From d1a85199c6c53f88cfd72aac28361df38d44f142 Mon Sep 17 00:00:00 2001
From: Magnus Andersson <mandersson@sunet.se>
Date: Fri, 31 May 2024 12:57:38 +0200
Subject: [PATCH] Make kub[cw] a special nftables case

---
 global/overlay/etc/puppet/manifests/cosmos-site.pp | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/global/overlay/etc/puppet/manifests/cosmos-site.pp b/global/overlay/etc/puppet/manifests/cosmos-site.pp
index e749770..92449cd 100644
--- a/global/overlay/etc/puppet/manifests/cosmos-site.pp
+++ b/global/overlay/etc/puppet/manifests/cosmos-site.pp
@@ -54,3 +54,11 @@ if is_hash($ssh_authorized_keys) {
 #      proto => "tcp"
 #   }
 #}
+
+if $::facts['hostname'] =~ /^k8s[wc]/ {
+    warning('Setting nftables to installed but disabled')
+    ensure_resource ('class','sunet::nftables::init', { enabled => false })
+} else {
+    warning('Enabling nftables')
+    ensure_resource ('class','sunet::nftables::init', { })
+}