| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Add mlnx deploy_step entry to enable deploy time firmware https://review.opendev.org/c/openstack/ironic-python-agent/+/893371 | 01:54 |
|---|---|---|
| opendevreview | Julia Kreger proposed openstack/ironic-tempest-plugin master: WIP: Add test for dhcp-less vmedia based deployment https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/898006 | 03:11 |
| opendevreview | Verification of a change to openstack/ironic-python-agent master failed: Add mlnx deploy_step entry to enable deploy time firmware https://review.opendev.org/c/openstack/ironic-python-agent/+/893371 | 03:18 |
| drannou | Good morning | 06:52 |
| rpittau | good morning ironic! o/ | 07:02 |
| rpittau | Nisha_Agarwal: re TLS v1.3 ilo support: that's great news! :) | 07:03 |
| opendevreview | Damien RANNOU proposed openstack/ironic-python-agent-builder master: Use systemd-networkd for debian https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/898723 | 07:11 |
| Nisha_Agarwal | rpittau, re TLSv1.3, fw team has asked if this request is for Gen10 or Gen10Plus | 09:05 |
| rpittau | Nisha_Agarwal: I don't remember, but as far as it covers ilo5 should be ok, I don't think you're going to support ilo4 | 10:32 |
| rpittau | dtantsur or iurygregory maybe can recall ^ | 10:33 |
| dtantsur | I don't know the difference between Gen10 and Gen10Plus | 10:33 |
| iurygregory | good morning Ironic | 11:27 |
| iurygregory | rpittau, ilo4 we don't support, it's only in iLO5 | 11:28 |
| iurygregory | I *think* iLO5 is on Gen10 so we would be good (unless we have iLO5 in other Gen's) | 11:29 |
| iurygregory | if anyone has review time today https://review.opendev.org/c/openstack/ironic/+/897989 o/ | 11:29 |
| TheJulia | good morning | 13:16 |
| iurygregory | good morning TheJulia =) | 13:23 |
| masghar | Good morning! | 14:10 |
| TheJulia | JayF: o/ so the sig is not on the PTG schedule | 14:49 |
| JayF | TheJulia: operator-hour-baremetal-sig | 15:00 |
| JayF | TheJulia: it's on there | 15:00 |
| TheJulia | okay, I guess my brain didn't see/grok it, thanks! | 15:05 |
| Nisha_Agarwal | dtantsur, there is processor difference it seems between gen10 and gen10plus... | 15:39 |
| Nisha_Agarwal | HPE ProLiant DL380 Gen10 Plus dual-socket servers are powered by 3rd Gen Intel Xeon Scalable processors featuring up to 40 cores, in comparison to the DL380 Gen10 which is powered by the older 2nd Gen Intel Xeon Scalable processor range. | 15:39 |
| dtantsur | oh, I see. never heard about this. | 15:39 |
| Nisha_Agarwal | Yeah so ilo firmware team wants to know the request is for Gen10 or Gen10Plus...Probably they may enhance for Gen10Plus only...(my assumption)...The manager has asked me to get this info and then they will tell the actual timeframe | 15:41 |
| dtantsur | Nisha_Agarwal: I'm surprised it somehow depends on the CPU used | 15:48 |
| dtantsur | I guess the question is: which models they want to use with FIPS enabled. | 15:48 |
| TheJulia | I think the challenge is there is a growing expectation in business ecosystems that FIPS 140-3 is just the business default, and anything that doesn't align with 140-3 are going to find a lack of acquisition, and possible increased vendor<->business consumer relationship stress as entities will find it harder to pass audits. In our areas, it is not uncommon for hardware to live for years and years in data centers, so if | 15:50 |
| TheJulia | we don't have support of the hardware, we need appropriate guidance and set expectations. | 15:50 |
| Nisha_Agarwal | TheJulia, ok. Is it possible to update this launchpad bug with this? https://bugs.launchpad.net/ironic/+bug/2034191 I have given this link to the fw team for reference | 15:57 |
| Nisha_Agarwal | TheJulia, just out of curiosity, how will RH handle this for ilo4? | 15:58 |
| TheJulia | we would tell our customers they need to contact HPE | 15:59 |
| Nisha_Agarwal | Ok | 15:59 |
| TheJulia | We don't directly support the ilo driver, it is treated as commercially reasonable, and at the point of the ilo not supporting the algorithms and strength required, there really is nothing we can do except tell customers to "go talk to HPE" because it is out of our hands if they need/require FIPS 140-3 enforcement. | 16:00 |
| rpittau | the problem is the EMS extension, it's fully supported only with TLS v1.3, it works with TLS v1.2 too but it's not FIPS compliant anymore | 16:01 |
| TheJulia | Ohhh, neato! | 16:01 |
| Nisha_Agarwal | TheJulia, yeah true | 16:01 |
| Nisha_Agarwal | anyway what i understand is that ILO team is planning to support TLS1.3 in ilo5 but not sure if would be fo rGen10 or gen10Plus servers... | 16:02 |
| rpittau | I hope it's also for gen10 as I think a lot of people still have those even if they're not super new | 16:03 |
| rpittau | EOSL date is 2028, still far ahead | 16:04 |
| TheJulia | eosl? | 16:06 |
| TheJulia | end of sales lifecycle? | 16:06 |
| TheJulia | life? | 16:06 |
| rpittau | end of service life :) | 16:07 |
| rpittau | alrighty, time to go, have a great evening! o/ | 16:08 |
| JayF | I'm making meeting invites for TC PTG sessions, Ironic PTG sessions, and Board<>TC PTG sync session (email just went out about this). If you DM me an email, I'm happy to add you to these invites so you get easy invites to your inbox (yes, I know we have official ICS files; sometimes real meeting invites work better with some clients) | 17:03 |
| TheJulia | JayF: it is board with wider project leadership, not just TC fwiw | 17:06 |
| JayF | ack | 17:07 |
| *** jroll6 is now known as jroll | 17:27 | |
| opendevreview | Julia Kreger proposed openstack/ironic-tempest-plugin master: WIP: Add test for dhcp-less vmedia based deployment https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/898006 | 18:25 |
| *** jroll6 is now known as jroll | 19:30 | |
| opendevreview | Boushra Sondos Bettir proposed openstack/ironic-python-agent master: Add max in integer configs. https://review.opendev.org/c/openstack/ironic-python-agent/+/898857 | 19:36 |
| *** jroll9 is now known as jroll | 20:25 | |
| opendevreview | Julia Kreger proposed openstack/ironic-tempest-plugin master: WIP: Add test for dhcp-less vmedia based deployment https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/898006 | 20:36 |
| *** jroll3 is now known as jroll | 20:50 | |
| *** jroll07 is now known as jroll0 | 21:46 | |
| opendevreview | Steve Baker proposed openstack/ironic master: [api-ref] Add firmware fields to driver API https://review.opendev.org/c/openstack/ironic/+/898862 | 22:04 |
| opendevreview | Julia Kreger proposed openstack/ironic-tempest-plugin master: WIP: Add test for dhcp-less vmedia based deployment https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/898006 | 22:30 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!