add firewall plugin (no backend) to default cni config

in order for the fall back mechanisms to work in containernetworking-plugins, the firewall plugin must still be called via the cni configuration file.  however, no backend will be specified as we will rely on cni to do the right thing.

Signed-off-by: Brent Baude <bbaude@redhat.com>

1 files changed, 3 insertions, 0 deletions

diff --git a/cni/87-podman-bridge.conflist b/cni/87-podman-bridge.conflist
index cd01b97ce..13b09a5b5 100644
--- a/cni/87-podman-bridge.conflist
+++ b/cni/87-podman-bridge.conflist
@@ -27,6 +27,9 @@
       }
     },
     {
+      "type": "firewall"
+    },
+    {
       "type": "tuning"
     }
   ]