From 227814e1da81dab018af298d30ea54554759bbb7 Mon Sep 17 00:00:00 2001 From: Adit Sarfaty Date: Tue, 19 Feb 2019 08:54:31 +0200 Subject: [PATCH] NSX|V3: Fix LB advertisment to use admin context Getting all the subnets of the router may require an elevated context. Change-Id: I5b0a7bc46b12687f038ec381e45f5cf551665b09 --- vmware_nsx/services/lbaas/nsx_v3/implementation/lb_utils.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/vmware_nsx/services/lbaas/nsx_v3/implementation/lb_utils.py b/vmware_nsx/services/lbaas/nsx_v3/implementation/lb_utils.py index 458a01f693..c3f0df797e 100644 --- a/vmware_nsx/services/lbaas/nsx_v3/implementation/lb_utils.py +++ b/vmware_nsx/services/lbaas/nsx_v3/implementation/lb_utils.py @@ -229,7 +229,8 @@ def update_rule_in_policy(rule): def update_router_lb_vip_advertisement(context, core_plugin, router, nsx_router_id): # Add a rule to advertise external vips on the router - external_subnets = core_plugin._find_router_gw_subnets(context, router) + external_subnets = core_plugin._find_router_gw_subnets( + context.elevated(), router) external_cidrs = [s['cidr'] for s in external_subnets] if external_cidrs: adv_rule = {