patch(2.0): Make ovs port moves tolerant to OVS failures (#4029)

[bcavnvidia]

Backports #4029 to release/v2.0.

DPU provisioning can encounter a transient OVS failure when a host PF/VF representor has not materialized yet. That failure currently terminates cloud-init before service restart and Scout execution.

This change keeps the existing OVS configuration and ofport_request synchronization attempts, but makes those operations tolerant of the expected transient failure. The working PF path remains unchanged.

Related issues

• Original fix: fix(pxe): Make ovs port moves tolerant to OVS failures #4029
• Related issue: Prevent missing host VF representors from failing DPU cloud-init #4028

Type of Change

• Add - New feature or capability
• Change - Changes in existing functionality
• Fix - Bug fixes
• Remove - Removed features or deprecated functionality
• Internal - Internal changes (refactoring, tests, docs, etc.)

Breaking Changes

• This PR contains breaking changes

No breaking changes are expected.

Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing performed
• No testing required (docs, internal refactor, etc.)

Additional Notes

Cherry-picked from 58959fc.

The production template change is unchanged from the original fix. The associated test was adapted to preserve the existing release/v2.0 assertions.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 66a059fe-0eef-48fa-bb46-108a20ebf1c6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🔐 TruffleHog Secret Scan

✅ No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

_{🕐 Last updated: 2026-07-24 14:06:05 UTC | Commit: c26453e}

[github-actions]

🔍 Container Scan Summary

Service	Total	Critical	High	Medium	Low	Other
boot-artifacts-aarch64	3	0	0	3	0	0
boot-artifacts-x86_64	3	0	0	3	0	0
forge-admin-cli-x86_64	260	16	29	79	8	128
machine-validation-runner	548	41	117	191	18	181
machine_validation	548	41	117	191	18	181
machine_validation-aarch64	548	41	117	191	18	181
nvmetal-carbide	548	41	117	191	18	181
TOTAL	2458	180	497	849	80	852

Per-CVE detail lives in the per-service grype-* artifacts (JSON + SARIF). Severity counts only — no CVE IDs published here.

[nv-dmendoza]

LGTM, backports a needed fix