Openstack Security Group should be validated if they are compatible
with GCE firewall rules. If not we should raise approriate error.
This fix processes security group info in BEFORE_RESPONSE event
of security group and rollbacks earlier created security group if
not compatible.
We can not use BEFORE_CREATE/PRECOMMIT_CREATE as they do not contain
required security group rules info.
Change-Id: I5f1fc67208085ef399f3dcfe5fdec63d4f2ffc51
Closes-bug: #1709002
f7085c1883