1895 Commits

Author SHA1 Message Date
Zuul
e9f3212525 Merge "[doc] Update documentation about force_persistent_boot_device" 2021-05-11 09:32:07 +00:00
Arne Wiebalck
754f15c92d [doc] Update documentation about force_persistent_boot_device
Apparently, this was missed when the new options were introduced.

Story: #2004846

Change-Id: I04be5a5a8fa962bafa68f0ea93ee127b1610c20f
2021-05-10 19:02:32 +02:00
Dmitry Tantsur
b92fa285a9 Upgrade guide: remove ancient versions and group with Installation
Change-Id: Ida2d1003eb99f012be0eca6ebde4fe2f935b2880
2021-05-10 17:18:13 +02:00
Zuul
86ab396559 Merge "Delete unavailable py2 package" 2021-05-10 15:01:01 +00:00
LinPeiWen
35dea07897 Delete unavailable py2 package
The openstack Ussuri and Victoria versions no longer support the
Centos7 and pyrhon2 environment packages. Correct the missing
problems in the latest document

Change-Id: I60787243fdc6ed2741522355ec79970bdb912f41
2021-05-10 09:47:52 +00:00
Dmitry Tantsur
53d06a797c Document the custom-agent deploy interface
Follow-up to commit e85a36fe36db166e3f37212aa8261ac72e34e66a.

Change-Id: I8f1909523f2e8c314bd7e6f62ac29a90d7585abd
2021-05-05 16:05:47 +02:00
Zuul
270792377d Merge "Bye-bye iSCSI deploy, you served us well" 2021-05-05 13:12:32 +00:00
Zuul
21778d29f4 Merge "Update refarch with information about image_download_source" 2021-05-05 13:12:14 +00:00
Dmitry Tantsur
929907d684 Bye-bye iSCSI deploy, you served us well
The iSCSI deploy was very easy to start with, but it has since become
apparently that it suffers from scalability and maintenance issues.
It was deprecated in the Victoria cycle and can now be removed.

Hide the guide to upgrade to hardware types since it's very outdated.

I had to remove the iBMC diagram since my SVG-fu is not enough to fix it.

Change-Id: I2cd6bf7b27fe0be2c08104b0cc37654b506b2e62
2021-05-04 14:28:25 +02:00
Zuul
cea29d5215 Merge "Update basic local.conf for quickstart" 2021-05-04 05:41:38 +00:00
Dmitry Tantsur
e79f163837 Update refarch with information about image_download_source
Change-Id: Ia06b01e89d79bf0f65d95dd0c20e91b456b8acae
2021-05-03 17:40:58 +02:00
Zuul
83b412cbdb Merge "Deploy interface that fully relies on custom deploy steps" 2021-05-03 11:27:18 +00:00
Dmitry Tantsur
e85a36fe36 Deploy interface that fully relies on custom deploy steps
This change adds a new deploy-interface custom-agent that is essentially
the direct deploy without the write_image step and without bootloader
handling. It's targeted at deployments that need to write the image
differently, while keeping all other aspects the same.

The existing AgentDeploy becomes a subclass of the new CustomAgentDeploy
class, serving as a convenient base class for downstream deploy
interfaces that use IPA.

Change-Id: Ie126ce677c79f102e382305650bddb7f09834483
Story: #2008719
Task: #42059
2021-04-30 14:38:16 +02:00
Dmitry Tantsur
7ac60fb157 Docs: dhcp-less works with Glean 1.19.0
Change-Id: I46be8e000eba520e14fa9541ee53466ec10aa9a4
2021-04-27 10:47:18 +02:00
Zuul
f720ce7e25 Merge "[doc][trivial] Fix diagram in agent token admin docs" 2021-04-22 11:11:09 +00:00
Arne Wiebalck
7fecedad24 [doc][trivial] Fix diagram in agent token admin docs
Change-Id: I98233646472b6a5150bf1bd6fd42d364a71bd830
2021-04-22 12:12:38 +02:00
Arne Wiebalck
cf98a468ea [doc][trivial] Fix typo in agent token admin docs
Change-Id: Id40e9ed39c051a6988745a624ec4f755dc79cd41
2021-04-22 12:08:15 +02:00
Zuul
313af0b32b Merge "Followup patch for security dashboard clean steps" 2021-04-22 09:22:45 +00:00
Riccardo Pittau
da88ce8cdd Update basic local.conf for quickstart
Updating the local.conf example basic configuration for development
quickstart based on recent updates.
This has been tested on ubuntu focal, current base opearting system used
for CI jobs.

