Fix: remove stale security group rules when VM migration finished

Change-Id: I9303f6bb003ced8e100ebd905ddf6e63193fb4a6
This commit is contained in:
Jian Li 2018-10-23 01:53:10 +09:00
parent 56508dd573
commit b8cdcc156c

View File

@ -102,6 +102,7 @@ import static org.onosproject.openstacknetworking.api.Constants.PRIORITY_ACL_RUL
import static org.onosproject.openstacknetworking.api.Constants.PRIORITY_CT_DROP_RULE;
import static org.onosproject.openstacknetworking.api.Constants.PRIORITY_CT_HOOK_RULE;
import static org.onosproject.openstacknetworking.api.Constants.PRIORITY_CT_RULE;
import static org.onosproject.openstacknetworking.util.OpenstackNetworkingUtil.swapStaleLocation;
import static org.onosproject.openstacknetworking.util.RulePopulatorUtil.computeCtMaskFlag;
import static org.onosproject.openstacknetworking.util.RulePopulatorUtil.computeCtStateFlag;
import static org.onosproject.openstacknetworking.util.RulePopulatorUtil.niciraConnTrackTreatmentBuilder;
@ -762,6 +763,12 @@ public class OpenstackSecurityGroupHandler {
);
removedOsPortStore.remove(instPort.portId());
break;
case OPENSTACK_INSTANCE_MIGRATION_ENDED:
InstancePort revisedInstPort = swapStaleLocation(instPort);
Port port = osNetService.port(instPort.portId());
eventExecutor.execute(() ->
setSecurityGroupRules(revisedInstPort, port, false));
break;
default:
break;
}