May 2024 - Release-announce - lists.openstack.org

ironic-python-agent-builder 5.1.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are excited to announce the release of: ironic-python-agent-builder 5.1.1: Tools and scripts to build Ironic Python Agent This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent-builder For more details, please see below. Changes in ironic-python-agent-builder 5.1.0..5.1.1 --------------------------------------------------- 0ca3cd2 Drop TripleO job 6ccb107 Extend the DIB_CHECKSUM variable usage 0511bb3 Add libaio engine for fio on Centos/Rhel9 722d078 Add checksum generation support 43a5443 Update TOX_CONSTRAINTS_FILE for stable/2023.1 3e5f694 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + dib/burn-in/package-installs.yaml | 5 +++++ dib/extra-hardware/package-installs.yaml | 5 +++++ dib/ironic-ramdisk-base/cleanup.d/99-ramdisk-create | 7 +++++++ dib/ironic-ramdisk-base/environment.d/10-checksum.bash | 1 + tox.ini | 2 +- zuul.d/project.yaml | 2 -- 7 files changed, 20 insertions(+), 3 deletions(-)

1 0

ironic-inspector 11.1.2 (zed)
by no-reply＠openstack.org 02 May '24

02 May '24

We contentedly announce the release of: ironic-inspector 11.1.2: Hardware introspection for OpenStack Bare Metal This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.1.2 ^^^^^^ Bug Fixes * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. Changes in ironic-inspector 11.1.1..11.1.2 ------------------------------------------ ea0d0c6 Handle LLDP parse Unicode error Diffstat (except docs and test files) ------------------------------------- ironic_inspector/plugins/lldp_basic.py | 11 ++++++++++- releasenotes/notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 +++++++++ 2 files changed, 19 insertions(+), 1 deletion(-)

1 0

oslo.db 12.1.2 (zed)
by no-reply＠openstack.org 02 May '24

02 May '24

We exuberantly announce the release of: oslo.db 12.1.2: Oslo Database library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 12.1.1..12.1.2 --------------------------------- 8620d4d exc_filters: Handle OperationalError for MariaDB/Galera Diffstat (except docs and test files) ------------------------------------- oslo_db/sqlalchemy/exc_filters.py | 2 ++ 2 files changed, 8 insertions(+)

1 0

networking-baremetal 6.1.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are gleeful to announce the release of: networking-baremetal 6.1.1: Neutron plugin that provides deep Ironic/Neutron integration. This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/networking-baremetal Download the package from: https://pypi.org/project/networking-baremetal Please report issues through: https://storyboard.openstack.org/#!/project/openstack/networking- baremetal For more details, please see below. 6.1.1 ^^^^^ Bug Fixes * Fixes a bug which tried to force delete queues when quorum queues are enabled. Quorum queues do not support the auto-delete feature. See the bugreport 2046962 (https://bugs.launchpad.net/networking- baremetal/+bug/2046962) for details. Changes in networking-baremetal 6.1.0..6.1.1 -------------------------------------------- bfcd09e don't force amqp_auto_delete for quorum queues 1529ce9 Update TOX_CONSTRAINTS_FILE for stable/2023.1 ce4c378 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + networking_baremetal/agent/ironic_neutron_agent.py | 4 +++- .../notes/fix_autodelete_for_quorum_queues-e001f2d8d8ae780b.yaml | 6 ++++++ tox.ini | 8 ++++---- 4 files changed, 14 insertions(+), 5 deletions(-)