Change-Id: I102bef55bef1c944991fbcba7547cd51c03fc7be
2021-04-21 10:42:42 +02:00
Zuul
eaaefbe394 Merge "Aliases for a few unfortunately named state transitions" 2021-04-21 03:35:05 +00:00
kafilat-adeleke
5c303a5e0a Aliases for a few unfortunately named state transitions
This RFE proposes a new microversion that will provide
aliases to two poorly named provisioning verbs
to match the existing CLI commands

Story: #2007551
Task: #39402
Change-Id: Ifd14aebbfb4b17c5108f44092dac0b89d1c2c50a
2021-04-15 08:25:13 +01:00
ankit
5a27ea6fe6 Followup patch for security dashboard clean steps
This patch addresses all the remaining comments on the
security dashboard clean steps for ilo driver.

Change-Id: Id454642439d09fa8edd7bab9259dfc4ba9b55a01
2021-04-13 10:16:31 +00:00
Zuul
4d79021513 Merge "Fix typo in security docs around is_admin rule" 2021-04-08 07:52:16 +00:00
Zuul
d2e7f36949 Merge "Add security dashboard clean steps to ilo drivers" 2021-04-07 13:57:59 +00:00
ankit
f5413a9bd5 Add security dashboard clean steps to ilo drivers
This commit adds new clean steps security_parameters_update,
update_minimum_password_length and update_auth_failure_logging_threshold
to allow users to edit following security parameters which fetched
during node inspection -
``Password_Complexity``, ``RequiredLoginForiLORBSU``,
``RequireHostAuthentication``, ``MinPasswordLength``,
``IPMI/DCMI_Over_LAN``, ``Authentication_failure_Logging``,
and ``Secure_Boot``.

Story: 2008024
Task: 40736
Change-Id: I0dd9a83ee23c6b846eda3ff171ab7b3138b22fa7
2021-04-05 17:53:28 +00:00
Zuul
3b2d15394e Merge "Follow-up Automaticaly set cipher suite" 2021-04-01 10:08:40 +00:00
Zuul
5249646f64 Merge "Add agent_status and agent_status_message params to heartbeat" 2021-04-01 07:09:33 +00:00
Arun S A G
288b8fd883 Add agent_status and agent_status_message params to heartbeat
agent_status is used by anaconda ramdisk to inform the
conductor about state of the deployment. Valid agent
states are 'start', 'end' and 'error'. The agent_status_message
is used to describe the why the agent_status is set to a
particular state. Use of these parameters require API
version 1.72 or greater.

When anaconda finishes deployment the agent_status is
set to 'end'. When anaconda ramdisk is unable to deploy
the OS for some reason the agent_status is set to 'error'.

PXEAnacondaDeploy is implemented to handle the 'anaconda'
deploy interface. PXEAnacondaDeploy ties to together pieces
needed to deploy a node using anaconda ramdisk.

Co-Authored-By: Jay Faulkner <jay@jvf.cc>
Change-Id: Ieb452149730510b001c4712bbb2e0f28acfc3c2e
2021-03-31 14:20:39 -07:00
Iury Gregory Melo Ferreira
a036728fb4 Follow-up Automaticaly set cipher suite
This commit is a follow-up to  I6788585a83268e20ff6447e570995871bc9c25d5

Change-Id: I658b6b4eca7978473b08244c349ea5ac8bf37f76
2021-03-31 18:35:45 +02:00
Zuul
c9f9c2ca9b Merge "Generic way to configure clean step priorites" 2021-03-31 16:30:19 +00:00
Jacob Anders
1523ae1ce4 Generic way to configure clean step priorites
This change adds a generic method of configuring clean step
priorities instead of making changes in Ironic code every time a new
clean step is introduced.

Change-Id: I56b9a878724d27af2ac05232a1680017de4d8df5
Story: 1618014
2021-03-31 14:11:49 +10:00
Jason Anderson
7813fe8888
Fix typo in security docs around is_admin rule
The security docs give an example of how to enable admins to show
passwords via the API, but the policy guidance is wrong. There is no
"is_admin" _role_, it is instead a _rule_.

Change-Id: Ic14ebc04f01bece1460f6244ec2dd88c8dd00b0e
2021-03-30 14:56:52 -05:00
Zuul
34b2183862 Merge "[doc] Warning about out-of-sync ESPs for UEFI software RAID" 2021-03-29 23:38:19 +00:00
Zuul
356734aaca Merge "Automaticaly set cipher suite" 2021-03-29 10:51:18 +00:00
Arne Wiebalck
fc457a49d7 [doc] Warning about out-of-sync ESPs for UEFI software RAID
Add a note that the ESPs created by the IPA may get out of sync.

