Commit Graph

422 Commits

Author SHA1 Message Date
b1ea700ba8 Explicitly install inspector-dnsmasq package
The package used to be implicitly pulled before [1],
now this needs to be installed explicitly.

Changed inspector_package param to contain list of packages
to install and adopted package module to handle list
of packages.

[1] https://review.rdoproject.org/r/#/c/23761/

Change-Id: I2435b476b65be5aab6e35bad0834e60dc9c8ced5
2020-04-29 12:16:50 +05:30
Zuul
337a1476fe Merge "agent: support command_timeout and max_command_attempts" 2020-04-25 13:19:18 +00:00
Dmitry Tantsur
d934b6bcca agent: support command_timeout and max_command_attempts
Change-Id: I84ccad43bf9d70152f6013550d70c5d7cbcee861
2020-04-24 13:47:29 +02:00
Harald Jensås
271907c7d6 port_physnet_cidr_map support
Add support for laying out the configuration for
the physnet_cidr_map processing hook.

Related-Bug: #1870529
Change-Id: I5f0f3b254edf25fdcfa328f42d8bf4324e5bbd0d
2020-04-22 19:29:02 +02:00
Steve Baker
ca47ba7c7f Allow alternative source files for /tftpboot/ipxe.efi
ipxe-bootimgs will soon include the ipxe efi variant
ipxe-snponly-x86_64.efi which has no networking stack, relying instead
on the UEFI networking stack. This image is required in some UEFI
environments instead of the full ipxe-x86_64.efi, so there needs to be
a mechanism for serving it by default.

This change makes this possible by setting the puppet parameter
ironic::pxe::ipxe_name_base to ipxe-snponly.

Change-Id: I3a0e85ce6d83001833c829f484baf181a677a5d9
2020-04-21 23:12:04 +00:00
Takashi Kajinami
06547f81a9 Add region_name parameter to ironic::drivers::inspector
... so that operator can specify their customized region where actual
keystone identity resources are created.

Change-Id: I1e5db37da6ac4f981226bb69942002af8ef465d6
2020-04-18 22:26:09 +09:00
Zuul
fc1b216dc7 Merge "Add new classes to define keystone credentials for inspector" 2020-04-17 13:22:49 +00:00
Takashi Kajinami
762804b38e Add new classes to define keystone credentials for inspector
This patch introduces the following new classes, to define keystone
credentials used in ironic-inspector.

 - ironic::inspector::ironic
 - ironic::inspector::service_catalog
 - ironic::inspector::swift

Change-Id: I49adcbb6d90b2ef051cd862362fa1a7144fd9093
2020-04-16 09:53:00 +09:00
Harald Jensås
596abc9587 Add ironic::neutron::dhcpv6_stateful_address_count
Support fo additional ip address allocations when using
dhcpv6 stateful was added in https://review.opendev.org/700002
and backported to stein in https://review.opendev.org/717205.

This change adds support in the puppet module to configuring
the amount of addresses to allocate.

Related-Bug: #1861032
Closes-Bug: 1872992
Change-Id: I09e6ce611b12e92a4a8db64c7f23a491998e956b
2020-04-15 16:28:52 +02:00
Zuul
6305426f17 Merge "Deprecate ironic::conductor::api_url" 2020-04-14 17:23:15 +00:00
Zuul
47789ecbd3 Merge "Add region_name to ironic::service_catalog" 2020-04-14 10:46:42 +00:00
Takashi Kajinami
305964417d Deprecate ironic::conductor::api_url
... because its actual parameter, [conductor]api_url, was deprecated
in ironic while ago[1], and will be replaced by
[service_catalog]endpoint_override.

[1] 308e414a57941675acf6cd825daafc653cf5927e

Change-Id: Ifde129eb4cf1487c41c4f015154dec316057ca8a
2020-04-14 08:03:13 +09:00
Takashi Kajinami
820d731731 Add region_name to ironic::service_catalog
... because it was missed in the previous change[1] to make region_name
configurable.

[1] edfe3e5460

Change-Id: Icd939144dc178adee734900b9f7049f2c5674f45
2020-04-13 16:22:54 +09:00
Zuul
c658f478b3 Merge "Add ironic::nova class" 2020-04-13 06:16:11 +00:00
Zuul
b3a86860f1 Merge "Deprecate ironic::conductor::max_time_interval" 2020-04-13 05:18:58 +00:00
Takashi Kajinami
edfe3e5460 Add region_name parameter for service authentication
... so that operators can use their customized region_name.

Change-Id: If923077e1e437ccadcb4b8773cd81f46479876dc
2020-04-12 15:30:10 +00:00
Takashi Kajinami
106ef76ac1 Add ironic::nova class
... to configure connection for nova service.

Change-Id: If0826cd647a72d3cd4391c075878eba2a2c0a94f
2020-04-12 22:21:38 +09:00
Takashi Kajinami
64351b1d99 Deprecate ironic::conductor::max_time_interval
... because the parameter is not implemented in any projects now.

