Support nftables in Cloud VPS
Open, MediumPublic
Actions

Assigned To

None

Authored By

	taavi
	Nov 26 2025, 12:02 PM

Description

Support using nftables on a Puppet-managed Cloud VPS VM.

Related Changes in Gerrit:

Subject	Repo	Branch	Lines +/-
P:wmcs::instance: Convert to firewall wrapper	operations/puppet	production	+12 -10
firewall: Declare resources for both providers	operations/puppet	production	+38 -57
firewall: add cloud services	operations/puppet	production	+17 -21
firewall: add to role::wmcs::instance, remove includes	operations/puppet	production	+1 -3
firewall: remove includes	operations/puppet	production	+0 -3

		Status	Subtype	Assigned	Task
		Open		None	T411089 Support nftables in Cloud VPS
		Open		taavi	T411102 Puppet types causing issues around nftables::service

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change #1211651 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] firewall: Use exported resources to fix ordering issues

Change #1211652 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:wmcs::instance: Convert to firewall wrapper

taavi triaged this task as Medium priority.Dec 1 2025, 12:54 PM

Change #1213590 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] firewall: remove includes

Change #1226371 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] firewall: add to role::wmcs::instance, remove includes

Change #1226944 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] firewall: add cloud services, remove includes