imran Iqbal
7a964e4738
ci(gemfile.lock): add to repo with updated `Gemfile` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/163
4 anos atrás
semantic-release-bot
ad932260f0
chore(release): 1.0.0 [skip ci]
# [1.0.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.10.1...v1.0.0 ) (2020-04-18)
### Bug Fixes
* do not error on unknown os_family grain ([94d2b0b
](94d2b0b97c
))
### Code Refactoring
* split default maps into separate files ([afcf5e7
](afcf5e7700
))
### Tests
* **yaml_dump_spec:** update after splitting `map.jinja` ([d1f7a37
](d1f7a37171
))
### BREAKING CHANGES
* `map.jinja` has been upgraded from using `pillar.get`
to `config.get`.
4 anos atrás
Imran Iqbal
fdd3dfbc62
Merge pull request #41 from Sxderp/pr-fix-unknown-os-family
fix: do not error on unknown os_family grain
4 anos atrás
Imran Iqbal
d1f7a37171
test(yaml_dump_spec): update after splitting `map.jinja`
4 anos atrás
Steven Daniele
afcf5e7700
refactor: split default maps into separate files
While the default maps are mostly empty this sets the groundwork for
distribution specific defaults. The layout is based on the formula
template.
BREAKING CHANGE: `map.jinja` has been upgraded from using `pillar.get`
to `config.get`.
4 anos atrás
Steven Daniele
94d2b0b97c
fix: do not error on unknown os_family grain
If the formula was ran on a system that reported an os_family that
wasn't one of "Debian", "RedHat", "Arch", "Suse" then the map.jinja
template would fail to render with "'NoneType' is not iterable.
This occurs because grains.filter_by will return None when it fails
match the grain to the input dictionary. The value is then blindly
passed into a dict.update() which causes the failure.
In this patch we ensure that the default values, as defined in
defaults.yaml, are always applied when grain matching fails.
4 anos atrás
semantic-release-bot
80587f9671
chore(release): 0.10.1 [skip ci]
## [0.10.1](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.10.0...v0.10.1 ) (2020-04-18)
### Tests
* verify map output using `yaml_dump` ([69df9a6
](69df9a62d6
))
4 anos atrás
Imran Iqbal
51873948c2
Merge pull request #42 from myii/test/verify-yaml_dump
test: verify map output using `yaml_dump`
4 anos atrás
Imran Iqbal
69df9a62d6
test: verify map output using `yaml_dump`
* Semi-automated using https://github.com/myii/ssf-formula/pull/159
4 anos atrás
Imran Iqbal
95e26621f9
chore(rubocop): use org-wide standard settings for `Metrics/BlockLength` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/158
4 anos atrás
semantic-release-bot
6ced9d9cfa
chore(release): 0.10.0 [skip ci]
# [0.10.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.9.0...v0.10.0 ) (2020-04-02)
### Bug Fixes
* **zone.xml:** adjust whitespacing to pass tests & macro at top of file ([d8f0f47
](d8f0f47a54
))
### Features
* allow rich_rules to be specified as a dict ([cd4cec0
](cd4cec0089
))
### Styles
* **zone.xml:** remove all trailing whitespaces ([204efe5
](204efe5fc7
))
### Tests
* **zones_spec:** check content of rendered zone files ([6ebfc6f
](6ebfc6f20c
))
4 anos atrás
Imran Iqbal
5c135df025
Merge pull request #40 from Sxderp/pr-add-dictionary-rich-rules2
Allow rich_rules to be specified as a dictionary
4 anos atrás
Imran Iqbal
c69fd6bf04
chore(rubocop): relax `Metrics/BlockLength` for new tests
* Checked using https://github.com/myii/ssf-formula/pull/145
4 anos atrás
Imran Iqbal
204efe5fc7
style(zone.xml): remove all trailing whitespaces
4 anos atrás
Imran Iqbal
d8f0f47a54
fix(zone.xml): adjust whitespacing to pass tests & macro at top of file
4 anos atrás
Imran Iqbal
6ebfc6f20c
test(zones_spec): check content of rendered zone files
4 anos atrás
Steven Daniele
cd4cec0089
feat: allow rich_rules to be specified as a dict
When specifying rich rules as a dictionary ipsets and services can be
specified as lists. They will be expanded out by the jinja template into
individual rich rules for the parent zone.
