Make kub[cw] a special nftables case

global/overlay/etc/puppet/manifests/cosmos-site.pp

@@ -54,3 +54,11 @@ if is_hash($ssh_authorized_keys) {
 #      proto => "tcp"
 #   }
 #}
+
+if $::facts['hostname'] =~ /^k8s[wc]/ {
+    warning('Setting nftables to installed but disabled')
+    ensure_resource ('class','sunet::nftables::init', { enabled => false })
+} else {
+    warning('Enabling nftables')
+    ensure_resource ('class','sunet::nftables::init', { })
+}