[openstack-dev] [neutron] Location of 'enable_security_group' key in ml2_conf.ini

Martinx - ジェームズ thiagocmartinsc at gmail.com
Mon Apr 7 23:36:50 UTC 2014


Hi!

I faced this problem this weekend, look:
https://bugs.launchpad.net/bugs/1303517

Currently, my ml2_conf.ini contains:

---
[security_group]
enable_security_group = True

[securitygroup]
firewall_driver =
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
---

Best!
Thiago


On 7 April 2014 19:50, Akihiro Motoki <amotoki at gmail.com> wrote:

> Hi Matt,
>
> Thanks for raising this. Both should be the same section.
> [securitygroup] section exists in Havana and previous releases and
> it is the right section name.
>
> When we introduced enable_security_group option, we seem to have added
> a new section
> accidentally. We don't intended to introduce a new section name.
>
> IMO, both firewall_driver and enable_security_group are placed in
> [securitygroup].
> It should be fixed ASAP. I will take care of it.
>
> Thanks,
> Akihiro
>
>
> On Tue, Apr 8, 2014 at 5:51 AM, Matt Kassawara <mkassawara at gmail.com>
> wrote:
> > I'm writing the ML2 configuration sections for the installation guide and
> > found a potential location conflict for the 'enable_security_group' key
> in
> > ml2_conf.ini. In the patch associated with this feature, the example
> > configuration file has this key under [security_group].
> >
> >
> https://review.openstack.org/#/c/67281/33/etc/neutron/plugins/ml2/ml2_conf.ini
> >
> > The most recent gate from the milestone-proposed branch also has this key
> > under [security_group].
> >
> >
> http://logs.openstack.org/76/85676/1/gate/gate-tempest-dsvm-neutron/80af0f6/logs/etc/neutron/plugins/ml2/ml2_conf.ini.txt.gz
> >
> > However, the code has this key under [securitygroup] with the
> > 'firewall_driver' key.
> >
> >
> https://github.com/openstack/neutron/blob/master/neutron/agent/securitygroups_rpc.py
> >
> > What's the proper location for the 'enable_security_group' key?
> >
> > Thanks,
> > Matt
> >
> > _______________________________________________
> > OpenStack-dev mailing list
> > OpenStack-dev at lists.openstack.org
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140407/6bd3ea7c/attachment.html>


More information about the OpenStack-dev mailing list