Description of problem: Since we do not support ovs2ovn migration with iptables_hybrid firewall driver [1] we should block it explicitly in the ovn_migration script. [1] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/networking_with_open_virtual_network/migrating-ml2ovs-to-ovn Version-Release number of selected component (if applicable): RHOS-16.1-RHEL-8-20211104.n.1 How reproducible: 100% Steps to Reproduce: 1. Deploy ml2ovs environment with iptables_hybrid firewall driver. 2. Try to run ovs2ovn migration according to the official documentation. Actual results: ovn_migration script allows customers to perform ovs2ovn migration on an environment with iptables_hybrid firewall driver. This can lead to the situation where customer receives an unsupported OVN configuration where VMs are connected via linux bridges. Expected results: ovn migration script detects existing firewall driver. In case the firewall driver is iptables_hybrid the script prints a message that ovs2ovn migration is not allowed and exits. In case firewall driver is openvswitch the script initiates the ovs2ovn migration as usual.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 16.1.9 bug fix and enhancement advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:8795
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days