[ml2][ovs] ports without local vlan tag are processed on openflow security group

[LIU Yulong]

We recently met an issue during VM live migration:
1. nova starts live migration
2. plug ports on new host
3. neutron-ovs-agent starts to process the port, but the port is in 'added' and 'updated' set at the same time.
4. because nova still not activate the destination port binding, so there is no local vlan for this port.

Then, ovs-agent met errors:
Error while processing VIF ports: OVSFWTagNotFound: Cannot get tag for port tap092f38ed-a7 from its other_config: {}

Such exception will finally hit rpc_loop try-catch block, a full sync for all ports will be run. This will cause the new port consume a long time to finish the process. Users will have bad experiences of long time packet loss.

A fix should be added for ``setup_port_filters`` to remove ports of the "binding_no_activated_devices".

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/905289

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/905289
Committed: https://opendev.org/openstack/neutron/commit/70eb4006c68fc38ac96ec6e179c3be1e87fa07ca
Submitter: "Zuul (22348)"
Branch: master

commit 70eb4006c68fc38ac96ec6e179c3be1e87fa07ca
Author: LIU Yulong <email address hidden>
Date: Thu Jan 11 15:13:27 2024 +0800

    Not process security group for none active ports

    We recently met an issue during VM live migration:
    1. nova starts live migration
    2. plug ports on new host
    3. neutron-ovs-agent starts to process the port,
       but the port is in 'added' and 'updated' set
       at the same time.
    4. because nova still not activate the destination
       port binding, so there is no local vlan for
       this port.
    Then, ovs-agent met errors:
    Error while processing VIF ports: OVSFWTagNotFound:
    Cannot get tag for port tap092f38ed-a7 from its other_config: {}

    This fix is to remove ports of the
    "binding_no_activated_devices" for ``setup_port_filters``.

    Closes-Bug: #2048979
    Change-Id: I0f1e6bf202ef08f75246d6e99b3774d0b6fc9e2b

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 24.0.0.0rc1 release candidate.