Make lb mechanism driver use enable_security_group flag
This patch allows Neutron security groups to be enabled or disabled with the enable_security_group flag when using the linuxbridge ml2 mechanism driver. Closes-Bug: #1398996 Change-Id: I883c67c93e85668cd9d90b0486e448d906fdf8ed
This commit is contained in:
parent
98c53d5b37
commit
cddf338899
@ -13,6 +13,7 @@
|
|||||||
# License for the specific language governing permissions and limitations
|
# License for the specific language governing permissions and limitations
|
||||||
# under the License.
|
# under the License.
|
||||||
|
|
||||||
|
from neutron.agent import securitygroups_rpc
|
||||||
from neutron.common import constants
|
from neutron.common import constants
|
||||||
from neutron.extensions import portbindings
|
from neutron.extensions import portbindings
|
||||||
from neutron.i18n import _LW
|
from neutron.i18n import _LW
|
||||||
@ -34,10 +35,11 @@ class LinuxbridgeMechanismDriver(mech_agent.SimpleAgentMechanismDriverBase):
|
|||||||
"""
|
"""
|
||||||
|
|
||||||
def __init__(self):
|
def __init__(self):
|
||||||
|
sg_enabled = securitygroups_rpc.is_firewall_enabled()
|
||||||
super(LinuxbridgeMechanismDriver, self).__init__(
|
super(LinuxbridgeMechanismDriver, self).__init__(
|
||||||
constants.AGENT_TYPE_LINUXBRIDGE,
|
constants.AGENT_TYPE_LINUXBRIDGE,
|
||||||
portbindings.VIF_TYPE_BRIDGE,
|
portbindings.VIF_TYPE_BRIDGE,
|
||||||
{portbindings.CAP_PORT_FILTER: True})
|
{portbindings.CAP_PORT_FILTER: sg_enabled})
|
||||||
|
|
||||||
def check_segment_for_agent(self, segment, agent):
|
def check_segment_for_agent(self, segment, agent):
|
||||||
mappings = agent['configurations'].get('interface_mappings', {})
|
mappings = agent['configurations'].get('interface_mappings', {})
|
||||||
|
Loading…
Reference in New Issue
Block a user