openstack
/
kuryr-kubernetes
Code Issues Proposed changes

Ensure lb SG is not updated on member creation 

When enforce_sg_rules is not set the member creation should not trigger
loadbalancer security group rules update. This patch ensures the
action is not triggered in such a case.

Closes-Bug: 1860145
Change-Id: I0d5f6ffd47fe0a1ae998aa4a61a9240ce0accd40
This commit is contained in:
Luis Tomas Bolivar 2020-01-17 14:16:07 +01:00
parent 0e603c0da4
commit 8efde71baf
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
kuryr_kubernetes/controller/drivers/lbaasv2.py
View File

@ -599,7 +599,8 @@ class LBaaSv2Driver(base.LBaaSDriver):
network_policy = (
'policy' in CONF.kubernetes.enabled_handlers and
CONF.kubernetes.service_security_groups_driver == 'policy')
if network_policy and listener_port:
if (network_policy and CONF.octavia_defaults.enforce_sg_rules and
listener_port):
protocol = pool.protocol
sg_rule_name = pool.name
listener_id = pool.listener_id