From 4c0fd91dccdbb64019995f61af0a1333c5a67d25 Mon Sep 17 00:00:00 2001 From: Michael Johnson Date: Fri, 8 Mar 2019 15:23:27 -0800 Subject: [PATCH] Add a prelude to the Stein release notes This patch adds a prelude to the stein release notes and fixes some formatting issues in previous Stein release notes. Change-Id: Ic0e8d9e70eb61ef471304ecfd9985c8da0725b3d --- .../Add-Stein-Prelude-7d8290b803db8c56.yaml | 23 +++++++++++++++++++ .../add_tag_support-4735534f4066b9af.yaml | 14 +++++------ .../notes/bug-1797130-8c9bfa50d9b6c955.yaml | 10 ++++---- 3 files changed, 35 insertions(+), 12 deletions(-) create mode 100644 releasenotes/notes/Add-Stein-Prelude-7d8290b803db8c56.yaml diff --git a/releasenotes/notes/Add-Stein-Prelude-7d8290b803db8c56.yaml b/releasenotes/notes/Add-Stein-Prelude-7d8290b803db8c56.yaml new file mode 100644 index 0000000000..d335c4d3bf --- /dev/null +++ b/releasenotes/notes/Add-Stein-Prelude-7d8290b803db8c56.yaml @@ -0,0 +1,23 @@ +--- +prelude: | + For the OpenStack Stein release, the Octavia team is excited to announce + support for: Octavia flavors, TLS client authentication, backend + re-encryption, and object tags. + + * Octavia flavors allow an operator to define "flavors" of load balancers, + such as "active-standby" or "single" using the amphora driver, that + configure the load balancer topology. The Amphora driver also supports + specifying the nova compute flavor to use for the load balancer amphora. + * TLS client authentication allows the listener to request a client + certificate from users connecting to the load balancer. This certificate + can then be checked against a CA certificate and optionally a certificate + revocation list. New HTTP header insertions allow passing client + certificate information to the backend members, while new L7 rules + allow you to take custom actions based on the content of the client + certificate. + * Backend re-encryption allows users to configure pools to initiate TLS + connections to the backend member servers. This enables load balancers + to authenticate and encrypt connections from the load balancer to the + backend member server. + * Object tags allow users to assign a list of strings to the load balancer + objects that can then be used for advanced API list filtering. diff --git a/releasenotes/notes/add_tag_support-4735534f4066b9af.yaml b/releasenotes/notes/add_tag_support-4735534f4066b9af.yaml index 58cc42db74..d3b0b68123 100644 --- a/releasenotes/notes/add_tag_support-4735534f4066b9af.yaml +++ b/releasenotes/notes/add_tag_support-4735534f4066b9af.yaml @@ -3,10 +3,10 @@ features: - | Added tags property for Octavia resources. It includes: - * Load balancer - * Listener - * Member - * Pool - * L7rule - * L7policy - * Health Monitor + * Load balancer + * Listener + * Member + * Pool + * L7rule + * L7policy + * Health Monitor diff --git a/releasenotes/notes/bug-1797130-8c9bfa50d9b6c955.yaml b/releasenotes/notes/bug-1797130-8c9bfa50d9b6c955.yaml index 09f385b7a6..0ce0a48178 100644 --- a/releasenotes/notes/bug-1797130-8c9bfa50d9b6c955.yaml +++ b/releasenotes/notes/bug-1797130-8c9bfa50d9b6c955.yaml @@ -3,9 +3,9 @@ features: - | Listeners default timeouts can be set by config in section haproxy_amphora: - * `timeout_client_data`: Frontend client inactivity timeout - * `timeout_member_connect`: Backend member connection timeout - * `timeout_member_data`: Backend member inactivity timeout - * `timeout_tcp_inspect`: Time to wait for TCP packets for content inspection + * `timeout_client_data`: Frontend client inactivity timeout + * `timeout_member_connect`: Backend member connection timeout + * `timeout_member_data`: Backend member inactivity timeout + * `timeout_tcp_inspect`: Time to wait for TCP packets for content inspection - The value for all of these options is expected to be in milliseconds. \ No newline at end of file + The value for all of these options is expected to be in milliseconds.