Ensure lb SG is not updated on member creation
When enforce_sg_rules is not set the member creation should not trigger loadbalancer security group rules update. This patch ensures the action is not triggered in such a case. Closes-Bug: 1860145 Change-Id: I0d5f6ffd47fe0a1ae998aa4a61a9240ce0accd40
This commit is contained in:
parent
0e603c0da4
commit
8efde71baf
|
@ -599,7 +599,8 @@ class LBaaSv2Driver(base.LBaaSDriver):
|
||||||
network_policy = (
|
network_policy = (
|
||||||
'policy' in CONF.kubernetes.enabled_handlers and
|
'policy' in CONF.kubernetes.enabled_handlers and
|
||||||
CONF.kubernetes.service_security_groups_driver == 'policy')
|
CONF.kubernetes.service_security_groups_driver == 'policy')
|
||||||
if network_policy and listener_port:
|
if (network_policy and CONF.octavia_defaults.enforce_sg_rules and
|
||||||
|
listener_port):
|
||||||
protocol = pool.protocol
|
protocol = pool.protocol
|
||||||
sg_rule_name = pool.name
|
sg_rule_name = pool.name
|
||||||
listener_id = pool.listener_id
|
listener_id = pool.listener_id
|
||||||
|
|
Loading…
Reference in New Issue