When modifying a security group new rules aren't applied

edit

Hi all, we hit the following bug on stable/liberty using WMI Security Groups with neutron-agent-hyperv: An instance has a security group let's say "http" on it. Assume that we'd like to extend the ports allowed by this security group, so we add a new port to it. When we do that the following error could be seen in neutron agent's log: http://paste.openstack.org/show/eK8KA... and the new port rule isn't applied to the machine.

If we remove the security group from the instance, then add the port to it then re apply it to the instance it works fine.

Thanks, Domi