iurygregory | trandles, awesome! | 00:02 |
---|---|---|
openstackgerrit | Bill Dodd proposed openstack/ironic master: WIP: Add Redfish RAID management to Ironic https://review.opendev.org/c/openstack/ironic/+/730000 | 00:20 |
*** paras333 has quit IRC | 00:27 | |
*** JayF has quit IRC | 00:33 | |
*** rcernin has quit IRC | 00:44 | |
*** rloo has quit IRC | 01:03 | |
*** rcernin has joined #openstack-ironic | 01:45 | |
*** ayoung has quit IRC | 01:46 | |
*** zzzeek has quit IRC | 02:09 | |
*** zzzeek has joined #openstack-ironic | 02:10 | |
*** zzzeek has quit IRC | 02:15 | |
*** zzzeek has joined #openstack-ironic | 02:16 | |
*** eagereagle1 has quit IRC | 02:19 | |
*** tzumainn has quit IRC | 02:21 | |
*** anuradha1904 has quit IRC | 02:21 | |
*** zzzeek has quit IRC | 02:43 | |
*** zzzeek has joined #openstack-ironic | 02:45 | |
*** paras333 has joined #openstack-ironic | 02:48 | |
*** paras333 has quit IRC | 02:53 | |
*** MentalSiege has joined #openstack-ironic | 03:10 | |
*** pmannidi has quit IRC | 03:20 | |
*** pmannidi has joined #openstack-ironic | 03:21 | |
*** rcernin has quit IRC | 03:39 | |
*** rcernin has joined #openstack-ironic | 03:52 | |
*** rcernin has quit IRC | 03:52 | |
*** rcernin has joined #openstack-ironic | 03:52 | |
viks____ | TheJulia: ok.. i'll try to find out that... Also how do i bring from `clean wait` state to `maneagable` state.. i do the following which works some time.. but it takes too long to come back many times: | 04:19 |
viks____ | https://www.irccloud.com/pastebin/tWRgvCFw/ | 04:20 |
*** mkrai has joined #openstack-ironic | 04:21 | |
TheJulia | viks____: so maintenance is set upon cleanfail | 04:36 |
*** zzzeek has quit IRC | 04:36 | |
TheJulia | viks____: if you can take a look at the console, it might be a hardware problem, or a networking failure to boot, but yeah, any cleaning failure throws the node to maintenance when there is a failure as a safeguard | 04:36 |
*** zzzeek has joined #openstack-ironic | 04:38 | |
viks____ | TheJulia: ok... why doesn't it come back to `manageable` state immediately when the command executed... it keeps on giving `The requested action "manage" can not be performed on node "6064e0ca-27fb-42a3-9562-b0317c743a4f" while it is in state "clean wait". (HTTP 400)`.. later at some point of time it comes back to the `manageable` state.. | 04:40 |
viks____ | i tried to reduce `retry_timeout` for pxe etc but no help | 04:41 |
openstackgerrit | Bill Dodd proposed openstack/ironic master: WIP: Add Redfish RAID management to Ironic https://review.opendev.org/c/openstack/ironic/+/730000 | 04:46 |
*** zzzeek has quit IRC | 04:49 | |
*** zzzeek has joined #openstack-ironic | 04:51 | |
TheJulia | viks____: great question | 04:55 |
TheJulia | oh, interesting | 04:55 |
TheJulia | so your doing manual cleaning? | 04:55 |
viks____ | TheJulia: nope... i set it to automatic | 04:56 |
TheJulia | hmm | 04:56 |
TheJulia | viks____: *was* it actually in maintenance state? was the last_error field populated? | 04:56 |
TheJulia | so tl;dr, you can't directly go from clean wait to manageable. | 04:58 |
TheJulia | you have to issue an "abort" which it will do if it is able to (i.e. not mid-stream in an operation, and move it to clean failed | 04:58 |
TheJulia | once in clean failed, then it can be moved to manageable via the manage command | 04:58 |
viks____ | TheJulia: Oh ok.. how do i abort the `clean wait` operation? | 05:01 |
viks____ | `openstack baremetal node abort`? | 05:01 |
TheJulia | yes | 05:01 |
TheJulia | viks____: do be careful, you don't want to try and kill a cleaning operation in the middle of soemthing like secure erase, but your node souldn't be in maintenance state without some sort of hard failure anyhow | 05:05 |
*** zzzeek has quit IRC | 05:05 | |
TheJulia | that is if it actually running and all | 05:06 |
