# Copyright (C) 2009, 2010, 2013, 2014 Nicira Networks, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

# rpmbuild -bb --without check rhel/openvswitch-fedora.spec

# This defines the base package name's version.

%define pkgver 2.13

%define pkgname ovn23.09

# If libcap-ng isn't available and there is no need for running OVS

# as regular user, specify the '--without libcapng'

%bcond_without libcapng

# Enable PIE, bz#955181

%global _hardened_build 1

# RHEL-7 doesn't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

# Build python2 (that provides python) and python3 subpackages on Fedora

# Build only python3 (that provides python) subpackage on RHEL8

# Build only python subpackage on RHEL7

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

# We would see rpmlinit error - E: hardcoded-library-path in '% {_prefix}/lib'.

# But there is no solution to fix this. Using {_lib} macro will solve the

# rpmlink error, but will install the files in /usr/lib64/.

# OVN pacemaker ocf script file is copied in /usr/lib/ocf/resource.d/ovn/

# and we are not sure if pacemaker looks into this path to find the

# OVN resource agent script.

%global ovnlibdir %{_prefix}/lib

Name: %{pkgname}

Summary: Open Virtual Network support

Group: System Environment/Daemons

URL: http://www.ovn.org/

Version: 23.09.4

Release: 33%{?commit0:.%{date}git%{shortcommit0}}%{?dist}

Provides: openvswitch%{pkgver}-ovn-common = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-common < 2.11.0-1

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

License: ASL 2.0 and LGPLv2+ and SISSL

%define ovncommit 6b204436d028d49765929671b20b7f4bc0248a52

# Always pull an upstream release, since this is what we rebase to.

Source: https://github.com/ovn-org/ovn/archive/%{ovncommit}.tar.gz#/ovn-%{version}.tar.gz

%define ovscommit c88a35fc29f0c0eb6189853bfc738c2100d4860f

%define ovsshortcommit c88a35f

Source10: https://github.com/openvswitch/ovs/archive/%{ovscommit}.tar.gz#/openvswitch-%{ovsshortcommit}.tar.gz

%define ovsdir ovs-%{ovscommit}

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.1.3

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Source500: configlib.sh

Source501: gen_config_group.sh

Source502: set_config.sh

# Important: source503 is used as the actual copy file

# @TODO: this causes a warning - fix it?

Source504: arm64-armv8a-linuxapp-gcc-config

Source505: ppc_64-power8-linuxapp-gcc-config

Source506: x86_64-native-linuxapp-gcc-config

Patch:     %{pkgname}.patch

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

# make check dependencies

BuildRequires: procps-ng

%if 0%{?rhel} == 8 || 0%{?fedora}

BuildRequires: python3-pyOpenSSL

%endif

BuildRequires: tcpdump

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

%if 0%{?rhel} >= 9

BuildRequires: python3-scapy

%endif

Requires: hostname openssl iproute module-init-tools

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

# to skip running checks, pass --without check

%bcond_without check

%description

OVN, the Open Virtual Network, is a system to support virtual network

abstraction.  OVN complements the existing capabilities of OVS to add

native support for virtual network abstractions, such as virtual L2 and L3

overlays and security groups.

%package central

Summary: Open Virtual Network support

License: ASL 2.0

Requires: %{pkgname}

Requires: firewalld-filesystem

Provides: openvswitch%{pkgver}-ovn-central = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-central < 2.11.0-1

%description central

OVN DB servers and ovn-northd running on a central node.

%package host

Summary: Open Virtual Network support

License: ASL 2.0

Requires: %{pkgname}

Requires: firewalld-filesystem

Provides: openvswitch%{pkgver}-ovn-host = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-host < 2.11.0-1

%description host

OVN controller running on each host.

