Eliminate need for dummy addresses in when running under test

[chef.git] / cookbooks / networking / templates / default / nftables.conf.erb

diff --git a/cookbooks/networking/templates/default/nftables.conf.erb b/cookbooks/networking/templates/default/nftables.conf.erb
index 63f45a0c837eb33dd6cc6c07534193950ef5ee0b..65d090db31d3cd6ed2b19b3ded337c516402e745 100644 (file)
--- a/cookbooks/networking/templates/default/nftables.conf.erb
+++ b/cookbooks/networking/templates/default/nftables.conf.erb
@@ -10,12 +10,16 @@ flush ruleset
 table inet filter {
   set ip-osm-addresses {
     type ipv4_addr
+<%- unless Array(@hosts["inet"]).empty? %>
     elements = { <%= Array(@hosts["inet"]).sort.join(", ") %> }
+<%- end %>
   }
 
   set ip6-osm-addresses {
     type ipv6_addr
+<%- unless Array(@hosts["inet"]).empty? %>
     elements = { <%= Array(@hosts["inet6"]).sort.join(", ") %> }
+<%- end %>
   }
 
   set ip-blacklist {