We are excited to announce the release of:
ironic 18.3.0: OpenStack Bare Metal Provisioning
This release is part of the xena stable release series.
The source is available from:
https://opendev.org/openstack/ironic
Download the package from:
https://tarballs.openstack.org/ironic/
Please report issues through:
https://storyboard.openstack.org/#!/project/943
For more details, please see below.
18.3.0
^^^^^^
Upgrade Notes
*************
* Adds "sha256", "sha384" and "sha512" as supported SNMPv3
authentication protocols to iRMC driver.
Bug Fixes
*********
* Fixes an issue where if selinux is enabled and enforcing, and the
published image is a hardlink, the source selinux context is
preserved, causing access denied when retrieving the image using
hardlink URL.
* Fixes SNMPv3 message authentication and encryption functionality
of iRMC driver. The SNMPv3 authentication between iRMC driver and
iRMC was only by the security name with no passwords and encryption.
To increase security, the following parameters are now added to the
node's "driver_info", and can be used for authentication:
* "irmc_snmp_user"
* "irmc_snmp_auth_password"
* "irmc_snmp_priv_password"
* "irmc_snmp_auth_proto" (Optional, defaults to "sha")
* "irmc_snmp_priv_proto" (Optional, defaults to "aes")
"irmc_snmp_user" replaces "irmc_snmp_security". "irmc_snmp_security"
will be ignored if "irmc_snmp_user" is set. "irmc_snmp_auth_proto"
and "irmc_snmp_priv_proto" can also be set through the following
options in the "[irmc]" section of "/etc/ironic/ironic.conf":
* "snmp_auth_proto"
* "snmp_priv_proto"
* Fixes a race condition in PXE initialization where logic to retry
what we suspect as potentially failed PXE boot operations was not
consulting if an "agent token" had been established, which is the
very first step in agent initialization.
Other Notes
***********
* Updates the minimum version of "python-scciclient" library to
"0.11.3".
Changes in ironic 18.2.2..18.3.0
--------------------------------
68efd7970 Move and fix reno config for releasenotes job
6210cae14 Fix selinux context of published image hardlink
8e6a337f2 Prevent pxe retry when agent token exists
793b98132 Fixes for tox 4.0
6aaf4e69e Add support auth protocols for iRMC
ef0e33edf Add SNMPv3 authentication functionality
Diffstat (except docs and test files)
-------------------------------------
ironic/common/utils.py | 12 ++
ironic/conf/irmc.py | 28 ++-
ironic/drivers/modules/image_utils.py | 10 +
ironic/drivers/modules/irmc/common.py | 235 ++++++++++++++++----
ironic/drivers/modules/irmc/inspect.py | 24 ++-
ironic/drivers/modules/irmc/power.py | 22 +-
ironic/drivers/modules/pxe_base.py | 6 +
releasenotes/config.yaml | 5 +
...ix-context-image-hardlink-16f452974abc7327.yaml | 7 +
...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml | 5 +
.../irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml | 28 +++
...e-retry-when-token-exists-a4f38f7da56c1397.yaml | 7 +
reno.yaml | 4 -
tox.ini | 9 +-
20 files changed, 667 insertions(+), 77 deletions(-)