openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update openstack-ansible-os_ironic from branch 'master'
  to 36468adfac42fd57a9217f99950eb269568f2148
  - Define ipa-insecure=1 in LXC example
    
    In LXC example, the BMAAS network is not routable to any other networks
    nor to the internal VIP.
    It means that Ironic Python Agent(IPA) is not able to communicate with
    ironic API and ironic inspector over haproxy.
    To solve that issue, `ironic_inspector_callback_url` and
    `ironic_ironic_conf_overrides.service_catalog.endpoint_override` values
    were overriden to instruct IPA to communicate with ironic api/inspector
    backends directly on BMAAS network(instead of going via HAProxy on
    management network).
    It may cause a problem with certificate verification if these backends
    are listening on https because most likely they are using self-signed
    certificate.
    As a workaround, `ipa-insecure=1` kernel parameter[1] is added to IPA
    for both inspection and deployment.
    
    [1] https://docs.openstack.org/ironic-python-agent/latest/install/index.html#ipa-and-tls
    
    Change-Id: Idfb5a4e9bf4f39441fc99b5aa78500d6195e6da0
This commit is contained in:
Damian Dabrowski 2023-05-25 23:15:10 +02:00 committed by Gerrit Code Review
parent 2c899a293d
commit 8506d2f3a8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openstack-ansible-os_ironic

@ -1 +1 @@
Subproject commit e1aea9e9fd7e81e902012806f8ccf3264a5b61c1
Subproject commit 36468adfac42fd57a9217f99950eb269568f2148