neutron-fwaas/releasenotes/notes/auto-association-default-firewall-group-7e9faf1afca1df85.yaml
Yushiro FURUKAWA 816dce17e1 Apply default firewall group for new VM ports
The default fwg will be applied to all new VM ports within
a project if option auto_association_default_firewall_group
is enabled. This provides a way for a tenant network admin
to define a tenant wide firewall policy that applies to all
new VM ports.

Co-Authored-By: Nguyen Phuong An <AnNP@vn.fujitsu.com>

Partial-Implements: blueprint fwaas-api-2.0
Change-Id: I9e897444cd63e44c3274cdc9efedb35f8b325d1f
2018-01-17 15:52:02 +09:00

15 lines
456 B
YAML

---
prelude: >
Associating default firewall group for new VM ports within a project
automatically.
features:
- |
The default firewall group won't be applied to all new VM ports as default.
However, if option ``auto_associate_default_firewall_group`` is enabled in
neutron_fwaas.conf like:
[fwaas]
auto_associate_default_firewall_group = True
Then, the default firewall group will be applied to all new VM ports.