Skip to content

Remove support for system-config-firewall/lokkit, firewll connection, MAC address, interface, NetworkManager, trust, masq, RHEL 7. Add support for ansible.posix.firewalld options.

Choose a tag to compare

@spetrosi spetrosi released this 05 Oct 16:08
2e03c19

Remove support for system-config-firewall/lokkit

The role is only suporting firewalld now. The code and variables for
system-config-firewall/lokkit have been removed.

The firewall_setup_default_solution setting has been removed also as
there is exaclty one firewall backend now.

Remove firewall connection support

The final goal is to be able to remove all code and variables that are
resulting in direct iteract with NetworkManager in the role.

This change is removing the docs, code and variables for

- trust_by_connection
- masq_by_connection
- forward_port_by_connection

Remoce MAC address support

The final goal is to be able to remove all code and variables that are
resulting in direct iteract with NetworkManager in the role.

This change is removing the docs, code and variables for

- trust_by_mac
- masq_by_mac
- forward_port_by_mac

Remove interface, NetworkManager, trust, masq support

This change removes all docs, code and variables that are used with
interfces:

- trust
- masq

Also using interfaces with forward_port has been removed and the whole
handling of NetworkManager and ifcfg files.

There is no direct interaction with NetworkManager anymore in the role.

Cleanup unused imports, move AnsibleModule import after docs

The imports for os, os.path and sys have been removed. The import for
AnsbileModule has been moved right after the docs section.

Add support for ansible.posix.firewalld options

Support for masquerade, rich_rule, source, interface, icmp_block,
icmp_block_inversion, timeout, target, permanent, runtime (alias:
immediate) and offline have been added.

The forward_port parameter is using the string format that firewalld is
using.

Additionally the source_port parameter has been added.

The new test tests_ansible.yml has been added. It is importing the role
and using the firewall_lib module directly.

Drop support for Ansible 2.8 by bumping the Ansible version to 2.9

Bug 1989197 - drop support for Ansible 2.8
https://bugzilla.redhat.com/show_bug.cgi?id=1989197

Remove RHEL-7 from supported distributions

RHEL-7 with system-config-firewall/lokkit is not supported anymore. Only
distributions with firewalld are suported.

use tox-lsr version 2.5.1

This version removes support for molecule until we can figure out
what to do about molecule. This should make all of the tox tests
pass (except for python 2.6).

Signed-off-by: Rich Megginson rmeggins@redhat.com

Add unit tests

parametrize module parameter testing; enable coverage

fix linter issues

use apt-get install -y

Signed-off-by: Rich Megginson rmeggins@redhat.com

support for user-created zones; pass a.p.firewalld tests

Adds support for user-created zones - user can add/remove zones.
Makes the role pass a.p.firewalld integration tests.
Code cleanup

Co-authored-by: Rich Megginson rmeggins@redhat.com

Revert "support for user-created zones; pass a.p.firewalld tests"

Updated .gitignore

Added tests/output and tests_ap.yml. Handles commonly wrongly committed files.

Remove tests/output files, and re-adds support for passing ansible posix tests.

support for user-created zones; pass a.p.firewalld tests (#42)

Adds support for user-created zones - user can add/remove zones.
Makes the role pass a.p.firewalld integration tests.
Code cleanup

Co-authored-by: Vrindle vrinda.punj30@gmail.com