Add timer for Azure VIP routes reconciliation

During systemd daemon-reload (e.g., during MCO updates), the
openshift-azure-routes.path unit may miss file change events from
apiserver-watcher. This leaves the azure-vips nftables table empty
even when the API server is back up.

Fix by adding a periodic timer that triggers reconciliation every 30
seconds as a fallback. The path unit still provides immediate response
to file changes. Also wrap the service ExecStart with flock to prevent
concurrent executions when both triggers fire simultaneously.

Signed-off-by: Riccardo Ravaioli <[email protected]>

Author: ricky-rav

templates/master/00-master/azure/units/openshift-azure-routes.service.yaml

@@ -8,6 +8,6 @@ contents: |
   
   [Service]
   Type=simple
-  ExecStart=/bin/bash /opt/libexec/openshift-azure-routes.sh start
+  ExecStart=/usr/bin/flock --exclusive --nonblock /run/azure-routes.lock /bin/bash /opt/libexec/openshift-azure-routes.sh start
   User=root
   SyslogIdentifier=openshift-azure-routes

templates/master/00-master/azure/units/openshift-azure-routes.timer.yaml

@@ -0,0 +1,12 @@
+name: openshift-azure-routes.timer
+enabled: true
+contents: |
+  [Unit]
+  Description=Periodic reconciliation of Azure VIP routes
+
+  [Timer]
+  OnBootSec=30
+  OnUnitActiveSec=30
+
+  [Install]
+  WantedBy=timers.target