12060 Commits

Author SHA1 Message Date
Zuul
45c9c3029f Merge "Add audit middleware options to ironic.conf" 2022-08-01 18:30:32 +00:00
Zuul
e651fd6db5 Merge "Imported Translations from Zanata" 2022-08-01 11:39:06 +00:00
OpenStack Proposal Bot
c870b5525c Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I3b6a4d80bf2f35bac4d33e15e3ab0d913bdeac71
2022-08-01 03:53:34 +00:00
Zuul
7a2a12ac95 Merge "Imported Translations from Zanata" 2022-08-01 03:32:06 +00:00
OpenStack Proposal Bot
0335ad16c8 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I0a9b547e92b288a555c246d63d007b831a6e1190
2022-07-28 04:33:45 +00:00
Julia Kreger
56d3c5a031 Clarify disk_label with a warning
Turns out I've had two people try to use disk label
twice in the last week to infer UEFI booting system.

This is not correct, unfortunately.

Clarify that the boot mode needs to be set appropriately.

Change-Id: I515358d40b03ea0d38dad2104a2d3d2c66e0ae8c
2022-07-25 13:20:23 -07:00
Zuul
4d5c60650e Merge "CI: Only setup fake v6 interface if needed" 2022-07-25 17:07:51 +00:00
Zuul
e98d51502e Merge "CI: Save routing table information for troubleshooting" 2022-07-25 17:07:47 +00:00
Julia Kreger
9f66a95aa7 Fix adoption unit test image check
We added an additional check, and it turns out the test was passing
when no local webserver was present because it was getting checked,
but things would break when an actual webserver existed which returned
a redirect

Change-Id: If8d29ba3676cf8e11a1010890c90bb67b0d60cb3
Story: 2010181
Task: 45862
2022-07-22 07:01:28 -07:00
Zuul
b7c71bdbb8 Merge "[iRMC] Add SNMPv3 authentication functionality" 2022-07-22 00:54:38 +00:00
Zuul
7673cb827b Merge "Deprecate syslinux" 2022-07-22 00:53:46 +00:00
Zuul
36bbd363e8 Merge "project scoped manager support" 2022-07-22 00:53:43 +00:00
Zuul
bee0a4e31a Merge "Do not require stage2 for anaconda with standalone" 2022-07-21 18:46:10 +00:00
Julia Kreger
f7471f07c3 CI: Only setup fake v6 interface if needed
In the case of CI test nodes natively supporting and using ipv6,
we don't need to actually setup a fake IPv6 network for ports
to bind to on the local system. So before doin gso, lets check
to see if we can ping the address first. If not, then set it up.

Change-Id: Ib68c706c1f9ef0ad0cf27e7a6acffd2c50ff37ea
2022-07-20 11:08:20 -07:00
Julia Kreger
8c95131d81 CI: Save routing table information for troubleshooting
Presently, we don't save the state of the routing table,
which means troubleshooting the ipv6 job failures is difficult
because we just have no way of knowing what is truly going on
with the traffic flow.

Possibly, we may be encountering a case where router
advertisements are overrriding route table entries, and
the only way to know is to see the final state of the table.

Change-Id: Ib15cd21e47e3b884bae2cb956f9113e73034391b
2022-07-20 11:02:39 -07:00
Julia Kreger
0311ea7c92 project scoped manager support
Adds support for project manager role support which is a state between
project scoped admin and project scoped member.

Finally enabling to be merged since the higher end goal/work finally
merged on March 1st.

Related: https://review.opendev.org/c/openstack/governance/+/815158
Change-Id: Ia35f4a4c3c2af68dc64bfe32f206e57056876dc7
2022-07-20 07:17:52 -07:00
Julia Kreger
33bb2c248a Do not require stage2 for anaconda with standalone
The use of the anaconda deployment interface can be
confusing when using a standalone deployment model.

Specifically this is because the anaconda deployment
interface was primarily modeled for usage with glance
and the inherent configuration of a fully integrated
OpenStack deployment. The additional prameters are
confusing, so this also (hopefully) provides clarity
into use and options.

