Like security groups not being applied at runtime. They will only apply if you restart the neutron-openvswitch-agent. Not sure how the RPC is supposed to work here. It seems that the wsgi part doesn't notify correctly, while the rpc-server is happy to hand out the proper security group configuration on a restart of the ovs-agent.
Nope, it's not a viable option to run wsgi/rpc.
We loaded the whole paste app to get past this, but ran into other problems later. https:/ /bugs.launchpad .net/bugs/ 1687896
Like security groups not being applied at runtime. They will only apply if you restart the neutron- openvswitch- agent. Not sure how the RPC is supposed to work here. It seems that the wsgi part doesn't notify correctly, while the rpc-server is happy to hand out the proper security group configuration on a restart of the ovs-agent.
I should probably write a bug-report on that too.