From 1561f2f0a5250adb6a5047318766463ca3dd125c 2024-02-18 14:12:44
From: Branko Majic <branko@majic.rs>
Date: 2024-02-18 14:12:44
Subject: [PATCH] MAR-194: Validate maintenance_allowed_sources parameter.

---

diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index d24406fc85c10506d136e5e036c11b7ade43c2ca..c5f44c91f7520867cec41c0ce251529cca8c3eba 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -246,6 +246,12 @@
   notify:
     - Restart ferm
 
+- name: Verify maintenance_allowed_sources parameter
+  fail:
+    msg: "Items in maintenance_allowed_sources must IPv4/IPv6 addresses or subnets: {{ item }}"
+  when: "not (item | ipv4 or item | ipv6)"
+  with_items: "{{ maintenance_allowed_sources }}"
+
 - name: Deploy ferm base rules
   template:
     src: "00-base.conf.j2"