Merge "NSXV: handle missing SG mapping" into stable/ussuri

This commit is contained in:
Zuul 2021-04-28 13:34:07 +00:00 committed by Gerrit Code Review
commit e5bde160f9
1 changed files with 3 additions and 0 deletions

View File

@ -4819,6 +4819,9 @@ class NsxVPluginV2(addr_pair_db.AllowedAddressPairsMixin,
with locking.LockManager.get_lock('rule-update-%s' % sg_id):
# Querying DB for associated dfw section id
section_uri = self._get_section_uri(context.session, sg_id)
if not section_uri:
error = "NSX mapping for security group %s not found" % sg_id
raise nsx_exc.NsxPluginException(err_msg=error)
logging = self._is_security_group_logged(context, sg_id)
provider = self._is_provider_security_group(context, sg_id)
log_all_rules = cfg.CONF.nsxv.log_security_groups_allowed_traffic