viks____ | TheJulia: Ok.. thnx.. is it safe to abort when the baremetal bootsup while cleaning and fails to find dhcp? | 05:06 |
TheJulia | oh, in that case, absolutely | 05:06 |
TheJulia | is the booting IPA image failing to find DHCP or is it just not even network booting? | 05:06 |
*** zzzeek has joined #openstack-ironic | 05:07 | |
TheJulia | viks____: if the ramdisk manages to start booting, it sounds like your lacking drivers and that network booting is basically successful in getting the ramdisk to start. That may be visible as a dhcp failure from the outside. If that is the case, I'd change ramdisk images. And if your trying to use tinyipa on real hardware, this is a prime case where you can have that kind of issue since it only carries a | 05:09 |
TheJulia | couple network drivers by default. Ones that rarely exist on physical hardware these days. | 05:09 |
*** anuradha1904 has joined #openstack-ironic | 05:10 | |
viks____ | TheJulia: ok..it seems IPA booting... it's not able to find deploy image at all.. earlier it was picking fro other locatio where dhcp and tftp was setup.. so now i have removed those... so it should basically try to get the deploy image by contacting it to neutron dhcp right? | 05:11 |
TheJulia | no | 05:11 |
TheJulia | well | 05:11 |
TheJulia | depending on how you look at it maybe | 05:11 |
TheJulia | the way it works | 05:11 |
TheJulia | At a very high level | 05:11 |
TheJulia | Ironic sets up the tftpboot/httpboot contents on the conductor, whatever host that is | 05:12 |
TheJulia | The conductor then calls neutron to setup DHCP | 05:12 |
TheJulia | inside that dhcp message, includes a pointer back to the conductor's IP for TFTP or iPXE or direct boot from http if on ipv6. | 05:12 |
TheJulia | the host makes a dhcp request, the appropriate neutron dhcp dnsmasq process in the appropriate network namespace for the provisioning or cleaning network replies | 05:13 |
TheJulia | that reply contains the appropriate address, the machine then tries to connect and download that content. The common pattern is to get the ipxe binary, boot that, and then load the ipa deployment kernel and ramdisk | 05:14 |
TheJulia | at which point once that has loaded, then and only then should you see anything that resembles linux running on the host | 05:15 |
viks____ | TheJulia: can u help me to understand step 7 here: https://docs.openstack.org/ironic/train/install/configure-networking.html#configure-networking ? | 05:20 |
viks____ | i have 2 network interface on both in baremetal as well has the controlling host.. 1 st interface is in ipmi network and the second one is separate network | 05:27 |
*** zzzeek has quit IRC | 05:28 | |
TheJulia | well | 05:29 |
TheJulia | hmm | 05:29 |
TheJulia | I guess first off, the ipmi bmc network should be as far out as band as possible | 05:29 |
TheJulia | viks____: step 7 should just be the physical network that the network cards for network booting are attached to | 05:30 |
TheJulia | step 7 is specifically adding the integration bridge to be managed by ovs | 05:30 |
TheJulia | ovs-vsctl show should provide insight | 05:31 |
*** zzzeek has joined #openstack-ironic | 05:31 | |
TheJulia | if you get into the neturon namespace, you may want tos ee if packets are making it to that dhcp servers | 05:31 |
TheJulia | if you do ip netns list | 05:31 |
TheJulia | `ip netns list` | 05:31 |
TheJulia | `ip netns exec ip addr` | 05:31 |
TheJulia | err | 05:31 |
TheJulia | `ip netns exec namespaceid ip addr` | 05:31 |
TheJulia | and then sniff traffic using that same exec command, you can figure that out | 05:32 |
TheJulia | ovs-vsctl should have matching interfacen ames in them | 05:32 |
TheJulia | and with that, I need to get some sleep, although I will agree... something feels missing in those neutron steps | 05:32 |
viks____ | TheJulia: ok.. i'll try to investigate more... Thnx for your inputs | 05:34 |
