13113 Commits

Author SHA1 Message Date
Zuul
17c96e3e97 Merge "Documentation: migration guide from inspector" 2024-06-20 16:20:34 +00:00
Zuul
9a8147bb17 Merge "Decompose the Redfish documentation" 2024-06-20 15:48:42 +00:00
Zuul
19c8efd9d7 Merge "Provision ARM (aarch64) fake-bare-metal-vms" 2024-06-19 16:59:05 +00:00
Zuul
941f2e36fa Merge "Remove ibmc hardware type" 2024-06-19 16:59:01 +00:00
Dmitry Tantsur
a88cc4d9de
Documentation: migration guide from inspector
Change-Id: I622085adc431555789921f04b5ba2375f806075e
2024-06-19 18:41:23 +02:00
Zuul
8a209f1372 Merge "Remove deprecated xclarity hardware type" 2024-06-19 13:53:09 +00:00
Zuul
7b30263d08 Merge "Build PXE config for node in SERVICING state" 2024-06-19 08:52:52 +00:00
cid
209ba79732 Provision ARM (aarch64) fake-bare-metal-vms
This commit introduces support for provisioning ARM (aarch64)
fake-bare-metal VMs in Ironic for the purpose of eventually supporting
CI testing on ARM64 architecture-based hardware.

Change-Id: Ie4bff8892228275ad0fb940c30e8071f7f4c423f
2024-06-19 03:17:05 +01:00
Julia Kreger
f14794ca2e Remove ibmc hardware type
There has been no testing of this hardware type in quite some time,
and the last we heard the vendor was moving towards redfish.

Change-Id: Ib32db463981ec54430884ac760956b7c7b40b17f
2024-06-18 16:33:35 -07:00
Julia Kreger
c02ad76fef Remove deprecated xclarity hardware type
Change-Id: I93e0d947d0f790bd4dfaa73e2cd31fdd36262af2
2024-06-18 16:33:00 -07:00
Przemyslaw Szczerbik
78f54dfefa Build PXE config for node in SERVICING state
When [pxe]enable_netboot_fallback option is enabled, it's necessary to
build PXE config for nodes in SERVICING provisioning state. Otherwise
node servicing tear down will fail and node will be placed into
servicing failed state.

Closes-Bug: #2069413

Change-Id: Ib00504563f9fa7bed99a0fa1949ac99ea6870875
Signed-off-by: Przemyslaw Szczerbik <przemyslaw.szczerbik@intel.com>
2024-06-14 04:22:12 -07:00
cid
d189465b1d Update version change log with special treatment of .json removal
Log removal of support for treatment of .json for API objects

Change-Id: I9c10a1d166cf8f55070024000eb64be1319bb6e5
2024-06-13 14:56:40 +00:00
Dmitry Tantsur
95784428a4
Decompose the Redfish documentation
This page is huge and keeps growing. So:
* Move additional topics to sub-documents.
* Move ESP creation to the install guide (it's not even
  Redfish-specific).
* Create a generic firmware updates document.

Provide a feature listing at the top for easier navigation.

Change-Id: Ic58c139da5e1e60f5ce4d2cec18972ebee9e2485
2024-06-13 12:37:11 +02:00
Zuul
ebbc8300c3 Merge "minor: additional tests for interaction around node lookup" 2024-06-12 19:56:03 +00:00
Zuul
89dae21abb Merge "docs: add some additional context around iPXE and secure boot" 2024-06-12 15:02:43 +00:00
Zuul
6590f10f03 Merge "Makes metal3 integration job vote again" 2024-06-12 14:52:20 +00:00
Zuul
c75d04d68d Merge "Follow up to broken Zuul config" 2024-06-12 14:42:15 +00:00
Riccardo Pittau
aaf62c6789 Makes metal3 integration job vote again
Fix in BMO at
https://github.com/metal3-io/baremetal-operator/pull/1780

