-
Task
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
False
-
-
False
-
rhos-connectivity-neutron
-
-
Right now, ovn-controller mounts a HostPath with the vswitchd bridge management socket to program the switch. HostPaths imply privileges available to the container. If we'd like to de-escalate ovn-controller container, we should remove the requirement of AF_UNIX socket when connecting to vswitchd.
As of right now, ovn-controller assumes unix: (AF_INET) scheme is used to connect to vswitchd. Changing this is out of scope for this task. This task will track the switch to AF_INET connection scheme once it's supported by ovn-controller.
With switch need to be ensured network exporter is adapted keeps working https://issues.redhat.com/browse/OSPRH-12558
- is blocked by
-
FDP-243 As an OVN operator, I would like to be able to connect to OVS management socket via AF_INET TCP
-
- Verified
-