%package vtep

Summary: Open Virtual Network support

License: ASL 2.0

Requires: %{pkgname}

Provides: openvswitch%{pkgver}-ovn-vtep = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-vtep < 2.11.0-1

%description vtep

OVN vtep controller

%prep

%autosetup -n ovn-%{ovncommit} -a 10 -p 1

%build

%if 0%{?commit0:1}

# fix the snapshot unreleased version to be the released one.

sed -i.old -e "s/^AC_INIT(openvswitch,.*,/AC_INIT(openvswitch, %{version},/" configure.ac

%endif

./boot.sh

# OVN source code is now separate.

# Build openvswitch first.

# XXX Current openvswitch2.13 doesn't

# use "2.13.0" for version. It's a commit hash

pushd %{ovsdir}

./boot.sh

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki

make %{?_smp_mflags}

popd

# Build OVN.

# XXX OVS version needs to be updated when ovs2.13 is updated.

%configure \

        --with-ovs-source=$PWD/%{ovsdir} \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki

make %{?_smp_mflags}

%install

%make_install

install -p -D -m 0644 \

        rhel/usr_share_ovn_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/ovn

for service in ovn-controller ovn-controller-vtep ovn-northd; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/ovn

install -d $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/

install -p -m 0644 rhel/usr_lib_firewalld_services_ovn-central-firewall-service.xml \

        $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/ovn-central-firewall-service.xml

install -p -m 0644 rhel/usr_lib_firewalld_services_ovn-host-firewall-service.xml \

        $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/ovn-host-firewall-service.xml

install -d -m 0755 $RPM_BUILD_ROOT%{ovnlibdir}/ocf/resource.d/ovn

ln -s %{_datadir}/ovn/scripts/ovndb-servers.ocf \

      $RPM_BUILD_ROOT%{ovnlibdir}/ocf/resource.d/ovn/ovndb-servers

install -p -D -m 0644 rhel/etc_logrotate.d_ovn \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/ovn

# remove unneeded files.

rm -f $RPM_BUILD_ROOT%{_bindir}/ovs*

rm -f $RPM_BUILD_ROOT%{_bindir}/vtep-ctl

rm -f $RPM_BUILD_ROOT%{_sbindir}/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/vtep*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/vtep*

rm -rf $RPM_BUILD_ROOT%{_datadir}/ovn/python

rm -f $RPM_BUILD_ROOT%{_datadir}/ovn/scripts/ovs*

rm -rf $RPM_BUILD_ROOT%{_datadir}/ovn/bugtool-plugins

rm -f $RPM_BUILD_ROOT%{_libdir}/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/*.pc

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/openvswitch

rm -f $RPM_BUILD_ROOT%{_datadir}/ovn/scripts/ovn-bugtool*

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovn-docker-overlay-driver \

        $RPM_BUILD_ROOT/%{_bindir}/ovn-docker-underlay-driver

%check

%if %{with check}

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if ! make check TESTSUITEFLAGS='%{_smp_mflags}'; then

        cat tests/testsuite.log

        if ! make check TESTSUITEFLAGS='--recheck'; then

            cat tests/testsuite.log

            # Presently a test case - "2796: ovn -- ovn-controller incremental processing"

            # is failing on aarch64 arch. Let's not exit for this arch

            # until we figure out why it is failing.

            # Test case 93: ovn.at:12105       ovn -- ACLs on Port Groups is failing

            # repeatedly on s390x. This needs to be investigated.

            %ifnarch aarch64

            %ifnarch ppc64le

            %ifnarch s390x

                exit 1

            %endif

            %endif

            %endif

        fi

    fi

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%pre central

if [ $1 -eq 1 ] ; then

    # Package install.

    /bin/systemctl status ovn-northd.service >/dev/null

    ovn_status=$?

