Below are seome useful puppet things.
in params.pp the source array:
Array[String] $ks_api_source_range = ['0.0.0.0/0','10.0.0.0/8'],
and then in iptables.pp
$ks_api_source_range.each |$source| {
firewall { "${ks_fw_prefix}${ks_api_port} api port from ${source}":
source => $source,
proto => 'tcp',
dport => $ks_api_port,
jump => 'accept',
}
}
For every range or single value on that array, a new separate line in iptables will be created.