Router RA rule need to be updated when router is created after VM port

[Xu Han Peng]

Router RA rule is added to compute node to allow VM to accept RA from router interface on network node. However, this is only added when router port which sends RA is created before VM port is created.

We should add trigger to allow RA from router port when router port is created after VM port is created.

Looking at the code, we can change notify_security_groups_member_updated in securitygroups_rpc_base.py from

        if port['device_owner'] == q_const.DEVICE_OWNER_DHCP:
            self.notifier.security_groups_provider_updated(context)
        else:
            self.notifier.security_groups_member_updated(
                context, port.get(ext_sg.SECURITYGROUPS))

To:

        if port['device_owner'] in [q_const.DEVICE_OWNER_DHCP,
                                                         q_const.DEVICE_OWNER_ROUTER_INTF]:
            self.notifier.security_groups_provider_updated(context)
        else:
            self.notifier.security_groups_member_updated(
                context, port.get(ext_sg.SECURITYGROUPS))

To get provider rule update triggered when route port is created.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/80932

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/80932
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=b4e318e4b6a01af3a80267016c4cc2b2da2220c2
Submitter: Jenkins
Branch: master

commit b4e318e4b6a01af3a80267016c4cc2b2da2220c2
Author: Xuhan Peng <email address hidden>
Date: Mon Mar 17 16:38:51 2014 +0800

    Trigger provider security group update for RA

    For IPv6 subnets, router RA rule is added to compute node
    to allow VM to accept RA from router interface on network node.
    However, currently this is only done when router port which
    sends RA is created *before* VM port is created.

    This fix triggers provider security group rule update for IPv6 subnet
    when router interface port is created or updated.

    Change-Id: I7d950f12909a0c2a82b129279e6249b9fac80112
    Closes-Bug: 1290252