mcpcontrol: policy based routing for INSTALLER_IP 08/67608/1
authorAlexandru Avadanii <Alexandru.Avadanii@enea.com>
Sun, 14 Apr 2019 23:58:03 +0000 (01:58 +0200)
committerAlexandru Avadanii <Alexandru.Avadanii@enea.com>
Wed, 17 Apr 2019 11:56:42 +0000 (11:56 +0000)
commit753e88ca9078f09775c51c4b71aa0f53a919bb88
tree8de9495667db2d97faebf7a5f4aa9afbf4a7455a
parent1c0d367e49e4dfc45988397751d783a0f3cba665
mcpcontrol: policy based routing for INSTALLER_IP

To bypass Docker 'bridge'-backed network isolation, we previously
added an extra routing hop, which broke access from inside the
'mcpcontrol' Docker network (typically 10.20.0.0/24) to its
bridge address (10.20.0.1), leading to DNS issues on Salt Master.

This change leverages policy based routing to only add the extra
routing hop for connections originating from the default Docker
bridge network ('docker0'). Note that other Docker networks
using the 'bridge' driver are still isolated from 'mcpcontrol'.

Fixes: d9b44acb

Change-Id: Ib92901c3278ae9b815f28f26d4c26f82bcadacd6
Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
(cherry picked from commit c7a28fcf419f78aa44af8800e1f35e47471c4bb0)
mcp/scripts/lib_jump_deploy.sh