openstack/neutron
Code Issues Proposed changes

Missing SG rule default group extension in `Ml2Plugin`

Browse Source 
The extension "security-groups-rules-belongs-to-default-sg" definition
in the ``Ml2Plugin`` supported extension aliases was missing from
patch [1].

[1]https://review.opendev.org/c/openstack/neutron/+/883907

Partial-Bug: #2019960
Change-Id: I3488657c1f093db192681fcba931f2aa6e7e9c8d
This commit is contained in:
Rodolfo Alonso Hernandez
2023-10-03 10:31:03 +00:00
committed by Rodolfo Alonso
parent 78027da56c
commit 1aa1f2f9cb
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
neutron/agent/securitygroups_rpc.py
View File

@@ -21,6 +21,8 @@ from neutron_lib.api.definitions import rbac_security_groups as rbac_sg_apidef
from neutron_lib.api.definitions import security_groups_normalized_cidr from neutron_lib.api.definitions import security_groups_normalized_cidr
from neutron_lib.api.definitions import security_groups_remote_address_group \ from neutron_lib.api.definitions import security_groups_remote_address_group \
as sgag_def as sgag_def
from neutron_lib.api.definitions import \
security_groups_rules_belongs_to_default_sg as sg_rules_default_sg_def
from neutron_lib.api.definitions import security_groups_shared_filtering \ from neutron_lib.api.definitions import security_groups_shared_filtering \
as sg_shared_filtering as sg_shared_filtering
from neutron_lib.api.definitions import stateful_security_group as stateful_sg from neutron_lib.api.definitions import stateful_security_group as stateful_sg
@@ -61,6 +63,7 @@ def disable_security_group_extension_by_config(aliases):
LOG.info('Disabled address-group extension.') LOG.info('Disabled address-group extension.')
_disable_extension('address-group', aliases) _disable_extension('address-group', aliases)
_disable_extension(rbac_ag_apidef.ALIAS, aliases) _disable_extension(rbac_ag_apidef.ALIAS, aliases)
_disable_extension(sg_rules_default_sg_def.ALIAS, aliases)
class SecurityGroupAgentRpc(object): class SecurityGroupAgentRpc(object):

3
neutron/plugins/ml2/plugin.py
View File

@@ -58,6 +58,8 @@ from neutron_lib.api.definitions import rbac_subnetpool
from neutron_lib.api.definitions import security_groups_normalized_cidr from neutron_lib.api.definitions import security_groups_normalized_cidr
from neutron_lib.api.definitions import security_groups_port_filtering from neutron_lib.api.definitions import security_groups_port_filtering
from neutron_lib.api.definitions import security_groups_remote_address_group from neutron_lib.api.definitions import security_groups_remote_address_group
from neutron_lib.api.definitions import \
security_groups_rules_belongs_to_default_sg as sg_rules_default_sg
from neutron_lib.api.definitions import security_groups_shared_filtering from neutron_lib.api.definitions import security_groups_shared_filtering
from neutron_lib.api.definitions import stateful_security_group from neutron_lib.api.definitions import stateful_security_group
from neutron_lib.api.definitions import subnet as subnet_def from neutron_lib.api.definitions import subnet as subnet_def
@@ -242,6 +244,7 @@ class Ml2Plugin(db_base_plugin_v2.NeutronDbPluginV2,
quota_check_limit.ALIAS, quota_check_limit.ALIAS,
port_mac_address_override.ALIAS, port_mac_address_override.ALIAS,
sg_default_rules_ext.ALIAS, sg_default_rules_ext.ALIAS,
sg_rules_default_sg.ALIAS,
] ]
# List of agent types for which all binding_failed ports should try to be # List of agent types for which all binding_failed ports should try to be