Change-Id: I748fd86901bc05d3d003626b5e14e655b7905215
2022-07-20 06:50:03 -07:00
Zuul
d005ed826c Merge "Remove support for trusted boot" 2022-07-20 09:01:12 +00:00
Zuul
db0e1cc0ec Merge "Docs: specify what to do with the created images" 2022-07-18 17:42:44 +00:00
Dmitry Tantsur
dbcce25d38 Remove support for trusted boot
It requires network booting and legacy boot. While the latter will be
supported for a long time, the former is being removed.

Change-Id: Ie48e51fa95ba2059bd3cca6b8968f475934a75e5
2022-07-18 17:44:35 +02:00
Zuul
72411f8259 Merge "Remove workaround for Python < 3.7.4" 2022-07-18 14:37:51 +00:00
Zuul
126a4fde57 Merge "Fix compatibility with jsonschema>=4.0.0" 2022-07-18 14:37:41 +00:00
Takashi Kajinami
d90e59057b Remove workaround for Python < 3.7.4
... because now ironic supports only Python >= 3.8.

Change-Id: I2f26f74ce8e549ee22dc0f84c3360993cff6a71e
2022-07-17 00:25:54 +09:00
Shukun Song
79f82c0262 [iRMC] Add SNMPv3 authentication functionality
Currently when using SNMPv3, iRMC driver does not use SNMPv3
authentication parameters so the SNMPv3 authentication will
always fail. And iRMC cannot recognize FIPS mode, so when FIPS mode
is enabled, iRMC driver could still use non-FIPS-compliant algorithms.

This commit changes iRMC driver to require and use SNMPv3
authentication parameters when 'irmc_snmp_version' is set to v3 and
also makes iRMC driver to force 'irmc_snmp_version' to v3,
'irmc_snmp_auth_proto' to SHA and 'irmc_snmp_priv_proto' to AES
when FIPS mode is enabled, because currently among the algorithms
supported by iRMC, only SHA and AES are FIPS compliant.

Change-Id: Id6f8996e4d103f849325f54fe0619b4acb43453a
Story: 2010085
Task: 45590
2022-07-15 16:59:05 +09:00
Zuul
8811b9b1f5 Merge "Allocation candidates prefer matching name" 2022-07-15 02:23:51 +00:00
Dmitry Tantsur
55b9579f14 Fix compatibility with jsonschema>=4.0.0
Specify the schema version for network_data and node, otherwise the
latest one is used.

Also fix one test where the error messages was changed.

Change-Id: I4a614d7e73348bbe6c355a40881b013cbfe00b03
2022-07-14 18:07:48 +02:00
Zuul
0c4401cfbb Merge "Trivial: log which state the node is in" 2022-07-14 01:37:11 +00:00
Zuul
5d2283137c Merge "Make anaconda non-image deploys sane" 2022-07-14 01:28:00 +00:00
Julia Kreger
c8be82c525 Deprecate syslinux
Syslinux is a functionally abandoned Legacy BIOS boot mode bootloader
which has not seen updates since 2019, and is starting to see
discussion amongst linux distributions to remove explicit support
and packaging for Syslinux. Syslinux's relevance is also disappearing
as UEFI booting is becoming the standard. While syslinux did go ahead
and ensure their bootloader *could* be built and support UEFI,
distributions also didn't uniformly adopt packaging and support for
this bootloader.

This change proposes to deprecate it and notates the areas in which
functionality is deprecated.

Change-Id: Ic52007fa4f207561d282eb5ae54273885c0ab0c0
2022-07-13 06:50:55 -07:00
Zuul
442aeca652 Merge "Fix markup typo in Redfish driver docs" 2022-07-13 13:33:43 +00:00
Zuul
5780619cec Merge "Update known issue for iDRAC Swift firmware update" 2022-07-13 08:23:10 +00:00
Aija Jauntēva
737ff34e76 Fix markup typo in Redfish driver docs
Missing whitespace renders formatting incorrectly.

Change-Id: I471fd859a5d8557188e6ad41143552457b5bdb50
2022-07-13 02:56:21 -04:00
Zuul
1e72cdc00c Merge "[Minor] Fix misspellings of "insufficient"" 2022-07-12 20:20:46 +00:00
Aija Jauntēva
70812aa6ed Update known issue for iDRAC Swift firmware update
The issue is fixed in iDRAC firmware 6.00.00.00.

