commit 8c213e45902e21d2fe00639ef7d92b35304bde82
Author: Doug Wiegley <email address hidden>
Date: Sat Mar 2 22:35:52 2019 -0700
When converting sg rules to iptables, do not emit dport if not supported
Since iptables-restore doesn't support --dport with protocol vrrp,
it errors out setting the security groups on the hypervisor.
Marking this a partial fix, since we need a change to prevent
adding those incompatible rules in the first place, but this
patch will stop the bleeding.
Reviewed: https:/ /review. openstack. org/640619 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=8c213e45902 e21d2fe00639ef7 d92b35304bde82
Committed: https:/
Submitter: Zuul
Branch: master
commit 8c213e45902e21d 2fe00639ef7d92b 35304bde82
Author: Doug Wiegley <email address hidden>
Date: Sat Mar 2 22:35:52 2019 -0700
When converting sg rules to iptables, do not emit dport if not supported
Since iptables-restore doesn't support --dport with protocol vrrp,
it errors out setting the security groups on the hypervisor.
Marking this a partial fix, since we need a change to prevent
adding those incompatible rules in the first place, but this
patch will stop the bleeding.
Change-Id: If5e557a8e61c3a a364ba1e2c60be4 cbe74c1ec8f
Partial-Bug: #1818385