1750 Commits

Author SHA1 Message Date
Zuul
83191961df Merge "Allow specifying target devices for software RAID" 2020-04-03 04:08:21 +00:00
Harald Jensås
69739715ca Doc - IPv6 Provisioning
Add documentation for provisioning with IPv6.

Story: 2007315
Task: 39162
Change-Id: I8abd2b8eda6e7b207471f1a15d61b6f921587433
2020-04-02 17:26:48 +02:00
Harald Jensås
c40d221fca Add network_type to port local_link_connection
Add network_type to the port objects local_link_connection field.
The network_type can be set to either managed or unmanaged. When
the type is unmanaged other fields are not required. Use
unmanaged when the neutron network_interface is required, but
the network is in fact a flat network where no actual switch
management is done.

Story: 2007315
Task: 39161
Change-Id: I00c5ea22a8163c27c9ce4470e3713c282d0eb131
2020-04-02 15:39:41 +02:00
Dmitry Tantsur
9f93694b9a Make oslo.reports an optional dependency
It is only required for one specific feature, let people install it
if they need it.

This change is a part of the major effort to reduce the number of
ironic dependencies.

Change-Id: Ia45ce1d573c89f583d641be3d37d1c127e6345bc
2020-04-02 11:52:04 +02:00
Dmitry Tantsur
a3d7d73a69 Bump hacking to 3.0.0
The new version enables a lot of standard flake8 checks. Some of them
are temporary disabled to reduce the scope of this patch:
* Complexity check requires a few functions to be rewritten (apparently,
  it was not enabled previously).
* Indentation check failures are numerous and potentially contradictive.
These checks will be enabled in follow-ups.

W606 is removed from excludes since we no longer hit it.

Change-Id: I1e5a6f8e5e90c55cfc6f740b26c30196512d3be3
2020-03-31 10:16:54 +02:00
Zuul
281634dc4e Merge "Document deploy_boot_mode and boot_option for standalone deployments" 2020-03-30 14:24:30 +00:00
Dmitry Tantsur
80cdb9abd7 Document deploy_boot_mode and boot_option for standalone deployments
Change-Id: Iad04779cc8c782b20d6636dd2bbb602bc89255b2
2020-03-30 13:43:08 +02:00
Zuul
05ea0d1842 Merge "Signal agent token is required" 2020-03-28 08:54:27 +00:00
Zuul
513342d0df Merge "Fix enabled_hardware_types from idrac-wsman to idrac" 2020-03-27 15:27:45 +00:00
Zuul
ec42ca77a1 Merge "Document our policies for stable branches" 2020-03-27 09:55:35 +00:00
spranjali
6c6dd2c84b Fix enabled_hardware_types from idrac-wsman to idrac
While using interface "idrac-wsman", the "idrac" hardware-type should
be enabled instead of idrac-wsman.

Change-Id: Iefcb48b84c6a9092f62b037daf6abb2226e4d456
2020-03-27 09:30:31 +00:00
Iury Gregory Melo Ferreira
88d489a532 Document our policies for stable branches
Action item from our weekly-meeting.

Change-Id: I761e55d0aec9dd8ff64cab346c72ffbf40f242e4
2020-03-26 18:18:09 +01:00
Yolanda Robla
b6136e13f7 Add troubleshooting on IPMI section
Troubleshooting of common problems found when
working with IPMI on different vendors.

Change-Id: I6d44722fdb11166ad4b2a7d5c23c3ff8d5390637
Signed-off-by: Yolanda Robla <yroblamo@redhat.com>
2020-03-26 10:39:38 +01:00
Zuul
8805ff79ef Merge "[doc] Add documentation for retirement support" 2020-03-24 19:53:12 +00:00
Zuul
de2d907fc3 Merge "Add info on how to enable ironic-tempest-plugin" 2020-03-24 05:17:42 +00:00
Arne Wiebalck
35b77ddb3d [doc] Add documentation for retirement support
Story: #2005425
Task: #39084
Change-Id: I1745d3035439c329a00d59bfe7f0c28473a6c4bb
2020-03-23 22:18:27 +01:00
Iury Gregory Melo Ferreira
5b07374fd8 Add info on how to enable ironic-tempest-plugin
To run the ironic tempest tests in DevStack locally it's
necessary to clone the ironic-tempest-plugin repository, and
add TEMPEST_PLUGINS in the local.conf