Change-Id: Ie5b9ce3ed2a9b1cd61d51f64d72403f7dbc5367b
2022-07-12 06:46:11 -04:00
Julia Kreger
e78f123ff8 Make anaconda non-image deploys sane
Ironic has a lot of logic built up around use of images for filesystems,
however several recent additions, such as the ``ramdisk`` and ``anaconda``
deployment interfaces have started to break this mold.

In working with some operators attempting to utilzie the anaconda
deployment interface outside the context of full OpenStack, we discovered
some issues which needed to be make simpler to help remove the need to
route around data validation checks for things that are not required.

Standalong users also have the ability to point to a URL with anaconda,
where as Operators using OpenStack can only do so with customized kickstart
files. While this is okay, the disparity in configuraiton checking
was also creating additional issues.

In this, we discovered we were not really graceful with redirects,
so we're now a little more graceful with them.

Story: 2009939
Story: 2009940
Task: 44834
Task: 44833
Change-Id: I8b0a50751014c6093faa26094d9f99e173dcdd38
2022-07-11 07:41:06 -07:00
Zuul
565e3c4bff Merge "Prevent pxe retry when agent token exists" 2022-07-11 01:51:05 +00:00
Takashi Kajinami
f0935c182e Add audit middleware options to ironic.conf
Ironic supports enabling the audit middleware. This change adds
the option for the middleware to the ironic.conf file generated by
oslo-config-generator.

Depends-on: https://review.opendev.org/804316
Change-Id: Ic7adb755f47ea65fe975dfbc7cca905a376d728e
2022-07-07 15:51:07 +00:00
Dmitry Tantsur
e09919caba Move logging out of skip_automated_cleaning
Simply boolean functions should not have logging as a side effect.
This one is also used in deploy_utils without logging.

Change-Id: Iaa398f09cec06a8417c595acac19b0b9f3f3a871
2022-07-06 17:00:11 +02:00
Dmitry Tantsur
0f16273886 Trivial: log which state the node is in
Change-Id: I87326585896cae9df717e9d19b2ea441d92d3b1a
2022-07-06 16:51:43 +02:00
Zuul
eb4327ae5d Merge "Prevent clear_job_queue and reset_idrac failures on older iDRACs" 2022-07-06 13:15:07 +00:00
Jacob Anders
1dda97c783 Prevent clear_job_queue and reset_idrac failures on older iDRACs
Currently, clear_job_queue and reset_idrac steps are only supported on
idrac-redfish driver on iDRAC9 hardware. However, Ironic still attempts
to run these steps on iDRAC8 BMCs configured with idrac-redfish driver
which results in verification failures. This change attempts to resolve
it by catching the related exception, logging a warning and continuing
verification. In case of cleaning, it still fails.

Story: 2010091
Task: 45630
Change-Id: Icd8c5378469887962ff32eea2f38697c539f7e95
2022-07-05 22:27:43 +10:00
Zuul
a4bf31de61 Merge "Auto-populate lessee for deployments" 2022-07-02 02:56:54 +00:00
Zuul
aed95ba6a7 Merge "CI: Pull in diskimage-builder until new release is cut" 2022-07-01 22:56:37 +00:00
Zuul
6d115419a5 Merge "Fix redfish-virtual-media for newer iDRACs" 2022-07-01 12:22:11 +00:00
Julia Kreger
af838cca79 CI: Pull in diskimage-builder until new release is cut
Change-Id: I88a4863cd24258eb0b395303738c23e3468615c0
2022-06-30 16:29:01 -07:00
Zuul
9c7eb9426c Merge "Fix Redfish RAID to update raid_config" 2022-06-30 09:50:51 +00:00
Aija Jauntēva
73040c88d9 Fix redfish-virtual-media for newer iDRACs
The issue with standard Redfish virtual media boot has
been fixed now. Update to restrict use of redfish-virtual-media
based on iDRAC firmware version.

Change-Id: I8ead1d24a9bd502b64fe7dd058e77550fcee141c
2022-06-29 09:12:13 -04:00
Zuul
8aaf2e08c0 Merge "CI: Default to TinyIPA when nested virt is not possible" 2022-06-27 13:44:36 +00:00
Zuul
6afa549f2a Merge "No deploy_kernel/ramdisk with the ramdisk deploy and no cleaning" 2022-06-27 01:48:22 +00:00
Zuul
a1d464b7e7 Merge "Drop python2 from bindep.txt" 2022-06-27 01:39:53 +00:00