Migrating from the Kuryr network plugin to the OVN-Kubernetes network plugin

$ oc get Network.config.openshift.io cluster -o yaml > cluster-kuryr.yaml

$ CLUSTERID=$(oc get infrastructure.config.openshift.io cluster -o=jsonpath='{.status.infrastructureName}')

$ oc patch Network.operator.openshift.io cluster --type=merge \
    --patch '{"spec": {"migration": {"networkType": "OVNKubernetes"}}}'

$ oc patch Network.operator.openshift.io cluster --type=merge \
  --patch '{
    "spec":{
      "defaultNetwork":{
        "ovnKubernetesConfig":{
          "mtu":<mtu>,
          "genevePort":<port>,
          "v4InternalSubnet":"<ipv4_subnet>",
          "v6InternalSubnet":"<ipv6_subnet>"
    }}}}'

$ oc patch Network.operator.openshift.io cluster --type=merge \
  --patch '{
    "spec":{
      "defaultNetwork":{
        "ovnKubernetesConfig":{
          "mtu":1200
    }}}}'

$ oc get mcp

#!/bin/bash

for ip in $(oc get nodes  -o jsonpath='{.items[*].status.addresses[?(@.type=="InternalIP")].address}')
do
   echo "reboot node $ip"
   ssh -o StrictHostKeyChecking=no core@$ip sudo shutdown -r -t 3
done

$ oc patch Network.operator.openshift.io cluster --type=merge \
    --patch '{"spec": {"migration": null}}'

(venv) $ function REMFIN {
    local resource=$1
    local finalizer=$2
    for res in $(oc get "${resource}" -A --template='{{range $i,$p := .items}}{{ $p.metadata.name }}|{{ $p.metadata.namespace }}{{"\n"}}{{end}}'); do
        name=${res%%|*}
        ns=${res##*|}
        yaml=$(oc get -n "${ns}" "${resource}" "${name}" -o yaml)
        if echo "${yaml}" | grep -q "${finalizer}"; then
            echo "${yaml}" | grep -v  "${finalizer}" | oc replace -n "${ns}" "${resource}" "${name}" -f -
        fi
    done
}

(venv) $ REMFIN services kuryr.openstack.org/service-finalizer

(venv) $ if oc get -n openshift-kuryr service service-subnet-gateway-ip &>/dev/null; then
    oc -n openshift-kuryr delete service service-subnet-gateway-ip
fi

(venv) $ for lb in $(openstack loadbalancer list --tags "${CLUSTERTAG}" -f value -c id); do
    openstack loadbalancer delete --cascade "${lb}"
done

(venv) $ REMFIN kuryrloadbalancers.openstack.org kuryr.openstack.org/kuryrloadbalancer-finalizers

(venv) $ oc delete namespace openshift-kuryr

(venv) $ openstack router remove subnet "${routerID}" "${CLUSTERID}-kuryr-service-subnet"

(venv) $ openstack network delete "${CLUSTERID}-kuryr-service-network"

(venv) $ REMFIN pods kuryr.openstack.org/pod-finalizer

(venv) $ REMFIN kuryrports.openstack.org kuryr.openstack.org/kuryrport-finalizer

(venv) $ REMFIN networkpolicy kuryr.openstack.org/networkpolicy-finalizer

(venv) $ REMFIN kuryrnetworkpolicies.openstack.org kuryr.openstack.org/networkpolicy-finalizer

(venv) $ mapfile trunks < <(python -c "import openstack; n = openstack.connect().network; print('\n'.join([x.id for x in n.trunks(any_tags='$CLUSTERTAG')]))") && \
i=0 && \
for trunk in "${trunks[@]}"; do
    trunk=$(echo "$trunk"|tr -d '\n')
    i=$((i+1))
    echo "Processing trunk $trunk, ${i}/${#trunks[@]}."
    subports=()
    for subport in $(python -c "import openstack; n = openstack.connect().network; print(' '.join([x['port_id'] for x in n.get_trunk('$trunk').sub_ports if '$CLUSTERTAG' in n.get_port(x['port_id']).tags]))"); do
        subports+=("$subport");
    done
    args=()
    for sub in "${subports[@]}" ; do
        args+=("--subport $sub")
    done
    if [ ${#args[@]} -gt 0 ]; then
        openstack network trunk unset ${args[*]} "${trunk}"
    fi
done

(venv) $ mapfile -t kuryrnetworks < <(oc get kuryrnetwork -A --template='{{range $i,$p := .items}}{{ $p.status.netId }}|{{ $p.status.subnetId }}{{"\n"}}{{end}}') && \
i=0 && \
for kn in "${kuryrnetworks[@]}"; do
    i=$((i+1))
    netID=${kn%%|*}
    subnetID=${kn##*|}
    echo "Processing network $netID, ${i}/${#kuryrnetworks[@]}"
    # Remove all ports from the network.
    for port in $(python -c "import openstack; n = openstack.connect().network; print(' '.join([x.id for x in n.ports(network_id='$netID') if x.device_owner != 'network:router_interface']))"); do
        ( openstack port delete "${port}" ) &

        # Only allow 20 jobs in parallel.
        if [[ $(jobs -r -p | wc -l) -ge 20 ]]; then
            wait -n
        fi
    done
    wait

    # Remove the subnet from the router.
    openstack router remove subnet "${routerID}" "${subnetID}"

    # Remove the network.
    openstack network delete "${netID}"
done

(venv) $ openstack security group delete "${CLUSTERID}-kuryr-pods-security-group"

(venv) $ for subnetpool in $(openstack subnet pool list --tags "${CLUSTERTAG}" -f value -c ID); do
    openstack subnet pool delete "${subnetpool}"
done

(venv) $ networks=$(oc get kuryrnetwork -A --no-headers -o custom-columns=":status.netId") && \
for existingNet in $(openstack network list --tags "${CLUSTERTAG}" -f value -c ID); do
    if [[ $networks =~ $existingNet ]]; then
        echo "Network still exists: $existingNet"
    fi
done

(venv) $ for sgid in $(openstack security group list -f value -c ID -c Description | grep 'Kuryr-Kubernetes Network Policy' | cut -f 1 -d ' '); do
    openstack security group delete "${sgid}"
done

(venv) $ REMFIN kuryrnetworks.openstack.org kuryrnetwork.finalizers.kuryr.openstack.org

(venv) $ if python3 -c "import sys; import openstack; n = openstack.connect().network; r = n.get_router('$routerID'); sys.exit(0) if r.description != 'Created By OpenShift Installer' else sys.exit(1)"; then
    openstack router delete "${routerID}"
fi