Change-Id: Iad7ca2c1f2ab5ab49493f9c7fe4738fc0bcdb5f4
2020-03-23 19:22:42 +01:00
Ilya Etingof
263fd021b2 Add indicators REST API endpoints
Added REST API endpoints for indicator management:

* GET /v1/nodes/<node_ident>/management/indicators` to list all
  available indicators names for each of the hardware component.
* GET /v1/nodes/<node_ident>/management/indicators/<indicator_ident>
  to retrieve the state of given indicator.
* PUT /v1/nodes/<node_ident>/management/indicators/<indicator_ident>`
  change state of the desired indicator.

This implementation slightly deviates from the original spec in
part of having component name in the URL - this implementation
flattens component out.

The spec: https://review.opendev.org/#/c/655685/7/specs/approved/expose-hardware-indicators.rst

Change-Id: I3a36f58b12487e18a6898aef6b077d4221f8a5b8
Story: 2005342
Task: 30291
2020-03-21 18:45:01 +00:00
Julia Kreger
deca07de3c Signal agent token is required
The agent needs to be able to understand
if the agent token is supported and is a
mandatory feature of the ironic deployment
as that can alter some of the behavior of
the agent itself.

Also adds documentation on the subject for
administrators.

Story: 2007025
Task: 37821

Change-Id: Ic635e0ed6d378d6a34a4a82e66ca647eee33bc26
2020-03-20 17:26:51 +00:00
Dmitry Tantsur
cc1632a82d Allow specifying target devices for software RAID
This change adds support for the physical_disks RAID parameter in
a form of device hints (same as for root device selection).

Depends-On: https://review.opendev.org/713209
Change-Id: I9751ab0f86ada41e3b668670dc112d58093b8099
Story: #2006369
Task: #36153
2020-03-17 14:31:38 +01:00
Dmitry Tantsur
9fd0aa859c Documentation clarifications for software RAID
This change clarifies which options are supported for software RAID
and what the defaults are.

Change-Id: Ib93d0f564b7ee51ee9beb7f6143635c240f4baf3
2020-03-17 12:16:10 +01:00
Zuul
2891d8d495 Merge "Expand user-image doc" 2020-03-16 13:37:23 +00:00
Kaifeng Wang
cc17246d2b Expand user-image doc
Adds some text on the general instruction on how to build
user-image by virtual machine software.

See also: https://review.opendev.org/#/c/710966/

Change-Id: Ic84bc14ff0bce609009455c644a1601f990a7b45
2020-03-16 09:38:12 +08:00
Dmitry Tantsur
2b3bef7d1d Skip clean steps from 'fake' interfaces in the documentation
They are not targeted at operators, and the title 'fake cleaning
steps' is confusing.

Change-Id: Ibe42ede09fcbc5d8c16c8b1996f6c4055ad6a138
2020-03-11 11:39:28 +01:00
Arne Wiebalck
7a15df60c3 [doc] Missing --name option
The --name parameter needs to be passed when a node is created
with a name.

Change-Id: I7e4416113d06b3f10a78c28e14c9add89c21ef95
2020-03-05 14:10:09 +01:00
Dmitry Tantsur
530ec9d0b1 Docs: split away user image building and highlight whole disk images
The user image documentation applies to both standalone and glance
usage, but we keep it in the glance section. This change creates
a new page to talk about user images.

We also don't emphasize the difference between partition and whole
disk images enough, resulting in users trying whole disk images
with kernel/ramdisk set. Make the difference clearer.