Change-Id: I16122aaaad8378a2657833f49cd309c78c520d86
2020-04-12 21:40:54 +09:00
Zuul
e3a8200dcf Merge "Expect python3 client/lib package in CentOS8" 2020-03-31 22:18:02 +00:00
Takashi Kajinami
7020695920 Expect python3 client/lib package in CentOS8
In CentOS, we expect to have python3 client/lib package in 8.x while
we expect to have python2 in 7.x .
Fix unit tests to expect the correct version according to os major
version.

Change-Id: I2974ea2e134c9e46e0c606c2810ff9259e13a43d
2020-03-31 18:52:09 +09:00
ZhongShengping
7e24be3e85 Deprecate min_pool_size option
min_pool_size option is not used,see:

https://review.opendev.org/#/c/565090/

Change-Id: I643456548591f8dc6355fe90734ab35ba2de0706
Closes-Bug: #1868511
2020-03-25 14:53:41 +08:00
Takashi Kajinami
a9da71c39d Customize roles assigned to ironic user
This patch introduces a new hieradata ironic::keystone::auth::roles,
to configure customized role assigned to ironic user.

This is required to configure service token feature, as it requires
special role is assigned to the user who uses the feature.

Change-Id: If7e71bb3acaaa6f74279031730b18a7f129edb51
2020-01-20 18:56:14 +09:00
Tobias Urdin
5e6151be97 Convert all class usage to relative names
Change-Id: Iea5de7192d01739024d17e9813fe591f230aaf4d
2019-12-08 23:08:32 +01:00
Dmitry Tantsur
b7f0988c0c Configure parameters for managed in-band inspection
Change-Id: I4ddbba19f48d7f6643dab71097d2018b4a9757d3
Depends-On: https://review.opendev.org/688720
Story: #1528920
2019-11-05 13:21:25 +01:00
Zuul
e157ffd63b Merge "Wrap ipv6 addresses in inspector-ipxe template" 2019-10-01 13:48:51 +00:00
Zuul
265a2a7d47 Merge "Fix Inspector dnsmasq config for IPv6" 2019-09-30 21:52:14 +00:00
Harald Jensås
0e8a483e35 [pxe]/ip_version param in ironic::drivers::pxe
Add the ip_version parameter in the pxe class so that
the IP version that will be used for PXE booting can
be configured.

Closes-Bug: #1845746
Change-Id: Ib29adccc8378bd3e2a46b7d2ca3cfacba55e7674
2019-09-28 01:35:31 +02:00
Harald Jensås
3044c0984d Wrap ipv6 addresses in inspector-ipxe template
Closes-Bug: #1845566
Change-Id: Ic5cf47b03a13fccc16ad9410cb4939848e254bd1
2019-09-27 23:08:17 +02:00
Harald Jensås
15eedd0c4c Fix Inspector dnsmasq config for IPv6
Extend and re-name the function ipv6_netmask_to_prefix() to
ipv6_normalize_dnsmasq_ip_subnets(). It now changes the netmask
to prefix and removes the 'gateway' if it is an IPv6 subnet.

On IPv6 router info should be provided in router advertisements.
There was a draft to add support in DHCPv6, but it was never
completed.
https://datatracker.ietf.org/doc/draft-ietf-mif-dhcpv6-route-option/

Also:
  Add match for userclass iPXE and set option6:bootfile-url

Closes-Bug: #1844573
Change-Id: I47d88519acd18630e0d5682d93f1088771ec03a1
2019-09-27 20:20:13 +02:00
Harald Jensås
03550bc8c8 Add support to set option:mtu in inspector dnsmasq
It should be possible to configure the DHCP server to
provide the mtu option for inspection subnets.

This uses the dhcp-option-force so that the option is
provided also when the client does not ask for it.
According to dnsmasq manual page this is sometimes
required when sending options to PXELINUX.

Closes-Bug: #1845487
Change-Id: Ic95dbf1867fb5397f1b6d8f23466910a97051cb6
2019-09-26 13:49:56 +02:00
Zuul
b70efb17de Merge "Add support for boot_retry_timeout and boot_retry_check_interval" 2019-09-24 06:53:07 +00:00
Dmitry Tantsur
0d6830732f Support configuring [conductor]allow_provisioning_in_maintenance
Change-Id: I2c24180025aaaa9526807faf4913850d2f0f07e7
Story: #1563644
Depends-On: https://review.opendev.org/#/c/366828/
2019-09-23 16:10:05 +02:00
Dmitry Tantsur
7b80d037e2 Add support for boot_retry_timeout and boot_retry_check_interval
Depends-On: https://review.opendev.org/#/c/683127/
Change-Id: I8e74ffc1765b53f1fc6c88c50d450b4ae2fab17a
2019-09-23 15:39:03 +02:00
ZhongShengping
486e62796e Introduce the new rabbit_heartbeat_in_pthread option
oslo.messaging RabbitMQ driver have now a new option that allow user to
run the RabbitMQ heartbeat over a native python thread.

