Correct nomad http api port opening

traylenator · traylenator · commit 70b871cd7b5d · 2025-03-13T10:16:43.000+01:00
The nomad api port was being matched but was not be accepted.
diff --git a/manifests/rules/nomad.pp b/manifests/rules/nomad.pp
@@ -22,7 +22,7 @@
   # Open http api port to everything.
   #
   nftables::rule { 'default_in-nomad_http':
-    content => "tcp dport ${http}",
+    content => "tcp dport ${http} accept",
   }
 
   ['ip','ip6'].each | $_family | {
diff --git a/spec/classes/rules/nomad_spec.rb b/spec/classes/rules/nomad_spec.rb
@@ -29,7 +29,7 @@
         }
 
         it {
-          is_expected.to contain_nftables__rule('default_in-nomad_http').with_content('tcp dport 4646')
+          is_expected.to contain_nftables__rule('default_in-nomad_http').with_content('tcp dport 4646 accept')
           is_expected.to contain_nftables__rule('default_in-nomad_rpc_ip6').with_content('tcp dport 4647 ip6 saddr @nomad_ip6 accept')
           is_expected.to contain_nftables__rule('default_in-nomad_rpc_ip').with_content('tcp dport 4647 ip saddr @nomad_ip accept')
           is_expected.to contain_nftables__rule('default_in-nomad_serf_tcp_ip6').with_content('tcp dport 4648 ip6 saddr @nomad_ip6 accept')

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,7 @@`
`22`	`22`	`# Open http api port to everything.`
`23`	`23`	`#`
`24`	`24`	`nftables::rule { 'default_in-nomad_http':`
`25`		`- content => "tcp dport ${http}",`
	`25`	`+ content => "tcp dport ${http} accept",`
`26`	`26`	`}`
`27`	`27`
`28`	`28`	`['ip','ip6'].each \| $_family \| {`
Original file line number	Diff line number	Diff line change
`@@ -29,7 +29,7 @@`
`29`	`29`	`}`
`30`	`30`
`31`	`31`	`it {`
`32`		`- is_expected.to contain_nftables__rule('default_in-nomad_http').with_content('tcp dport 4646')`
	`32`	`+ is_expected.to contain_nftables__rule('default_in-nomad_http').with_content('tcp dport 4646 accept')`
`33`	`33`	`is_expected.to contain_nftables__rule('default_in-nomad_rpc_ip6').with_content('tcp dport 4647 ip6 saddr @nomad_ip6 accept')`
`34`	`34`	`is_expected.to contain_nftables__rule('default_in-nomad_rpc_ip').with_content('tcp dport 4647 ip saddr @nomad_ip accept')`
`35`	`35`	`is_expected.to contain_nftables__rule('default_in-nomad_serf_tcp_ip6').with_content('tcp dport 4648 ip6 saddr @nomad_ip6 accept')`