cbc473e066
Blueprint: stateless-security-groups Change-Id: Iae39a89b762786e4f05aa61aa0db634941806d41
19 lines
681 B
YAML
19 lines
681 B
YAML
---
|
|
prelude: >
|
|
Added support to create stateless security groups.
|
|
features:
|
|
- |
|
|
Added support for a new stateful-security-group api extension that
|
|
implements stateless security groups for the iptables drivers.
|
|
upgrade:
|
|
- |
|
|
Currently existing security groups will all be set to stateful during
|
|
the alembic migration.
|
|
security:
|
|
- |
|
|
The ``stateless security group`` feature does not work with
|
|
OVS nor OVN driver as the driver is not aware of the ``stateful`` attribute
|
|
in the security group. If ``stateful`` attribute is provided with a
|
|
``False`` value then the attribute value is ignored and the security
|
|
group would behave as stateful.
|