Merge pull request #1047 from JacobTanenbaum/release-4.8-BZ2077370

Bug 2077370: [release-4.8] fix ipv6 network policy
openshift · May 3, 2022 · 3726afe · 3726afe
2 parents 2661138 + d23d529
commit 3726afe
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/go-controller/pkg/ovn/policy.go b/go-controller/pkg/ovn/policy.go
@@ -361,7 +361,7 @@ func (oc *Controller) createDefaultDenyPortGroup(ns string, nsInfo *namespaceInf
 		return fmt.Errorf("failed to create default deny ACL for port group %v", err)
 	}
 
-	match = getACLMatch(portGroupName, "arp", policyType)
+	match = getACLMatch(portGroupName, "(arp || nd)", policyType)
 	err = addACLPortGroup(ns, portGroupUUID, direction,
 		types.DefaultAllowPriority, match, "allow", policyType, "", "ARPallowPolicy")
 	if err != nil {