Adding RBAC role to connection does not affect existing connections
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openvswitch (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
It seems that updating the role attribute of a connection has no affect on existing connections. For example when investigating another bug I needed to disable rbac but to get that to take effect I needed to either restart the southbound listener or the ovn-controller.
fwiw these are the steps I took to disable rbac (excluding the restart):
# ovn-sbctl find connection
_uuid : a3b68994-
external_ids : {}
inactivity_probe : 60000
is_connected : false
max_backoff : []
other_config : {}
read_only : false
role : ""
status : {}
target : "pssl:16642"
_uuid : ee53c2b6-
external_ids : {}
inactivity_probe : 60000
is_connected : false
max_backoff : []
other_config : {}
read_only : false
role : ovn-controller
status : {}
target : "pssl:6642"
# ovn-sbctl set connection ee53c2b6-
# ovn-sbctl find connection
_uuid : a3b68994-
external_ids : {}
inactivity_probe : 60000
is_connected : false
max_backoff : []
other_config : {}
read_only : false
role : ""
status : {}
target : "pssl:16642"
_uuid : ee53c2b6-
external_ids : {}
inactivity_probe : 60000
is_connected : false
max_backoff : []
other_config : {}
read_only : false
role : ""
status : {}
target : "pssl:6642"