From fe57823263b01cf378b2493870b0cc2e657c3b77 Mon Sep 17 00:00:00 2001 From: Nate Johnston Date: Thu, 17 Oct 2019 16:00:11 -0400 Subject: [PATCH] Log OVS firewall conjunction creation In order to assist debugging of OVS flows involving conjunctions, log the conjunction ID and other pertinent details. Without this, there is no good way to verify the port was added to the correct conjunction. Change-Id: Ie9c3eaa9c828ef5a0a68a286bc0465f2bcd00a4f (cherry picked from commit 4b67a06403c1fad9578f23f9aa72f8d8c925e2b7) --- neutron/agent/linux/openvswitch_firewall/firewall.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/neutron/agent/linux/openvswitch_firewall/firewall.py b/neutron/agent/linux/openvswitch_firewall/firewall.py index 76cb83fd6c8..5752b15eb96 100644 --- a/neutron/agent/linux/openvswitch_firewall/firewall.py +++ b/neutron/agent/linux/openvswitch_firewall/firewall.py @@ -1126,6 +1126,13 @@ class OVSFirewallDriver(firewall.FirewallDriver): rule['remote_group_id'], direction, ethertype, priority_offset) + LOG.debug("Created conjunction %(conj_id)s for SG %(sg_id)s " + "referencing remote SG ID %(remote_sg_id)s on port " + "%(port_id)s.", + {'conj_id': conj_id, + 'sg_id': sec_group_id, + 'remote_sg_id': rule['remote_group_id'], + 'port_id': port.id}) rule1 = rule.copy() del rule1['remote_group_id']