When a port's security group is changed, the neutron-hyperv-agent
receives a port_update notification. Next, the agent will call the
HyperVSecurityGroupsDriver's prepare_port_filter, in order to process
the new security group.
prepare_port_filter does not remove any old rules from the port.
update_port_filter should called instead, as it removes old rules.
Removes 'security_group_id' and 'remote_group_id' from security
group rules, as they make checking rule equality harder, and they
are not used in applying the rules.
Reviewed: https:/ /review. openstack. org/332715 /git.openstack. org/cgit/ openstack/ networking- hyperv/ commit/ ?id=9233449d97a 9ccd2c6bd008b8c 7d035174833d82
Committed: https:/
Submitter: Jenkins
Branch: master
commit 9233449d97a9ccd 2c6bd008b8c7d03 5174833d82
Author: Claudiu Belu <email address hidden>
Date: Wed Jun 22 12:45:43 2016 +0300
Properly updates the SG rules when SG is changed
When a port's security group is changed, the neutron- hyperv- agent ityGroupsDriver 's prepare_ port_filter, in order to process
receives a port_update notification. Next, the agent will call the
HyperVSecur
the new security group.
prepare_ port_filter does not remove any old rules from the port. port_filter should called instead, as it removes old rules.
update_
Removes 'security_group_id' and 'remote_group_id' from security
group rules, as they make checking rule equality harder, and they
are not used in applying the rules.
Closes-Bug: #1586354
Change-Id: I1c6f4bd08020ae 8ae2dd6ac665a3d db602b518c4