diff --git a/etc/neutron/rootwrap.d/openvswitch-plugin.filters b/etc/neutron/rootwrap.d/openvswitch-plugin.filters index 89c44dd4197..3d253d26cef 100644 --- a/etc/neutron/rootwrap.d/openvswitch-plugin.filters +++ b/etc/neutron/rootwrap.d/openvswitch-plugin.filters @@ -21,3 +21,6 @@ ovsdb-client: CommandFilter, ovsdb-client, root ip: IpFilter, ip, root find: RegExpFilter, find, root, find, /sys/class/net, -maxdepth, 1, -type, l, -printf, %.* ip_exec: IpNetnsExecFilter, ip, root + +# needed for FDB extention +bridge: CommandFilter, bridge, root diff --git a/releasenotes/notes/enable-bridge-command-openvswitch-agent-d07c0b59ea9f864f.yaml b/releasenotes/notes/enable-bridge-command-openvswitch-agent-d07c0b59ea9f864f.yaml new file mode 100644 index 00000000000..8c890dadb3f --- /dev/null +++ b/releasenotes/notes/enable-bridge-command-openvswitch-agent-d07c0b59ea9f864f.yaml @@ -0,0 +1,9 @@ +--- +fixes: + - | + The Openvswitch agent has an extension called ``fdb`` that uses + the Linux ``bridge`` command. + The ``bridge`` command has been added to the + rootwrap openvswitch-plugin.filters file. + For more information, see bug: + `1730407 `_