[ovirt-users] Re: port_security in external networks-API

Thank you very much for all the information it help me understand it better. Unfortunately i cant get it to work in python :(

On Fri, Jul 26, 2019 at 2:09 PM Miguel Duarte de Mora Barroso <mdbarroso(a)redhat.com&gt; wrote: > > On Thu, Jul 25, 2019 at 3:50 PM ada per <adaper3(a)gmail.com&gt; wrote: > > > > Hello everyone, > > > > I have the following python script that creates an external network, but now after updating ovirt a new option "network port security" exists that is set as enabled by default. > > That attribute is specified in > https://github.com/oVirt/ovirt-provider-ovn#section-network - the > default on the configuration file is set by engine-setup to true. > > > > > How can i disable the network port security? > > You can update it for each network / logical port in the system. > > Be advised that updating the port security attribute of a network > value will *not* impact existing ports - it only impacts newly created > logical ports. > > To disable that property for existing VMs you need to update that > property in the logical port to which the VM is connected, via the > logical port's REST API. The logical port follows a subset of the > networking api, which is defined in [0]. > > Some time ago I wrote an example playbook that can be leveraged for > this type of thing, check [1]. It's usage is described in [2], look > for 'update_port_security'. You can update it for all port in the > system, for all ports within a logical network, or for a single port. > > Let me know if this helps. > > [0] - https://github.com/oVirt/ovirt-provider-ovn/blob/master/docs/provider_api... > [1] - https://github.com/maiqueb/ovirt-security-groups-demo/blob/master/playboo... > [2] - https://github.com/maiqueb/ovirt-security-groups-demo#provided-tools