diff options
| author | Zuul <zuul@review.opendev.org> | 2023-02-05 23:22:44 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2023-02-05 23:22:44 +0000 |
| commit | 147103e07b774388508a9467acb52de475fbb25c (patch) | |
| tree | 7abf3896294fbcb1d8216f01dafc1a1ea12cf2fa /releasenotes | |
| parent | ac30b9906247b7a22c3ff6469b39a2adf64af3a6 (diff) | |
| parent | 7cb481a3dc090d0ebd33a0ef577ae40e13291f5c (diff) | |
| download | neutron-147103e07b774388508a9467acb52de475fbb25c.tar.gz | |
Merge "Allow disable stateful security group extension on older OVN"
Diffstat (limited to 'releasenotes')
| -rw-r--r-- | releasenotes/notes/ovn-config-option-to-disable-stateless-security-groups-241533231a3ed9e7.yaml | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/releasenotes/notes/ovn-config-option-to-disable-stateless-security-groups-241533231a3ed9e7.yaml b/releasenotes/notes/ovn-config-option-to-disable-stateless-security-groups-241533231a3ed9e7.yaml new file mode 100644 index 0000000000..9d6900f5b2 --- /dev/null +++ b/releasenotes/notes/ovn-config-option-to-disable-stateless-security-groups-241533231a3ed9e7.yaml @@ -0,0 +1,13 @@ +--- +other: + - | + OVN mechanism driver has now got config option + ``allow_stateless_action_supported`` which allows manually disable + ``stateful-security-group`` API extension in case when OVN older than 21.06 + is used because support for ``allow-stateful`` action in OVN's ACL was + added in OVN 21.06. + By default this option is set to ``True`` so ``stateful-security-group`` + API extension is enabled. + If this option is set to ``True`` and OVN < 21.06 is used, Neutron will + fallback to the statefull ACLs even if SG is set to be stateless in Neutron + database. |