From aa04494879ed9ce7cf894c5ae2199d559c990d2e Mon Sep 17 00:00:00 2001 From: Mark Goddard Date: Mon, 16 Oct 2017 11:40:27 +0100 Subject: [PATCH] Enable inspector firewall management by default Modifies the default value for inspector_manage_firewall from False to True. Management of the firewall by ironic inspector is important to ensure that DHCP offers are not made to nodes during provisioning by inspector's DHCP server. --- ansible/group_vars/all/inspector | 2 +- doc/source/release-notes.rst | 11 +++++++++++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/ansible/group_vars/all/inspector b/ansible/group_vars/all/inspector index 55e63e8be..7ea902da7 100644 --- a/ansible/group_vars/all/inspector +++ b/ansible/group_vars/all/inspector @@ -15,7 +15,7 @@ inspector_ipa_ramdisk_upstream_url: "{{ ipa_ramdisk_upstream_url }}" # Ironic inspector processing configuration. # Whether inspector should manage the firewall. -inspector_manage_firewall: False +inspector_manage_firewall: True # List of of default inspector processing plugins. inspector_processing_hooks_default: diff --git a/doc/source/release-notes.rst b/doc/source/release-notes.rst index d5c36ad42..d3a450587 100644 --- a/doc/source/release-notes.rst +++ b/doc/source/release-notes.rst @@ -2,6 +2,17 @@ Release Notes ============= +In Development +============== + +Upgrade Notes +------------- + +* Modifies the default value for ``inspector_manage_firewall`` from ``False`` + to ``True``. Management of the firewall by ironic inspector is important to + ensure that DHCP offers are not made to nodes during provisioning by + inspector's DHCP server. + Kayobe 3.0.0 ============