From: Christopher E. Stith Date: Wed, 24 Oct 2018 00:52:27 +0000 (-0500) Subject: add -g flag handling in ip6tables.rb provider X-Git-Tag: 1.15.0~14^2 X-Git-Url: https://review.fuel-infra.org/gitweb?a=commitdiff_plain;h=50b70b781af325b85e8c74e8b3549896348c0b5b;p=puppet-modules%2Fpuppetlabs-firewall.git add -g flag handling in ip6tables.rb provider In lib/puppet/provider/firewall/ip6tables.rb there is no goto: entry for the -g flag in @resource_map which leads to errors for rules using that feature. lib/puppet/type/firewall.rb already handles this flag. It's a one-line change to recognize it. The right rules then get into the chains in my testing. --- diff --git a/lib/puppet/provider/firewall/ip6tables.rb b/lib/puppet/provider/firewall/ip6tables.rb index d3c1b3c..29151e7 100644 --- a/lib/puppet/provider/firewall/ip6tables.rb +++ b/lib/puppet/provider/firewall/ip6tables.rb @@ -77,6 +77,7 @@ Puppet::Type.type(:firewall).provide :ip6tables, parent: :iptables, source: :ip6 dst_type: '--dst-type', gateway: '--gateway', gid: '--gid-owner', + goto: '-g', hop_limit: '-m hl --hl-eq', icmp: '-m icmp6 --icmpv6-type', iniface: '-i',