[Bug 1832450] [NEW] FWaaS v2: removing 1 of few ports from a firewall group set it to INACTIVE

[Adit Sarfaty]

Public bug reported:

When a firewall group has few router interface ports, and the user uses
'openstack firewall group unset <> --port <>' the firewall group is set
to INACTIVE status.

The reason is here: https://opendev.org/openstack/neutron-
fwaas/src/branch/master/neutron_fwaas/services/firewall/service_drivers/agents/agents.py#L329

To calculate last-port we need only to check if the
new_firewall_group['ports'] is empty, and not the diff

This was tested with stable/stein

** Affects: cloud-archive
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1832450

Title:
  FWaaS v2: removing 1 of few ports from  a firewall group set it to
  INACTIVE

Status in Ubuntu Cloud Archive:
  New

Bug description:
  When a firewall group has few router interface ports, and the user
  uses 'openstack firewall group unset <> --port <>' the firewall group
  is set to INACTIVE status.

  The reason is here: https://opendev.org/openstack/neutron-
  fwaas/src/branch/master/neutron_fwaas/services/firewall/service_drivers/agents/agents.py#L329

  To calculate last-port we need only to check if the
  new_firewall_group['ports'] is empty, and not the diff

  This was tested with stable/stein

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1832450/+subscriptions