diff options
| author | Zuul <zuul@review.opendev.org> | 2022-03-09 15:40:32 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2022-03-09 15:40:32 +0000 |
| commit | da476a7fea9f4e32e76ba6b1fbb46a3e4b78dcff (patch) | |
| tree | f1d30180292de1236986e797029e5c05aff66019 /releasenotes | |
| parent | 801c2d8fc2236b514bb333cf022dc5161e8d6311 (diff) | |
| parent | caf33be54b3a4c5f2cdd756e122de6aee891154d (diff) | |
| download | kolla-ansible-da476a7fea9f4e32e76ba6b1fbb46a3e4b78dcff.tar.gz kolla-ansible-da476a7fea9f4e32e76ba6b1fbb46a3e4b78dcff.zip | |
Merge "Explicitly unset net.ipv4.ip_forward sysctl"
Diffstat (limited to 'releasenotes')
| -rw-r--r-- | releasenotes/notes/bug-1945453-2-287bfcaf060689d8.yaml | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/releasenotes/notes/bug-1945453-2-287bfcaf060689d8.yaml b/releasenotes/notes/bug-1945453-2-287bfcaf060689d8.yaml new file mode 100644 index 000000000..7fc4d6d32 --- /dev/null +++ b/releasenotes/notes/bug-1945453-2-287bfcaf060689d8.yaml @@ -0,0 +1,16 @@ +--- +security: + - | + Explicitly removes the ``net.ipv4.ip_forward`` sysctl from + ``/etc/sysctl.conf`` on hosts with Neutron L3 Agent. In the absence of + another source for this sysctl, it should revert to the default of 0 after + the next reboot. This is a follow up to a previous change which stopped + setting the sysctl, but leaves existing systems with the original value of + 1 set. + + A deployer looking to more aggressively change the value may set + ``neutron_l3_agent_host_ipv4_ip_forward`` to 0 using a Yoga release of + Kolla Ansible. This option will be removed in future. Any deployments + still relying on the previous value may set + ``neutron_l3_agent_host_ipv4_ip_forward`` to 1. + `LP#1945453 <https://launchpad.net/bugs/1945453>`__ |