Reviewed:  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/986730
Committed: 
https://opendev.org/openstack/ovn-octavia-provider/commit/08c699c95b90041c60a76a462b87fd922b4bbdc2
Submitter: "Zuul (22348)"
Branch:    master

commit 08c699c95b90041c60a76a462b87fd922b4bbdc2
Author: enginrect <[email protected]>
Date:   Thu Apr 30 09:27:52 2026 +0900

    [OVN] Protect LB VIP ports with device_id and device_owner
    
    VIP and additional-VIP ports created by the OVN Octavia provider were
    left with empty device_id and device_owner, allowing other workloads
    (e.g. Nova instances) to attach them. The historical reason for the
    empty device_owner was Bug #1973276 (an OVN port losing its
    "type: virtual" once device_owner was set), which was fixed in
    Neutron in 2022 (commit 4c37497e7c98). The Amphora driver has been
    protecting its own VIP port with device_id='lb-<lb_id>' and
    device_owner='Octavia' since the beginning, relying on Nova's
    _validate_requested_port_ids() rejecting any port attach with a
    non-empty device_id (PortInUse). The OVN provider was never updated
    to follow the same convention.
    
    This patch sets device_id='lb-<lb_id>' (the actual protection
    enforced by Nova) and device_owner='ovn-lb:vip' (an OVN-provider-
    specific identifier) on VIP and additional-VIP ports at creation
    time. The ":distributed" suffix used by OVN_LB_HM_PORT_DISTRIBUTED
    is deliberately *not* reused here: Neutron's OVN mech driver
    pattern-matches on that suffix (is_ovn_metadata_port /
    is_ovn_lb_hm_port in neutron/common/ovn/utils.py) to force the LSP
    to LSP_TYPE_LOCALPORT in ovn_client.py. HM ports really are
    localports; LB VIP ports are "virtual" (or unbound) LSPs and must
    not be turned into localports. A periodic maintenance task
    backfills the same fields on legacy ports.
    
    Closes-Bug: #2150682
    Related-Bug: #1973276
    Assisted-By: Claude Opus 4.7
    Change-Id: I5d4a823f2ba2f14df68f6c52ad0372cc9fd65c20
    Made-with: Cursor
    Signed-off-by: enginrect <[email protected]>

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1973276

Title:
  OVN port loses its virtual type after port update

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1973276/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to