Bug 2075039 - [ovn][migration][16.2] Support migration to ML2/OVN from ML2/OVS with hybrid firewall
Summary: [ovn][migration][16.2] Support migration to ML2/OVN from ML2/OVS with hybrid ...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: python-networking-ovn
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: z4
: 16.2 (Train on RHEL 8.4)
Assignee: Jakub Libosvar
QA Contact: Roman Safronov
URL:
Whiteboard:
: 2008296 (view as bug list)
Depends On: 2075038 2109516
Blocks: 2022040
TreeView+ depends on / blocked
 
Reported: 2022-04-13 13:28 UTC by Daniel Alvarez Sanchez
Modified: 2022-11-15 11:50 UTC (History)
12 users (show)

Fixed In Version: python-networking-ovn-7.4.2-2.20220409154848.el8ost
Doc Type: Enhancement
Doc Text:
With this update, you can now migrate an ML2/OVS deployment with the iptables_hybrid firewall driver to ML2/OVN.
Clone Of: 2075038
Environment:
Last Closed: 2022-07-29 10:35:51 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 837566 0 None MERGED [ovn][migration] Support migration to OVN from iptables firewall 2022-05-06 21:56:25 UTC
Red Hat Issue Tracker OSP-14663 0 None None None 2022-04-13 13:40:03 UTC

Description Daniel Alvarez Sanchez 2022-04-13 13:28:28 UTC 
+++ This bug was initially created as a clone of Bug #2075038 +++

By not removing the port binding details from the migration tool, we can make the migration from the hybrid firewall possible.

The patch that should enable this process is here:
https://review.opendev.org/c/openstack/neutron/+/837566

The purpose of this BZ is to track the backports and testing of the migration to ML2/OVN from the hybrid firewall, as well as to update our current documentation that states that it is not supported.
Comment 2 Jakub Libosvar 2022-05-06 22:01:07 UTC 

*** This bug has been marked as a duplicate of bug 2021987 ***
Comment 3 Jakub Libosvar 2022-06-14 17:13:24 UTC 
*** Bug 2008296 has been marked as a duplicate of this bug. ***
Comment 4 OSP Team 2022-06-23 10:38:51 UTC 
According to our records, this should be resolved by python-networking-ovn-7.4.2-2.20220409154849.el8ost.  This build is available now.
Comment 5 Roman Safronov 2022-07-28 15:48:25 UTC 
Verified on RHOS-16.2-RHEL-8-20220610.n.1
Verified that is possible to migrate to OVN from OVS+iptables_hybrid firewall driver.

Note: still there are some OVS-specific leftovers
Bug 2109516 - [16.2][OVN migration] iptables hybrid OVS-specific leftovers (qbr/qvb/qvo) still exist after VM migration
Bug 2092463 - migration: stale ip6tables rules after migration   - the BZ already in MODIFIED state

Added corresponding comment to https://bugzilla.redhat.com/show_bug.cgi?id=2054670 in order to document the issues until they are fixed.
Note You need to log in before you can comment on or make changes to this bug.