1 0

sushy 4.4.3 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are jazzed to announce the release of: sushy 4.4.3: Sushy is a small Python library to communicate with Redfish based systems This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.4.3 ^^^^^ Bug Fixes * Fixes bug where sushy would not pass a read/connect timeout through to requests when making requests to a redfish service. This means that an ill-timed failure could cause python processes calling sushy to freeze indefinately. * Add TransferProtocolType for any general error that mentions it * In some cases registries might not be available because the our check for the registry language did not account for a possible country suffix. The logic was improved to take it into account. * Correctly handles errors on a request that is re-tried after refreshing an authentication token. * An issue was encountered on some HPE iLO supported machines where the Baseboard Management Controller would respond with a HTTP 400 error and an error message indicating the requested operation was invalid for the then system state. For example, attempting to change the power state via the BMC shortly after previously changing the power state. We now attempt to retry within the permitted number of retries when this error is encountered. Changes in sushy 4.4.2..4.4.3 ----------------------------- 69d9b44 Handle exceptions after re-authentication 6a35364 Remove version field from iLO error 4c331de Requests must always have a read/connect timeout fa4b0f7 Retry on ilo state error aa60883 Add TransferProtocolType for any general error that mentions it bdbbf86 Handle non-default language for registries 97bb075 Update TOX_CONSTRAINTS_FILE for stable/2023.1 9e689c1 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...-read-and-connect-timeout-9f7dc3ed63c192c8.yaml | 5 + ...more-transferprotocoltype-739ce8bdedbcb51c.yaml | 4 + ...fault-language-registries-f73bdecc98ba2cc8.yaml | 7 + releasenotes/notes/re-raise-1fe9f912691e893e.yaml | 5 + ...retry-ilo-not-ready-error-0b4dce882282eaac.yaml | 10 + sushy/connector.py | 70 ++-- sushy/resources/base.py | 7 +- sushy/resources/manager/virtual_media.py | 4 + sushy/resources/registry/message_registry_file.py | 8 +- .../bios_attribute_registry_file_zthardware.json | 19 + .../bios_attribute_registry_zthardware.json | 75 ++++ .../transfer_proto_required_error2.json | 16 + .../unit/resources/manager/test_virtual_media.py | 12 +- .../resources/registry/test_attribute_registry.py | 38 ++ tox.ini | 10 +- 19 files changed, 834 insertions(+), 38 deletions(-)

1 0

ironic-inspector 11.4.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We eagerly announce the release of: ironic-inspector 11.4.1: Hardware introspection for OpenStack Bare Metal This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.4.1 ^^^^^^ Bug Fixes * Fixes an issue where inspection would fail if an IPv6 address wrapped in brackets is used for the redfish BMC address. See bug: 2036455 (https://bugs.launchpad.net/ironic/+bug/2036455). * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes the Role Based Access Control state and capabilities to align with OpenStack Community RBAC goals which includes support for a "service" role by default to enable inter-service communication to be configured without an "admin" username. In large part, these changes were missed as the Inspector service is considered an "admin-only" service. Also in alignment with overall community position changes, where the "admin" role is sufficent without an explicit "system" scope. To help ensure a high level of security, explicit testing was also added for the "manager" role, which is unavailable as that role is reserved for administrative functions inside of a tenant's project. Changes in ironic-inspector 11.4.0..11.4.1 ------------------------------------------ 0c395ae Fix RBAC access for service/admin user access b43ce63 Handle LLDP parse Unicode error fbe087f Handle bracketed IPv6 redfish_address 7c182e8 tests: Replace assertItemsEqual with assertCountEqual 97b259d Update TOX_CONSTRAINTS_FILE for stable/2023.1 b128eeb Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/common/ironic.py | 4 + ironic_inspector/plugins/lldp_basic.py | 11 +- ironic_inspector/policy.py | 34 +- ironic_inspector/test/unit/db/test_api.py | 12 +- ironic_inspector/test/unit/test_acl.py | 359 ++++++++++++++++++++- ironic_inspector/test/unit/test_common_ironic.py | 8 + .../notes/bug-2036455-bd3f6381b78c20db.yaml | 7 + .../notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 + ...or-openstack-rbac-changes-7ca8533f76e504d5.yaml | 14 + tox.ini | 10 +- 11 files changed, 442 insertions(+), 27 deletions(-)

1 0

bifrost 16.1.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We high-spiritedly announce the release of: bifrost 16.1.1: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 16.1.1 ^^^^^^ Deprecation Notes ***************** * Support for Fedora is no longer tested in the CI and will be removed from the code in the near future. Bug Fixes ********* * Fixes issue of lack of log rotation for Ironic logs by adding a role which installs and configures the logrotate service. * Fixes an issue where online data migrations were not performed in the default Bifrost configuration where "localhost" is used as the database address. See LP#2036772 for details. Changes in bifrost 16.1.0..16.1.1 --------------------------------- c47ea6a2 Restore discovery for dnsmasq dhcp provider 8c0d9c98 ansible-lint: Skip key-order[play] a28ae917 ironic: Perform online data migrations with localhost DB fc55597f Fix for lack of log rotation in Bifrost c5f6c074 Remove Fedora from the CI 4e63b24a Create the log file for the disk-image-create command 5d2af210 Remove extra symbols accidentally added 3017112f Skip unnecessary SDK get_machine calls eef2efb7 CI: Update cached cirros image to 0.5.3 ad4a2cef Fix ansible-lint 5a9154bf Repair Focal support and bring back the main voting jobs 867a4c46 chore: allow ironic-inspector to work with IPv6 disabled 73431d3a Update TOX_CONSTRAINTS_FILE for stable/2023.1 47f857ab Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 +- .gitreview | 1 + bifrost/inventory.py | 2 +- playbooks/install.yaml | 1 + .../bifrost-configdrives-dynamic/defaults/main.yml | 3 +- .../bifrost-configdrives-dynamic/tasks/main.yml | 1 - .../bifrost-create-dib-image/defaults/main.yml | 1 + .../roles/bifrost-create-dib-image/tasks/main.yml | 8 +++- .../bifrost-create-vm-nodes/defaults/main.yml | 2 +- .../roles/bifrost-ironic-install/defaults/main.yml | 2 +- .../defaults/required_defaults_Debian_family.yml | 2 +- .../bifrost-ironic-install/tasks/migrations.yml | 1 - .../templates/dnsmasq.conf.j2 | 2 +- .../templates/ironic-inspector.conf.j2 | 2 + .../bifrost-logrotate-install/defaults/main.yml | 45 ++++++++++++++++++ .../bifrost-logrotate-install/tasks/configure.yml | 18 ++++++++ .../bifrost-logrotate-install/tasks/install.yml | 17 +++++++ .../roles/bifrost-logrotate-install/tasks/main.yml | 24 ++++++++++ .../bifrost-logrotate-install/tasks/start.yml | 22 +++++++++ .../templates/logrotate.conf.j2 | 53 ++++++++++++++++++++++ .../bifrost-prep-for-install/defaults/main.yml | 2 +- playbooks/test-bifrost.yaml | 2 +- .../notes/fix_logrotate-bb2c38c42d9e43eb.yaml | 6 +++ releasenotes/notes/no-fedora-b316bb3147f01166.yaml | 5 ++ .../online-data-migrations2-b86dff53f42718f5.yaml | 7 +++ scripts/collect-test-info.sh | 2 + scripts/install-deps.sh | 2 +- tools/ansible-lint.sh | 1 + tox.ini | 6 +-- zuul.d/bifrost-jobs.yaml | 20 ++++---- zuul.d/project.yaml | 10 ++-- 32 files changed, 238 insertions(+), 38 deletions(-)

