60a1e19d49
Kuryr is adding sg rules to the loadbalancer to ensure namespace isolation. Octavia is also adding sg rules when creating listeners. Octavia is checking if a rule in the same protocol, direction and port is already created before adding its own. However, if by any chance kuryr is delayed adding its own rules (as it is already happening in some gates), octavia will add its own first, and then kuryr-controller will do it two. Thus having extra rules that will break the isolation enforcement. Closes-Bug: 1810395 Change-Id: If4760625728539adb336e44ce881e04454c09d40 |
||
|---|---|---|
| .. | ||
| drivers | ||
| handlers | ||
| ingress | ||
| managers | ||
| __init__.py | ||
| service.py | ||