ansible/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
Code Releases Activity

Add insert support to iptables. (#1180)

Browse source 
Add insert support to iptables.
This commit is contained in:
Daniel Vigueras 2016-05-16 22:25:52 +02:00 committed by Matt Clay
parent a2b0dad3e8
commit 81cb2eac89
1 changed files with 19 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
lib/ansible/modules/extras/system/iptables.py
View file

@ -56,6 +56,14 @@ options:
required: false
default: present
choices: [ "present", "absent" ]
action:
version_added: "2.2"
description:
- Whether the rule should be appended at the bottom or inserted at the
top. If the rule already exists the chain won't be modified.
required: false
default: append
choices: [ "append", "insert" ]
ip_version:
description:
- Which version of the IP protocol this rule should apply to.
@ -372,6 +380,11 @@ def append_rule(iptables_path, module, params):
module.run_command(cmd, check_rc=True)
def insert_rule(iptables_path, module, params):
cmd = push_arguments(iptables_path, '-I', params)
module.run_command(cmd, check_rc=True)
def remove_rule(iptables_path, module, params):
cmd = push_arguments(iptables_path, '-D', params)
module.run_command(cmd, check_rc=True)
@ -383,6 +396,7 @@ def main():
argument_spec=dict(
table=dict(required=False, default='filter', choices=['filter', 'nat', 'mangle', 'raw', 'security']),
state=dict(required=False, default='present', choices=['present', 'absent']),
action=dict(required=False, default='append', type='str', choices=['append', 'insert']),
ip_version=dict(required=False, default='ipv4', choices=['ipv4', 'ipv6']),
chain=dict(required=True, default=None, type='str'),
protocol=dict(required=False, default=None, type='str'),
@ -422,6 +436,7 @@ def main():
rule=' '.join(construct_rule(module.params)),
state=module.params['state'],
)
insert = (module.params['action'] == 'insert')
ip_version = module.params['ip_version']
iptables_path = module.get_bin_path(BINS[ip_version], True)
rule_is_present = check_present(iptables_path, module, module.params)
@ -439,7 +454,10 @@ def main():
module.exit_json(**args)
if should_be_present:
append_rule(iptables_path, module, module.params)
if insert:
insert_rule(iptables_path, module, module.params)
else:
append_rule(iptables_path, module, module.params)
else:
remove_rule(iptables_path, module, module.params)