ironic-inspector/releasenotes/notes/firewall-refactoring-17e8ad...

21 lines
884 B
YAML

---
features:
- |
The PXE filter drivers mechanism is now enabled. The firewall-based
filtering was re-implemented as the ``iptables`` PXE filter driver.
deprecations:
- |
The firewall-specific configuration options were moved from the
``firewall`` to the ``iptables`` group. All options in the ``iptables``
group are now deprecated.
- |
The generic firewall options ``firewall_update_period`` and
``manage_firewall`` were moved under the ``pxe_filter`` group as
``sync_period`` and ``driver=iptables/noop`` respectively.
fixes:
- |
Should the ``iptables`` PXE filter encounter an unexpected exception in the
periodic ``sync`` call, the exception will be logged and the filter driver
will be reset in order to make subsequent ``sync`` calls fail (and
propagate the failure, exiting the **ironic-inspector** process eventually).