Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
network: make nova to handle port_security_enabled=False
In somes cases we need to have network without any security rules applied, unfortunatly nova does not provide way to remove l3 assignements and always at least expose the default security group. This commit updates code to clear security groups applied to the network when option port_security_enabled=False is activated on the network. Change-Id: I630008a9733624a9d9b59b7aa3b8b2a3f8985d61 Closes-Bug: #1460630 Related-Bug: #1175464
- Loading branch information
Showing
3 changed files
with
285 additions
and
15 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
--- | ||
issues: | ||
- When using Neutron extension 'port_security' and booting an | ||
instance on a network with 'port_security_enabled=False' the Nova | ||
API response says there is a 'default' security group attached to | ||
the instance which is incorrect. However when listing security groups | ||
for the instance there are none listed, which is correct. The API | ||
response will be fixed separately with a microversion. |