Merge pull request #2 from jfroche/feature/purge-unknown-ipset

Add option to remove unknown ipsets
voxpupuli · Apr 19, 2018 · 11f3fa8 · 11f3fa8
2 parents ad8edb4 + 5ae166c
commit 11f3fa8
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/manifests/init.pp b/manifests/init.pp
@@ -196,4 +196,10 @@
     Service['firewalld'] -> Firewalld_direct_rule <||> ~> Exec['firewalld::reload']
     Service['firewalld'] -> Firewalld_direct_passthrough <||> ~> Exec['firewalld::reload']
 
+    if $purge_unknown_ipsets {
+      Firewalld_ipset <||>
+      ~> resources { 'firewalld_ipset':
+        purge => true,
+      }
+    }
 }
diff --git a/spec/classes/init_spec.rb b/spec/classes/init_spec.rb
@@ -33,6 +33,7 @@
         :purge_direct_rules => true,
         :purge_direct_chains => true,
         :purge_direct_passthroughs => true,
+        :purge_unknown_ipsets => true
       }
     end
 
@@ -47,6 +48,12 @@
     it do
       should contain_firewalld_direct_purge('chain')
     end
+
+    it do
+      should contain_resources('firewalld_ipset')
+        .with_purge(true)
+    end
+
   end
 
   context 'with parameter ports' do