    rpm -ql openvswitch-ovn-central > /dev/null

    if [[ "$?" = "0" && "$ovn_status" = "0" ]]; then

        # ovn-northd service is running which means old openvswitch-ovn-central

        # is already installed and it will be cleaned up. So start ovn-northd

        # service when posttrans central is called.

        touch %{_localstatedir}/lib/rpm-state/ovn-northd

    fi

fi

%pre host

if [ $1 -eq 1 ] ; then

    # Package install.

    /bin/systemctl status ovn-controller.service >/dev/null

    ovn_status=$?

    rpm -ql openvswitch-ovn-host > /dev/null

    if [[ "$?" = "0" && "$ovn_status" = "0" ]]; then

        # ovn-controller service is running which means old

        # openvswitch-ovn-host is installed and it will be cleaned up. So

        # start ovn-controller service when posttrans host is called.

        touch %{_localstatedir}/lib/rpm-state/ovn-controller

    fi

fi

%pre vtep

if [ $1 -eq 1 ] ; then

    # Package install.

    /bin/systemctl status ovn-controller-vtep.service >/dev/null

    ovn_status=$?

    rpm -ql openvswitch-ovn-vtep > /dev/null

    if [[ "$?" = "0" && "$ovn_status" = "0" ]]; then

        # ovn-controller-vtep service is running which means old

        # openvswitch-ovn-vtep is installed and it will be cleaned up. So

        # start ovn-controller-vtep service when posttrans host is called.

        touch %{_localstatedir}/lib/rpm-state/ovn-controller-vtep

    fi

fi

%preun central

%if 0%{?systemd_preun:1}

    %systemd_preun ovn-northd.service

%else

    if [ $1 -eq 0 ] ; then

        # Package removal, not upgrade

        /bin/systemctl --no-reload disable ovn-northd.service >/dev/null 2>&1 || :

        /bin/systemctl stop ovn-northd.service >/dev/null 2>&1 || :

    fi

%endif

%preun host

%if 0%{?systemd_preun:1}

    %systemd_preun ovn-controller.service

%else

    if [ $1 -eq 0 ] ; then

        # Package removal, not upgrade

        /bin/systemctl --no-reload disable ovn-controller.service >/dev/null 2>&1 || :

        /bin/systemctl stop ovn-controller.service >/dev/null 2>&1 || :

    fi

%endif

%preun vtep

%if 0%{?systemd_preun:1}

    %systemd_preun ovn-controller-vtep.service

%else

    if [ $1 -eq 0 ] ; then

        # Package removal, not upgrade

        /bin/systemctl --no-reload disable ovn-controller-vtep.service >/dev/null 2>&1 || :

        /bin/systemctl stop ovn-controller-vtep.service >/dev/null 2>&1 || :

    fi

%endif

%post

%if %{with libcapng}

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVN_USER_ID=:OVN_USER_ID=:' %{_sysconfdir}/sysconfig/ovn

    sed -i 's:\(.*su\).*:\1 openvswitch openvswitch:' %{_sysconfdir}/logrotate.d/ovn

fi

%endif

%post central

%if 0%{?systemd_post:1}

    %systemd_post ovn-northd.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%post host

%if 0%{?systemd_post:1}

    %systemd_post ovn-controller.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%post vtep

%if 0%{?systemd_post:1}

    %systemd_post ovn-controller-vtep.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%postun central

%if 0%{?systemd_postun_with_restart:1}

    %systemd_postun_with_restart ovn-northd.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

    if [ "$1" -ge "1" ] ; then

    # Package upgrade, not uninstall

        /bin/systemctl try-restart ovn-northd.service >/dev/null 2>&1 || :

    fi

%endif

%postun host

%if 0%{?systemd_postun_with_restart:1}

    %systemd_postun_with_restart ovn-controller.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

    if [ "$1" -ge "1" ] ; then

        # Package upgrade, not uninstall

        /bin/systemctl try-restart ovn-controller.service >/dev/null 2>&1 || :

    fi

%endif

%postun vtep

%if 0%{?systemd_postun_with_restart:1}

    %systemd_postun_with_restart ovn-controller-vtep.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

