When a port's security group is changed, the neutron-hyperv-agent
receives a port_update notification. Next, the agent will call the
HyperVSecurityGroupsDriver's prepare_port_filter, in order to process
the new security group.
prepare_port_filter does not remove any old rules from the port.
update_port_filter should called instead, as it removes old rules.
Removes 'security_group_id' and 'remote_group_id' from security
group rules, as they make checking rule equality harder, and they
are not used in applying the rules.
Closes-Bug: #1586354
Change-Id: I1c6f4bd08020ae8ae2dd6ac665a3ddb602b518c4
(cherry picked from commit 9233449d97a9ccd2c6bd008b8c7d035174833d82)
Reviewed: https:/ /review. openstack. org/338234 /git.openstack. org/cgit/ openstack/ networking- hyperv/ commit/ ?id=97fb3236c30 cd96f05908579d3 8c692a1e9da56d
Committed: https:/
Submitter: Jenkins
Branch: stable/mitaka
commit 97fb3236c30cd96 f05908579d38c69 2a1e9da56d
Author: Claudiu Belu <email address hidden>
Date: Wed Jun 22 12:45:43 2016 +0300
Properly updates the SG rules when SG is changed
When a port's security group is changed, the neutron- hyperv- agent ityGroupsDriver 's prepare_ port_filter, in order to process
receives a port_update notification. Next, the agent will call the
HyperVSecur
the new security group.
prepare_ port_filter does not remove any old rules from the port. port_filter should called instead, as it removes old rules.
update_
Removes 'security_group_id' and 'remote_group_id' from security
group rules, as they make checking rule equality harder, and they
are not used in applying the rules.
Closes-Bug: #1586354
Change-Id: I1c6f4bd08020ae 8ae2dd6ac665a3d db602b518c4 2c6bd008b8c7d03 5174833d82)
(cherry picked from commit 9233449d97a9ccd