Imran Iqbal
d8f0f47a54
fix(zone.xml): adjust whitespacing to pass tests & macro at top of file
pirms 4 gadiem
Imran Iqbal
6ebfc6f20c
test(zones_spec): check content of rendered zone files
pirms 4 gadiem
Steven Daniele
cd4cec0089
feat: allow rich_rules to be specified as a dict
When specifying rich rules as a dictionary ipsets and services can be
specified as lists. They will be expanded out by the jinja template into
individual rich rules for the parent zone.
pirms 4 gadiem
Imran Iqbal
cf21ccab97
chore(gitignore): update from the `template-formula` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/132
pirms 4 gadiem
Imran Iqbal
d02f890fb4
chore(rubocop): move `LineLength` cop from `Metrics` to `Layout` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/129
pirms 4 gadiem
semantic-release-bot
91362086a8
chore(release): 0.9.0 [skip ci]
# [0.9.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.8.0...v0.9.0 ) (2020-02-12)
### Features
* **zone.xml:** allow more services definition inside zone ([8d0172f
](8d0172f5c7
))
pirms 4 gadiem
Imran Iqbal
0d0f191449
Merge pull request #36 from miska/master
Allow more services definition inside zone
pirms 4 gadiem
semantic-release-bot
7ff891796a
chore(release): 0.8.0 [skip ci]
# [0.8.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.7.0...v0.8.0 ) (2020-02-12)
### Continuous Integration
* workaround issues with newly introduced `amazonlinux-1` [skip ci] ([ace3433
](ace343353d
))
* workaround issues with newly introduced `amazonlinux-1` [skip ci] ([b5a95f3
](b5a95f35ab
))
* **gemfile:** restrict `train` gem version until upstream fix [skip ci] ([908f5df
](908f5df86c
))
* **kitchen:** avoid using bootstrap for `master` instances [skip ci] ([0b82e43
](0b82e43a15
))
* **travis:** apply changes from build config validation [skip ci] ([6e1b876
](6e1b876298
))
* **travis:** opt-in to `dpl v2` to complete build config validation [skip ci] ([70dc9aa
](70dc9aa3b4
))
* **travis:** quote pathspecs used with `git ls-files` [skip ci] ([97afbb1
](97afbb1575
))
* **travis:** run `shellcheck` during lint job [skip ci] ([d8bede7
](d8bede7082
))
* **travis:** use `major.minor` for `semantic-release` version [skip ci] ([b96cc56
](b96cc569fe
))
* **travis:** use build config validation (beta) [skip ci] ([07e7900
](07e79001cd
))
### Features
* standardize license and hand over to saltstack formulas ([20cb8a6
](20cb8a60d3
))
pirms 4 gadiem
David Bezuidenhout
20cb8a60d3
feat: standardize license and hand over to saltstack formulas
pirms 4 gadiem
Imran Iqbal
ebd46bea31
Merge branch '20200212142439' into upstream
pirms 4 gadiem
Imran Iqbal
ace343353d
ci: workaround issues with newly introduced `amazonlinux-1` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/127
pirms 4 gadiem
Imran Iqbal
b5a95f35ab
ci: workaround issues with newly introduced `amazonlinux-1` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/127
pirms 4 gadiem
Michal Hrusecky
8d0172f5c7
feat(zone.xml): allow more services definition inside zone
Now multiple sections ending with `services` can be defined for each in pillar
and all of them will get merged into one service block in the zone. The goal is
to keep backward compatibility while allowing different services to be defined
in different pillars. So basically have various parts of the pillar affecting
the firewall without need to define everything centrally. Helpful for the
exceptions to the rules.
pirms 4 gadiem
Imran Iqbal
0b82e43a15
ci(kitchen): avoid using bootstrap for `master` instances [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/124
pirms 4 gadiem
Imran Iqbal
b96cc569fe
ci(travis): use `major.minor` for `semantic-release` version [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/112
pirms 5 gadiem
Imran Iqbal
908f5df86c
ci(gemfile): restrict `train` gem version until upstream fix [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/110
pirms 5 gadiem
Imran Iqbal
97afbb1575
ci(travis): quote pathspecs used with `git ls-files` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/107
pirms 5 gadiem
Imran Iqbal
d8bede7082
ci(travis): run `shellcheck` during lint job [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/106
pirms 5 gadiem
Imran Iqbal
70dc9aa3b4
ci(travis): opt-in to `dpl v2` to complete build config validation [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/100
pirms 5 gadiem
Imran Iqbal
6e1b876298
ci(travis): apply changes from build config validation [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/98
pirms 5 gadiem
Imran Iqbal
07e79001cd
ci(travis): use build config validation (beta) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/97
pirms 5 gadiem
semantic-release-bot
dc8a9df3b8
chore(release): 0.7.0 [skip ci]
# [0.7.0](https://github.com/saltstack-formulas/firewalld-formula/compare/v0.6.2...v0.7.0 ) (2019-11-09)
### Bug Fixes
* **map.jinja:** fix `salt-lint` errors ([de4e191
](de4e1915fb
))
* **rubocop:** add fixes using `rubocop --safe-auto-correct` ([8136b75
](8136b75fa0
))
* **yamllint:** fix all errors ([0f808d6
](0f808d6afb
))
### Documentation
* **readme:** modify according to standard structure ([3df11fc
](3df11fc75c
))
* **readme:** move to `docs/` directory ([d47265f
](d47265f974
))
### Features
* **semantic-release:** implement for this formula ([c5f114d
](c5f114d886
))
pirms 5 gadiem
Niels Abspoel
cf901ef465
Merge pull request #33 from myii/feat/implement-semantic-release
feat(semantic-release): implement for this formula
pirms 5 gadiem
Imran Iqbal
3df11fc75c
docs(readme): modify according to standard structure
pirms 5 gadiem
Imran Iqbal
d47265f974
docs(readme): move to `docs/` directory
pirms 5 gadiem
Imran Iqbal
8136b75fa0
fix(rubocop): add fixes using `rubocop --safe-auto-correct`
pirms 5 gadiem
Imran Iqbal
0f808d6afb
fix(yamllint): fix all errors
```bash
firewalld-formula$ yamllint -s .
