From 0243c2f56bf498b03c6e9541a7e3f34c2cb632fd Mon Sep 17 00:00:00 2001
From: Roey Chen <roeyc@vmware.com>
Date: Sun, 11 Sep 2016 05:04:33 -0700
Subject: [PATCH] Adding release notes for new feature - provider
 security-groups

Change-Id: I949b2ac1b8233b7f600533e182e93cf54536096c
---
 .../provider-security-group-2cfc1231dcaf21ac.yaml  | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml

diff --git a/releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml b/releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml
new file mode 100644
index 0000000000..4ce3aa0a03
--- /dev/null
+++ b/releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml
@@ -0,0 +1,14 @@
+---
+prelude: >
+    Tenant specific blocking firewall rules to be managed via Neutron
+    security-group API
+features:
+    - Admin user can now create a security-group with the 'provider' flag to
+      indicate whether rules take implicit 'deny' action.
+    - Provider security-group rules takes precedence over normal security-group
+      rules
+    - Each tenant may have at most one security-group marked as provider
+    - New tenant ports are associated with the provider
+      security-group automatically, unless explicitly asked otherwise
+    - Supported by NSX V3
+    - Supported by NSX VSphere, version 6.2 or newer
\ No newline at end of file