which uncovered that the hybrid plugging strategy is relying on get_firewall_required which just return a conf variable for nova.
Currently all neutron tests are running without security groups enforced, and all people using devstack with ml2/ovs/lb plugins are basically just unable to use security groups with default settings.
The issue was introduced with this commit: http:// github. com/openstack- dev/devstack/ commit/ 1143f7e45fd2760 b8d5fecc8fbd598 078ba92fd3
which uncovered that the hybrid plugging strategy is relying on get_firewall_ required which just return a conf variable for nova.
Currently all neutron tests are running without security groups enforced, and all people using devstack with ml2/ovs/lb plugins are basically just unable to use security groups with default settings.