migration: Delete also SGRs for IPv6

IPv4 and IPv6 have different utility in iptables. This patch adds use of
ip6tables the same way as previously used iptables.

Change-Id: I1e8ef2749ac5705563e539a5e9f02c63347b5dbe
Signed-off-by: Jakub Libosvar <libosvar@redhat.com>
This commit is contained in:
Jakub Libosvar 2022-06-01 17:21:52 -04:00
parent ae66417cee
commit d93cd7d0c0
1 changed files with 7 additions and 2 deletions

View File

@ -42,16 +42,21 @@
- name: Clean neutron datapath security groups from iptables
shell: |
iptables-save > /tmp/iptables-before-cleanup
{{ iptables_exec }}-save > /tmp/iptables-before-cleanup
cat /tmp/iptables-before-cleanup | grep -v neutron-openvswi | \
grep -v neutron-filter > /tmp/iptables-after-cleanup
if ! cmp /tmp/iptables-before-cleanup /tmp/iptables-after-cleanup
then
cat /tmp/iptables-after-cleanup | iptables-restore
cat /tmp/iptables-after-cleanup | {{ iptables_exec }}-restore
echo "Security groups cleaned"
fi
register: out
with_items:
- iptables
- ip6tables
loop_control:
loop_var: iptables_exec
changed_when: "'Security groups cleaned' in out.stdout"
- name: Cleanup neutron datapath resources