Open Stack

We jubilantly announce the release of:

ironic 13.0.7: OpenStack Bare Metal Provisioning

This release is part of the train stable release series.

The source is available from:

    https://opendev.org/openstack/ironic

Download the package from:

    https://tarballs.openstack.org/ironic/

Please report issues through:

    https://storyboard.openstack.org/#!/project/943

For more details, please see below.

13.0.7
^^^^^^


Known Issues
************

* Some "ipmitool" builds, in particular on machines running Red Hat
  Enterprise Linux 8.2, have changed the default cipher suite being
  offered which can cause "ipmitool" to completely fail to negotiate a
  connection with the BMC. Operators who encounter this situation
  should use the "ipmi_cipher_suite" parameter in the "driver_info"
  field to override and directly assert the required cipher. Because
  of potential security implications of attempting second level auto-
  negotiation and known BMC vendor behaviors, this must be identified
  by the operator and explicitly set as logic to attempt to navigate
  through situations like this may have undesirable results.


Bug Fixes
*********

* Fixes an issue with the "ansible" deployment interface where
  automatic root deviec selection would accidently choose the system
  CD-ROM device, which was likely to occur when the ansible deployment
  interface was used with virtual media boot. The "ansible" deployment
  interface now ignores all Ramdisks, Loopbacks, CD-ROMs, and floppy
  disk devices.

* Fixes a bug in the "idrac" hardware type where when creating one
  or more virtual disks on a RAID controller that supports passthru
  mode (PERC H730P), the cleaning step would finish before the job to
  create the virtual disks actually completed. This could result in
  the client attempting to perform another action against the iDRAC
  that creates a configuration job, and that action would fail since
  the job to create the virtual disk would still be executing. This
  patch fixes this issue by only allowing the cleaning step to finish
  after the job to create the virtual disk completes. See bug bug
  2007285 (https://storyboard.openstack.org/#!/story/2007285) for more
  details.

* Certain RAID controllers (PERC H730P) require physical disks to be
  switched from non-RAID (JBOD) mode to RAID mode to be included in a
  virtual disk.  When this conversion happens, the available free
  space on the physical disk is reduced due to some space being
  allocated to RAID mode housekeeping. If the user requests a virtual
  disk (a RAID 1 for example) with a size close to the max size of the
  physical disks when they are in JBOD mode, then creation of the
  virtual disk following conversion of the physical disks from JBOD to
  RAID mode will fail since there is not enough space due to the space
  used by RAID mode housekeeping. This patch works around this issue
  by recalculating the RAID volume size after physical disk conversion
  has completed and the free space on the converted drives is known.
  Note that this may result in a virtual disk that is slightly smaller
  than the requested size, but still the max size that the drives can
  support. See bug bug 2007359
  (https://storyboard.openstack.org/#!/story/2007359) for more details

* Fixes a potential race in the hash ring code that could result in
  the hash rings never updated after their initial load.

* Fixes the deprecated "idrac" hardware interface implementation
  "__init__" methods to call their base class "__init__" methods
  before emitting a log message warning about their deprecation. For
  more information, see story 2008197
  (https://storyboard.openstack.org/#!/story/2008197).

* Allows configuring IPMI cipher suite via the new "driver_info"
  parameter "ipmi_cipher_suite" to enable operators to navigate
  "ipmitool" behavior changes around supported ciphers.

* After changing the boot device via Redfish, check that the boot
  mode being reported matches what is configured and, if not, set it
  to the configured value.  Some BMCs change the boot mode when the
  device is set via Redfish, see story 2008252 for details.

Changes in ironic 13.0.6..13.0.7
--------------------------------

f82a43c54 Remove grenade jobs from old stable branches
59525df9b [stable-only] Fix bandit upper constraint
64bda9229 Sync boot mode when changing the boot device via Redfish
9e35573f1 clean up mac address with the pxe configuration files
9c017c146 opt: Enhance old stable branches to use latest python-ibmcclient
9e6b63ec8 Increase Memory for Ironic Jobs
cedb2ad0e DRAC: Fix a failure to create virtual disk bug
71b80b061 DRAC: Fix RAID create_config clean step
18bd79dbc Fix a race condition in the hash ring code
1861c9365 Use correct error handler instead of calling process_event('fail')
24e44c9d2 Fix deprecated 'idrac' interface '__init__'s
2f4f21612 CI: Patch to fix CI jobs in bugfix/stable branches
81cc800d0 Allow configuring IPMI cipher suite
3d77e61f9 Ansible deploy - Ignore invalid devices


Diffstat (except docs and test files)
-------------------------------------

driver-requirements.txt                            |   2 +-
ironic/common/hash_ring.py                         |  28 +-
ironic/common/pxe_utils.py                         |   2 -
.../ansible/playbooks/library/root_hints.py        |   6 +
ironic/drivers/modules/drac/inspect.py             |   1 +
ironic/drivers/modules/drac/management.py          |   3 +-
ironic/drivers/modules/drac/power.py               |   1 +
ironic/drivers/modules/drac/raid.py                | 135 +++--
ironic/drivers/modules/drac/vendor_passthru.py     |   1 +
ironic/drivers/modules/ibmc/utils.py               |   9 +-
ironic/drivers/modules/ilo/management.py           |   9 +-
ironic/drivers/modules/ilo/raid.py                 |   6 +-
ironic/drivers/modules/ipmitool.py                 |  35 +-
ironic/drivers/modules/redfish/management.py       |   5 +
.../unit/drivers/modules/ilo/test_management.py    |   8 +-
.../drivers/modules/redfish/test_management.py     |  37 +-
.../run.yaml                                       |   2 +-
playbooks/legacy/grenade-dsvm-ironic/run.yaml      |   2 +-
...ble-device-name-filtering-0adfca7d8ba4cbcc.yaml |   9 +
.../fix-create-configuration-0e000392d9d7f23b.yaml |  15 +
...sion-before-raid-creation-ea1f7eb425f79f2f.yaml |  22 +
releasenotes/notes/hash-ring-6ce212ab86c2592d.yaml |   5 +
...-idrac-interface-__init__-362696b389c86d5d.yaml |   8 +
.../notes/ipmi-cipher-suite-499097740f7c86ee.yaml  |  18 +
...r-changing-redfish-device-f60ef90ba5675215.yaml |   8 +
test-requirements.txt                              |   2 +-
zuul.d/ironic-jobs.yaml                            |   6 +-
zuul.d/project.yaml                                |   9 -
37 files changed, 692 insertions(+), 416 deletions(-)


Requirements updates
--------------------

diff --git a/driver-requirements.txt b/driver-requirements.txt
index f0902eecb..f19778719 100644
--- a/driver-requirements.txt
+++ b/driver-requirements.txt
@@ -20 +20 @@ ansible>=2.5
-python-ibmcclient>=0.1.0,<0.2.0
+python-ibmcclient>=0.1.0,!=0.2.1,<0.3.0
diff --git a/test-requirements.txt b/test-requirements.txt
index ab53cb70f..f520f0150 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -23 +23 @@ Pygments>=2.2.0 # BSD
-bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0
+bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0