Comment 5 for bug 2038550

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to stx-puppet (master)

Reviewed: https://review.opendev.org/c/starlingx/stx-puppet/+/897873
Committed: https://opendev.org/starlingx/stx-puppet/commit/58581b88e9c21c990dd0219bd2278fc40b42ed8f
Submitter: "Zuul (22348)"
Branch: master

commit 58581b88e9c21c990dd0219bd2278fc40b42ed8f
Author: Andre Kantek <email address hidden>
Date: Tue Oct 10 17:07:40 2023 -0300

    Add k8s cfg file to the OAM firewall script

    In the change
    https://review.opendev.org/c/starlingx/stx-puppet/+/897467 the OAM
    firewall was not updated to pass the k8s config file as argument
    to calico_firewall_apply_policy.sh. It then created an error that
    prevented the global network policy to be created, making the OAM
    interface to block all traffic, except for the failsafed ones.

    This change corrects that

    Test Plan
    [PASS] In AIO-DX remove the current OAM GNP and execute lock/unlock
            on one of the controllers, verify the OAM GNP is recreated.
    [PASS] In AIO-DX remove the current OAM GNP and force the runtime
            execution by creating the file
            /etc/platform/.platform_firewall_config_required and observe
            the request to recreate the OAM GNP

    Closes-Bug: 2038550

    Change-Id: Ica03dbf6ffd9f6f592fa53efa40293191203377a
    Signed-off-by: Andre Kantek <email address hidden>