Remove requirement for iptables-services on EL9 generation systems

[sbrowne-godaddy]

Use Case

With the conversion of iptables based commands to use nftables under the hood, the package iptables-services is no longer being built and distributed along side their nft equivalents (i.e. iptables-nft-services). As such, when the iptables family of packages is updated, there is a delay in the matching iptables-services packages from EPEL being distributed.

As iptables-nft-services actually provides everything that this module requires, it should be safe to remove the reliance upon this EPEL package.

Describe the Solution You Would Like

Remove the reliance upon EPEL for the iptables-services package for EL9 (and related FC) OS selections

Describe Alternatives You've Considered

As the reliance upon iptables-services is now reliant upon the 3rd group of EPEL making keeping packages up-to-date a mess, and the existing iptables-nft-services provides all the necessary source material, I felt no other alternative is worth further consideration.

Additional Context

A simple test on EL9 instances with this diff does everything we need from the module.

diff --git a/manifests/params.pp b/manifests/params.pp
index 5fbe898..b62e9fe 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -32,7 +32,7 @@ class firewall::params {
           if versioncmp($facts['os']['release']['full'], '9') >= 0 {
             $service_name = ['nftables','iptables']
             $service_name_v6 = 'ip6tables'
-            $package_name = ['iptables-services', 'nftables', 'iptables-nft-services']
+            $package_name = ['nftables', 'iptables-nft-services']
             $iptables_name = 'iptables-nft'
             $sysconfig_manage = false
             $firewalld_manage = true

[HT43-bqxFqB]

Upvote!