Change-Id: I3785441f4f327dcec113276803becd938fe87b9c
2024-06-12 08:54:16 +02:00
Zuul
d0a833095a Merge "Link MACs with PXE config to pxe_enabled ports" 2024-06-12 02:32:39 +00:00
Zuul
b5d7006864 Merge "Correct bond_mode enum value for 802.3ad" 2024-06-12 00:08:13 +00:00
Zuul
b2a57f6bed Merge "Change [agent]require_tls to True by default" 2024-06-11 23:33:49 +00:00
Zuul
fa685bf8fa Merge "fix: Fix class typo for portgroup. Portgroup instead of PortGroup" 2024-06-11 19:13:53 +00:00
Zuul
5a28e00d18 Merge "Trivial: Cleanup in neutron common code" 2024-06-11 16:57:18 +00:00
Jay Faulkner
28e83a0877 metal3 integration is unstable currently, disable
Disabling temporarily.

Change-Id: I08b7c1140e3f027b59cd6aaf2b160f67e20da314
2024-06-10 14:38:28 -07:00
cid
8cd3fcd786 Trivial: Cleanup in neutron common code
Change-Id: Icd308b53908ee5b99cc7b5fbb40c4462faf70927
2024-06-10 17:11:55 +01:00
Zuul
10239b0d5e Merge "Fix wrong option mentioned in release notes" 2024-06-10 15:00:03 +00:00
Zuul
fe8126d1f6 Merge "ci: fix https boot artifact path" 2024-06-10 15:00:00 +00:00
cid
e958b379c1 Link MACs with PXE config to pxe_enabled ports
Currently, Ironic creates a pxe link file for every port,
even when a port's pxe_enabled property is set to false,
which means it can still boot from this port when it shouldn't.

With this commit, unless explicitly configured otherwise, only
pxe_enabled ports (pxe_enabled=True) will have the pxe link file.

Closes-Bug: #1741422
Change-Id: I013861dd5b9a7525058606f8dc8b05502a28af1e
2024-06-10 15:10:05 +01:00
Takashi Kajinami
316274a9d3 Fix wrong option mentioned in release notes
The [conductor] graceful_timeout option does not exist, and
the [conductor] heartbeat_timeout option is actually used instead.

Change-Id: I689fcf8c392eecbcf8ee12b2f67f78f9f22d17aa
2024-06-10 17:36:50 +09:00
Zuul
a51726ca08 Merge "Minor ramdisk interface docs update" 25.0.0 2024-06-09 08:42:25 +00:00
Julia Kreger
46cc9e1d99 ci: fix https boot artifact path
Change-Id: Idb5720599f38b3732240e0feddacfdc739c5a67c
2024-06-07 14:41:02 -07:00
Julia Kreger
af33d8bd71 minor: additional tests for interaction around node lookup
A recent evaluation of the lookup code yielded an awareness that
while we're sort of following the overall community pattern of
testing what we expect in terms of patterns and behavior, really
needed just a little bit more in the way of testing.

While ultimately, these tests are really just exercising front
end validation, it is still important to check to have increased
assurance of a secure codebase.

Change-Id: Iaa917191e0f118f8828161174ea1fe8c55c8f4ee
2024-06-07 10:28:30 -07:00
Julia Kreger
eaa0521bee fix: Fix class typo for portgroup. Portgroup instead of PortGroup
Apparently, this has been around for ages, btu the error was likely
not exactly right as a result of this. Anyway, quick fix.

