Skip to content

[action] [PR:14229] [storage_backend] Add backend acl service #14339

Merged
mssonicbld merged 1 commit intosonic-net:202211from
mssonicbld:cherry/202211/14229
Mar 19, 2023
Merged

[action] [PR:14229] [storage_backend] Add backend acl service #14339
mssonicbld merged 1 commit intosonic-net:202211from
mssonicbld:cherry/202211/14229

Conversation

@mssonicbld
Copy link
Collaborator

No description provided.

Why I did it
This PR addresses the issue mentioned above by loading the acl config as a service on a storage backend device

How I did it
The new acl service is a oneshot service which will start after swss and does some retries to ensure that the SWITCH_CAPABILITY info is present before attempting to load the acl rules. The service is also bound to sonic targets which ensures that it gets restarted during minigraph reload and config reload

How to verify it
Build an image with the following changes and did the following tests

Verified that acl is loaded successfully on a storage backend device after a switch boot up
Verified that acl is loaded successfully on a storage backend ToR after minigraph load and config reload
Verified that acl is not loaded if the device is not a storage backend ToR or the device does not have a DATAACL table

Signed-off-by: Neetha John <nejo@microsoft.com>
@mssonicbld
Copy link
Collaborator Author

Original PR: #14229

@mssonicbld mssonicbld merged commit 0aacc45 into sonic-net:202211 Mar 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants