Add routes and workarounds
Related-bug: MOSSUST-111
Change-Id: Ibf2c4a10e94f575cf716dc5f22b9472e1dbbe1fa
diff --git a/tcp_tests/templates/bm-e7-cicd-pike-ovs-maas/salt.yaml b/tcp_tests/templates/bm-e7-cicd-pike-ovs-maas/salt.yaml
index fb60947..8f2871e 100644
--- a/tcp_tests/templates/bm-e7-cicd-pike-ovs-maas/salt.yaml
+++ b/tcp_tests/templates/bm-e7-cicd-pike-ovs-maas/salt.yaml
@@ -95,3 +95,14 @@
{{SHARED_TEST_TOOLS.MACRO_INSTALL_RECLASS_TOOLS()}}
{{ SHARED_WORKAROUNDS.MACRO_CEPH_SET_PGNUM() }}
{{ SHARED_WORKAROUNDS.CLEAR_CEPH_OSD_DRIVES() }}
+
+- description: Add route cfg01 to kvm01, remove rp_filter (CIS-3-2-7)
+ cmd: |
+ set -x;
+ set -e;
+ salt 'kvm01*' cmd.run 'sysctl -w net.ipv4.ip_forward=1';
+ ip route add 10.167.11.0/24 via 172.16.162.67;
+ sed -i 's/er: 1/er: 0/g' /srv/salt/reclass/classes/service/linux/system/cis/cis-3-2-7.yml;
+ node_name: {{ HOSTNAME_CFG01 }}
+ retry: {count: 1, delay: 5}
+ skip_fail: false