← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 2020813] [NEW] OVS hardware offload for non admin users requires custom Neutron API policy

 

Public bug reported:

OVS hardware offload was originally intended to be a feature used by
normal users. But bugfix
https://review.opendev.org/c/openstack/neutron/+/499203 for bug #1713590
removed the ability for non-admins to use OVS hardware offload without
changing neutron default policy in a non-secure manner: "switchdev"
capability must be added to port binding profile after port is created.

At the same time, libvirt node device driver reports "switchdev"
capability and we can translate it from NIC PCI device object to port
binding profile when port is attached.

** Affects: nova
     Importance: Undecided
     Assignee: Alexey Stupnikov (astupnikov)
         Status: In Progress


** Tags: pci

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/2020813

Title:
  OVS hardware offload for non admin users requires custom Neutron API
  policy

Status in OpenStack Compute (nova):
  In Progress

Bug description:
  OVS hardware offload was originally intended to be a feature used by
  normal users. But bugfix
  https://review.opendev.org/c/openstack/neutron/+/499203 for bug
  #1713590 removed the ability for non-admins to use OVS hardware
  offload without changing neutron default policy in a non-secure
  manner: "switchdev" capability must be added to port binding profile
  after port is created.

  At the same time, libvirt node device driver reports "switchdev"
  capability and we can translate it from NIC PCI device object to port
  binding profile when port is attached.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/2020813/+subscriptions



Follow ups