From cfd40608907b653a8b05f2e4f4243f8aa677b6e3 Mon Sep 17 00:00:00 2001
From: Brent Baude <bbaude@redhat.com>
Date: Thu, 27 Feb 2020 14:35:48 -0600
Subject: add firewall plugin (no backend) to default cni config

in order for the fall back mechanisms to work in containernetworking-plugins, the firewall plugin must still be called via the cni configuration file.  however, no backend will be specified as we will rely on cni to do the right thing.

Signed-off-by: Brent Baude <bbaude@redhat.com>
---
 cni/87-podman-bridge.conflist | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'cni')

diff --git a/cni/87-podman-bridge.conflist b/cni/87-podman-bridge.conflist
index cd01b97ce..13b09a5b5 100644
--- a/cni/87-podman-bridge.conflist
+++ b/cni/87-podman-bridge.conflist
@@ -26,6 +26,9 @@
         "portMappings": true
       }
     },
+    {
+      "type": "firewall"
+    },
     {
       "type": "tuning"
     }
-- 
cgit v1.2.3-54-g00ecf