Description of problem: [OVN] - Create external network's vNIC profile without network filter. When creating an ovn external network on the external provider, it's vNIC profile is created with the default network filter - vdsm-no-mac-spoofing, but it should have no network filter. - In newer version of libvirt the VM won't start - The auto define working as expected Version-Release number of selected component (if applicable): 4.2.5.2_SNAPSHOT-79.gffafd93.0.scratch.master.el7ev How reproducible: 100% Steps to Reproduce: 1. Create new ovn network on ovn external provider Actual results: vNIC profile created with default network filter vdsm-no-mac-spoofing Expected results: external network vNIC profile should have no filter
Created attachment 1459161 [details] engine log
Oh, this makes auto-import feature quite cumbersome to use (it's not really "auto" as you need to remove the filter manually). I hate the idea, but we may need to consider an upgrade script to remove the filter from existing ovn vnic profiles.
(In reply to Dan Kenigsberg from comment #2) > Oh, this makes auto-import feature quite cumbersome to use (it's not really > "auto" as you need to remove the filter manually). > Is the "Import network" and "AutoSync" flow affected, too, or is this bug just about external networks created using oVirt?
(In reply to Dan Kenigsberg from comment #2) > I hate the idea, but we may need to consider an upgrade script to remove the > filter from existing ovn vnic profiles. I am unsure if we should trigger security-related actions which might not be noticed by the administrator. There is the option to let the VMs fail after the update, to notify the admin, and provide a python script to update the vNIC profiles.
(In reply to Dominik Holler from comment #3) > (In reply to Dan Kenigsberg from comment #2) > > Oh, this makes auto-import feature quite cumbersome to use (it's not really > > "auto" as you need to remove the filter manually). > > > > > Is the "Import network" and "AutoSync" flow affected, too, or is this bug > just about external networks created using oVirt? 'Import flow', 'AutoSync' and 'AutoDefine' flows are ok and work as expected, which means they created with 'no filter'. The bug is creating external networks using oVirt only.
Also available in ovirt-engine-0:4.2.6.3_SNAPSHOT-93.g584f531.0.scratch.master.el7ev
Verified on - 4.2.6.3_SNAPSHOT-93.g584f531.0.scratch.master.el7ev
*** Bug 1671739 has been marked as a duplicate of this bug. ***