neutron/ovn-support-stateless-sg-849170c5d320487e.yaml at dc4a57d96661fcb56ff916cafbbbdc683653e9c4 - neutron - OpenDev: Free Software Needs Free Tools

openstack/neutron

Ihar Hrachyshka a2e5daccb3 Add support for OVN allow-stateless ACLs

Map OpenStack SG stateful=False to OVN ACL allow-stateless action verb.
The verb is added in the latest OVN release, 21.06. Inspect db schema to
determine if the new action is supported by OVN before trying to create
it. Fall back to allow-related when it's not supported yet.

Also-Needs: I7343fb609fab91c20490842378747f7265241e82

This will require ovsdbapp version bump with the patch mentioned above
to make it work.

Change-Id: Ic1c36fb71a9d03e8697583a1ea9453d4c0052f74

2021-06-14 17:05:42 -04:00

7 lines

183 B

YAML

Raw Blame History

 ---
 features:
   - |
     Support stateless security groups with the latest OVN 21.06+.
     The stateful=False security groups are mapped to the new
     "allow-stateless" OVN ACL verb.