Dmitry Tantsur 89fe0396af
Add inspection PXE filter service
The logic to handle dnsmasq hostfiles is moved from ironic-inspector
with only cosmetic changes. The logic to purge the hostsdir is not
copied since it relies on running commands with root privileges.
A documentation example is added instead.

The change is missing the RPC call to notify the filter about changes.
It will be done in a follow-up.

Change-Id: Ie32018c760c39873ead1da54cfaeae87eaaaf043
2024-02-28 18:13:56 +01:00

1.4 KiB

In-Band Inspection

In-band inspection involves booting a ramdisk on the target node and fetching information directly from it. This process is more fragile and time-consuming than the out-of-band inspection, but it is not vendor-specific and works across a wide range of hardware.

In the 2023.2 "Bobcat" release series, Ironic received an experimental implementation of in-band inspection that does not require the separate ironic-inspector service.

Note

The implementation described in this document is not 100% compatible with the previous one (based on ironic-inspector). Check the documentation and the release notes for which features are currently available.

Use inspector for production deployments of Ironic 2023.2 or earlier releases.

managed data hooks discovery pxe_filter

Configuration

In-band inspection is supported by all hardware types. The agent inspect interface has to be enabled to use it:

[DEFAULT]
enabled_inspect_interfaces = agent,no-inspect

You can make it the default if you want all nodes to use it automatically:

[DEFAULT]
default_inspect_interface = agent

Of course, you can configure it per node:

$ baremetal node set --inspect-interface agent <NODE>