1 0

ironic 21.1.2 (zed)
by no-reply＠openstack.org 02 May '24

02 May '24

We joyfully announce the release of: ironic 21.1.2: OpenStack Bare Metal Provisioning This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.1.2 ^^^^^^ Upgrade Notes ************* * Adds "sha256", "sha384" and "sha512" as supported SNMPv3 authentication protocols to iRMC driver. * "ipxe" boot_interface will be preferred to "irmc-pxe" by default with the "irmc" hardware type during the new baremetal node creation. This change doesn't affect to the existing baremetal nodes. Operators who want to continue to use "irmc-pxe" as default boot interface need to specify it in "[DEFAULT]default_boot_interface" setting in "ironic.conf". Bug Fixes ********* * Fixes bug in iRMC driver, where *irmc* power_interface sets and updates *irmc_ipmi_succeed* flag which is used by rest of iRMC driver code to deal with iRMC firmware's IPMI incompatibility but *ipmitool* power_interface doesn't set nor update *irmc_ipmi_succeed* flag and rest of iRMC driver code fail to handle iRMC firmware's IPMI incompatibility correctly. * Fixes an issue where a System Scoped user could not trigger a node into a "manageable" state with cleaning enabled, as the Neutron client would attempt to utilize their user's token to create the Neutron port for the cleaning operation, as designed. This is because with requests made in the "system" scope, there is no associated project and the request fails. Ironic now checks if the request has been made with a "system" scope, and if so it utilizes the internal credential configuration to communicate with Neutron. * Fixes the default boot interface order for the "irmc" hardware type where previously it would prefer "irmc-pxe" over "ipxe". This created inconsistencies for operators using multiple hardware types, where both interfaces were enabled in the deployment. Because the fix is backported on this point of releasae of Zed, operators who will update their environment beyond this release have to check the related upgrade note and take necessary action even though their update will be done in Zed release. * Fixes issues with Lenovo hardware where the system firmware may display a blue "Boot Option Restoration" screen after the agent writes an image to the host in UEFI boot mode, requiring manual intervention before the deployed node boots. This issue is rooted in multiple changes being made to the underlying NVRAM configuration of the node. Lenovo engineers have suggested to *only* change the UEFI NVRAM and not perform any further changes via the BMC to configure the next boot. Ironic now does such on Lenovo hardware. More information and background on this issue can be discovered in bug 2053064 (https://bugs.launchpad.net/ironic/+bug/2053064). Changes in ironic 21.1.1..21.1.2 -------------------------------- d853407fd CI: Lock Zed CI to Zed IPA 55330d372 stable only/ci: pin CI to dnsmasq 2.85/pin proliantutils/scciclient 47308caff Special case lenovo UEFI boot setup d4c3d0ad9 Fix system scoped manageable node network failure aae565bdc [iRMC] Fix IPMI incompatibility handling error cfddd47b1 Add support auth protocols for iRMC 8fd5268c1 Fix anaconda stage2_id loading from image properties e4d8c362f Change boot_interface order of iRMC driver Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 20 ++++++++++++---- devstack/plugin.sh | 1 + driver-requirements.txt | 7 ++++-- ironic/common/neutron.py | 6 ++++- ironic/common/pxe_utils.py | 3 ++- ironic/conf/irmc.py | 15 ++++++++++-- ironic/drivers/irmc.py | 4 ++-- ironic/drivers/modules/agent_base.py | 21 +++++++++++++++-- ironic/drivers/modules/irmc/common.py | 7 ++++-- ironic/drivers/modules/irmc/inspect.py | 12 +++++++--- ironic/drivers/modules/irmc/management.py | 18 ++++++++++----- ironic/drivers/modules/irmc/power.py | 7 ++++-- ironic/drivers/modules/pxe_base.py | 13 +++++++++++ ...atibility-patch-situation-c246d2b59b2e8a78.yaml | 8 +++++++ ...tem-scope-triggered-clean-22ada9b920c08365.yaml | 12 ++++++++++ ...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml | 5 ++++ ...ange-boot-interface-order-e76f5018da116a90.yaml | 19 +++++++++++++++ ...boot-to-disk-calls-lenovo-39763bfc98f602d8.yaml | 13 +++++++++++ zuul.d/project.yaml | 22 ++++++++++++++---- 23 files changed, 232 insertions(+), 35 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 876e817cb..5c667388f 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -7 +7,4 @@ -proliantutils>=2.14.0 +# NOTE(TheJulia): Proliantutils 2.16.0 moves to pysnmp-lextudio +# however that breaks on imports and with testing due to collission +# with pysnmp. +proliantutils>=2.14.0,<2.16.0 @@ -9 +12 @@ pysnmp>=4.3.0,<5.0.0 -python-scciclient>=0.12.2 +python-scciclient>=0.12.2,<0.13.0