These change allow user to use this new option.

Change-Id: I768827ca462e25fcb0571a3b5cb5e5eca615cc08
Closes-Bug: #1840868
2019-08-21 14:23:42 +08:00
Dmitry Tantsur
fb8e19deb8 Train deprecations and removals
Change-Id: I43941b598c05c3f6529ede274d526e3a6c8910d5
2019-08-09 11:51:40 +02:00
Dmitry Tantsur
e9220c8ee3 Add support for configuring {deploy,rescue}_{kernel,ramdisk}
Change-Id: I1df419a7023600e0bb3d437d1fd0820b2f0f7616
Depends-On: https://review.opendev.org/#/c/672989/
2019-08-09 09:36:55 +02:00
ZhongShengping
cd37458f67 Manage oslo_middleware/max_request_body_size
So that we can increase it from the default 114688

Useful in case for example the OS-Federation mapping is too large.

If this limit is breached ironic will return a 413 Entity Too Large
and not log anything to ironic.log.

Change-Id: Icd4f0e41da2917ae9e0411ad774fe9b0bec2849f
Closes-Bug: #1835161
2019-07-04 11:36:44 +08:00
e7516d3dc8 Do not use deprecated wsgi_script_source
app.wsgi script is deprecated for long in ironic
in favor of ironic-api-wsgi script, the deprecated script
is now removed in [1]. Let's use ironic-api-wsgi script
as a wsgi_script_source path.

[1] https://review.opendev.org/#/c/668515/

Change-Id: I08016ca7b82e6987a341ffb8e3c0e5bfc872e46f
2019-07-03 19:49:46 +05:30
Zuul
50d0bf3efa Merge "Add openstackclient installation to the client class" 2019-05-17 21:22:13 +00:00
Zuul
81c2117d50 Merge "Convert ipv6 netmask to prefix in dnsmasq.conf" 2019-05-17 21:06:41 +00:00
ZhongShengping
650a1e5465 Add openstackclient installation to the client class
The repo is inside the openstackclient plugin commands[1].

[1]https://docs.openstack.org/python-openstackclient/latest/cli/plugin-commands.html

Change-Id: I224d78a4de42a86df251ac7a0eca873f442f5ffc
2019-05-17 16:31:18 +08:00
Harald Jensås
7b6b097d8a Convert ipv6 netmask to prefix in dnsmasq.conf
dnsmasq.conf require a prefix lenght as netmask for IPv6.
Convert a IPv6 address netmask to prefix.

Closes-Bug: #1828837
Change-Id: Idf84ba30eb4eb6d202faa470209f10c9da40e80b
2019-05-16 14:46:30 +02:00
Bogdan Dobrelya
1e588cab27 Add rcp_transport parameter for conductor
When Ironic Conductor requires optimizations over WAN, like some Edge
computing cases, allow configuring its [DEFAULT] rpc_transport setting.
F.e. rpc_transport may be set to 'json-rpc' for Ironic conductor
instances running at the edge sites, when the used messaging broker
should not be stretched over WAN. For such cases, this option also
plays nicely alongside the [conductor] conductor_group setting.

Related-Blueprint: undercloud-minion

Change-Id: Iad2f73f730315e8b3f0d5d809458626c9ebc890e
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
2019-05-15 17:10:20 +02:00
ZhongShengping
b50b6a085a Deprecate idle_timeout option
The idle_timeout parameter is deprecated, use connection_recycle_time
instead[1].

[1]https://review.opendev.org/#/c/334182/

Change-Id: Ic78f6dbd66ceb7646c65268444721798454ac73f
Depends-On: https://review.opendev.org/656106/
Closes-Bug: #1826692
2019-04-29 08:51:56 +08:00
Zuul
01c74aef27 Merge "Expose service_token_roles params" 2019-04-24 08:12:25 +00:00
Daniel Abad
29451f9f05 Expose service_token_roles params
Expose the [keystone_authtoken]/service_token_roles

Depends-On: https://review.opendev.org/#/c/654648/
Change-Id: I4bcc921347adf21f6eaf61af97f3d856c5217820
2019-04-22 17:12:10 -06:00
ZhongShengping
d38cd7c3d0 Move to opendev
Change-Id: If09bb551ac4fe334ebc9285abe99cf98ef04f1ab
2019-04-22 08:54:01 +08:00
Zuul
73848385c3 Merge "Replace vcsrepo with git_resource" 2019-03-21 02:49:01 +00:00
Riccardo Pittau
1b55f884a3 Add default_python_interpreter parameter to ansible manifest
This patch adds the possibility to configure the parameter
"default_python_interpreter" for the ansible deploy interface
in the "ironic::drivers::ansible" manifest.

Change-Id: Ie886ee8954cc813e06cd81d4b4c7bdb0bb1a4094
2019-03-18 16:02:22 +01:00
Zuul
5c82a0241a Merge "Add support for classless-static-routes in inspector dnsmasq" 2019-03-13 14:26:00 +00:00