Friday, 2025-05-30

clifo/00:00
cidclif, \o03:47
opendevreviewSyed Haseeb Ahmed proposed openstack/ironic master: control update ports logic with update_pxe_enabled config flag  https://review.opendev.org/c/openstack/ironic/+/95111407:02
opendevreviewTakashi Kajinami proposed openstack/python-ironicclient master: Exclude test code from coverage report  https://review.opendev.org/c/openstack/python-ironicclient/+/95137007:25
opendevreviewTakashi Kajinami proposed openstack/ironic-ui master: Exclude test code from coverage report  https://review.opendev.org/c/openstack/ironic-ui/+/95137407:28
adam-metal3Hello Ironic!07:32
adam-metal3I was wondering that if I would use https url for the http_url option of Ironic (in the config file), but the https server in question would use a self signed cert, is there an elegant way to specify what cert to use? because I don't see config options related to that, or will the http lib just pic it up from some default location?07:34
adam-metal3ir is it the one from the "default" group of configs "webserver_verify_ca"07:39
adam-metal3?07:39
opendevreviewSyed Haseeb Ahmed proposed openstack/ironic master: control update ports logic with update_pxe_enabled config flag  https://review.opendev.org/c/openstack/ironic/+/95111410:09
opendevreviewSyed Haseeb Ahmed proposed openstack/ironic master: Control port updates with update_pxe_enabled flag  https://review.opendev.org/c/openstack/ironic/+/95111410:15
dtantsuradam-metal3: hey, what are you going to pass the certificate *to*? the iPXE firmware will need it pre-baked, IPA to unless you use virtual media10:17
dtantsurwelcome (back?) clif!10:49
adam-metal3dtantsur, I want Ironic to use it when it verifys the kernel and initramfs urls in case the http server hosting them uses https, ipxe will take them other port and fir ipxe the cert will be baked in so it is just for ironic , specifically to be used in ipxe_utils cache_ramdisk_kernel12:17
dtantsuradam-metal3: webserver_verify_ca should be the right option I think (it has nothing to do with http_url hence my confusion)12:17
adam-metal3dtantsur, for some resaon in the pxe_utils I think it always verifies against http_url by default because it tries to check the url an it seem to construct the url based on what I have in the "http_url" and e.g. if it fails it prints this "Validation of image href http://172.22.0.2:6180/images/ironic-python-agent.kernel failed," I don't have this url specified anywhere else in config12:20
adam-metal3in ironic config the kernel and the initramfs is only refferenced by "file://"12:21
dtantsuradam-metal3: the URL is provided by BMO based on its environment variables. The fact that http_url has the same host is a coincidence.12:21
dtantsuradam-metal3: I have a TODO item on BMO to stop requiring kernel/initramfs since, as you noticed, ironic-image already has defaults. It hasn't been done yet.12:22
adam-metal3dtantsur, ooo right bm also passes stuf to the API yes yes indeed srry for my confusion12:22
dtantsurhttps://github.com/metal3-io/baremetal-operator/issues/210012:22
adam-metal3I might look into that issue then at some point I am doing stoff around this topic now anywas, but for my work I will need webserver_verify_ca anyhow, Tnaks for the clarification12:23
dtantsuradam-metal3: if you do wire webserver_verify_ca in, please consider at least leaving an RFE on IrSO to wire the same12:25
dtantsurso that we don't end up with feature regressions when (hopefully? ever?) we switch over to IrSO12:25
adam-metal3yes I will, it is mostly there, there is a corresponding env var in ironic-image already, I will start utilizing it from now on tho 12:27
TheJuliagood morning13:05
* TheJulia sips coffee in a likely vain attempt to wake up13:06
TheJuliahmm, close on the multinode job but it appears we may be on track for tls fun next13:19
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: CI Science - Expand the multinode job  https://review.opendev.org/c/openstack/ironic/+/95020613:20
opendevreviewMithun Krishnan Umesan proposed openstack/networking-generic-switch master: Improve NGS documentation. Some minor nitpicks and changes  https://review.opendev.org/c/openstack/networking-generic-switch/+/95102213:22
* TheJulia makes more coffee13:37
opendevreviewJulia Kreger proposed openstack/ironic master: Patch configdrive metadata  https://review.opendev.org/c/openstack/ironic/+/94667714:40
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: CI Science - Expand the multinode job  https://review.opendev.org/c/openstack/ironic/+/95020614:53
TheJuliaokay, lets see if that works... or explodes14:53
TheJuliawell, seems to accept it, so that is a good sign14:54
opendevreviewJulia Kreger proposed openstack/ironic master: Consider missing MTU invalid metadata  https://review.opendev.org/c/openstack/ironic/+/94938515:07
opendevreviewVerification of a change to openstack/ironic-python-agent stable/2025.1 failed: netutils: Use ethtool ioctl to get permanent mac address  https://review.opendev.org/c/openstack/ironic-python-agent/+/95048915:47
opendevreviewMerged openstack/python-ironic-inspector-client master: Drop license classifier  https://review.opendev.org/c/openstack/python-ironic-inspector-client/+/95130915:48
opendevreviewMerged openstack/python-ironicclient master: Exclude test code from coverage report  https://review.opendev.org/c/openstack/python-ironicclient/+/95137015:52
opendevreviewJay Faulkner proposed openstack/ironic master: Update devstack-guide to use neutron- not q-  https://review.opendev.org/c/openstack/ironic/+/95142416:09
