Avoid upgrading openvswitch along with other packages

[Brent Eagles]

We should exclude openvswitch packages (and possibly os-net-config too?) whenever we do a "yum update" or similar to unintentionally breaking data or control planes.

[Cédric Jeanneret (cjeanner)]

Is it still an issue? Isn't ovs in containers now?

[Brent Eagles (beagles)]

Openvswitch is not run in containers yet AFAIK. Even when it is, this bug is still valid because we cannot bounce the openvswitch services without potentially breaking data and control planes.

Please note that the gist of this bug will pretty much remain valid "forever". Regardless of whether openvswitch is running in baremetal or a container, updating it is risky. We probably need to look in an "upgrade this on reboot" mechanism.