NFV setups have 1 interface in hypervisor connected to external network, compute nodes are not connected to external network.

I have been trying to configure external connectivity in the following way:
1. configure a bridge in hypervisor including the interface connected to external network
external 8000.525400286b8c no enp6s0f1
vnet17
vnet21
vnet25
2. Add to gen-nncp.sh

cat >> ${DEPLOY_DIR}/${WORKER}_nncp.yaml <<EOF_CAT

• description: openstack external network
  name: enp4s0.433
  state: up
  type: vlan
  vlan:
  base-iface: enp4s0
  id: 433
  ipv4:
  enabled: true
  dhcp: true
  ipv6:
  enabled: false
• description: Configuring br-access bridge with interface enp4s0
  name: br-access
  mtu: 1500
  type: linux-bridge
  state: up
  bridge:
  options:
  stp:
  enabled: false
  port:
• name: enp4s0
  ipv4:
  enabled: false
  dhcp: false
  ipv6:
  enabled: false
  EOF_CAT

3. After the deployment

oc patch openstackcontrolplane openstack-galera-network-isolation --type=merge --patch '
spec:
neutron:
template:
customServiceConfig: |
[ml2_type_vlan]
network_vlan_ranges = access:428:428,dpdk1:140:150,dpdk2:140:150
[ovn]
enable_distributed_floating_ip=False
'

cat > nad_access.yaml << EOF_CAT
apiVersion: k8s.cni.cncf.io/v1
kind: NetworkAttachmentDefinition
metadata:
generation: 1
labels:
osp/net: access
osp/net-attach-def-type: standard
name: access
namespace: openstack
spec:
config: |
{
"cniVersion": "0.3.1",
"name": "access",
"type": "bridge",
"bridge": "br-access",
"ipam": {}
}
EOF_CAT
oc apply -f nad_access.yaml

oc patch openstackcontrolplane openstack-galera-network-isolation --type=merge --patch '
spec:
ovn:
template:
ovnController:
nicMappings:

'

testing

openstack network create --external --share --provider-physical-network access --provider-network-type vlan --provider-segment 428 access

penstack subnet create pub_sub --subnet-range 10.46.228.32/28 --allocation-pool start=10.46.228.33,end=10.46.228.43 --gateway 10.46.228.46 --no-dhcp --network access

openstack router create router1

openstack router set router1 --external-gateway access

openstack network create --provider-network-type geneve dpdk-mgmt

openstack subnet create -gateway 10.10.10.254 network dpdk-mgmt --subnet-range 10.10.10.0/24 -dhcp --dns-nameserver 10.46.0.31 --dns-nameserver 8.8.8.8 --allocation-pool start=10.10.10.100,end=10.10.10.200 dpdk-mgmt_subnet

openstack router add subnet router1 dpdk-mgmt_subnet

openstack flavor create --ram 4096 --disk 20 --vcpus 2 nfv_qe_base_flavor
openstack flavor set nfv_qe_base_flavor \
--property hw:mem_page_size=large \
--property hw:cpu_policy=dedicated \
--property hw:emulator_threads_policy=share

curl -o centos.qcow2 https://cloud.centos.org/centos/9-stream/x86_64/images/CentOS-Stream-GenericCloud-9-20230116.0.x86_64.qcow2

openstack image create --file centos.qcow2 --container-format bare --disk-format qcow2 2>/dev/null

openstack keypair create test >test.pem

chmod 600 test.pem

openstack server create -flavor nfv_qe_base_flavor -network dpdk-mgmt --image centos --key-name test instance1

openstack floating ip create access

openstack server add floating ip instance1 10.46.228.135

openstack security group rule create --ingress --protocol tcp --dst-port 22 3311b52a-cbe2-47f5-b4ab-454f011b723a
openstack security group rule create --protocol icmp --ingress 3311b52a-cbe2-47f5-b4ab-454f011b723a