Change-Id: I7185679203e0f9aa7ebe9c69971009cd59271b89
2020-03-03 13:25:40 +01:00
Zuul
4aa6c10bc9 Merge "Cleanup docs building" 2020-03-02 12:10:02 +00:00
Andreas Jaeger
5cebea361b Cleanup docs building
* Remove doc/source/install/conf.py, it's unused.
* Remove settings that are provided by openstackdocstheme from conf.py
  files. Switch to newer openstackdocstheme for this.
* Remove unused deps from tox.ini: releasenotes and api-refonly need
  doc/requirements but not requirements.

Change-Id: Iab5ad6cde40c3342770c0112155fe5e1d262d1e8
2020-02-29 15:12:04 +01:00
Julia Kreger
bb3b2349f9 Pre-shared agent token
In order to improve security of the lookup/heartbeat
endpoints, we need to generate and provide temporary tokens
to the initial callers, if supported, to facilitate the
verification of commands.

This is the first patch in an entire series which utimately
enables the endpoint communication to be better secured.

The idea behind this started in private story 2006634 which
is locked as a security related filing covering multiple
aspects of ironic/ironic-python-agent interaction centered
around miss-use and generally exposed endpoints. That story
will remain marked as a private bug because it has several
different items covered, some of which did not prove to be
actually exploitable, but spawned stories 2006777, 2006773,
2007025, and is ultimately similar to Story 1526748.

Operationally this is a minimally invasive security
enhancement to lay the foundation to harden interactions
with the agent. This will take place over a series of
patches to both Ironic and the Ironic-Python-Agent.

Also see "Security of /heartbeat and /lookup endpoints"
in http://lists.openstack.org/pipermail/openstack-discuss/2019-November/010789.html

Story: 2007025
Task: 37818

Change-Id: I0118007cac3d6548e9d41c5e615a819150b6ef1a
2020-02-20 14:33:32 -08:00
Julia Kreger
7cb2517169 Project Contributing updates for Goal
This change covers changes to meet the goal of establishing contributor
documentation, which Ironic largely already had, but required some
enhancement and clarification.

This also includes rough context of the PTL duties and revision to the
primary repository CONTRIBUTING document, as suggested in some of the
goal related discussions.

Change-Id: Ia47eb56d7eb3c19c99fa7a61fb5605037dd9ebee
Story: #2007236
Task: #38528
2020-02-20 02:01:21 +00:00
Ilya Etingof
c99347faef Make redfish_system_id property optional
The `redfish_system_id` property of redfish hardware type has been
made optional. If not specified in `driver_info`, and the target BMC
manages a single ComputerSystem, ironic will assume that system.

Otherwise, ironic will fail requiring explicit `redfish_system_id`
specification in `driver_info`.

Also bumpted sushy dependency to >= 3.1.0.

Change-Id: I425baa7c7294c6c8a707e89df63a17da8e49b666
Story: 2007258
Task: 38619
2020-02-13 08:31:44 +01:00
Zuul
8c4571acf7 Merge "Remove references to 'firewall_driver'" 2020-02-07 12:12:10 +00:00
Andreas Jaeger
1366bde2db Disable debug output in doc building
Disable the debug output, we don't need 10s of lines to display the RST
file during normal builds.

Change-Id: I3c53ca2591d92e3354efb9da99cf2ee19ea51b7d
2020-02-06 11:27:36 +01:00
Arne Wiebalck
3ecaadbb35 Support node retirement
This change adds support for node retirement: nodes can
have additional properties 'retired' and 'retired_reason'
which change the way the nodes (can) traverse the FSM
and which operations are allowed. In particular:
- retired nodes cannot move from manageable to available;
- upon instance deletion, retired nodes move to manageable
  (rather than available).

Story: #2005425
Task: #38142

Change-Id: I8113a44c28f62bf83f8e213aeb6704f96055d52b
2020-01-28 11:01:32 +01:00
Zuul
8169f2532b Merge "Follow up to root device hints in instance_info" 2020-01-27 16:35:42 +00:00
Zuul
0d32338ce6 Merge "Make ironic-api compatible with WSGI containers other than mod_wsgi" 2020-01-24 20:10:32 +00:00
Dmitry Tantsur
4504bd5a8d Make ironic-api compatible with WSGI containers other than mod_wsgi
Using ironic-api-wsgi implies mod_wsgi, some other containers require
an importable module. This patch modifies ironic.api.wsgi to be usable
this way and documents it.

