Page MenuHomeVyOS Platform

default_action return is missing in vyos_firewall_rules
Closed, ResolvedPublic

Description

You can't configure return as a default action in the vyos_firewall_rules module.

yaml
- name: firewall test_chain
  vyos.vyos.vyos_firewall_rules:
    config:
      - afi: ipv4
        rule_sets:
          - name: test_chain
            default_action: return
            enable_default_log: true
            rules:
              - number: 100
                description: "test"
                action: accept
                destination:
                  address: 1.1.1.1
                protocol: tcp_udp
                log: enable
[ERROR]: Task failed: Action failed: value of default_action must be one of: drop, reject, accept, jump, got: return found in config -> rule_sets

11       - set firewall ipv4 forward filter rule 100 protocol icmp
12       - set firewall ipv4 forward filter rule 100 log
13 - name: firewall test_chain
     ^ column 3

fatal: [vyos-test]: FAILED! => {"changed": false, "msg": "value of default_action must be one of: drop, reject, accept, jump, got: return found in config -> rule_sets"}

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)

Event Timeline

catalyys changed the task status from Open to In progress.
catalyys triaged this task as Normal priority.
catalyys created this object in space S1 VyOS Public.

The Pull Request is merged. This can be closed. I can't edit the task, because I get the error, that i can't change the edit policy.

Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.