openstack/trove
Code Issues Proposed changes

Support management security group

Browse Source 
Allow the cloud admin to control the security groups on the management
port of Trove instance, a new config option `management_security_groups`
is introduced for that purpose.

Change-Id: I4b22b87d37792be700d4ec7f78a7ea479ddb5814
Story: 2006466
Task: 36395
This commit is contained in:
Lingxian Kong
2019-08-28 22:11:27 +12:00
parent e739ef6e93
commit a1aa15282e
10 changed files with 227 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
releasenotes/notes/train-02-management-security-group.yaml Normal file
View File

@@ -0,0 +1,11 @@
---
features:
- The cloud admin is able to apply a security group to management port(with
purpose of communicating with control plane and other management tasks) of
the Trove instance, by setting the ``management_security_groups`` config
option. The cloud admin is responsible for managing the security group
rules. The security group and its rules need to be created before deploying
Trove.
upgrade:
- The management security group won't affect the Trove instances created
before upgrade.