Minor changes for Istio configuration

*Apply minor changes for remote access to Istio ingress

Change-Id: I650e57041c317fcf91c674b4ed4fd93ef3cb30df

diff --git a/platform/cnf/src/sdewan.user b/platform/cnf/src/sdewan.user
index 82642e7..5d000a5 100644 (file)
--- a/platform/cnf/src/sdewan.user
+++ b/platform/cnf/src/sdewan.user
@@ -13,13 +13,13 @@ then
 else
    iptables -t nat -D $SNAT_RULE
    iptables -t nat -D PREROUTING -p tcp --dport 6443 -j DNAT --to-destination $api_server
-   iptables -t nat -D PREROUTING -i net0 -j DNAT --to-destination $istio_ingress
+   iptables -t nat -D PREROUTING -i net1 -j DNAT --to-destination $istio_ingress
 fi
 
 iptables -t nat -A $SNAT_RULE
 iptables -t nat -A PREROUTING -p tcp --dport 6443 -j DNAT --to-destination $api_server
 if [[ $istio_ingress != "NXDOMAIN" ]];
 then
-  iptables -t nat -A PREROUTING -i net0 -j DNAT --to-destination $istio_ingress
+  iptables -t nat -A PREROUTING -i net1 -j DNAT --to-destination $istio_ingress
 fi
 

diff --git a/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh b/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh
index 6794d08..9a4139d 100755 (executable)
--- a/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh
+++ b/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh
@@ -282,7 +282,7 @@ spec:
     - pnetwork
   input: ACCEPT
   output: ACCEPT
-  forward: REJECT
+  forward: ACCEPT
   masq: "0"
   mtu_fix: "1"
 EOF