4 anos atrás
Imran Iqbal
cf21ccab97
chore(gitignore): update from the `template-formula` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/132
4 anos atrás
Imran Iqbal
d02f890fb4
chore(rubocop): move `LineLength` cop from `Metrics` to `Layout` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/129
4 anos atrás
semantic-release-bot
91362086a8
chore(release): 0.9.0 [skip ci]
# [0.9.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.8.0...v0.9.0 ) (2020-02-12)
### Features
* **zone.xml:** allow more services definition inside zone ([8d0172f
](8d0172f5c7
))
4 anos atrás
Imran Iqbal
0d0f191449
Merge pull request #36 from miska/master
Allow more services definition inside zone
4 anos atrás
semantic-release-bot
7ff891796a
chore(release): 0.8.0 [skip ci]
# [0.8.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.7.0...v0.8.0 ) (2020-02-12)
### Continuous Integration
* workaround issues with newly introduced `amazonlinux-1` [skip ci] ([ace3433
](ace343353d
))
* workaround issues with newly introduced `amazonlinux-1` [skip ci] ([b5a95f3
](b5a95f35ab
))
* **gemfile:** restrict `train` gem version until upstream fix [skip ci] ([908f5df
](908f5df86c
))
* **kitchen:** avoid using bootstrap for `master` instances [skip ci] ([0b82e43
](0b82e43a15
))
* **travis:** apply changes from build config validation [skip ci] ([6e1b876
](6e1b876298
))
* **travis:** opt-in to `dpl v2` to complete build config validation [skip ci] ([70dc9aa
](70dc9aa3b4
))
* **travis:** quote pathspecs used with `git ls-files` [skip ci] ([97afbb1
](97afbb1575
))
* **travis:** run `shellcheck` during lint job [skip ci] ([d8bede7
](d8bede7082
))
* **travis:** use `major.minor` for `semantic-release` version [skip ci] ([b96cc56
](b96cc569fe
))
* **travis:** use build config validation (beta) [skip ci] ([07e7900
](07e79001cd
))
### Features
* standardize license and hand over to saltstack formulas ([20cb8a6
](20cb8a60d3
))
4 anos atrás
David Bezuidenhout
20cb8a60d3
feat: standardize license and hand over to saltstack formulas
4 anos atrás
Imran Iqbal
ebd46bea31
Merge branch '20200212142439' into upstream
4 anos atrás
Imran Iqbal
ace343353d
ci: workaround issues with newly introduced `amazonlinux-1` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/127
4 anos atrás
Imran Iqbal
b5a95f35ab
ci: workaround issues with newly introduced `amazonlinux-1` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/127
4 anos atrás
Michal Hrusecky
8d0172f5c7
feat(zone.xml): allow more services definition inside zone
Now multiple sections ending with `services` can be defined for each in pillar
and all of them will get merged into one service block in the zone. The goal is
to keep backward compatibility while allowing different services to be defined
in different pillars. So basically have various parts of the pillar affecting
the firewall without need to define everything centrally. Helpful for the
exceptions to the rules.
4 anos atrás
Imran Iqbal
0b82e43a15
ci(kitchen): avoid using bootstrap for `master` instances [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/124
4 anos atrás
Imran Iqbal
b96cc569fe
ci(travis): use `major.minor` for `semantic-release` version [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/112
5 anos atrás
Imran Iqbal
908f5df86c
ci(gemfile): restrict `train` gem version until upstream fix [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/110
5 anos atrás