nova firewall set to IpTablesFirewallDriver when neutron sec groups enabled

[Lorin Hochstein]

Devstack version: stable/havana

Enabling Neutron security groups does not automatically disable Nova security groups, which causes things to fail.

How to reproduce:

Create a local.conf that looks like this:

[[local|localrc]]
disable_service n-net
enable_service q-svc
enable_service q-agt
enable_service q-dhcp
enable_service q-l3
enable_service q-meta
enable_service neutron
Q_USE_SECGROUP=True

# Expected result:

/etc/nova/nova.conf contains:

firewall_driver = nova.virt.firewall.NoopFirewallDriver

# Actual result:

/etc/nova/nova.conf contains

firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver

[Maciej Szankin (mszankin)]

This might be invalid or might become invalid in following release, as the nova net is going away.

[Sean Dague (sdague)]

No reviews found in this bug, unassigning. Please add a comment with active reviews before assigning an individual, or tag the bug in the gerrit review, which will do that automatically

[Sean Dague (sdague)]

Automatically discovered version havana in description. If this is incorrect, please update the description to include 'https://api.launchpad.net/1.0/devstack version: ...'

[Sean Dague (sdague)]

Automatically discovered version havana in description. If this is incorrect, please update the description to include 'devstack version: ...'