- package { 'ganeti-htools':
- ensure => installed
- }
-
- @ferm::rule { 'dsa-ganeti-v4':
- description => 'Allow ganeti from ganeti master',
- rule => 'proto tcp mod state state (NEW) dport (1811) @subchain \'ganeti\' { saddr ($HOST_GANETI_V4) ACCEPT; }',
- notarule => true,
- }