Change-Id: I8493eb36293a0214081e0adb59c3a267c9688819
2020-01-24 12:22:46 +01:00
Dmitry Tantsur
9050098e32 Follow up to root device hints in instance_info
Follow-up to commit 42dc9787e52670bb1e1baa36f08703dd802804f4:
* Refactor root device checking code to be in one place and extend
  the error message.
* Extend unit tests to cover the actual override.
* Update documentation.

Change-Id: I1d73f2233c766ff52268e242b8071dec12b2daca
2020-01-21 16:30:34 +01:00
Julia Kreger
7e825a28c0 Deprecate ibmc
The ibmc hardware type and related code is no longer being tested in
third party CI. No party has stepped up to continue maintaining and
supporting this code. As such, our standard practice is to deprecate
and remove the driver code.

Change-Id: I8e16d8a2f68623f98ae5e3acce886b29f95eacb5
Story: 2007185
Task: 38310
2020-01-20 09:27:09 -08:00
Dmitry Tantsur
9be5b37296 Document using CentOS 8 DIB IPA images for Ussuri and newer
Change-Id: I2e5e32da2c0a6c13c7174dcf2aa990ddc7e70c43
2020-01-14 13:09:57 +01:00
Zuul
2a43e371f1 Merge "Remove those switches for python2." 2019-12-31 18:00:50 +00:00
Madhuri Kumari
fcbf25aec5 Replace disk-image-create with ironic-python-agent-builder
Change-Id: I3e3d672eed0e059de7b01adc1e009f01dbd35a74
2019-12-27 10:54:25 +05:30
Wang Jerry
82b17f0b04 Remove those switches for python2.
Change-Id: Id00d8886b2025203ec0023092064aa8f70904202
2019-12-26 08:41:46 +00:00
Kaifeng Wang
9a6344d03c Add notes on the pxe template for aarch64
On verifying deployment on aarch64 bare metals, the linuxefi and
initrdefi are not available in grubaa64.efi, update doc to note
the potential change required on multi-architecture setup.

Change-Id: I92786eaed2c3bf6fb9f25672183bd9511e7a6e6e
2019-12-23 13:56:28 +08:00
Zuul
4b28072d4b Merge "Add owner to allocations and create relevant policies" 2019-12-12 19:53:55 +00:00
Madhuri Kumari
b293eb1af0 Remove deprecated ironic-agent element
ironic-agent is deprecated. ironic-python-agent-ramdisk is the new
element to build a ramdisk with ironic-python-agent

Change-Id: Ib9feb0bb9ccc97f7eb3f0669db05b98d96fbe918
2019-12-12 12:10:16 +05:30
Tzu-Mainn Chen
3fbb560af1 Add owner to allocations and create relevant policies
Add an owner to allocations. Depending on policy, a non-admin
can then create an allocation and have the owner set to their
project. Allocation processing then respects the owner.

Change-Id: I2965a4a601b9fa2c0212097da37b104a3e5514df
Story: #2006506
Task: #37540
2019-12-10 19:00:33 +00:00
Dmitry Tantsur
8a0b1a39f2 docs: add a missing heading
Change-Id: Iee4a9f4f13a9bd944e193e2cf09debc8fd8c21bc
2019-12-05 16:23:37 +01:00
Stephen Finucane
9a5e6ead2a Remove references to 'firewall_driver'
This option has been removed from nova. Drop references to it from the
documentation.

Change-Id: If6efd14ba28f6cb1eee2ce0c3cd9bbb89549c252
Signed-off-by: Stephen Finucane <sfinucan@redhat.com>
Depends-On: https://review.opendev.org/#/c/696514/
2019-11-28 12:44:00 +00:00
Zuul
d1cfeb0a09 Merge "Drop python 2.7 support and testing" 2019-11-27 14:10:33 +00:00