[rfe][ovn] Support address group for ovn driver

[Liu Xie]

As the title describes, we can use 'Address_Set' of ovn to support the feature that address group.

OVN is already supporting the feature 'Address_Set' that create a set of address contains IPv4, or IPv6 addresses with optional bitwise or CIDR masks. For details, we can see [0].

For example:
# Create an address set
ovn-nbctl create Address_Set name=as1 addresses=\"10.0.0.2\",\"10.0.0.3\"

# Add acl1 uses as1
ovn-nbctl --wait=hv acl-add pg1 to-lport 1001 'outport == "pg1" && ip4 && ip4.src == $as1' allow

So we can implement the feature that translate the neutron address group to a Address_Set entry and put this entry to a match filed of ovn acl.

[0]https://github.com/ovn-org/ovn/blob/81503d661ed9449ebe85f4b6b3130b75c7dd60bd/ovn-nb.xml#L1641

[Oleg Bondarev (obondarev)]

The description seems a bit unfinished, please update

[Lajos Katona (lajos-katona)]

During the last drivers meeting we discussed this RFE, and approved it with the condition that no API and db change is necessary, and only ml2/ovn must be adopted to use the Address_Set feature of core OVN.
If there is need to change the API or db layers of Neutron we have to ask for a spec which discuss the question in detail.
For the meeting logs see: https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-07-22-14.00.log.html#l-18

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/851509

[Liu Xie (liushy)]

Please review the related patch for ovsdbapp:
Review: https://review.opendev.org/c/openstack/ovsdbapp/+/905044

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/906020

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Slawek Kaplonski <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/906020
Reason: This review is > 4 weeks without comment, and failed Zuul jobs the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.