Back to bug 2140880
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Red Hat Bugzilla | 2022-11-08 02:36:56 UTC | Pool ID | sst_system_roles_rhel_8 | |
| Rich Megginson | 2022-11-08 02:57:09 UTC | Doc Type | If docs needed, set a value | Enhancement |
| Flags | needinfo?(vpunj) needinfo?(briasmit) | |||
| CC | briasmit, vpunj | |||
| Whiteboard | role:firewall | |||
| Rich Megginson | 2022-11-08 02:58:55 UTC | Link ID | Github linux-system-roles/firewall/issues/106 | |
| Red Hat One Jira (issues.redhat.com) | 2022-11-08 03:13:51 UTC | Link ID | Red Hat Issue Tracker RHELPLAN-138628 | |
| Brian Smith | 2022-11-08 14:08:45 UTC | Flags | needinfo?(briasmit) | needinfo?(vpunj) |
| Vrinda | 2022-11-17 18:51:27 UTC | Flags | needinfo?(vpunj) needinfo?(vpunj) | needinfo?(bsmit) |
| CC | bsmit | |||
| Brian Smith | 2022-11-21 16:28:01 UTC | Flags | needinfo?(bsmit) | needinfo?(vpunj) |
| Lucie Vařáková | 2023-01-30 12:16:21 UTC | Docs Contact | fhanzelk | |
| Filip Hanzelka | 2023-03-14 20:36:37 UTC | Docs Contact | fhanzelk | lmanasko |
| Red Hat Bugzilla | 2023-04-02 08:27:41 UTC | CC | nhosoi | |
| Jaroslav Klech | 2023-05-05 09:48:27 UTC | Docs Contact | lmanasko | jklech |
| CC | jklech | |||
| Jaroslav Klech | 2023-05-09 17:07:13 UTC | Flags | needinfo?(vpunj) | |
| Jeremy Harris | 2023-07-14 09:04:29 UTC | CC | jeharris | |
| Marko Myllynen | 2023-07-31 08:45:43 UTC | CC | myllynen | |
| Rich Megginson | 2023-08-01 18:30:21 UTC | Link ID | Github linux-system-roles/firewall/pull/166 | |
| Status | NEW | ASSIGNED | ||
| Rich Megginson | 2023-08-07 18:01:35 UTC | Blocks | 2229802 | |
| Rich Megginson | 2023-08-07 18:02:39 UTC | Target Release | --- | 8.9 |
| RHEL Program Management | 2023-08-07 18:02:48 UTC | Keywords | Triaged | |
| Rich Megginson | 2023-08-07 19:14:59 UTC | CC | djez, jharuda, vdanek | |
| Flags | needinfo?(djez) needinfo?(jharuda) needinfo?(vdanek) | |||
| Rich Megginson | 2023-08-09 23:11:11 UTC | Status | ASSIGNED | POST |
| Rich Megginson | 2023-08-10 00:10:20 UTC | Fixed In Version | rhel-system-roles-1.22.0-0.20.el8 | |
| Status | POST | MODIFIED | ||
| Rich Megginson | 2023-08-10 13:51:08 UTC | Doc Text | User can specify `state: present` or `state: absent` and `permanent: true` with new ipset arguments to configure ipsets for use in zones using the `source` argument - firewall_lib.py - new argument: ipset - name of ipset - new argument: ipset_type - type of ipset - new argument: ipset_entry - contents of ipset - protections against failure in check mode when enabling and disabling ipsets for zones - new file: tests/tests_ipsets.yml - tests user defined ipsets (create, modify, delete, use) - tests: unit: new test cases for triggering ipset warnings and errors - docs: README, firewall_lib DOCUMENTATION for ipset feature Enhancement: Users can define, modify, and delete ipsets using the system role, which can be added to and removed from zones or be used when defining rich rules. Reason: IPSets make firewalld configuration much easier to maintain: - Rich rules defining rules for many IP addresses can be made much smaller - Allows for semantic grouping of IP addresses Also, brings the srole closer to being a full solution for managing firewalld configuration. Result: Users should be able to manage ipsets using the firewall system role using the following arguments: - `ipset` - `ipset_type` - `ipset_entries` - `short` - `description` - `state: present` or `state: absent` - `permanent: true` Issue Tracker Tickets (Jira or BZ if any): GitHub Issue #106 BZ 2140880 - https://bugzilla.redhat.com/show_bug.cgi?id=2140880 |
|
| errata-xmlrpc | 2023-08-10 14:00:29 UTC | Status | MODIFIED | ON_QA |
| Jakub Haruda | 2023-08-10 14:04:55 UTC | Flags | needinfo?(jharuda) |
Back to bug 2140880