./pillar.example
2:1 warning missing document start "---" (document-start)
3:12 warning truthy value should be one of [false, true] (truthy)
12:13 warning truthy value should be one of [false, true] (truthy)
15:89 error line too long (108 > 88 characters) (line-length)
19:13 warning truthy value should be one of [false, true] (truthy)
30:89 error line too long (363 > 88 characters) (line-length)
96:89 error line too long (170 > 88 characters) (line-length)
108:15 error wrong indentation: expected 12 but found 14 (indentation)
115:13 error empty value in block mapping (empty-values)
116:2 error syntax error: found character '%' that cannot start any token
152:89 error line too long (112 > 88 characters) (line-length)
./firewalld/defaults.yaml
3:1 warning missing document start "---" (document-start)
```
pirms 5 gadiem
Imran Iqbal
de4e1915fb
fix(map.jinja): fix `salt-lint` errors
```bash
Examining firewalld/map.jinja of type state
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:4
{## Start with defaults from defaults.yaml ##}
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:7
{##
[201] Trailing whitespace
firewalld/map.jinja:16
}, grain='os_family', merge=salt['pillar.get']('firewalld:lookup'))
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:19
{## Merge the flavor_map to the default settings ##}
[209] Jinja comment should have spaces before and after: {# comment #}
firewalld/map.jinja:22
{## Merge in salt:lookup pillar ##}
```
pirms 5 gadiem
Imran Iqbal
c5f114d886
feat(semantic-release): implement for this formula
* Automated using https://github.com/myii/ssf-formula/pull/95
pirms 5 gadiem
Imran Iqbal
db9597e398
Merge pull request #32 from Sxderp/pr-remove-unexpected-icmp-block-attribtue
Remove name attribute in icmp-block-inversion
pirms 5 gadiem
Steven Daniele
12b696a8fe
Remove name attribute in icmp-block-inversion
Firewalld does not parse the name attribute.
Log message:
firewalld[1999]: ERROR: Failed to load zone file 'public.xml':
PARSE_ERROR: icmp-block-inversion: Unexpected attribute name
pirms 5 gadiem
Imran Iqbal
9646ead4b4
Merge pull request #31 from Sxderp/pr-fix-block-inversion-key-name
Fix typo in icmp block inversion key name
pirms 5 gadiem
Steven Daniele
64825e20ab
Fix typo in icmp block inversion key name
pirms 5 gadiem
Niels Abspoel
ae1f2453d3
add updated firewalld.conf from 0.7.1
pirms 5 gadiem
Niels Abspoel
4937787038
Merge pull request #29 from noelmcloughlin/arch
feat(linux): archlinux support (no osfinger grain)
pirms 5 gadiem
N
ad37448038
feat(linux): archlinux support (no osfinger grain)
pirms 5 gadiem
Imran Iqbal
46288d6b50
Merge pull request #28 from aboe76/update_test_images
update test images
pirms 5 gadiem
Niels Abspoel
f560dcd1b4
add @myii recommendations
pirms 5 gadiem
Niels Abspoel
d201f448c9
update test images
pirms 5 gadiem
Imran Iqbal
6a546ca192
Merge pull request #27 from aboe76/improve_service
update service and zones with more options
pirms 5 gadiem
Niels Abspoel
a438f30f50
fix spacing in closing tags
pirms 5 gadiem
Niels Abspoel
9522826dcb
update gems
pirms 5 gadiem
Niels Abspoel
87ecf4eea4
update gems
pirms 5 gadiem
Niels Abspoel
18fc482853
update service and zones with more options
update kitchen travis
fix ipsets.sls
pirms 5 gadiem
Javier Bértoli
f5c2acbd3a
Merge pull request #25 from aboe76/fix_travis
update kitchen.yml and Gemfile
pirms 6 gadiem
Niels Abspoel
b05886c13e
update kitchen.yml and Gemfile
pirms 6 gadiem
Niels Abspoel
22e301a218
Merge pull request #24 from valibud/master
Add support for inet6 ipsets.
pirms 6 gadiem
Valentin Bud
d1d7a9186c
Add support for inet6 ipsets.
pirms 6 gadiem
Niels Abspoel
a2d99c5957
Merge pull request #23 from netmanagers/master
Refactor ipset & backend
pirms 6 gadiem
Javier Bértoli
951050008d
Update pillar.example
pirms 6 gadiem