neutron

NSX: router ports should be set as port_security_enabled=false on interface-attach

Bug #1344266 reported by Aaron Rosen
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Undecided
Aaron Rosen
neutron 2014.2 "juno"
Icehouse
Fix Released
Undecided
Unassigned
neutron 2014.1.2

Bug Description

Previously there was a bug that resulted in a security group being
added to router ports which was not supported in NSX. Removing the
security group didn't actually completely solve the problem as we
never cleared the allowed_address_pairs on the router port. This
patch fixes this issue by disabling port_security_enabled on the
router port.

Aaron Rosen (arosen)
Changed in neutron:
assignee: nobody → Aaron Rosen (arosen)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/108134

Changed in neutron:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (stable/icehouse)

Fix proposed to branch: stable/icehouse
Review: https://review.openstack.org/108534

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/108134
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=25f1439ff356f78ab0d28a74dfc75d50e2f030b6
Submitter: Jenkins
Branch: master

commit 25f1439ff356f78ab0d28a74dfc75d50e2f030b6
Author: Aaron Rosen <email address hidden>
Date: Fri Jul 18 12:09:12 2014 -0700

    NSX: fix router ports port_security_enabled=False

    Previously there was a bug that resulted in a security group being
    added to router ports which was not supported in NSX. Removing the
    security group didn't actually completely solve the problem as we
    never cleared the allowed_address_pairs on the router port. This
    patch fixes this issue by disabling port_security_enabled on the
    router port.

    Change-Id: Ib61756e3bd5866318cbc3bb9856344571399d656
    Closes-bug: 1344266
    Related-bug: 1329043

Changed in neutron:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/icehouse)

Reviewed: https://review.openstack.org/108534
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=b65c036c3322706533b91d955f741f18687c44d1
Submitter: Jenkins
Branch: stable/icehouse

commit b65c036c3322706533b91d955f741f18687c44d1
Author: Aaron Rosen <email address hidden>
Date: Fri Jul 18 12:09:12 2014 -0700

    NSX: fix router ports port_security_enabled=False

    Previously there was a bug that resulted in a security group being
    added to router ports which was not supported in NSX. Removing the
    security group didn't actually completely solve the problem as we
    never cleared the allowed_address_pairs on the router port. This
    patch fixes this issue by disabling port_security_enabled on the
    router port.

    Change-Id: Ib61756e3bd5866318cbc3bb9856344571399d656
    Closes-bug: 1344266
    Related-bug: 1329043
    (cherry picked from commit 25f1439ff356f78ab0d28a74dfc75d50e2f030b6)

tags: added: in-stable-icehouse
Russell Bryant (russellb)
Changed in neutron:
milestone: none → juno-2
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in neutron:
milestone: juno-2 → 2014.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.