    if [ "$1" -ge "1" ] ; then

        # Package upgrade, not uninstall

        /bin/systemctl try-restart ovn-controller-vtep.service >/dev/null 2>&1 || :

    fi

%endif

%posttrans central

if [ $1 -eq 1 ]; then

    # Package install, not upgrade

    if [ -e %{_localstatedir}/lib/rpm-state/ovn-northd ]; then

        rm %{_localstatedir}/lib/rpm-state/ovn-northd

        /bin/systemctl start ovn-northd.service >/dev/null 2>&1 || :

    fi

fi

%posttrans host

if [ $1 -eq 1 ]; then

    # Package install, not upgrade

    if [ -e %{_localstatedir}/lib/rpm-state/ovn-controller ]; then

        rm %{_localstatedir}/lib/rpm-state/ovn-controller

        /bin/systemctl start ovn-controller.service >/dev/null 2>&1 || :

    fi

fi

%posttrans vtep

if [ $1 -eq 1 ]; then

    # Package install, not upgrade

    if [ -e %{_localstatedir}/lib/rpm-state/ovn-controller-vtep ]; then

        rm %{_localstatedir}/lib/rpm-state/ovn-controller-vtep

        /bin/systemctl start ovn-controller-vtep.service >/dev/null 2>&1 || :

    fi

fi

%files

%{_bindir}/ovn-nbctl

%{_bindir}/ovn-sbctl

%{_bindir}/ovn-trace

%{_bindir}/ovn-detrace

%{_bindir}/ovn_detrace.py

%{_bindir}/ovn-appctl

%{_bindir}/ovn-ic-nbctl

%{_bindir}/ovn-ic-sbctl

%{_bindir}/ovn-debug

%dir %{_datadir}/ovn/

%dir %{_datadir}/ovn/scripts/

%{_datadir}/ovn/scripts/ovn-ctl

%{_datadir}/ovn/scripts/ovn-lib

%{_datadir}/ovn/scripts/ovndb-servers.ocf

%{_mandir}/man8/ovn-ctl.8*

%{_mandir}/man8/ovn-appctl.8*

%{_mandir}/man8/ovn-nbctl.8*

%{_mandir}/man8/ovn-ic-nbctl.8*

%{_mandir}/man8/ovn-trace.8*

%{_mandir}/man1/ovn-detrace.1*

%{_mandir}/man7/ovn-architecture.7*

%{_mandir}/man8/ovn-sbctl.8*

%{_mandir}/man8/ovn-ic-sbctl.8*

%{_mandir}/man8/ovn-debug.8*

%{_mandir}/man5/ovn-nb.5*

%{_mandir}/man5/ovn-ic-nb.5*

%{_mandir}/man5/ovn-sb.5*

%{_mandir}/man5/ovn-ic-sb.5*

%dir %{ovnlibdir}/ocf/resource.d/ovn/

%{ovnlibdir}/ocf/resource.d/ovn/ovndb-servers

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/logrotate.d/ovn

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/ovn

%files central

%{_bindir}/ovn-northd

%{_bindir}/ovn-ic

%{_mandir}/man8/ovn-northd.8*

%{_mandir}/man8/ovn-ic.8*

%{_datadir}/ovn/ovn-nb.ovsschema

%{_datadir}/ovn/ovn-ic-nb.ovsschema

%{_datadir}/ovn/ovn-sb.ovsschema

%{_datadir}/ovn/ovn-ic-sb.ovsschema

%{_unitdir}/ovn-northd.service

%{ovnlibdir}/firewalld/services/ovn-central-firewall-service.xml

%files host

%{_bindir}/ovn-controller

%{_mandir}/man8/ovn-controller.8*

%{_unitdir}/ovn-controller.service

%{ovnlibdir}/firewalld/services/ovn-host-firewall-service.xml

%files vtep

%{_bindir}/ovn-controller-vtep

%{_mandir}/man8/ovn-controller-vtep.8*

%{_unitdir}/ovn-controller-vtep.service

%changelog

* Tue Sep 24 2024 Ales Musil <amusil@redhat.com> - 23.09.4-33

- northd: Fix NULL pointer deref within build_bfd_table.

