Interesting, looking at the BP, there was a tempest test added for all firewall drivers, but it didn't fail with openvswitch mech driver and iptables hybrid firewall driver. We need to make sure that test is enabled correctly and catches this.
https://review.opendev.org/q/topic:%22bp/address-groups-in-sg-rules%22
And thanks for the patch, not sure if it also needs a change in _expand_sg_rule_with_remote_ips().
Interesting, looking at the BP, there was a tempest test added for all firewall drivers, but it didn't fail with openvswitch mech driver and iptables hybrid firewall driver. We need to make sure that test is enabled correctly and catches this.
https:/ /review. opendev. org/q/topic: %22bp/address- groups- in-sg-rules% 22
And thanks for the patch, not sure if it also needs a change in _expand_ sg_rule_ with_remote_ ips().