fix(netpol): don't check if rules already exist in lax mode

SkalaNetworks · SkalaNetworks · commit 8c5443ab3c30 · 2025-10-17T16:23:53.000+02:00
Signed-off-by: SkalaNetworks &lt;contact@skala.network&gt;
diff --git a/pkg/ovs/ovn-nb-acl.go b/pkg/ovs/ovn-nb-acl.go
@@ -128,7 +128,7 @@ func (c *OVNNbClient) UpdateDefaultBlockExceptionsACLOps(npName, pgName, npNames
 			setACLName(acl, npName)
 		}
 
-		acl, err := c.newACL(pgName, direction, util.IngressAllowPriority, match, ovnnb.ACLActionAllowRelated, util.NetpolACLTier, options)
+		acl, err := c.newACLWithoutCheck(pgName, direction, util.IngressAllowPriority, match, ovnnb.ACLActionAllowRelated, util.NetpolACLTier, options)
 		if err != nil {
 			klog.Error(err)
 			klog.Errorf("failed to create new block exceptions acl for network policy %s/%s: %v", npNamespace, npName, err)

Original file line number	Diff line number	Diff line change
`@@ -128,7 +128,7 @@ func (c *OVNNbClient) UpdateDefaultBlockExceptionsACLOps(npName, pgName, npNames`
`128`	`128`	`setACLName(acl, npName)`
`129`	`129`	`}`
`130`	`130`
`131`		`- acl, err := c.newACL(pgName, direction, util.IngressAllowPriority, match, ovnnb.ACLActionAllowRelated, util.NetpolACLTier, options)`
	`131`	`+ acl, err := c.newACLWithoutCheck(pgName, direction, util.IngressAllowPriority, match, ovnnb.ACLActionAllowRelated, util.NetpolACLTier, options)`
`132`	`132`	`if err != nil {`
`133`	`133`	`klog.Error(err)`
`134`	`134`	`klog.Errorf("failed to create new block exceptions acl for network policy %s/%s: %v", npNamespace, npName, err)`