[Upstream: 8e97c06742cebac4c9bec1f95bda627aa468a2cb]

* Fri Sep 20 2024 Ales Musil <amusil@redhat.com> - 23.09.4-32

- physical: Prevent wrong FDB to be learned with multichassis port. (#FDP-620)

[Upstream: db7c577eca3ac0a030f4a9d626935cc2fc68da07]

* Thu Sep 19 2024 Xavier Simonart <xsimonar@redhat.com> - 23.09.4-31

- ovn-controller: Fix potential assert when exiting.

[Upstream: fa8e36f5a519b76642df1843aafb1c0852c2211b]

* Tue Aug 27 2024 Mark Michelson <mmichels@redhat.com> - 23.09.4-30

- Documentation: Add inclusive-language documentation.

[Upstream: ec2ade138a11f9438dcf8b2e47a98045b41b5585]

* Mon Aug 19 2024 Numan Siddique <numans@ovn.org> - 23.09.4-29

- tests: Skip "IPv6 switching - megaflow check" if scapy is not installed.

[Upstream: caa6dc96d8addd7dfb89ff0def1f7c04e69beb50]

* Fri Aug 16 2024 Numan Siddique <numans@ovn.org> - 23.09.4-28

- Reply only for the multicast ND solicitations. (#FDP-728)

[Upstream: 6b6bfd53dd10fff1925c7f5b3658b689794c8ab9]

* Fri Aug 16 2024 Mark Michelson <mmichels@redhat.com> - 23.09.4-27

- Prepare for 23.09.6.

[Upstream: 3b523c8136099f46d8fe82ff2389d7ad733d77fc]

* Fri Aug 16 2024 Mark Michelson <mmichels@redhat.com> - 23.09.4-26

- Set release date for 23.09.5.

[Upstream: 6582276862c7c1b7bbf879f0af0ce350a9253a78]

* Wed Aug 14 2024 Xavier Simonart <xsimonar@redhat.com> - 23.09.4-25

- ci: Add nftables to containers.

[Upstream: 23b86e41ab8c91b10b9e187a1ebfef8f41ec0fe5]

* Wed Aug 14 2024 Xavier Simonart <xsimonar@redhat.com> - 23.09.4-24

- tests: Skip some tests if nft not installed.

[Upstream: e43b9140e5f8f02cf86e06d69ed9c0df5d01989a]

* Mon Aug 12 2024 Rosemarie O'Riorden <roriorden@redhat.com> - 23.09.4-23

- northd: Clean up SB MAC bindings for deleted ports. (#FDP-723)

[Upstream: 4a98b76fe4dec6029002b7c67c91a8120583006d]

* Mon Aug 12 2024 Ales Musil <amusil@redhat.com> - 23.09.4-22

- controller: Make sure the meter and group tables are initialized.

[Upstream: 563f0b7d2a70f903f43679b18b025e10572c3332]

* Fri Aug 09 2024 Dumitru Ceara <dceara@redhat.com> - 23.09.4-21

- ci: ovn-kubernetes: Move to stable release-1.0 branch. (#FDP-61)

[Upstream: 8e4f3ff204db3a577306f0455e2de99662d284b0]

* Fri Aug 09 2024 Ilya Maximets <i.maximets@ovn.org> - 23.09.4-20

- logical-fields: Add missing multicast matches for MLD and IGMP. (#FDP-728)

[Upstream: ea584fd60936997cd15f2d9d3340d62c1f3b5ace]

* Mon Jul 22 2024 zhangqiang45 <zhangqiang45@lenovo.com> - 23.09.4-19

- northd: Fix issues for Forwarding_Group.