Change-Id: Idee3c1edfdd65928eaa5f8d30b62474d85dec277
2024-06-07 07:55:23 -07:00
Zuul
8086167054 Merge "Assert URL consistency for agent_url" 2024-06-06 13:14:36 +00:00
Zuul
5b9c92e3cb Merge "Excise use of non-timezone aware utcnow()" 2024-06-06 13:14:34 +00:00
Julia Kreger
613348d112 docs: add some additional context around iPXE and secure boot
Change-Id: Ifecd92b80472b3e28307ddbdbaeeb08ec0950c54
2024-06-05 11:24:15 -07:00
Zuul
40f0980f9b Merge "docs: fix wrong configuration option name" 2024-06-05 18:11:35 +00:00
Curt Moore
b00c499650 Correct bond_mode enum value for 802.3ad
Change-Id: Ic7162f7d04673bfc5b2dec575b2bdffbc6ea0fe8
2024-06-05 08:16:06 -05:00
Pierre Riteau
7bb93f0d5e docs: fix wrong configuration option name
Change-Id: I1e8e028cc31ac2ca70afc2183196321f9e8a377d
2024-06-05 13:55:17 +02:00
cid
e736513bec Follow up to broken Zuul config
Change-Id: I5f870dcf37bae492be30749e4e963425818e6df7
2024-06-05 12:23:52 +01:00
Pierre Riteau
916b0f409b docs: fix markup
Change-Id: I8e23534db1e0a7e4385278732431f6531bf41075
2024-06-05 11:48:31 +02:00
Julia Kreger
6095b4017d Change [agent]require_tls to True by default
While looking at the overall heartbeat/agent workflow, it seemed
like the [agent]require_tls setting should likely be True by
default, as we are well past the initial phase where operators
might not have the TLS capability when upgrading.

Change-Id: Id526e948e6c5ed032d7542232b1c1a31cb285b26
2024-06-04 14:30:38 -07:00
Zuul
b51c8a404b Merge "GRUB conf template compatibility with arm server" 2024-06-04 17:47:40 +00:00
Julia Kreger
88c45151fa Assert URL consistency for agent_url
While agent_url is software generated, it is still a public endpoint
and at least needs some upfront filtering applied. To do this, we
can leverage urllib in the standard library to disassemble the
url, and reconstruct it based upon the standards. The plus of this
approach is that it will remove some invalid formatting for us, and
if things are too out of line, an exception is raised as ValueError.

An important note, this is *not* explicitly urlparsing security[0] as
denoted in the Python urllib documentation, but that the application
should operate defensively.

[0]: https://docs.python.org/3/library/urllib.parse.html#url-parsing-security

Change-Id: I45ee1c8a73ed13511bc47a69130105f16d34be1e
2024-06-04 10:22:49 -07:00
Julia Kreger
e651e9986c Minor ramdisk interface docs update
Change-Id: I6b9249a01c0ef5997c750e6a07f877bd94bf239c
2024-06-03 15:45:11 -07:00
Zuul
8bdf1fca91 Merge "docs: augment security docs" 2024-06-03 22:09:04 +00:00
cid
e8634748a1 GRUB conf template compatibility with arm server
Determine the appropriate GRUB commands during UEFI boot
based on the node's CPU architecture.

Closes-Bug: #2050054
Change-Id: I0c5f513cdc8f4112f8dfdeb4ccaf566d3424a2ca
2024-06-03 17:02:21 +01:00
cid
b5b7e60c47 Excise use of non-timezone aware utcnow()
Replace all instances of `datetime.datetime.utcnow()`,
which is deprecated, with the timezone-aware oslo's
`timeutils.utcnow()` method, across the Ironic project.

Closes-Bug: #2067740
Change-Id: I998681c14f945846f58e723b9be2202dbe8ea12c
2024-06-03 12:15:22 +01:00
Julia Kreger
b64a8ff6ef Follow-up: minor wording change from 920706
Just changing "deployment or cleaning operations" to
"inband operations", since the agent can run in many
different inband operational steps.

Change-Id: Iaaa03ebc3dab724eb7afb0ee686bd22c8a2879be
2024-05-31 07:06:56 -07:00
Julia Kreger
268b28f527 Enhance security notes in config description
Some of the configuation knobs require more specific details
regarding security or denial of service related possibilities
if tuned to inappropriate values.

Overall, just some minor improvements for clarity

Change-Id: I008d6e00a528bddba0f843f34968155a9da3ff36
2024-05-31 14:04:51 +00:00