opendevreviewMerged openstack/ironic-ui master: Exclude test code from coverage report  https://review.opendev.org/c/openstack/ironic-ui/+/95137416:18
JayF+++/opt/stack/ironic/devstack/lib/ironic:create_bridge_and_vms:2469  oscwrap --os-cloud devstack-admin network show private -c id -f value16:25
JayFpublic endpoint for compute service in RegionOne region not found16:25
JayFwhy does oscwrap network show want a compute service?16:25
JayFthis is using the standalone Ironic devstack config16:25
JayFI figured it out; tldr it helps if you run *neutron*-api instead of *neurton*-api (or however I typo'd it) and apparently osc falls back to compute endpoint if network isn't there (assuming nova-network compat?)16:39
* TheJulia blinks17:14
TheJuliafun17:14
opendevreviewMerged openstack/ironic master: Add port/portgroup list conductor groups filter  https://review.opendev.org/c/openstack/ironic/+/86229217:16
opendevreviewMerged openstack/ironic master: Control port updates with update_pxe_enabled flag  https://review.opendev.org/c/openstack/ironic/+/95111417:16
opendevreviewVerification of a change to openstack/ironic-tempest-plugin master failed: Remove stable/2023.2 job  https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/95122917:19
TheJulialooks like defaults have also been changed to force ovn17:20
JayFTIL that it seems the order of enable_service commands can cause changes in behavior17:20
JayFat least that's the existing hypothesis17:20
TheJuliamultinode jobs are now erroring trying to install/use ovn becaues the dhcp agent is present and its not a devstack change17:20
JayFI have the opposite problem, working on documented devstack contributor configs and dhcp agent is *not* running17:20
JayFwith ovs17:20
JayFI'm retrying now with ordering changes17:20
TheJulianothing like https://zuul.opendev.org/t/openstack/build/9ce1fd40397e427680ea77634ab44bc3 ?17:21
JayFmine bailed during setup unable to find the network namespace17:21
TheJuliaFun17:22
JayFI checked and it was no agent started yet per logs17:22
JayFand the logs were right; so I'm guessing maybe neutron-dhcp being before neutron-api is meaningful? I hope?17:22
JayFTheJulia: that "no dhcp agent with ovn" is straight up incorrect in the ironic use case, yeah?17:22
TheJuliaYeah, that sounds like an entirely different issue17:22
TheJuliaStrait up incorrect and wrong17:23
JayFOK and it's in neutron then17:23
JayFwait, q-agt/neturon-agent17:25
JayFis not dhcp17:25
JayFneutron-dhcp / q-dhcp is dhcp17:25
JayFwhat is neutron-agent then?17:25
JayFa52041cd3 (Slawek Kaplonski         2022-11-18 11:39:56 +0100 363)     if is_service_enabled q-agt neutron-agent; then17:25
JayFsince 2022 so there's something else afoot17:26
TheJuliaNeutron l3-agent perhaps17:26
JayFl3 agent is separate17:27
JayFneutron-l317:27
JayFTheJulia: this implies to me not running agent in ovn setups is accurate https://usercontent.irccloud-cdn.com/file/GXPRPAZK/image.png17:29
TheJuliaoh, I see what is going on with that job17:29
TheJuliaat least in my case17:29
JayFI think mine is ordering17:30
opendevreviewMerged openstack/networking-generic-switch master: Improve NGS documentation. Some minor nitpicks and changes  https://review.opendev.org/c/openstack/networking-generic-switch/+/95102217:30
TheJuliamine is layering of config17:30
TheJuliabecause I have to have a group definition, and then host deifnitions17:30
TheJuliadefinitions17:30
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: CI Science - Expand the multinode job  https://review.opendev.org/c/openstack/ironic/+/95020617:31
TheJulialets see if that gets us closer17:31
JayFsame, I've got another cycle running17:32
TheJuliacool cool17:33
JayFI'm all the sudden /very very glad/ I took time yesterday to automate my VM creation on my hypervisor lol17:33
TheJuliaheh17:43
JayFwhelp, that failed in an identical way17:44
JayFI think something is weird about how things are ordering but I'm not 100% sure17:44
JayFTheJulia: you have time now to talk thru this with me?17:44
TheJuliayeah17:46
JayFhttps://us06web.zoom.us/j/85779536876?pwd=2337Vv7tiShA3QQX6ktuRiTcpSnDhR.117:47
opendevreviewJay Faulkner proposed openstack/ironic master: Update devstack-guide to use neutron- not q-  https://review.opendev.org/c/openstack/ironic/+/95142418:38
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: CI Science - Expand the multinode job  https://review.opendev.org/c/openstack/ironic/+/95020619:07
opendevreviewMerged openstack/ironic-python-agent stable/2025.1: netutils: Use ethtool ioctl to get permanent mac address  https://review.opendev.org/c/openstack/ironic-python-agent/+/95048919:46
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: CI Science - Expand the multinode job  https://review.opendev.org/c/openstack/ironic/+/95020620:53
*** darmach9 is now known as darmach21:05
opendevreviewJulia Kreger proposed openstack/ironic master: CI: remove legacy devstack baremetal admin and observer role usage  https://review.opendev.org/c/openstack/ironic/+/95144521:13
opendevreviewJulia Kreger proposed openstack/ironic master: DNM: CI Science - Expand the multinode job  https://review.opendev.org/c/openstack/ironic/+/95020623:43
TheJuliaI guess time will tell if that does it... but close.23:43
opendevreviewminwoo seo proposed openstack/ironic master: Add `api-call` action for ironic inspection rule  https://review.opendev.org/c/openstack/ironic/+/94674123:51
opendevreviewminwoo seo proposed openstack/ironic master: Add `api-call` action for ironic inspection rule  https://review.opendev.org/c/openstack/ironic/+/94674123:54

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!