1737 Commits

Author SHA1 Message Date
Dmitry Tantsur
2d5c7f80d8 Docs: a more complete example of ramdisk boot with redfish-virtual-media
It proved easy to overlook that it requires changing the deploy_interface.

Change-Id: Ibd4b76db4a78e0a71b6dce3d01cd3e9548e5b099
2020-11-10 11:32:02 +01:00
Zuul
ce05137960 Merge "Allow passing rootfs_uuid for the standalone case" 2020-10-23 00:18:45 +00:00
Zuul
219d72543c Merge "Update .rst files" 2020-10-22 08:46:45 +00:00
Zuul
f09e8de149 Merge "Change auth type to none in dev-quickstart" 2020-10-22 02:24:22 +00:00
Dmitry Tantsur
0a68622187 Allow passing rootfs_uuid for the standalone case
Using software RAID with whole disk images requires specifying
a root partition UUID, but it is only possible through Glance.
This change adds an explicit field for that.

Change-Id: I55e3727aab3960ef472ec2db1f23c25db405e801
2020-10-20 18:22:25 +02:00
Zane Bitter
ab77c5b176 Document by_path root device hint
Support for this was added in https://review.opendev.org/500524 but
never documented.

Change-Id: Icc67ea11bd3dde08bfdc1e46d8c32d425f9ae4ac
2020-10-15 14:51:04 -04:00
Adam Young
7cb757d7b7 Change auth type to none in dev-quickstart
The OS_AUTH_TYPE=token_endpoint plugin has been removed from Keystoneauth1
Setting that value as an envvar triggers a stack trace when performing
baremetal driver list

Change-Id: Ieb9c12f29c2f4df1ba89b792442e1768c8aee8a4
2020-10-15 14:18:10 -04:00
Michelle (Shelly) Mutu-Grigg
d5ca2ac7f0 Update .rst files
This commit removes `--os-baremetal-api-version` from CLI examples,
updates some `openstack baremetal` commands to be `baremetal` and
removes -uuid from <node-uuid>

Story: 2008194
Task: 40964

Change-Id: I4421e98afdee9ed97506cb7e5d69da966cffd963
2020-10-15 23:03:55 +13:00
Kaifeng Wang
ade35dab2d Remove obsolete trusted boot doc
The OAT project was gone for a long time, the successor opencit was
also in an unmaintained state for a few years, let's remove this
piece from the doc as it can't provide meaningful instructions to be
useful.

Change-Id: If77e1125c05e2351c757c4397ea524617e91926d
2020-10-11 23:33:04 +08:00
Kafilat Adeleke
acdf1dc772 Updates ironic documentation
Updates ironic documentation to change "openstack baremetal" to "baremetal"

Change-Id: I95afa010aeb4fb08aff05adf0cfb7a200db8a53f
Story: #2008194
Task: #40962
2020-10-07 09:46:34 -07:00
Mudit
101fc29686 Add GPU reporting to idrac-wsman inspect interface
This patch implements reporting number of NVIDIA Tesla T4
devices connected to a system by discovering such devices
and reporting them through capability 'pci_gpu_devices'.

Change-Id: If713895f05f08a9827c4c085108abb3e388b2a2e
Story: 2008118
Task: 40839
Depends-On: https://review.opendev.org/#/c/750364/
2020-09-30 18:33:53 -04:00
Zuul
4d78a23cf8 Merge "Update release mappings and API history for 16.0" 2020-09-29 13:05:12 +00:00
Zuul
2151d660d2 Merge "Redfish driver firmware update" 2020-09-29 12:18:15 +00:00
Christopher Dearborn
f0e0ef634e Redfish driver firmware update
This patch adds support for performing firmware updates using the
redfish and idrac hardware types.

Co-Authored-By: Aija Jaunteva <aija.jaunteva@dell.com>

Change-Id: Ie8f3f68c4a771121ec0ee13ce9349c7cd2b1e567
Depends-On: https://review.opendev.org/#/c/745950
Story: 2008140
Task: 40872
2020-09-28 15:12:53 -04:00
ankit
09f79416e2 Follow-up patch for iso less vmedia support
This commit addresses the remaining comment on the
changes for iso less vmedia support patch.

Change-Id: I25c224adf27c1479e541331bd31a8c5ba30c1b45
2020-09-28 07:32:50 +00:00
ankit
b4fafd8878 Adding changes for iso less vmedia support
This commit allows virtual media deployment/rescue
using kernel/ramdisk pair by creating iso on the fly
for ilo and ilo5 hardware types. Also it adds support
of dhcp less deploy to ilo and ilo5 hardware type.

Change-Id: I08e37a9f5268c15ba954b34ad706b900e5430da6
Story: #2006691
Task: #40893
2020-09-25 05:07:07 +00:00
Zuul
484dcd5b60 Merge "Add Redfish BIOS interface to idrac HW type" 2020-09-25 02:32:22 +00:00
Dmitry Tantsur
8d8d9de90c Add documentation for ISO boot
Split ramdisk deploy information away from other deploy interfaces,
since it's so different from the other interfaces (and to highlight
it in the top-level index).