[Upstream: 3cbd4d8e1f3c699bc378e0cab6ae980cef8725cf]

* Fri Jul 19 2024 Vladislav Odintsov <odivlad@gmail.com> - 23.09.4-18

- tests: Fix ssl-ciphers RO sb test with old openssl.

[Upstream: aa4cd0cdd0df5d4dd202bf089f7ff6db58732a9d]

* Tue Jun 25 2024 Ales Musil <amusil@redhat.com> - 23.09.4-17

- ci: Move common build steps into script.

[Upstream: dca6e187d6e63c6f37111aeddb05517886481751]

* Tue Jun 18 2024 Dumitru Ceara <dceara@redhat.com> - 23.09.4-16

- northd: ic: Remove unused function and fix unit test.

[Upstream: 83c2238cbf41f6600fe024ce1df58c9800299bd6]

* Tue Jun 18 2024 Dumitru Ceara <dceara@redhat.com> - 23.09.4-15

- Revert "northd: Don't skip transit switch LSP when creating mcast groups." (#FDP-656)

[Upstream: 5f0809be565713d3634a6c663e122c0bfb5dff92]

* Tue Jun 18 2024 Dumitru Ceara <dceara@redhat.com> - 23.09.4-14

- Revert "ovn-ic: Avoid igmp/mld traffic flooding."

[Upstream: 848b17e907a6d8d333c8d995994d524951ad0efd]

* Tue Jun 18 2024 Dumitru Ceara <dceara@redhat.com> - 23.09.4-13

- Revert "IC: Tansit switch don't flood mcast traffic to router ports if matches igmp group."

[Upstream: dc62643b9cb2eaa3e91bd8df4588d0b8e2aad16c]

* Mon Jun 17 2024 Shibir Basak <shibir.basak@nutanix.com> - 23.09.4-12

- controller: Send RARP/GARP for VIF post link state is up.

[Upstream: 0539de39078ee018fe5a6962d6f2950cec0860fb]

* Wed Jun 12 2024 Vladislav Odintsov <odivlad@gmail.com> - 23.09.4-11

- controller: Store src_mac, src_ip in svc_monitor struct.

[Upstream: d20498c4ef621934f0fb3a416c032313f29c6688]

* Tue Jun 11 2024 Naveen Yerramneni <naveen.yerramneni@nutanix.com> - 23.09.4-10

- controller: Fix issue with ct_commit encode.

[Upstream: 24e0e2dc3bcac752480c958afd0d23420be3b5d4]

* Fri Jun 07 2024 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 23.09.4-9

- northd: Skip arp-proxy flows if the lsp is a router port. (#FDP-96)

[Upstream: cf6cd0f579495906ac189b4b054eb5d5276eda20]

* Wed Jun 05 2024 Ales Musil <amusil@redhat.com> - 23.09.4-8

- ovn-controller: Initialize bitmap to zero.

[Upstream: 76d7a30f6652c9da81c81178ca5eddbf24d81323]

* Wed May 29 2024 Xavier Simonart <xsimonar@redhat.com> - 23.09.4-7

- lflow: Add missing sample flow.

[Upstream: fb8b58913f5275563d8f80ea3658d8c5dfe55d03]

* Wed May 15 2024 Ales Musil <amusil@redhat.com> - 23.09.4-6

- controller: Avoid use after free in LB I-P. (#FDP-610)

[Upstream: a8b1a53244ef885f840be848ae99bf4e406a96ff]

* Tue May 14 2024 Xavier Simonart <xsimonar@redhat.com> - 23.09.4-5

- northd, ic: Fix handling of ovn-appctl resume.

[Upstream: d929ea791822c502989a688a1687fbbc6950d92f]

* Fri May 10 2024 Mark Michelson <mmichels@redhat.com> - 23.09.4-4

- Prepare for 23.09.5.

[Upstream: d70ff69318f4ef4553ee1da32345d5243525b698]