1 0

ironic-python-agent 9.4.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are overjoyed to announce the release of: ironic-python-agent 9.4.1: Ironic Python Agent Ramdisk This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.4.1 ^^^^^ Bug Fixes ********* * Fixes a failure case where a deployed instance may be unable to access the configuration drive post-deployment. This can occur when block devices only support 4KB IO interactions. When 4KB block IO sizes are in use, the ISO9660 filesystem driver in Linux cannot be used as it is modeled around a 2KB block. We now attempt to verify, and rebuild the configuration drive on a FAT filesystem when we cannot mount the supplied configuration drive. Operators can force the agent to write configuration drives using the FAT filesystem using the "[DEFAULT]config_drive_rebuild" option. * Fixes a failure case where downloads would not be retried when the checksum fails verification. the agent now includes the checksum activity as part of the file download operation, and will automatically retry downloads when the checksum fails in accordance with the existing download retry logic. This is largely in response to what appears to be intermittent transport failures at lower levels which we cannot otherwise detect. * Fixes UEFI NVRAM record handling with efibootmgr so we can accept and handle UTF-16 encoded data which is to be expected in UEFI NVRAM as the records are UTF-16 encoded. * Fixes handling of UEFI NVRAM records to allow for unexpected characters in the response, so it is non-fatal to Ironic. * Fixes an issue with rebuilding instances on Software RAID with RAIDed ESP partitions. * Fixes, or at least lessens the case where a running Ironic agent can stack up numerous lookup requests against an Ironic deployment when a node is locked. In particular, this is beause the lookup also drives generation of the agent token, which requires the conductor to allocate a worker, and generate the token, and return the result to the API client. Ironic's retry logic will now wait up to "60" seconds, and if an HTTP Conflict (409) message is received, the agent will automatically pause lookup operations for thirty seconds as opposed continue to attempt lookups which could create more work for the Ironic deployment needlessly. Other Notes *********** * The agent now logs the size of data transferred when downloading images, which can be helpful in troubleshooting image download issues. Changes in ironic-python-agent 9.4.0..9.4.1 ------------------------------------------- 3bf1980 Conditional creation of RAIDed ESP for UEFI Software RAID 424e4b3 Retry on checksum failures 0e6c4c4 preserve/handle config drives on 4k block devices 8045678 Handle the node being locked 33188d9 Log the number of bytes downloaded 2fe6a45 Fix UTF-16 result handling for efibootmgr 034ae89 Update TOX_CONSTRAINTS_FILE for stable/2023.1 e3f9c2b Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/config.py | 5 + ironic_python_agent/efi_utils.py | 15 +- ironic_python_agent/extensions/standby.py | 55 ++++- ironic_python_agent/ironic_api_client.py | 27 ++- ironic_python_agent/partition_utils.py | 98 ++++++++- ironic_python_agent/raid_utils.py | 112 ++++++---- ...-block-size-config-drives-4470828dd06d2600.yaml | 12 ++ ...dering-download-completed-91cca9fef34d8cf5.yaml | 11 + ...ootmgr-character-encoding-19e531ba694824c1.yaml | 9 + .../notes/log-download-size-57982fa8df336520.yaml | 5 + .../rebuild_on_esp_raid-33f359bdf5ccaa09.yaml | 5 + ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 13 ++ tox.ini | 8 +- 21 files changed, 740 insertions(+), 133 deletions(-)

1 0