switch the server naming

manifests/rules/out/puppet.pp

@@ -1,19 +1,19 @@
 # manage outgoing puppet
 class nftables::rules::out::puppet (
-  Variant[String,Array[String,1]] $puppetmaster,
+  Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]] $puppetserver,
   Integer $puppetserver_port = 8140,
 ) {
-  any2array($puppetmaster).each |$index,$pm| {
+  Array($puppetserver, true).each |$index,$ps| {
     nftables::rule {
       "default_out-puppet-${index}":
     }
-    if $pm =~ /:/ {
+    if $ps =~ Stdlib::IP::Address::V6 {
       Nftables::Rule["default_out-puppet-${index}"] {
-        content => "ip6 daddr ${pm} tcp dport ${puppetserver_port} accept",
+        content => "ip6 daddr ${ps} tcp dport ${puppetserver_port} accept",
       }
     } else {
       Nftables::Rule["default_out-puppet-${index}"] {
-        content => "ip daddr ${pm} tcp dport ${puppetserver_port} accept",
+        content => "ip daddr ${ps} tcp dport ${puppetserver_port} accept",
       }
     }
   }

spec/acceptance/all_rules_spec.rb

@@ -48,7 +48,7 @@ class { 'nftables':
       include nftables::rules::out::http
       include nftables::rules::out::ssh::remove
       class{'nftables::rules::out::puppet':
-        puppetmaster => '127.0.0.1',
+        puppetserver => '127.0.0.1',
       }
       include nftables::rules::out::all
       include nftables::rules::out::tor

spec/classes/rules/out/puppet_spec.rb

@@ -0,0 +1,42 @@
+require 'spec_helper'
+
+describe 'nftables::rules::out::puppet' do
+  on_supported_os.each do |os, os_facts|
+    context "on #{os}" do
+      let(:facts) { os_facts }
+      let(:params) do
+        { puppetserver: '1.2.3.4' }
+      end
+
+      context 'default options' do
+        it { is_expected.to compile }
+        it { is_expected.to contain_nftables__rule('default_out-puppet-0').with_content('ip daddr 1.2.3.4 tcp dport 8140 accept') }
+      end
+      context 'with different port' do
+        let(:params) do
+          super().merge({ puppetserver_port: 8141 })
+        end
+
+        it { is_expected.to compile }
+        it { is_expected.to contain_nftables__rule('default_out-puppet-0').with_content('ip daddr 1.2.3.4 tcp dport 8141 accept') }
+      end
+      context 'with ipv6 address' do
+        let(:params) do
+          { puppetserver: 'fe80::1' }
+        end
+
+        it { is_expected.to compile }
+        it { is_expected.to contain_nftables__rule('default_out-puppet-0').with_content('ip6 daddr fe80::1 tcp dport 8140 accept') }
+      end
+      context 'with ipv6 & ipv4 address' do
+        let(:params) do
+          { puppetserver: ['fe80::1', '1.2.3.4'] }
+        end
+
+        it { is_expected.to compile }
+        it { is_expected.to contain_nftables__rule('default_out-puppet-0').with_content('ip6 daddr fe80::1 tcp dport 8140 accept') }
+        it { is_expected.to contain_nftables__rule('default_out-puppet-1').with_content('ip daddr 1.2.3.4 tcp dport 8140 accept') }
+      end
+    end
+  end
+end