Compute nodes need br-ex for OVN

[Dan Sneddon]

OVN uses distributed routing by default (where DVR was optional for ML2/OVS). For this reason, the compute nodes are expected to have a br-ex external bridge (with no IP, it's only used for bridging to VLANs).

The existing compute role NIC templates assume that only the controller needs br-ex. The multiple-nics templates do have a compute-dvr.j2.yaml that would do the job, but the other NIC configs are not compatible without modification.

The TripleO Heat Templates NIC config examples in THT/network/config/* should be modified to use br-ex by default on compute nodes, with an option to deploy without the bridge for compute nodes without external connectivity.

This should be fixed for Stein if we want OVN to work in default installations.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/661939

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/661939
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=ff7cce93ebcdf4fd868329be94d618f9e755049f
Submitter: Zuul
Branch: master

commit ff7cce93ebcdf4fd868329be94d618f9e755049f
Author: Kamil Sambor <email address hidden>
Date: Wed May 29 12:50:27 2019 +0200

    Add creating br-ex for compute node in ovn

    For ovn compute nodes we need br-ex exactly like with
    ComputeDVR role. Now we can do this in jinja templates
    using new tag external_bridge

    Change-Id: If44e9cbad714ce3954928407c42a8dc2473fed2e
    Closes-Bug: #1822367

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/663850

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/663850
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=c6294bd8a0638e50c867014d44c32933ccc15bfc
Submitter: Zuul
Branch: stable/stein

commit c6294bd8a0638e50c867014d44c32933ccc15bfc
Author: Kamil Sambor <email address hidden>
Date: Wed May 29 12:50:27 2019 +0200

    Add creating br-ex for compute node in ovn

    For ovn compute nodes we need br-ex exactly like with
    ComputeDVR role. Now we can do this in jinja templates
    using new tag external_bridge

    Change-Id: If44e9cbad714ce3954928407c42a8dc2473fed2e
    Closes-Bug: #1822367
    (cherry picked from commit ff7cce93ebcdf4fd868329be94d618f9e755049f)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 10.6.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 11.1.0 release.

[Cagri Ersen (cagri-ersen)]

What if someone wants to use ComputeHCI role ? Shouldn't CompueHCI role be required extarnal_bridge tag ?

[Brent Eagles (beagles)]

new related bug filed here https://bugzilla.redhat.com/show_bug.cgi?id=1801836 that raises concern in #c7