Bug 1983964

Nokia is using vhost-net for fastpath dpdk applications on bare metal servers.
There is a check in the startup script to validate if /dev/vhost-net is present or not and that fails to start the container if it is not present.
vhostnet is used also as a communication path between slo and fast path in Nokia's application

Checked on version below, added "needVhostNet": true for Intel NIC and "needVhostNet": true, "isRdma": true for Mellanox NIC in sriovnetworknodepolicy.
Checked sriovnetworknodepolicy, the configurations are present.
Created sriovnetwork and pods which attached the VFs of intel/mellanox card.
Checked /dev/vhost-net was present in pods.

# oc get csv -n openshift-sriov-network-operator 
NAME                                         DISPLAY                   VERSION               REPLACES                                    PHASE
sriov-network-operator.4.10.0-202109231701   SR-IOV Network Operator   4.10.0-202109231701   sriov-network-operator.4.9.0-202109210853   Succeeded

# oc describe sriovnetworknodepolicies.sriovnetwork.openshift.io  mlx277netpolicy1 -n openshift-sriov-network-operator 
Name:         mlx277netpolicy1
Namespace:    openshift-sriov-network-operator
Labels:       <none>
Annotations:  <none>
API Version:  sriovnetwork.openshift.io/v1
Kind:         SriovNetworkNodePolicy
Metadata:
  Creation Timestamp:  2021-09-27T05:45:56Z
  Generation:          1
  Managed Fields:
    API Version:  sriovnetwork.openshift.io/v1
    Fields Type:  FieldsV1
    fieldsV1:
      f:spec:
        .:
        f:isRdma:
        f:mtu:
        f:needVhostNet:
        f:nicSelector:
          .:
          f:deviceID:
          f:pfNames:
          f:vendor:
        f:nodeSelector:
          .:
          f:feature.node.kubernetes.io/sriov-capable:
        f:numVfs:
        f:resourceName:
    Manager:         kubectl-create
    Operation:       Update
    Time:            2021-09-27T05:45:56Z
  Resource Version:  2179571
  UID:               446919b0-70da-4047-b3a8-e0ad503a825a
Spec:
  Device Type:     netdevice
  Is Rdma:         true
  Link Type:       eth
  Mtu:             1800
  Need Vhost Net:  true
  Nic Selector:
    Device ID:  1015
    Pf Names:
      ens2f0
    Vendor:  15b3
  Node Selector:
    feature.node.kubernetes.io/sriov-capable:  true
  Num Vfs:                                     10
  Priority:                                    99
  Resource Name:                               mlx277netpolicy1
Events:                                        <none>


# oc describe sriovnetworknodepolicies.sriovnetwork.openshift.io intelpolicyens1f0 -n openshift-sriov-network-operator 
Name:         intelpolicyens1f0
Namespace:    openshift-sriov-network-operator
Labels:       <none>
Annotations:  <none>
API Version:  sriovnetwork.openshift.io/v1
Kind:         SriovNetworkNodePolicy
Metadata:
  Creation Timestamp:  2021-09-27T05:46:22Z
  Generation:          1
  Managed Fields:
    API Version:  sriovnetwork.openshift.io/v1
    Fields Type:  FieldsV1
    fieldsV1:
      f:spec:
        .:
        f:deviceType:
        f:needVhostNet:
        f:nicSelector:
          .:
          f:deviceID:
          f:pfNames:
          f:rootDevices:
          f:vendor:
        f:nodeSelector:
          .:
          f:feature.node.kubernetes.io/sriov-capable:
        f:numVfs:
        f:priority:
        f:resourceName:
    Manager:         kubectl-create
    Operation:       Update
    Time:            2021-09-27T05:46:22Z
  Resource Version:  2179739
  UID:               fecca1d3-f424-4d6d-a74f-bd4cd29f1f1a
Spec:
  Device Type:     netdevice
  Is Rdma:         false
  Link Type:       eth
  Need Vhost Net:  true
  Nic Selector:
    Device ID:  158b
    Pf Names:
      ens1f0
    Root Devices:
      0000:3b:00.0
    Vendor:  8086
  Node Selector:
    feature.node.kubernetes.io/sriov-capable:  true
  Num Vfs:                                     5
  Priority:                                    99
  Resource Name:                               intelpolicyens1f0
Events:                                        <none>

# oc get pods
NAME             READY   STATUS    RESTARTS   AGE
sriov-testpod    1/1     Running   0          14m
sriovpod-inetl   1/1     Running   0          14m

# oc exec sriov-testpod -it bash
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
bash-5.0# 
bash-5.0# 
bash-5.0# ls /dev/vhost-net
/dev/vhost-net
bash-5.0# exit
exit
# oc exec sriovpod-inetl -it bash
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
bash-5.0# 
bash-5.0# /dev/vhost-net
bash: /dev/vhost-net: Permission denied
bash-5.0# ls /dev/vhost-net
/dev/vhost-net
bash-5.0# exit
exit

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0056