python-openstackclient/releasenotes/notes/better-ipv6-address-suppport-security-group-rules-95272847349982e5.yaml
Brian Haley 969e6abd20 Support IPv6 addresses better
When adding a security group rule, if no IP address is given
we will use '0.0.0.0/0', but if the ethertype is IPv6 we will
leave it as None.  Change this to be '::/0' to match what we
do for IPv4 - use the "any" address.  The neutron server
treats them both the same when checking for duplicates.

Because there are most likely entries in the DB using None
for the IP, print them as '0.0.0.0/0' or '::/0' so it is more
obvious what address they are actually referring to.

Also change to display the Ethertype column by default
instead of with --long, since easily knowing IPv4 or IPv6
is useful.

Change-Id: Ic396fc23caa66b6b0034c5d30b27c6ed499de5a6
Closes-bug: #1735575
2019-07-15 22:35:49 -04:00

16 lines
663 B
YAML

---
features:
- |
Security group rules can now be filtered by Ethertype in
``security group rule list`` using ``--ethertype`` with either
``ipv4`` or ``ipv6`` as an argument.
upgrade:
- |
Security group rule listings now have the ``Ethertype`` field displayed
by default to more easily differentiate between IPv4 and IPv6 rules.
In addition, the ``IP Range`` field of a security group will be
changed to ``0.0.0.0/0`` for IPv4 and ``::/0`` for IPv6 if no
value is returned for the address, based on the Ethertype field of
the rule. For further information see
[Bug `1735575 <https://bugs.launchpad.net/bugs/1735575>`_]