openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update neutron from branch 'master'
  - Merge "[OVS][FW] Remote SG IDs left behind when a SG is removed"
  - [OVS][FW] Remote SG IDs left behind when a SG is removed
    
    When any port in the OVS agent is using a security groups (SG) and
    this SG is removed, is marked to be deleted. This deletion process
    is done in [1].
    
    The SG deletion process consists on removing any reference of this SG
    from the firewall and the SG port map. The firewall removes this SG in
    [2].
    
    The information of a SG is stored in:
    * ConjIPFlowManager.conj_id_map = ConjIdMap(). This class stores the
      conjunction IDS (conj_ids) in a dictionary using the following keys:
    
        ConjIdMap.id_map[(sg_id, remote_sg_id, direction, ethertype,
          conj_ids)] = conj_id_XXX
    
    * ConjIPFlowManager.conj_ids is a nested dictionary, built in the
      following way:
    
        self.conj_ids[vlan_tag][(direction, ethertype)][remote_sg_id] = \
          set([conj_id_1, conj_id_2, ...])
    
    This patch stores all conjuntion IDs generated and assigned to the
    tuple (sg_id, remote_sg_id, direction, ethertype). When a SG is
    removed, the deletion method will look for this SG in the new storage
    variable created, ConjIdMap.id_map_group, and will mark all the
    conjuntion IDs related to be removed. That will cleanup those rules
    left in the OVS matching:
      action=conjunction(conj_id, 1/2)
    
    [1]118930f03d/neutron/agent/linux/openvswitch_firewall/firewall.py (L731)
    [2]118930f03d/neutron/agent/linux/openvswitch_firewall/firewall.py (L399)
    
    Change-Id: I63e446a30cf10e7bcd34a6f0d6ba1711301efcbe
    Related-Bug: #1881157
This commit is contained in:
Zuul 2020-07-31 06:22:12 +00:00 committed by Gerrit Code Review
parent fba5bb4c4a
commit e6c95ed050
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
neutron

@ -1 +1 @@
Subproject commit d419d7d1ccbcb019caeb129c7386e39300004dc7
Subproject commit fe79ef22b8edadc02c54435537a6cc947960906f