This change documents configuring inspector for client-side
authentication with a standalone Ironic API service.
Since this documention refers to a keystone auth feature which is
about to be released, requirements and lower-constraints are updated
to reflect the required release (see https://review.opendev.org/737365 ).
Change-Id: I567fc8c7f2147339856563ad880334791f93d99b
This adds IPv6 support to the documented dnsmasq example.
For DHCPv6 PXE boot, the Client Architecture option uses code 61,
(see https://tools.ietf.org/html/rfc5970#section-3.3). For both
DHCP and DHCPv6, support for UEFI client arch type 11 (EFI aarch64)
is documented.
Change-Id: I4018d99b9723527ed0cbb2c6825b0062d82c85b1
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.
[1]https://review.openstack.org/#/c/508522/
Change-Id: Ie0d7c4268a49d3d3c6928b10987dd5eeede683d6
Now we have docs, lets point people there rather than attempting to
maintain a copy in tree.
Also update the devstack plugin to build ironic.conf from scratch rather
than from the sample.
Change-Id: Id65a4f803832fefe467d59147c39d2dea604ed3c
The openstack-ironic-discoverd package is no longer maintained in Fedora,
this patch removes it from the document.
Change-Id: I51eee948c039c3be9f6438eb07bd6ac825036888
1) Update doc links according to OpenStack document migration
2) Use https instead of http for docs links
Change-Id: Ic6ae704cc097e5f27d7f37e5a773f55f0c79a617
A PXE filter driver is introduced that works by configuring and controlling
the dnsmasq service.
Closes-Bug: 1693813
Related-Bug: 1665666
Change-Id: I63fe91ee4f9ac3021bcfd9a4a378af56af800fac
As described in https://bugs.launchpad.net/puppet-ironic/+bug/1714320,
a loop can occur in which dnsmasq always indicates ipxe.efi as the
bootfile if the client request has both UEFI and iPXE options set.
This fixes the documentation for the example dnsmasq.conf so that
loop won't occur.
In addition, some UEFI clients use architecture type 9 so that is
added to the example dnsmasq.conf.
Related-Bug: 1714320
Change-Id: Icdefba2b1be47622c9bd9c3bfb9b3413964c9dac
Moving the installation and upgrade guides down the mandatory directory
structure. Had to change the upgrade headline level.
Partial-Bug: 1702142
Change-Id: If00d2e3d90ac89421c51d1b1530d7cc685fad78f
This patch fixes inconsistent service naming and does a few minor
tweaks (for better readability) in the install guide.
Change-Id: Id884079e3ae0b1a6cb199b482c20c10a149690a0
When we use devstack to start ironic-inspector service, it starts
sucessfully because we have a tty in devstack screen. But when we try
to use service command to start it, we should add '!requiretty'in the
suoders config, or it will fail.
Change-Id: I1f9f539c8eafea726ca7015ef86773e26a5a5641
* Update configuration options to reflect switch to keystoneauth
* Add iPXE and UEFI configuration
* Mention puppet-ironic and bifrost
* Make ordering more logical now that we only have 1 ramdisk
* Various small fixes
Change-Id: I8c4a64b260db801622bd30d6c4f2c93b41580af0
Closes-Bug: #1416371
From now on only rely on the IPA inventory and 2 additional fields:
boot_interface and root_device.
Also updated unit tests to use one inventory example.
Also removed duplicating unit tests and checks in test_process.
Also removed devstack support for the old ramdisk.
Change-Id: Ib382328295fc2c1b9143171b1047304febadcaca
Introspection naturally happens in large bulks, after which it's inactive.
Small pool for DHCP addresses means that we'll have conflicts due to how
dnsmasq distributes them by default - using hashing. This option tells dnsmasq
to allocate IP addresses sequentially instead to avoid these conflicts.
See https://bugzilla.redhat.com/show_bug.cgi?id=1301659 for detailed analysis.
The drawback of this option is that long-running clients may switch IP
addresses if their lease expires. This is not a concern for short introspection
process.
This change may obsolete the need in the delay between 2 introspections.
Change-Id: Id277f3d31902bee16d3b048dbde5c34af905f0bc
Add new node_not_found_hook - enroll_node_not_found hook,
which allows to enroll unknown nodes to Ironic automatically.
Change-Id: If1528688504e4be4b2369b985bc576544d96868d
Related-Bug: #1524753
Add paragraph on how to set resolvconf on Ubuntu 14.04 to not break when
installing ironic-inspector.
Change-Id: I9549700c6cfdfb31cc348d6502741a927f60814a
* Stop requiring memory_mb, local_gb, cpu, cpu_arch, ipmi_address, interfaces;
take them from inventory instead
* Issue a warning when inventory is not supplied
* Raise an error when root device hints are requested but inventory
is not supplied
* Logging improvement around network interfaces handling
Closes-Bug: #1528831
Change-Id: Iaa1c34092463ff216379e30bcef55235517f6c92
* Flatten the directory structure (we don't have that many doc files)
* Dropped HTTP-API from the root so that we don't maintain 2 copies
* Fixed links all over the place
* Leave one copy of README text in the root and include it in docs
* Update 'tox -epep8' to also check docs
Change-Id: Ic14cb73668544be27c6b96b384f93b239e49acfd
Steve Baker
Kaifeng Wang
Dmitry Tantsur
Riccardo Pittau
Bob Fournier
melissaml
Jim Rollenhagen
KaiFeng Wang
shangxiaobj
dparalen
chenxing
Ramamani Yeleswarapu
OctopusZhang
Zhenguo Niu
Dmitry Tantsur
Anton Arefiev
Pavlo Shchelokovskyy
Serge Kovaleff