Change-Id: Id3a5d71141451a45e89ffdba903966bb7da84d55
2020-09-24 14:25:25 +02:00
Dmitry Tantsur
38349c5b83 Update release mappings and API history for 16.0
Fix the incorrect Ussuri release mapping.

Change-Id: I77589745a89104ddc948f084f21a60cef8265271
2020-09-24 11:19:48 +02:00
Aija Jauntēva
796e2302c3 Add Redfish BIOS interface to idrac HW type
This change adds idrac hardware type support of a BIOS interface
implementation that utilizes the Redfish out-of-band (OOB) management
protocol and is compatible with the integrated Dell Remote Access
Controller (iDRAC) baseboard management controller (BMC). It is named
'idrac-redfish'.

The idrac hardware type declares support for that new interface
implementation, in addition to all BIOS interface implementations it has
been supporting. The highest priority BIOS interface remains the same,
the one which relies on the Web Services Management (WS-Man) OOB
management protocol. The new 'idrac-redfish' immediately follows it.

Co-Authored-By: Eric Barrera <eric_barrera@dell.com>
Co-Authored-By: Richard G. Pioso <richard.pioso@dell.com>
Co-Authored-By: Mike Raineri <mraineri@gmail.com>
Story: 2008100
Task: 40803
Depends-On: https://review.opendev.org/#/c/750020/
Change-Id: Ic5a1da418dccb0f3ec92914909aacd7c339d8837
2020-09-23 13:34:50 +00:00
Zuul
8fc5f669a2 Merge "Adds ilo-uefi-https boot interface to ilo5" 2020-09-18 21:53:50 +00:00
Zuul
754d84301c Merge "Detail iPXE + LACP troubleshooting information" 2020-09-18 20:05:26 +00:00
Zuul
b4c4294c01 Merge "Clarify HPE Edgeline support" 2020-09-18 19:50:08 +00:00
vmud213
6d36b0b785 Adds ilo-uefi-https boot interface to ilo5
Change-Id: I224eca4d8b331711369b17903098daa9fec27d7d
Story: #2008073
Task: #40761
2020-09-17 13:20:53 +00:00
Zuul
4633fe937d Merge "Allow configuring IPMI cipher suite" 2020-09-17 08:21:53 +00:00
Zuul
3297e98eab Merge "Accept and use a TLS certificate from the agent" 2020-09-16 15:14:34 +00:00
Dmitry Tantsur
2773c5fb25 Allow configuring IPMI cipher suite
Negotiation fails for some hardware, let's allow an explicit setting.

Change-Id: I04a3391f85412dcabc6105bd91beb1da25bdfc19
2020-09-16 15:52:07 +02:00
Julia Kreger
a1bb359837 Clarify HPE Edgeline support
Per discussions with stendulker, the Edgeline servers are not
recognized by proliantutils which means they are not handled
properly and the wrong devices can be set/selected for setting
the next boot device. This is largely because proliantutils
thinks Edgeline hardware is 8th generation instead of 10th
generation hardware.

Since the docs explicitly state Proliant line of rackmount
servers, it seems logical to clarify the Edgeline servers
as it is a different line of servers with a different
market focus.

Change-Id: I75062be1799ea5dd906e675d1b53c10d4f23ce3a
2020-09-14 11:58:02 -07:00
kesper
c715e35c87 Follow-up patch for One Button Secure Erase clean step
This commit addresses remaining comments on the One Button
Secure Erase clean step patch for iLO5 based Gen10 servers.

Change-Id: I606991b77dfc409a4ab0b966afdbb368fe8c2b54
2020-09-10 09:24:45 +00:00
Dmitry Tantsur
2b676a6864 Accept and use a TLS certificate from the agent
Accepts the certificate from a heartbeat and stores its path in
driver_internal_info for further usage by the agent client (or
any 3rd party deploy implementations).

Similarly to agent_url, the certificate is protected from further
changes (unless the local copy does not exist) and is removed
on reboot or tear down (unless fast-tracking).

Change-Id: I81b326116e62cd86ad22b533f55d061e5ed53e96
Story: #2007214
Task: #40603
2020-09-09 17:27:30 +02:00
Zuul
fc2247246b Merge "Adds few of the security dashboard parameters to capabilities" 2020-09-07 18:45:21 +00:00
Zuul
30a9d33577 Merge "Switch Ironic to openstacksdk for Neutron" 2020-09-07 15:41:31 +00:00
Zuul
b6cf0432a7 Merge "Remove token-less agent support" 2020-09-07 15:07:17 +00:00
Nisha Agarwal
6ee91fc3a6 Adds few of the security dashboard parameters to capabilities
This patch adds few of the security dashboard parameters
to iLO capabilities. It adds :
 - overall_security_status
 - last_firmware_scan_result
 - security_override_switch

Story: 2008024
Task: 40678

Change-Id: I7ef2ce1a20fbc1b258fce0f8ebd53661b24e66ff
2020-09-07 07:44:11 +00:00
Zuul
c2db0bbac3 Merge "OOB one button secure erase for iLO5 based HPE Proliant servers." 2020-09-06 11:21:35 +00:00
Julia Kreger
5b272b0c46 Remove token-less agent support
Removes the deprecated support for token-less agents which
better secures the ironic-python-agent<->ironic interactions
to help ensure heartbeat operations are coming from the same
node which originally checked-in with the Ironic and that
commands coming to an agent are originating from the same
ironic deployment which the agent checked-in with to begin
with.

