diff --git a/bindata/network/multus-networkpolicy/custom-iptables-rules.yaml b/bindata/network/multus-networkpolicy/custom-rules.yaml similarity index 59% rename from bindata/network/multus-networkpolicy/custom-iptables-rules.yaml rename to bindata/network/multus-networkpolicy/custom-rules.yaml index 897c16a622..caeea873ac 100644 --- a/bindata/network/multus-networkpolicy/custom-iptables-rules.yaml +++ b/bindata/network/multus-networkpolicy/custom-rules.yaml @@ -10,8 +10,8 @@ data: custom-v6-rules.txt: | # accept NDP - -p icmpv6 --icmpv6-type neighbor-solicitation -j ACCEPT - -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT + icmpv6 type nd-neighbor-solicit accept + icmpv6 type nd-neighbor-advert accept # accept RA/RS - -p icmpv6 --icmpv6-type router-solicitation -j ACCEPT - -p icmpv6 --icmpv6-type router-advertisement -j ACCEPT + icmpv6 type nd-router-advert accept + icmpv6 type nd-router-solicit accept diff --git a/bindata/network/multus-networkpolicy/multus-networkpolicy.yaml b/bindata/network/multus-networkpolicy/multus-networkpolicy.yaml index d75779b193..a1ead1ff08 100644 --- a/bindata/network/multus-networkpolicy/multus-networkpolicy.yaml +++ b/bindata/network/multus-networkpolicy/multus-networkpolicy.yaml @@ -33,11 +33,9 @@ spec: containers: - name: multus-networkpolicy image: {{.MultiNetworkPolicyImage}} - command: ["/usr/bin/multi-networkpolicy-iptables"] args: - "--host-prefix=/host" - "--container-runtime-endpoint=/run/crio/crio.sock" - - "--pod-iptables=/var/lib/multi-networkpolicy/iptables" - "--network-plugins=macvlan,sriov,ipvlan,bond" - "--custom-v6-ingress-rule-file=/etc/multi-networkpolicy/rules/custom-v6-rules.txt" - "--custom-v6-egress-rule-file=/etc/multi-networkpolicy/rules/custom-v6-rules.txt"