ironic-inspector/releasenotes/notes/firewall-refactoring-17e8ad764f2cde8d.yaml
Dmitry Tantsur 65d0213e84 Clean up release notes before a release
Change-Id: I9aadc39ca27bf7e9eb23dd18217c86cf426f714b
2017-10-24 11:23:28 +02:00

21 lines
883 B
YAML

---
features:
- |
The PXE filter drivers mechanism is now enabled. The firewall-based
filtering was re-implemented as the ``iptables`` PXE filter driver.
deprecations:
- |
The firewall-specific configuration options were moved from the
``firewall`` to the ``iptables`` group. All options in the ``iptables``
group are now deprecated.
- |
The generic firewall options ``firewall_update_period`` and
``manage_firewall`` were moved under the ``pxe_filter`` group as
``sync_period`` and ``driver=iptables/noop`` respectively.
fixes:
- |
Should the ``iptables`` PXE filter encounter an unexpected exception in the
periodic ``sync`` call, the exception will be logged and the filter driver
will be reset in order to make subsequent ``sync`` calls fail (and
propagate the failure, exiting the **ironc-inspector** process eventually).