Story: 2007025
Task: 40814
Change-Id: Id7a3f402285c654bc4665dcd45bd0730128bf9b0
2020-09-04 17:09:39 +00:00
Zuul
edb1baa2db Merge "Update deploy steps documentation" 2020-09-04 15:40:02 +00:00
Julia Kreger
fa383c916a Detail iPXE + LACP troubleshooting information
Please consider providing lolcat gifs to the fund to help
ironic developers recover from the headaches of iPXE + LACP.

In all seriousness, we needed to document this headache and it
does so at a fairly high level so we are not shaming anything
specifically.

Change-Id: Ic792697a0574e45723c8076002aa802ad22b3d54
2020-09-04 15:01:19 +00:00
kesper
9fb4074bfe OOB one button secure erase for iLO5 based HPE Proliant servers.
This commit adds functionality to perform out-of-band one button
secure erase for iLO5 based HPE Proliant servers. Using this a
user can securely erase the whole system. It includes deleting
any deployment settings profiles, all licenses, Active Health
System (AHS) and warranty data stored there, reseting BIOS and
erasing supported non-volatile storage data.

Change-Id: I2f46a67580e8a607a91a3f6660feb85ed1827dc8
Story: #2007964
Task: #40458
2020-09-04 07:20:35 +00:00
Zuul
05f47eb3e3 Merge "Add L3 boot section to the docs" 2020-09-03 13:54:53 +00:00
Zuul
eb648c1df0 Merge "documentation: follow-up to file:// support in direct deploy" 2020-09-03 13:50:53 +00:00
Zuul
4e0b2f4c37 Merge "Allow setting image_download_source per node" 2020-09-03 13:50:46 +00:00
Zuul
c15bc2a7a1 Merge "Support caching http:// images locally in the direct deploy" 2020-09-03 13:43:40 +00:00
Dmitry Tantsur
44cf63c237 Update deploy steps documentation
Mostly links to the recently added IPA docs on in-band steps.

Change-Id: Idb8d2ed94eca89bdf8204f5c9c66c4d5c0fa403b
Story: #2006963
Task: #37790
2020-09-03 15:20:20 +02:00
Zuul
d69e46b18b Merge "Update nodes in notifications documentation" 2020-09-03 12:58:27 +00:00
Dmitry Tantsur
958f15a079 documentation: follow-up to file:// support in direct deploy
Change-Id: Id31aaaccbb8ca1e6c4e26365bd37d3f3e866592b
2020-09-03 11:55:06 +02:00
Ilya Etingof
747753f911 Add L3 boot section to the docs
Describes virtual media based L3/DHCP-less ramdisk booting in the
`redfish` hardware type documentation.

Added warning to the deploy-ramdisk docs since the images
we publish will not work.

Co-Authored: Iury Gregory Melo Ferreira <iurygregory@gmail.com>
Change-Id: If9ead46db30ce519f128550f1071a1f01f7a5ccf
Story: 2006691
Task: 37073
2020-09-02 16:57:18 +02:00
Dmitry Tantsur
840ce16668 Allow setting image_download_source per node
Allows certain flexibility when it comes to low RAM vs high RAM nodes,
and large vs small images. Also deploy_interface is settable per node,
so this feature makes it easier to migrate from the iscsi deploy.

Story: #2008075
Task: #40766
Change-Id: Idf3bbc6d24042ce1d9a895095b5cb0979dd3183d
2020-09-02 15:39:53 +02:00
Dmitry Tantsur
9ac5c02770 Support caching http:// images locally in the direct deploy
For low RAM nodes we need a way to convert even http:// images to raw
and serve them locally. Add a new image_download_source value "local"
that works the same as "http" but also affects http:// images.

Change-Id: I8da968ccfad6e7a508e9b763b9e3f96007438b6a
Story: #2008075
Task: #40765
2020-09-02 15:15:54 +02:00
Dmitry Tantsur
c31cb7d99a Support file:/// images for the direct deploy
Implemented via the same mechanism as for image_download_source=http.
Forcing raw format (and thus streaming) is supported as well.

Since we always re-calculate checksums for such images, the requirement
on providing them via the API is lifted.

Change-Id: Ife385c3b363c28559c90e5a54e9c6f6807d207ff
Story: #2008075
Task: #40764
2020-09-02 15:15:11 +02:00