From 4c878d3f4eab3e6511751a10dd7bc505f98049b6 Mon Sep 17 00:00:00 2001
From: Roey Chen <roeyc@vmware.com>
Date: Wed, 11 Nov 2015 07:25:18 -0800
Subject: [PATCH] Explicitly remove nsgroup form the nsgroup container on
 secgroup delete

Change-Id: I91820eed4417ee1b741ac6c28ea7f9ae71e61a75
---
 vmware_nsx/plugins/nsx_v3/plugin.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/vmware_nsx/plugins/nsx_v3/plugin.py b/vmware_nsx/plugins/nsx_v3/plugin.py
index 26ab3a4254..32453803f8 100644
--- a/vmware_nsx/plugins/nsx_v3/plugin.py
+++ b/vmware_nsx/plugins/nsx_v3/plugin.py
@@ -1435,6 +1435,7 @@ class NsxV3Plugin(addr_pair_db.AllowedAddressPairsMixin,
         nsgroup_id, section_id = security.get_sg_mappings(context.session, id)
         super(NsxV3Plugin, self).delete_security_group(context, id)
         firewall.delete_section(section_id)
+        firewall.remove_nsgroup_member(self.nsgroup_container, nsgroup_id)
         firewall.delete_nsgroup(nsgroup_id)
 
     def create_security_group_rule(self, context, security_group_rule):