aboutsummaryrefslogtreecommitdiffstats
path: root/mcp/reclass/classes
diff options
context:
space:
mode:
authorAlexandru Avadanii <Alexandru.Avadanii@enea.com>2019-04-15 01:58:03 +0200
committerAlexandru Avadanii <Alexandru.Avadanii@enea.com>2019-04-15 02:36:13 +0200
commitc7a28fcf419f78aa44af8800e1f35e47471c4bb0 (patch)
tree828cdb96274e66edeed328932e1160f760c8be66 /mcp/reclass/classes
parent5fdc0c1db38310e5fde7833393cfefb9d3e96fb6 (diff)
mcpcontrol: policy based routing for INSTALLER_IP
To bypass Docker 'bridge'-backed network isolation, we previously added an extra routing hop, which broke access from inside the 'mcpcontrol' Docker network (typically 10.20.0.0/24) to its bridge address (10.20.0.1), leading to DNS issues on Salt Master. This change leverages policy based routing to only add the extra routing hop for connections originating from the default Docker bridge network ('docker0'). Note that other Docker networks using the 'bridge' driver are still isolated from 'mcpcontrol'. Fixes: d9b44acb Change-Id: Ib92901c3278ae9b815f28f26d4c26f82bcadacd6 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Diffstat (limited to 'mcp/reclass/classes')
0 files changed, 0 insertions, 0 deletions