Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add OG service support #1147

Conversation

ArchelonU
Copy link

@ArchelonU ArchelonU commented Dec 12, 2024

SUMMARY

Adding the ability to specify an object group of services in the ACL settings.

ISSUE TYPE
  • Feature Pull Request
COMPONENT NAME

acls.py

ADDITIONAL INFORMATION

Now you can add object-group service when creating ACL rule.

To do this, it is enough to specify a new variable "service_object_group":

- name: ACL_NAME
  acl_type: extended
  aces:
    - sequence: '10'
       grant: 'permit'
       service_object_group: 'OG_WITH_MANY_PORTS'
       source:
         object_group: 'OG_SOURCE_HOSTS'
       destination:
         object_group: 'OG_DESTINATION_HOSTS'

What actually translates into a command:

10 permit object-group OG_WITH_MANY_PORTS object-group OG_SOURCE_HOSTS object-group OG_DESTINATION_HOSTS

Copy link
Author

@ArchelonU ArchelonU left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This works for me

@ArchelonU ArchelonU closed this Dec 12, 2024
@ArchelonU ArchelonU reopened this Dec 12, 2024
@ArchelonU ArchelonU closed this Dec 12, 2024
@ArchelonU ArchelonU deleted the feature/Add-OG-service-support branch December 12, 2024 08:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant