| Age | Commit message (Collapse) | Author | Files | Lines |
|
Emulate baremetal using Tenks to test the deployment of Redfish
baremetal with Ironic.
Depends-On: https://review.opendev.org/c/openstack/tenks/+/995697
Change-Id: I2df2287c15d1afaba9d63956bcfa2fc7e71c3530
Signed-off-by: Jed Preist <jed@stackhpc.com>
(cherry picked from commit 06da80983a66e88251f08535b43ce984f4729e4f)
|
|
Ironic Inspector has been retired and its functionality has been
moved to Ironic.
Added a change to service-ks-register to make password optional
(to able to remove user without a password being passed in).
Using the opportunity - increasing CI coverage to include
inspection.
Change-Id: If178c23249370c7c69744843737e61a6309d6a19
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
It has been deprecated in 2024.2 cycle - see [1].
[1]: https://review.opendev.org/c/openstack/ironic-inspector/+/923170
Change-Id: I8b8dbb84d25078c533d9eaf80103609bc6fd5d48
|
|
Ironic enabled secure RBAC with system scoped enforcement [1].
Some API calls, for instance 'baremetal:driver:get' needs system
scope role by design [2], even with elevated access project scope
service role [3].
[1] https://review.opendev.org/c/openstack/ironic/+/902009
[2] https://opendev.org/openstack/ironic/src/commit/8ec56066223301230ac0ed0f0c471a10d366b474/ironic/common/policy.py#L1349-L1357
[3] https://review.opendev.org/c/openstack/kolla-ansible/+/908007
Related-Bug: #2051837
Change-Id: Id6313d7dd343b82d4c9ccf7bf429d340ea0e93d1
|
|
Installs Tenks [1] and uses it to create virtual machines to pose
as bare metal compute nodes.
The nodes are registered in Ironic, and used to provision
instances.
[1] https://docs.openstack.org/tenks/latest/
Depends-On: https://review.opendev.org/c/openstack/tenks/+/830182
Depends-On: https://review.opendev.org/c/openstack/tenks/+/830675
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/831055
Change-Id: Idfb8fbb50dc7442225967b2a2ec38ae7114f3c11
Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
|
|
Change-Id: Ibd06726ac6edcb63a1d5d4f4148851876316dc5b
|
|
This patch introduces an optional backend encryption for the Ironic API
service. When used in conjunction with enabling TLS for service API
endpoints, network communcation will be encrypted end to end, from
client through HAProxy to the Ironic service.
Change-Id: I9edf7545c174ca8839ceaef877bb09f49ef2b451
Partially-Implements: blueprint add-ssl-internal-network
|
|
Per the recent Kayobe brekage due to TLS support in Ironic [1],
let's test Ironic Inspector API as well.
[1] https://review.opendev.org/750804
Change-Id: I7ccf0c4286f8907bc2fa2eabc41ec2876c9815a9
|
|
Change-Id: Ia4626479e092be8b033bcd4e75e78a33167423d3
|
|
Pipe hid an issue that Ironic client was not available in CI,
making it look as if fake-hardware driver was not usable.
This commit applies separation of concerns to easily discern
between the two failures and provide better debugging experience.
Change-Id: Iac3d84b7d707b84a8426c8d787b29a368ff7ae85
Related-Bug: #1872481
|
|
We install kolla-ansible requirements in Zuul's Ansible playbooks.
This patch cleans up the installation in scripts so that they are
only concerned with auxiliary requirements:
- ansible (since we do not track it in requirements)
- ara (for log summaries)
- openstack clients (for first init and tests after deployment)
Additionally this patch installs openstack clients in a separate
virtualenv.
Note that all kolla-ansible requirements, ansible and ara are still
installed system-wide.
Change-Id: Iac04082ad39a9d823c515ba11c5db9af50ed225f
Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
|
|
Adds four new CI jobs for testing centos/ubuntu binary/source deploys
with ironic enabled. These are run only when there are changes to the
ironic role.
Performs some simple testing by creating a node using the fake-hardware
hardware type and creating a server.
Change-Id: Ie669e57ce2af53257b4ca05f45193cb73f48827a
Depends-On: https://review.opendev.org/664011
|