TheJulia | viks____: likely, that feeling I have is because it has been a long time since I've setup neutron | 05:35 |
TheJulia | but what has always helped me the most is looking inside the namespaces, and working my way out | 05:36 |
TheJulia | so packet capture to make sure the packets are making it to the machine on the expected interface | 05:36 |
TheJulia | checking ovs config via ovs-vsctl show | 05:36 |
TheJulia | and then starting to check from within the machine and stepping out one step at a time | 05:36 |
*** rcernin has quit IRC | 05:36 | |
*** zzzeek has quit IRC | 05:38 | |
*** zzzeek has joined #openstack-ironic | 05:40 | |
*** rcernin has joined #openstack-ironic | 05:44 | |
*** zzzeek has quit IRC | 05:54 | |
*** rcernin has quit IRC | 05:56 | |
*** zzzeek has joined #openstack-ironic | 05:56 | |
*** gyee has quit IRC | 06:11 | |
*** hoonetorg has quit IRC | 06:19 | |
*** rcernin has joined #openstack-ironic | 06:22 | |
*** rcernin has quit IRC | 06:23 | |
*** rcernin has joined #openstack-ironic | 06:24 | |
*** hoonetorg has joined #openstack-ironic | 06:32 | |
viks____ | TheJulia: ok thnx.. will investigate further.. | 06:37 |
*** rcernin has quit IRC | 06:39 | |
*** rcernin has joined #openstack-ironic | 06:44 | |
*** zzzeek has quit IRC | 06:51 | |
*** zzzeek has joined #openstack-ironic | 06:53 | |
*** uzumaki has joined #openstack-ironic | 07:11 | |
*** rcernin has quit IRC | 07:14 | |
*** rcernin has joined #openstack-ironic | 07:28 | |
*** zzzeek has quit IRC | 07:31 | |
*** zzzeek has joined #openstack-ironic | 07:32 | |
*** lbotell has quit IRC | 07:39 | |
*** rcernin has quit IRC | 07:43 | |
arne_wiebalck | Good morning, ironic! | 07:43 |
janders | good morning arne_wiebalck | 07:52 |
janders | Happy Friday! :) | 07:52 |
*** tosin has joined #openstack-ironic | 07:59 | |
arne_wiebalck | Hey janders o/ | 08:07 |
*** mkrai has quit IRC | 08:10 | |
*** rh-jelabarre has quit IRC | 08:19 | |
*** uzumaki has quit IRC | 08:20 | |
*** zzzeek has quit IRC | 08:21 | |
*** anuradha1904 has quit IRC | 08:21 | |
*** zzzeek has joined #openstack-ironic | 08:23 | |
*** zzzeek has quit IRC | 08:27 | |
*** zzzeek has joined #openstack-ironic | 08:28 | |
*** mkrai has joined #openstack-ironic | 08:29 | |
*** rpittau|afk is now known as rpittau | 08:32 | |
rpittau | good morning ironic! Happy Friday! o/ | 08:33 |
janders | good morning rpittau o/ | 08:37 |
rpittau | hey janders :) | 08:37 |
janders | Happy Friday indeed, we survived the first week of 2021! :) | 08:38 |
rpittau | that's a great achievement, I aim to repeat it at least 52 times this year :) | 08:38 |
*** dougsz has joined #openstack-ironic | 08:47 | |
*** tkajinam has quit IRC | 08:55 | |
*** Deaddy has quit IRC | 08:55 | |
*** tosky has joined #openstack-ironic | 08:56 | |
*** zzzeek has quit IRC | 08:57 | |
*** zzzeek has joined #openstack-ironic | 08:58 | |
openstackgerrit | Aija Jauntēva proposed openstack/ironic master: Add 'deploy steps' parameter for provisioning API https://review.opendev.org/c/openstack/ironic/+/768353 | 08:58 |
*** lucasagomes has joined #openstack-ironic | 09:04 | |
*** derekh has joined #openstack-ironic | 09:37 | |
*** zzzeek has quit IRC | 09:44 | |
*** zzzeek has joined #openstack-ironic | 09:46 | |
*** zzzeek has quit IRC | 09:56 | |
*** zzzeek has joined #openstack-ironic | 09:57 | |
*** dtantsur|afk is now known as dtantsur | 09:57 | |
dtantsur | morning ironic! | 09:57 |
dtantsur | ready for SPUC? :) | 09:57 |
rpittau | hey dtantsur :) | 09:57 |
rpittau | I'll connect in 5 minutes | 09:58 |
dtantsur | just a reminder: we have a new meeting ID this year: https://bluejeans.com/772893798/ | 09:59 |
janders | dtantsur yep! | 09:59 |
dtantsur | iurygregory, arne_wiebalck, janders, ajya ^^ | 09:59 |
*** zzzeek has quit IRC | 10:18 | |
*** zzzeek has joined #openstack-ironic | 10:20 | |
*** rh-jelabarre has joined #openstack-ironic | 10:22 | |
*** zzzeek has quit IRC | 10:27 | |
arne_wiebalck | dtantsur: janders rpittau ajya: I lost the connection ... but I need to hop on another meeting anyway now. Was great SPUCing with you! | 10:28 |
dtantsur | o/ | 10:29 |
*** zzzeek has joined #openstack-ironic | 10:29 | |
*** ociuhandu has joined #openstack-ironic | 10:31 | |
openstackgerrit | Dhuldev Valekar proposed x/sushy-oem-idrac master: Redfish management clean steps https://review.opendev.org/c/x/sushy-oem-idrac/+/721596 | 10:34 |
*** ociuhandu has quit IRC | 10:39 | |
*** ociuhandu has joined #openstack-ironic | 10:41 | |
*** zzzeek has quit IRC | 11:18 | |
iurygregory | good morning | 11:19 |
iurygregory | dtantsur, I just had breakfast hehehe (the alarm didn't work D:) | 11:20 |
dtantsur | happens :) you have another chance in the evening/afternoon | 11:20 |
iurygregory | spuc still happening? | 11:20 |
*** zzzeek has joined #openstack-ironic | 11:20 | |
dtantsur | not the morning one | 11:21 |
iurygregory | I hope I will be able to join the one in the afternoon (need to see the Ophthalmologist today) | 11:21 |
iurygregory | otherwise they won't renew my driver's license XD | 11:22 |
dtantsur | heh, good luck! | 11:22 |
*** ociuhandu has quit IRC | 11:22 | |
iurygregory | thanks! I'm sure I will need! | 11:22 |
*** uzumaki has joined #openstack-ironic | 11:35 | |
*** zzzeek has quit IRC | 11:38 | |
*** zzzeek has joined #openstack-ironic | 11:43 | |
dtantsur | folks, looking for some bifrost reviews https://review.opendev.org/c/openstack/bifrost/+/767929 https://review.opendev.org/c/openstack/bifrost/+/767384 | 12:04 |
dtantsur | also https://review.opendev.org/c/openstack/ironic/+/764333 if somebody has a bit more time | 12:04 |
iurygregory | looking now | 12:10 |
*** ociuhandu has joined #openstack-ironic | 12:13 | |
*** ociuhandu has quit IRC | 12:14 | |
*** ociuhandu has joined #openstack-ironic | 12:15 | |
*** ociuhandu has quit IRC | 12:26 | |
*** zzzeek has quit IRC | 12:28 | |
*** zzzeek has joined #openstack-ironic | 12:30 | |
*** zzzeek has quit IRC | 12:42 | |
*** zzzeek has joined #openstack-ironic | 12:45 | |
iurygregory | dtantsur, small question in https://review.opendev.org/c/openstack/bifrost/+/767929 | 12:47 |
*** ociuhandu has joined #openstack-ironic | 12:53 | |
*** ociuhandu has quit IRC | 12:58 | |
*** ociuhandu has joined #openstack-ironic | 12:58 | |
dtantsur | oh, good catch | 13:13 |
dtantsur | which makes me wonder if we even need this feature | 13:16 |
*** uzumaki has quit IRC | 13:18 | |
openstackgerrit | Dmitry Tantsur proposed openstack/bifrost master: Make DHCP inventory handling more flexible https://review.opendev.org/c/openstack/bifrost/+/767929 | 13:30 |
dtantsur | okay, I've figured out the confusion around different hosts dirs | 13:30 |
iurygregory | sorry I was in my 1:1 | 13:31 |
iurygregory | going to look at the patch after the CI run | 13:31 |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Do not enter maintenance if cleaning fails before running the 1st step https://review.opendev.org/c/openstack/ironic/+/769923 | 13:57 |
*** zzzeek has quit IRC | 13:59 | |
*** dtantsur is now known as dtantsur|brb | 14:00 | |
*** zzzeek has joined #openstack-ironic | 14:01 | |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: [WIP] API to force manual cleaning without booting IPA https://review.opendev.org/c/openstack/ironic/+/769793 | 14:01 |
*** jawad_axd has joined #openstack-ironic | 14:03 | |
*** rloo has joined #openstack-ironic | 14:13 | |
*** anuradha1904 has joined #openstack-ironic | 14:18 | |
openstackgerrit | Aija Jauntēva proposed openstack/ironic master: Add configuration mold storage https://review.opendev.org/c/openstack/ironic/+/769928 | 14:31 |
* TheJulia wipes sleep from her eyes | 14:37 | |
rpittau | bye everyone! Have a great weekend! o/ | 14:46 |
*** rpittau is now known as rpittau|afk | 14:46 | |
*** tzumainn has joined #openstack-ironic | 14:48 | |
openstackgerrit | Julia Kreger proposed openstack/ironic-python-agent stable/victoria: Fix default disk label with partition images https://review.opendev.org/c/openstack/ironic-python-agent/+/769748 | 14:53 |
openstackgerrit | Merged openstack/ironic-python-agent bugfix/6.3: Remove lower-constraints job https://review.opendev.org/c/openstack/ironic-python-agent/+/769506 | 14:58 |
TheJulia | dtantsur|brb: w/r/t https://review.opendev.org/c/openstack/ironic/+/769923, arne and I are both kind of wondering about one of the other change you've got in there that changes if a node ever actually ends up in a fail state in that case. Was this intended? It is kind of a mechanics/interaction change which is visible. | 15:08 |
*** MentalSiege has quit IRC | 15:11 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Register all hardware_interfaces together https://review.opendev.org/c/openstack/ironic/+/764911 | 15:17 |
TheJulia | derekh: ^^ just release note edit, marked +2 | 15:17 |
iurygregory | rpioso, ajya hey we did and upgrade on firmware from 4.20.20.20 to 4.40.00.00 on Dell PowerEdge R640 and virtual media stopped working after using the latest firmware, sushy complains that the Message.ExtendedInfo is a string and not a dict | 15:19 |
iurygregory | https://github.com/openstack/sushy/blob/stable/victoria/sushy/exceptions.py#L127 | 15:19 |
iurygregory | http://paste.openstack.org/show/801518/ | 15:20 |
TheJulia | iurygregory: your going to need to patch sushy to capture that entire object | 15:20 |
TheJulia | sounds like a fairly grumpy error message | 15:21 |
ajya | iurygregory: I'll take a look | 15:22 |
derekh | TheJulia: ack, thanks | 15:22 |
iurygregory | TheJulia, yeah, I will push a patch with adding Logs so I can confirm (will need to ask people to run the deployment hehe) | 15:24 |
iurygregory | lunch first to get more energy XD | 15:25 |
openstackgerrit | Merged openstack/ironic master: docs: Add information on post-branch release tasks for bifrost https://review.opendev.org/c/openstack/ironic/+/757120 | 15:25 |
*** zzzeek has quit IRC | 15:38 | |
*** zzzeek has joined #openstack-ironic | 15:41 | |
*** mkrai has quit IRC | 15:41 | |
*** dtantsur|brb is now known as dtantsur | 15:45 | |
dtantsur | TheJulia: which exactly change do you have in mind? | 15:45 |
dtantsur | ah, I missed the comments | 15:46 |
dtantsur | it's not about the fail state, it's about the fault. a fault is a specific thing that implies maintenance. | 15:47 |
dtantsur | arne_wiebalck, TheJulia ^^ | 15:47 |
arne_wiebalck | dtantsur: thanks; so the node will still end up in clean_failed? | 15:50 |
dtantsur | yep | 15:50 |
arne_wiebalck | dtantsur: that was my question/misunderstanding | 15:50 |
arne_wiebalck | dtantsur: thanks | 15:50 |
dtantsur | a fault is "the machine itself is potentially screwed", which is not the case for e.g. clean steps validation | 15:51 |
arne_wiebalck | right ... I was worried that a failed pxe setup would not be reflected as clean_failed | 15:51 |
dtantsur | see process_event in the very bottom of the function | 15:52 |
openstackgerrit | Iury Gregory Melo Ferreira proposed openstack/sushy stable/victoria: [DNM] Adding more logs to debug idrac issue https://review.opendev.org/c/openstack/sushy/+/769950 | 15:56 |
TheJulia | dtantsur: ack, thanks | 15:56 |
dtantsur | TheJulia: how do you feel about ManagementInterface additions for secure boot? | 15:59 |
dtantsur | since we can have a generic implementation: http://redfish.dmtf.org/schemas/v1/SecureBoot.v1_0_7.json | 16:00 |
TheJulia | +2! | 16:03 |
dtantsur | okay, that's another thing I'll be busy with | 16:03 |
TheJulia | ok | 16:04 |
*** zzzeek has quit IRC | 16:10 | |
*** zzzeek has joined #openstack-ironic | 16:12 | |
openstackgerrit | Merged openstack/bifrost master: Enable ramdisk deploy by default, disable iscsi https://review.opendev.org/c/openstack/bifrost/+/767384 | 16:17 |
dtantsur | a food for thoughts. iLO and iRMC currently only enable secure boot for the running instance, disabling it for cleaning/deploy. | 16:18 |
dtantsur | do we want to keep this behavior? I guess secure booting IPA doesn't make much sense indeed. | 16:18 |
TheJulia | It makes some sense | 16:20 |
TheJulia | but I suspect that is likely fine to have and would begin to peel back some of the vendor specific boot interfaces outside of virutal media | 16:21 |
dtantsur | at the very least, we cannot secure-boot via PXE | 16:21 |
TheJulia | iurygregory: do you want me to join the mentoring call in 10m? | 16:21 |
TheJulia | yeah | 16:21 |
TheJulia | Hardware features consisting of an unobtanium construction. | 16:21 |
iurygregory | TheJulia, if you want to join you are more than welcome =) | 16:22 |
TheJulia | I think my brain needs relative quite this morning and I'm saving my spoons for spuc | 16:23 |
TheJulia | but if needed I can hop on, sound good? | 16:23 |
iurygregory | TheJulia, sure | 16:24 |
*** ociuhandu_ has joined #openstack-ironic | 16:28 | |
*** ociuhandu has quit IRC | 16:31 | |
rpioso | iurygregory: Thank you for informing us of the vmedia issue with 4.40.00.00. Please be aware our third-party CI is down, so the DNM will not produce any further info until it is back up. | 16:31 |
rpioso | erbarr: ^^^ | 16:31 |
iurygregory | rpioso, ack | 16:31 |
*** ociuhandu_ has quit IRC | 16:33 | |
erbarr | rpioso, thanks for the heads up | 16:34 |
rpioso | erbarr: :-) | 16:34 |
*** zzzeek has quit IRC | 16:35 | |
*** zzzeek has joined #openstack-ironic | 16:37 | |
*** ociuhandu has joined #openstack-ironic | 16:38 | |
*** ociuhandu has quit IRC | 16:44 | |
ajya | iurygregory, rpioso: did a quick test with virtual media boot and it failed with 4.40 (worked with 4.20). It had different error about being unable to mount. Will investigate this more. Note that 4.40.00.00 is not officially supported yet with Ironic. Thank you for letting us know. | 16:55 |
iurygregory | oh good to know! | 16:56 |
ajya | iurygregory: also I was not testing inspection, but basic deploy so maybe that's why different error | 16:56 |
iurygregory | ajya, yeah it makes sense | 16:56 |
iurygregory | since it's not yet officially supported I will give a heads up to the people using it =) | 16:56 |
ajya | iurygregory: your error is in error handler, would be good to know what was the actual error. Also it could be that error handler was broken before. | 16:57 |
rpioso | iurygregory: The firmware versions we support in our downstream ironic solution can be found in https://www.delltechnologies.com/resources/en-us/asset/technical-guides-support-information/solutions/managing-dell-emc-hardware-with-openstack-ironic-idrac-driver-3-0.pdf. | 16:57 |
*** quoth has joined #openstack-ironic | 16:57 | |
iurygregory | rpioso, awesome thanks for the link! | 16:58 |
*** gyee has joined #openstack-ironic | 16:58 | |
rpioso | iurygregory: yw. And, ty! | 16:58 |
openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: [WIP] Common framework for configuring secure boot https://review.opendev.org/c/openstack/ironic/+/769961 | 16:58 |
dtantsur | reminder: SPUC now in https://bluejeans.com/250125662 | 17:00 |
*** JayF has joined #openstack-ironic | 17:00 | |
JayF | dtantsur: TheJulia: others: SPUC? | 17:00 |
dtantsur | omw | 17:00 |
TheJulia | SPUC!!!!! | 17:00 |
*** lucasagomes has quit IRC | 17:01 | |
quoth | Does anybody know if it is possible to deploy standalone ironic without cleaning enabled? I have the services running and a node enrolled but when I try to run node validate it shows an error because no cleaning network is defined. I don't have neutron installed because network services (dhcp,tftp, etc..) are provided externally | 17:01 |
dtantsur | quoth: usually when you want to disable cleaning, you don't | 17:02 |
dtantsur | in this case you have a wrong network_interface on a node | 17:02 |
dtantsur | you need network_interface=noop, not flat or neutron | 17:02 |
dtantsur | if you don't have neutron at all, set enabled_network_interfaces=noop in your ironic.conf and you'll get the right defaults | 17:03 |
quoth | Thanks, I will do that and see if it resolves the issue. | 17:03 |
dtantsur | quoth: note that you'll need to update the existing nodes first | 17:03 |
dtantsur | with baremetal node set --network-interface noop | 17:03 |
quoth | Cool. That fixed it, thanks for the help | 17:05 |
dtantsur | quoth: to be clear, you CAN have standalone without cleaning, but it's not recommended, and if it fails, chances are high the deployment will fail too | 17:06 |
quoth | Understood, I assume then that cleaning can be done without neutron services? | 17:09 |
dtantsur | yep, in a similar fashion to deployment | 17:11 |
* TheJulia awaits a flood of messages from the bot | 17:22 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Bump oslo.log requirement to 4.3.0 https://review.opendev.org/c/openstack/ironic/+/763256 | 17:22 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Introduce common personas for secure RBAC https://review.opendev.org/c/openstack/ironic/+/763255 | 17:22 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for baremetal nodes https://review.opendev.org/c/openstack/ironic/+/763257 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for ports https://review.opendev.org/c/openstack/ironic/+/763267 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for port groups https://review.opendev.org/c/openstack/ironic/+/763268 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for chassis https://review.opendev.org/c/openstack/ironic/+/763269 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for baremetal drivers https://review.opendev.org/c/openstack/ironic/+/763270 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for node and driver passthru https://review.opendev.org/c/openstack/ironic/+/763271 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for utility APIs https://review.opendev.org/c/openstack/ironic/+/763272 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for volume APIs https://review.opendev.org/c/openstack/ironic/+/763273 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for conductor APIs https://review.opendev.org/c/openstack/ironic/+/763274 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for the allocation APIs https://review.opendev.org/c/openstack/ironic/+/763275 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for the event APIs https://review.opendev.org/c/openstack/ironic/+/763276 | 17:23 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for the deploy templates APIs https://review.opendev.org/c/openstack/ironic/+/763277 | 17:24 |
*** dougsz has quit IRC | 17:31 | |
*** quoth has quit IRC | 17:32 | |
*** jawad_axd has quit IRC | 18:05 | |
openstackgerrit | Elod Illes proposed openstack/ironic stable/train: [stable-only] Fix bandit upper constraint https://review.opendev.org/c/openstack/ironic/+/769977 | 18:23 |
tzumainn | TheJulia, hi! I've been playing around with some options for testing various policy rules based on your updated test acl code | 18:30 |
tzumainn | it turns out that every test request actually uses a new temporary policy file | 18:30 |
tzumainn | so it's possible to have the yaml files include a section for policy rules that someone might want to include, and then to simply write those rules into the policy file at the beginning of test_request | 18:31 |
tzumainn | my testing so far show that this works pretty well | 18:32 |
TheJulia | tzumainn: neat | 18:40 |
*** dtantsur is now known as dtantsur|afk | 18:43 | |
dtantsur|afk | have a great weekend folks | 18:43 |
