From e6e5d262188bd342896f98a6e62528bbd8694cf8 Mon Sep 17 00:00:00 2001 From: Auto-release Date: Thu, 15 Oct 2020 10:57:07 +0000 Subject: [PATCH] Release version 2.7.0 --- CHANGELOG.md | 12 ++++++++++-- REFERENCE.md | 18 +++++++++++++++--- metadata.json | 2 +- 3 files changed, 26 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c3bde69..8d05ff7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,9 +2,17 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org). -## [v2.6.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/v2.5.0) (2020-10-01) +## [v2.7.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/v2.7.0) (2020-10-15) -[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/v2.5.0...v2.5.0) +[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/v2.6.0...v2.7.0) + +### Added + +- \(IAC-1190\) add `ignore\_foreign` when purging firewallchains [\#948](https://github.com/puppetlabs/puppetlabs-firewall/pull/948) ([DavidS](https://github.com/DavidS)) + +## [v2.6.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/v2.6.0) (2020-10-01) + +[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/v2.5.0...v2.6.0) ### Added diff --git a/REFERENCE.md b/REFERENCE.md index caed6fb..bd2991f 100644 --- a/REFERENCE.md +++ b/REFERENCE.md @@ -77,7 +77,7 @@ Data type: `Any` Specify the name of the IPv4 iptables service. -Default value: `$::firewall::params::service_name` +Default value: `$firewall::params::service_name` ##### `service_name_v6` @@ -85,7 +85,7 @@ Data type: `Any` Specify the name of the IPv6 iptables service. -Default value: `$::firewall::params::service_name_v6` +Default value: `$firewall::params::service_name_v6` ##### `package_name` @@ -93,7 +93,7 @@ Data type: `Any` Specify the platform-specific package(s) to install. -Default value: `$::firewall::params::package_name` +Default value: `$firewall::params::package_name` ##### `ebtables_manage` @@ -1456,6 +1456,18 @@ firewallchain { 'INPUT:filter:IPv4': } ``` +##### `ignore_foreign` + +Valid values: ``false``, ``true`` + +Ignore rules that do not match the puppet title pattern "^\d+[[:graph:][:space:]]" when purging unmanaged firewall rules +in this chain. +This can be used to ignore rules that were not put in by puppet. Beware that nothing keeps other systems from +configuring firewall rules with a comment that starts with digits, and is indistinguishable from puppet-configured +rules. + +Default value: ``false`` + ##### `name` namevar diff --git a/metadata.json b/metadata.json index d42018b..3c6944d 100644 --- a/metadata.json +++ b/metadata.json @@ -1,6 +1,6 @@ { "name": "puppetlabs-firewall", - "version": "2.6.0", + "version": "2.7.0", "author": "puppetlabs", "summary": "Manages Firewalls such as iptables", "license": "Apache-2.0", -- 2.45.2