[OVN] OVS to OVN migration should be stopped if OVS agent firewall is "iptables_hybrid"

[Rodolfo Alonso]

The OVS to OVN migration script used in TripleO environment does not support migration of nodes using OVS firewall "iptables_hybrid".

We should prevent this process if any host has this configuration value.

Bugzilla references:
- https://bugzilla.redhat.com/show_bug.cgi?id=2021987
- https://bugzilla.redhat.com/show_bug.cgi?id=2022040

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/818239

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/818239
Committed: https://opendev.org/openstack/neutron/commit/2aa1bbabe355243e109d898eabf87acded2fef2f
Submitter: "Zuul (22348)"
Branch: master

commit 2aa1bbabe355243e109d898eabf87acded2fef2f
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Nov 17 15:25:34 2021 +0000

    [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid"

    Prevent the OVS to OVN migration if any node has the OVS agent
    firewall set to "iptables_hybrid". If present, the migration will
    exit. This check is implemented in the OVN migration script for
    TripleO environments.

    Closes-Bug: #1951272
    Change-Id: I55f25f56f87bfa2a5e330cdf4c1087e8d4082b29

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/neutron/+/826106

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/neutron/+/826107

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/neutron/+/826108

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/neutron/+/826109

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/826107
Committed: https://opendev.org/openstack/neutron/commit/0f025c728cb9bf39bac011b71654f2578010640a
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit 0f025c728cb9bf39bac011b71654f2578010640a
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Nov 17 15:25:34 2021 +0000

    [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid"

    Prevent the OVS to OVN migration if any node has the OVS agent
    firewall set to "iptables_hybrid". If present, the migration will
    exit. This check is implemented in the OVN migration script for
    TripleO environments.

    Closes-Bug: #1951272
    Change-Id: I55f25f56f87bfa2a5e330cdf4c1087e8d4082b29
    (cherry picked from commit 2aa1bbabe355243e109d898eabf87acded2fef2f)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/826106
Committed: https://opendev.org/openstack/neutron/commit/bde4724980414bd0852e2b38985fe5d7b32d64fc
Submitter: "Zuul (22348)"
Branch: stable/xena

commit bde4724980414bd0852e2b38985fe5d7b32d64fc
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Nov 17 15:25:34 2021 +0000

    [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid"

    Prevent the OVS to OVN migration if any node has the OVS agent
    firewall set to "iptables_hybrid". If present, the migration will
    exit. This check is implemented in the OVN migration script for
    TripleO environments.

    Closes-Bug: #1951272
    Change-Id: I55f25f56f87bfa2a5e330cdf4c1087e8d4082b29
    (cherry picked from commit 2aa1bbabe355243e109d898eabf87acded2fef2f)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/826109
Committed: https://opendev.org/openstack/neutron/commit/3780189ca1cb843ad62fcea734ca6207bd12d622
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit 3780189ca1cb843ad62fcea734ca6207bd12d622
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Nov 17 15:25:34 2021 +0000

    [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid"

    Prevent the OVS to OVN migration if any node has the OVS agent
    firewall set to "iptables_hybrid". If present, the migration will
    exit. This check is implemented in the OVN migration script for
    TripleO environments.

    Closes-Bug: #1951272
    Change-Id: I55f25f56f87bfa2a5e330cdf4c1087e8d4082b29
    (cherry picked from commit 2aa1bbabe355243e109d898eabf87acded2fef2f)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/826108
Committed: https://opendev.org/openstack/neutron/commit/c860e2612ec83a7ae70ab709f7d4ba56e5675385
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit c860e2612ec83a7ae70ab709f7d4ba56e5675385
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Wed Nov 17 15:25:34 2021 +0000

    [OVN] Prevent OVS to OVN migration if firewall "iptables_hybrid"

    Prevent the OVS to OVN migration if any node has the OVS agent
    firewall set to "iptables_hybrid". If present, the migration will
    exit. This check is implemented in the OVN migration script for
    TripleO environments.

    Closes-Bug: #1951272
    Change-Id: I55f25f56f87bfa2a5e330cdf4c1087e8d4082b29
    (cherry picked from commit 2aa1bbabe355243e109d898eabf87acded2fef2f)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 20.0.0.0rc1 release candidate.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 17.4.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 18.3.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 19.2.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/networking-ovn train-eol release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron ussuri-eol release.