Change-Id: Ie2553eac42ed2e36a9be0b9720a79269a08e3252
2021-03-29 09:45:41 +02:00
Arne Wiebalck
86c34114d8 [doc] Update available software RAID levels.
The initial RAID levels have been extended by levels 5 and 6.
Update the documentation to reflect this.

Change-Id: Ifd7eb9d836b6fbf0a08648654ef2080b9717be83
2021-03-29 09:35:29 +02:00
Iury Gregory Melo Ferreira
b029fb3770 Automaticaly set cipher suite
In some cases the operator can't specify `ipmi_cipher_suite`
for each node and the problem with session can still occour:
`Error in open session response message : no matching cipher suite`

This patch adds a new configuration option that will take a list
of possible cipher suite versions that can be used when the error
occurs and the node doesn't have the `ipmi_cipher_suite` set.

Story: 2008739
Task: 42093
Change-Id: I6788585a83268e20ff6447e570995871bc9c25d5
2021-03-29 05:50:25 +02:00
Zuul
3f219703f1 Merge "redfish boot_interfaces, ipmitool -> pxe" 2021-03-26 13:10:42 +00:00
Bernd Mueller
918f3c33c3 redfish boot_interfaces, ipmitool -> pxe
Change-Id: I10fd83b081e56dff686be9698e63585dec8676a8
2021-03-25 16:52:02 +01:00
Dmitry Tantsur
133dac255f Allow overriding an external URL for virtual media
Virtual media deployments can be conducted outside of the provisioning
network as long as the node gets an IP address somehow and can reach
ironic and its HTTP server. This changes adds new configuration that
allows to use public IP addresses for virtual media while keeping PXE
boots working and constrained to the provisioning network.

Change-Id: I8b859b2812160ff3911eb7d648eab835ef61d934
Story: #2008566
Task: #41706
2021-03-24 16:53:56 +00:00
Zuul
2e68c318b3 Merge "Support pre-built deploy/rescue ISO in Redfish" 2021-03-24 10:51:14 +00:00
Zuul
709562731c Merge "Version 17.0 mapping/doc updates" 2021-03-23 23:35:55 +00:00
Dmitry Tantsur
d55929fc7d Support pre-built deploy/rescue ISO in Redfish
This change adds support to pre-built ISO images via the new driver_info
parameters redfish_deploy_iso and redfish_rescue_iso, similarly to the
iLO hardware type.

Also removes overly eager mocking in image unit tests.

Change-Id: I1366791a6c6eb34f3a43337c4199592783765912
2021-03-23 16:14:38 +01:00
Julia Kreger
80d4a0c515 Version 17.0 mapping/doc updates
Change-Id: I3a144aaaca60ce195ba22fa5af2d9c1e7b4d4bf4
2021-03-23 14:16:02 +00:00
Aija Jauntēva
752568eece Add known iDRAC virtual media boot issue
Change-Id: I81ce6d2583e8a9d4031566888d0adffa6d0a965e
2021-03-23 07:34:56 -04:00
Zuul
961a85ada7 Merge "Add Redfish RAID interface to idrac HW type" 2021-03-23 01:47:56 +00:00
Zuul
52bcb3e328 Merge "Follow-up to RBAC allocation changes" 2021-03-21 10:20:03 +00:00
Aija Jauntēva
952695be33 Add Redfish RAID interface to idrac HW type
Adds MVP support for idrac-redfish to RAID interface. Based on
generic redfish implementation, but requires OEM extension
to check when `Immediate` time becomes available shortly
after IPA starts executing steps.

Does not support foreign disks, convert from non-RAID mode.

Story: 2008602
Task: 41778
Depends-On: https://review.opendev.org/c/x/sushy-oem-idrac/+/776224
Change-Id: Iefb7f882c97e33a176962e4e907163d9e4809445
2021-03-19 12:11:50 -04:00
Zuul
a06e403b11 Merge "Add runtime gpu capabilities to ilo inspection" 2021-03-19 08:32:15 +00:00
Julia Kreger
e6863c6b71 Follow-up to RBAC allocation changes
Change-Id: I4f703258be47cf0de0a31f7e706a1aba1ea302f0
2021-03-18 12:55:29 -07:00