openstack
/
neutron
Code Issues Proposed changes

Log OVS firewall conjunction creation 

In order to assist debugging of OVS flows involving conjunctions, log
the conjunction ID and other pertinent details.  Without this, there is
no good way to verify the port was added to the correct conjunction.

Change-Id: Ie9c3eaa9c828ef5a0a68a286bc0465f2bcd00a4f
(cherry picked from commit 4b67a06403)
This commit is contained in:
Nate Johnston 2019-10-17 16:00:11 -04:00
parent 1f7cd398d6
commit fe57823263
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
neutron/agent/linux/openvswitch_firewall/firewall.py
View File

@ -1126,6 +1126,13 @@ class OVSFirewallDriver(firewall.FirewallDriver):
rule['remote_group_id'], rule['remote_group_id'],
direction, ethertype, direction, ethertype,
priority_offset) priority_offset)
LOG.debug("Created conjunction %(conj_id)s for SG %(sg_id)s "
"referencing remote SG ID %(remote_sg_id)s on port "
"%(port_id)s.",
{'conj_id': conj_id,
'sg_id': sec_group_id,
'remote_sg_id': rule['remote_group_id'],
'port_id': port.id})
rule1 = rule.copy() rule1 = rule.copy()
del rule1['remote_group_id'] del rule1['remote_group_id']