Merge "NSXV: handle missing SG mapping" into stable/victoria

This commit is contained in:
Zuul 2021-04-28 13:22:38 +00:00 committed by Gerrit Code Review
commit 76e6b337da
1 changed files with 3 additions and 0 deletions

View File

@ -4810,6 +4810,9 @@ class NsxVPluginV2(addr_pair_db.AllowedAddressPairsMixin,
with locking.LockManager.get_lock('rule-update-%s' % sg_id): with locking.LockManager.get_lock('rule-update-%s' % sg_id):
# Querying DB for associated dfw section id # Querying DB for associated dfw section id
section_uri = self._get_section_uri(context.session, sg_id) section_uri = self._get_section_uri(context.session, sg_id)
if not section_uri:
error = "NSX mapping for security group %s not found" % sg_id
raise nsx_exc.NsxPluginException(err_msg=error)
logged = self._is_security_group_logged(context, sg_id) logged = self._is_security_group_logged(context, sg_id)
provider = self._is_provider_security_group(context, sg_id) provider = self._is_provider_security_group(context, sg_id)
log_all_rules = cfg.CONF.nsxv.log_security_groups_allowed_traffic log_all_rules = cfg.CONF.nsxv.log_security_groups_allowed_traffic