yahoo-eng-team team mailing list archive

[Dan Prince <dprince@xxxxxxxxxx>]

Public bug reported:

Adds ipset support for Security Groups

In commit 2562a9271c828e982a74593e8fd07be13b0cfc4a we recently added
ipset support for Security Groups.

The default is currently set to True which is not upgrade friendly in
that anyone upgrading to the most recent Neutron code immediately has to
have the ipset binary installed or their commands fail.

It seems like we should set this to false by default (as a safe default)
and allow users to opt in since it is really an optimization...

** Affects: neutron
     Importance: Undecided
     Assignee: Dan Prince (dan-prince)
         Status: In Progress

** Changed in: neutron
     Assignee: (unassigned) => Dan Prince (dan-prince)

** Changed in: neutron
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1369386

Title:
  ipset_enabled = True default is not upgrade friendly

Status in OpenStack Neutron (virtual network service):
  In Progress

Bug description:
  Adds ipset support for Security Groups

  In commit 2562a9271c828e982a74593e8fd07be13b0cfc4a we recently added
  ipset support for Security Groups.

  The default is currently set to True which is not upgrade friendly in
  that anyone upgrading to the most recent Neutron code immediately has
  to have the ipset binary installed or their commands fail.

  It seems like we should set this to false by default (as a safe
  default) and allow users to opt in since it is really an
  optimization...

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1369386/+subscriptions