Add OVN FDB aging scenario tests

The new test class checks the OVN FDB aging functionality implemented
in [1][2]

[1]https://review.opendev.org/c/openstack/neutron/+/877675
[2]https://review.opendev.org/c/openstack/neutron/+/893333

Related-Bug: #OSPRH-893
Change-Id: Id449a33365c5b3579f7bbf36a5becd5ca20f3e76

whitebox_neutron_tempest_plugin/common/utils.py

@@ -301,3 +301,12 @@ def get_neutron_api_service_name():
         return 'q svc'
     else:
         return 'neutron api'
+
+
+def get_ml2_conf_file():
+    """Neutron ML2 config file name depending on the installation type"""
+    if WB_CONF.openstack_type in ('podified', 'devstack'):
+        return '/etc/neutron/plugins/ml2/ml2_conf.ini'
+    else:
+        return ('/var/lib/config-data/puppet-generated/neutron'
+                '/etc/neutron/plugins/ml2/ml2_conf.ini')

whitebox_neutron_tempest_plugin/tests/scenario/test_ovn_fdb.py

@@ -0,0 +1,108 @@
+# Copyright 2024 Red Hat, Inc.
+# All Rights Reserved.
+#
+#    Licensed under the Apache License, Version 2.0 (the "License"); you may
+#    not use this file except in compliance with the License. You may obtain
+#    a copy of the License at
+#
+#         http://www.apache.org/licenses/LICENSE-2.0
+#
+#    Unless required by applicable law or agreed to in writing, software
+#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+#    License for the specific language governing permissions and limitations
+#    under the License.
+
+import time
+
+from neutron_tempest_plugin.common import ssh
+from neutron_tempest_plugin.common import utils
+from oslo_log import log
+from tempest import config
+
+from whitebox_neutron_tempest_plugin.common import utils as wb_utils
+from whitebox_neutron_tempest_plugin.tests.scenario import base as wb_base
+
+CONF = config.CONF
+WB_CONF = CONF.whitebox_neutron_plugin_options
+LOG = log.getLogger(__name__)
+FDB_AGE_THRESHOLD = 5
+
+
+class OvnFdbAgingTest(wb_base.BaseTempestTestCaseOvn):
+
+    @classmethod
+    def resource_setup(cls):
+        super().resource_setup()
+        cls.discover_nodes()
+
+    def _check_mac_in_ovn_sb_fdb(self, mac_address, is_present=True):
+        def _check_mac():
+            cmd = '{} list FDB | grep mac'.format(self.sbctl)
+            fdb_list = self.run_on_master_controller(cmd).lower()
+            if is_present:
+                return mac_address.lower() in fdb_list
+            else:
+                return mac_address.lower() not in fdb_list
+
+        utils.wait_until_true(_check_mac, timeout=60, sleep=1)
+
+    def test_fdb_aging(self):
+        # 1) Configure the FDB learn flag and set the aging threshold to 5
+        # seconds.
+        self.set_service_setting(file=wb_utils.get_ml2_conf_file(),
+                                 section='ovn',
+                                 param='localnet_learn_fdb',
+                                 value='true')
+        self.set_service_setting(file=wb_utils.get_ml2_conf_file(),
+                                 section='ovn',
+                                 param='fdb_age_threshold',
+                                 value=FDB_AGE_THRESHOLD)
+
+        # 2) restart neutron api on all controllers simultaneously
+        if not WB_CONF.openstack_type == 'podified':
+            service_ptn = wb_utils.get_neutron_api_service_name()
+            for node in self.nodes:
+                if node['is_controller']:
+                    # NOTE(mblue): if reset fails on multinode, consider
+                    # wait_until_active=False for a more simultaneous reset
+                    self.reset_node_service(service_ptn, node['client'])
+
+            wb_utils.wait_for_neutron_api(self.client)
+
+        # 3) Create a VM and disable the port security on the VM port.
+        network = self.create_network()
+        subnet = self.create_subnet(network=network)
+        keypair = self.create_keypair()
+        server_kwargs = {
+            'flavor_ref': CONF.compute.flavor_ref,
+            'image_ref': CONF.compute.image_ref,
+            'key_name': keypair['name'],
+            'networks': [{'uuid': network['id']}]
+        }
+        server = self.create_server(**server_kwargs)['server']
+        port = self.client.list_ports(device_id=server['id'])['ports'][0]
+        port = self.client.update_port(port['id'], security_groups=[],
+                                       port_security_enabled=False)['port']
+        self.assertEmpty(port['security_groups'])
+        self.assertFalse(port['port_security_enabled'])
+        LOG.debug('VM port MAC address: %s', port['mac_address'])
+
+        # 4) Server connectivity configuration.
+        router = self.create_router_by_client()
+        self.create_router_interface(router['id'], subnet['id'])
+        fip = self.create_floatingip(port=port)
+        ssh_client = ssh.Client(fip['floating_ip_address'],
+                                CONF.validation.image_ssh_user,
+                                pkey=keypair['private_key'])
+
+        # 5) Ping and check that the MAC address is present in the FDB.
+        self.check_remote_connectivity(ssh_client, '1.2.3.4',
+                                       should_succeed=False)
+        self._check_mac_in_ovn_sb_fdb(port['mac_address'])
+
+        # 6) Wait the FDB aging time and check the MAC address is gone.
+        compute_client = self.os_primary.servers_client
+        compute_client.delete_server(server['id'])
+        time.sleep(FDB_AGE_THRESHOLD)
+        self._check_mac_in_ovn_sb_fdb(port['mac_address'], is_present=False)

zuul.d/master_jobs.yaml

@@ -34,7 +34,8 @@
         (^whitebox_neutron_tempest_plugin.*many_vms)|\
         (^whitebox_neutron_tempest_plugin.*test_previously_used_ip)|\
         (^whitebox_neutron_tempest_plugin.tests.scenario.test_ovn_dbs.OvnDbsMonitoringTest.*)|\
-        (^whitebox_neutron_tempest_plugin.*ovn_controller_restart)"
+        (^whitebox_neutron_tempest_plugin.*ovn_controller_restart)|\
+        (^whitebox_neutron_tempest_plugin.tests.scenario.test_ovn_fdb.*)"
       devstack_localrc:
         USE_PYTHON3: true
         NETWORK_API_EXTENSIONS: "{{ (network_api_extensions_common + network_api_extensions_tempest) | join(',') }}"
@@ -444,7 +445,8 @@
         (^whitebox_neutron_tempest_plugin.*many_vms)|\
         (^whitebox_neutron_tempest_plugin.*test_previously_used_ip)|\
         (^whitebox_neutron_tempest_plugin.tests.scenario.test_ovn_dbs.OvnDbsMonitoringTest.*)|\
-        (^whitebox_neutron_tempest_plugin.*ovn_controller_restart)"
+        (^whitebox_neutron_tempest_plugin.*ovn_controller_restart)|\
+        (^whitebox_neutron_tempest_plugin.tests.scenario.test_ovn_fdb.*)"
       # NOTE(mblue): Enable metadata rate limiting tests
       # when OSPRH-9569 is resolved (feature code available in RHOSO).
       tempest_exclude_regex: "\