Configure outbound interface via nmstate

aleskandro · Nov 12, 2023 · 2fe0744 · 2fe0744
1 parent df21b7c
commit 2fe0744
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 1 deletion.
diff --git a/...ystem/system-preset/90-mitigations.preset → ...stemd/system-preset/90-mitigations.preset b/...ystem/system-preset/90-mitigations.preset → ...stemd/system-preset/90-mitigations.preset
diff --git a/...ystemd/system-preset/99-microshift.preset → ...ystemd/system-preset/70-microshift.preset b/...ystemd/system-preset/99-microshift.preset → ...ystemd/system-preset/70-microshift.preset
@@ -1,3 +1,3 @@
 enable firewall-microshift.service
-enable fix-resolve-conf-dot.service
+enable fix-resolv-conf-dot.service
 enable fix-resolv-conf-coredns.service
diff --git a/overlay.d/15-microshift/usr/lib/systemd/system/nmstate-outbound-interface.service b/overlay.d/15-microshift/usr/lib/systemd/system/nmstate-outbound-interface.service
@@ -0,0 +1,19 @@
+[Unit]
+Description="Configure firewalld for microshift"
+Documentation="https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.14/html/installing/microshift-install-rpm"
+After=network-online.target microshift-ovs-init.service
+Before=microshift.service
+ConditionPathExists=!/var/.microshift-outbound-interface-configured
+ConditionPathExists=/etc/microshift/nmstate-outbound-interface.yaml
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+# TODO: Take some values from the microshift config
+ExecStartPre=/usr/bin/nmstate apply -f /etc/microshift/nmstate-outbound-interface.yaml
+ExecStart=/usr/bin/touch /var/.microshift-outbound-interface-configured
+Restart=on-failure
+RestartSec=30
+
+[Install]
+WantedBy=multi-user.target