TheJulia | dtantsur|afk: you too! | 18:43 |
*** ociuhandu has joined #openstack-ironic | 18:48 | |
*** ociuhandu has quit IRC | 18:53 | |
openstackgerrit | Victor Morales proposed openstack/bifrost master: Update APT metadata before install debootstrap https://review.opendev.org/c/openstack/bifrost/+/769219 | 18:58 |
openstackgerrit | Merged openstack/ironic-specs master: Snapshot support https://review.opendev.org/c/openstack/ironic-specs/+/746935 | 19:05 |
*** jawad_axd has joined #openstack-ironic | 19:38 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Implement secure RBAC for baremetal nodes https://review.opendev.org/c/openstack/ironic/+/763257 | 19:54 |
*** tosin has quit IRC | 20:18 | |
openstackgerrit | Arun S A G proposed openstack/ironic-specs master: Add support for anaconda deploy interface https://review.opendev.org/c/openstack/ironic-specs/+/748503 | 20:31 |
*** derekh has quit IRC | 21:19 | |
*** jawad_axd has quit IRC | 21:20 | |
trandles | quick question: ironic-conductor (train) dies if ipv6 isn't enabled on my host...I can't remember how to fix this and my google-fu is weak | 21:53 |
clarkb | trandles: does it default listen on :: which isn't translated properly without ipv6 enabled? | 21:54 |
clarkb | if so setting the listen address to 0.0.0.0 or the actual ip addrs would fix it | 21:54 |
trandles | it's trying to listen to :: but that's disable (address family not supported blah blah) | 21:55 |
trandles | I tried setting my_ip = <actual IP> in ironic.conf but that's not it | 21:55 |
trandles | I have a bad case of the dumb right now... :( | 21:55 |
TheJulia | you should be able to set it to 0.0.0.0 to have the same effect for v4 | 21:58 |
clarkb | https://docs.openstack.org/ironic/latest/configuration/config.html shows that hte only option defaulting to :: is host_ip ? (and that is for json_rpc) | 21:59 |
trandles | :: doesn't appear anywhere in my ironic.conf | 21:59 |
trandles | so I'm at a loss why it's insisting conductor try to bind to :::8089 | 22:00 |
TheJulia | jsonrpc | 22:00 |
clarkb | ya so thats the one documented json_rpc.host_ip should be set to 0.0.0.0 | 22:00 |
trandles | ah HA! | 22:01 |
trandles | TheJulia & clarkb I owe you both a beer | 22:01 |
clarkb | fwiw I think I wrote code once to try and find the most ip version friendly default there | 22:02 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Introduce common personas for secure RBAC https://review.opendev.org/c/openstack/ironic/+/763255 | 22:03 |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Duplicate testing for system scoped ACL testing https://review.opendev.org/c/openstack/ironic/+/770002 | 22:03 |
TheJulia | lbragstad: If you wouldn't mind taking a look at the test patch I've got there, 770002, it woudl be much appreciated. I suspect I'm heading in the right path... but of course without policies in place I guess the settings also have no effect. | 22:04 |
clarkb | https://opendev.org/opendev/gear/src/branch/master/gear/__init__.py#L2767-L2777 | 22:04 |
clarkb | that sort of thing tries to avoid this problem | 22:05 |
TheJulia | Admittedly, the code ought to look to see if v6 is enabeld then punt | 22:06 |
clarkb | ya that is basically what the linked code does. It lists the addrs availbale and sorts by addr family to get ipv6 first if it is present, but listens on 0.0.0.0 if not | 22:07 |
* TheJulia is finding it really difficult to stay awake today | 22:11 | |
openstackgerrit | Julia Kreger proposed openstack/ironic master: Duplicate testing for system scoped ACL testing https://review.opendev.org/c/openstack/ironic/+/770002 | 22:57 |
*** rloo has quit IRC | 22:59 | |
openstackgerrit | Merged openstack/ironic stable/train: [stable-only] Fix bandit upper constraint https://review.opendev.org/c/openstack/ironic/+/769977 | 23:18 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!