Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[action] [PR:14229] [storage_backend] Add backend acl service #14281

Merged
merged 1 commit into from
Mar 17, 2023
Merged

[action] [PR:14229] [storage_backend] Add backend acl service #14281

merged 1 commit into from
Mar 17, 2023

Commits on Mar 16, 2023

  1. [storage_backend] Add backend acl service (sonic-net#14229) 

    Why I did it
This PR addresses the issue mentioned above by loading the acl config as a service on a storage backend device

How I did it
The new acl service is a oneshot service which will start after swss and does some retries to ensure that the SWITCH_CAPABILITY info is present before attempting to load the acl rules. The service is also bound to sonic targets which ensures that it gets restarted during minigraph reload and config reload

How to verify it
Build an image with the following changes and did the following tests

Verified that acl is loaded successfully on a storage backend device after a switch boot up
Verified that acl is loaded successfully on a storage backend ToR after minigraph load and config reload
Verified that acl is not loaded if the device is not a storage backend ToR or the device does not have a DATAACL table

Signed-off-by: Neetha John <[email protected]>
    @neethajohn @mssonicbld
    neethajohn authored and mssonicbld committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    dba0eb6 View commit details
    Browse the repository at this point in the history