From 68ba6d232de9bb0a403ec486d2c7458e74f0de91 Mon Sep 17 00:00:00 2001 From: Allain Legacy Date: Wed, 5 Aug 2026 16:06:57 -0400 Subject: [PATCH] CNF-26431: Allow ironic-networking JSON-RPC port in NetworkPolicy Add port 6190 to the allow-ingress-metal NetworkPolicy to permit ingress traffic to the ironic-networking service's JSON-RPC endpoint. Without this, the default-deny policy blocks the ironic container from reaching the networking service when switch management is enabled. Co-Authored-By: Claude Opus 4.6 (1M context) Signed-off-by: Allain Legacy --- ...chine-api-operator_05_networkpolicy-allow-ingress-metal.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/install/0000_90_machine-api-operator_05_networkpolicy-allow-ingress-metal.yaml b/install/0000_90_machine-api-operator_05_networkpolicy-allow-ingress-metal.yaml index 2e52379fba..571345a57a 100644 --- a/install/0000_90_machine-api-operator_05_networkpolicy-allow-ingress-metal.yaml +++ b/install/0000_90_machine-api-operator_05_networkpolicy-allow-ingress-metal.yaml @@ -29,6 +29,8 @@ spec: port: 8084 # image customization service - protocol: TCP port: 9608 # prometheus exporter for ironic + - protocol: TCP + port: 6190 # ironic networking JSON-RPC - protocol: TCP port: 9447 # bare metal webhook service podSelector: {}