-
Epic
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
[RFE] Requesting `pass-related` action for ACLs
-
8
-
False
-
False
-
-
rhel-9
-
None
-
rhel-net-ovn
-
100% To Do, 0% In Progress, 0% Done
-
ssg_networking
This epic tracks all the effort needed to deliver the solution related to the feature request described below.
What's the feature?
Today OVN acls have allow and allow-related for stateful tracking. However the counterpart for passing is only pass and we don't have pass-related. So to pass statefully there is a need for CMS to create two way ACLs which could be simplified by having a pass-related ACL.
Why is it needed?
See https://issues.redhat.com/browse/FDP-3124 and https://redhat-internal.slack.com/archives/C01G7T6SYSD/p1770660924381709
Who will benefit?
OpenShift/OVN-Kubernetes that use tiered ACLs will no longer require manual two-way ACL creation for stateful pass scenarios.