Comment 2 for bug 2058138

Revision history for this message
Brian Haley (brian-haley) wrote :

Interesting, looking at the BP, there was a tempest test added for all firewall drivers, but it didn't fail with openvswitch mech driver and iptables hybrid firewall driver. We need to make sure that test is enabled correctly and catches this.

https://review.opendev.org/q/topic:%22bp/address-groups-in-sg-rules%22

And thanks for the patch, not sure if it also needs a change in _expand_sg_rule_with_remote_ips().