openstack-ansible-os_octavia/releasenotes/notes/octavia_security_group_rule_cidr_default-dbf0cdfd17731a73.yaml
Dmitriy Rabotyagov cea4f2e358 Change default CIDR for security_group
At the moment security group allows to access Amphora SSH/API
from any network which is insecure. We're changing default for
security groups to allow access only from Octavia Management
network.

Change-Id: I6ea6ab4ec1c28a3b354d40f6744434eefb05fcfe
2023-04-19 09:51:08 +00:00

8 lines
233 B
YAML

---
upgrade:
- |
Default value for ``octavia_security_group_rule_cidr`` is changed and
defined to the CIDR of Octavia management network.
To preserve previous behaviour, please override the variable to
`0.0.0.0/0`.