-
Notifications
You must be signed in to change notification settings - Fork 9
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
remove user rules in Azure that are in Nephe priority range #256
Conversation
f1df862
to
cc7b4d7
Compare
cc7b4d7
to
1ecbc4e
Compare
ee920a6
to
7c1b077
Compare
/nephe-test-e2e-agentless |
7c1b077
to
ccb254d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/LGTM
Signed-off-by: Alexander Liu <[email protected]>
b56bcfe
to
538c9e3
Compare
@@ -15,14 +15,14 @@ | |||
package networkpolicy | |||
|
|||
import ( | |||
runtimev1alpha1 "antrea.io/nephe/apis/runtime/v1alpha1" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sort
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
@@ -45,7 +45,10 @@ func (s *securityGroupImpl) syncImpl(csg cloudSecurityGroup, syncContent *cloudr | |||
if len(syncMembers) > 0 && syncMembers[0].Type == cloudresource.CloudResourceTypeNIC { | |||
cachedMembers, _ = r.getNICsOfCloudResources(s.members) | |||
} | |||
if compareCloudResources(cachedMembers, syncMembers) { | |||
if !membershipOnly && len(syncContent.MembersWithOtherSGAttached) > 0 { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
remove dead code at line 57
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
Signed-off-by: Alexander Liu <[email protected]>
/nephe-test-e2e-agentless |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/LGTM
Description
Currently, Nephe preserves all user custom rules in Azure, even if they fall within the priority range designated for Nephe (2000-4096). This approach can lead to issues and confusions with rule priority computation. To address this, this PR introduces a restriction on Azure user custom rules, removing user custom rules within the Nephe priority range.
Changes