We jubilantly announce the release of: ironic 13.0.7: OpenStack Bare Metal Provisioning This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 13.0.7 ^^^^^^ Known Issues ************ * Some "ipmitool" builds, in particular on machines running Red Hat Enterprise Linux 8.2, have changed the default cipher suite being offered which can cause "ipmitool" to completely fail to negotiate a connection with the BMC. Operators who encounter this situation should use the "ipmi_cipher_suite" parameter in the "driver_info" field to override and directly assert the required cipher. Because of potential security implications of attempting second level auto- negotiation and known BMC vendor behaviors, this must be identified by the operator and explicitly set as logic to attempt to navigate through situations like this may have undesirable results. Bug Fixes ********* * Fixes an issue with the "ansible" deployment interface where automatic root deviec selection would accidently choose the system CD-ROM device, which was likely to occur when the ansible deployment interface was used with virtual media boot. The "ansible" deployment interface now ignores all Ramdisks, Loopbacks, CD-ROMs, and floppy disk devices. * Fixes a bug in the "idrac" hardware type where when creating one or more virtual disks on a RAID controller that supports passthru mode (PERC H730P), the cleaning step would finish before the job to create the virtual disks actually completed. This could result in the client attempting to perform another action against the iDRAC that creates a configuration job, and that action would fail since the job to create the virtual disk would still be executing. This patch fixes this issue by only allowing the cleaning step to finish after the job to create the virtual disk completes. See bug bug 2007285 (https://storyboard.openstack.org/#!/story/2007285) for more details. * Certain RAID controllers (PERC H730P) require physical disks to be switched from non-RAID (JBOD) mode to RAID mode to be included in a virtual disk. When this conversion happens, the available free space on the physical disk is reduced due to some space being allocated to RAID mode housekeeping. If the user requests a virtual disk (a RAID 1 for example) with a size close to the max size of the physical disks when they are in JBOD mode, then creation of the virtual disk following conversion of the physical disks from JBOD to RAID mode will fail since there is not enough space due to the space used by RAID mode housekeeping. This patch works around this issue by recalculating the RAID volume size after physical disk conversion has completed and the free space on the converted drives is known. Note that this may result in a virtual disk that is slightly smaller than the requested size, but still the max size that the drives can support. See bug bug 2007359 (https://storyboard.openstack.org/#!/story/2007359) for more details * Fixes a potential race in the hash ring code that could result in the hash rings never updated after their initial load. * Fixes the deprecated "idrac" hardware interface implementation "__init__" methods to call their base class "__init__" methods before emitting a log message warning about their deprecation. For more information, see story 2008197 (https://storyboard.openstack.org/#!/story/2008197). * Allows configuring IPMI cipher suite via the new "driver_info" parameter "ipmi_cipher_suite" to enable operators to navigate "ipmitool" behavior changes around supported ciphers. * After changing the boot device via Redfish, check that the boot mode being reported matches what is configured and, if not, set it to the configured value. Some BMCs change the boot mode when the device is set via Redfish, see story 2008252 for details. Changes in ironic 13.0.6..13.0.7 -------------------------------- f82a43c54 Remove grenade jobs from old stable branches 59525df9b [stable-only] Fix bandit upper constraint 64bda9229 Sync boot mode when changing the boot device via Redfish 9e35573f1 clean up mac address with the pxe configuration files 9c017c146 opt: Enhance old stable branches to use latest python-ibmcclient 9e6b63ec8 Increase Memory for Ironic Jobs cedb2ad0e DRAC: Fix a failure to create virtual disk bug 71b80b061 DRAC: Fix RAID create_config clean step 18bd79dbc Fix a race condition in the hash ring code 1861c9365 Use correct error handler instead of calling process_event('fail') 24e44c9d2 Fix deprecated 'idrac' interface '__init__'s 2f4f21612 CI: Patch to fix CI jobs in bugfix/stable branches 81cc800d0 Allow configuring IPMI cipher suite 3d77e61f9 Ansible deploy - Ignore invalid devices Diffstat (except docs and test files) ------------------------------------- driver-requirements.txt | 2 +- ironic/common/hash_ring.py | 28 +- ironic/common/pxe_utils.py | 2 - .../ansible/playbooks/library/root_hints.py | 6 + ironic/drivers/modules/drac/inspect.py | 1 + ironic/drivers/modules/drac/management.py | 3 +- ironic/drivers/modules/drac/power.py | 1 + ironic/drivers/modules/drac/raid.py | 135 +++-- ironic/drivers/modules/drac/vendor_passthru.py | 1 + ironic/drivers/modules/ibmc/utils.py | 9 +- ironic/drivers/modules/ilo/management.py | 9 +- ironic/drivers/modules/ilo/raid.py | 6 +- ironic/drivers/modules/ipmitool.py | 35 +- ironic/drivers/modules/redfish/management.py | 5 + .../unit/drivers/modules/ilo/test_management.py | 8 +- .../drivers/modules/redfish/test_management.py | 37 +- .../run.yaml | 2 +- playbooks/legacy/grenade-dsvm-ironic/run.yaml | 2 +- ...ble-device-name-filtering-0adfca7d8ba4cbcc.yaml | 9 + .../fix-create-configuration-0e000392d9d7f23b.yaml | 15 + ...sion-before-raid-creation-ea1f7eb425f79f2f.yaml | 22 + releasenotes/notes/hash-ring-6ce212ab86c2592d.yaml | 5 + ...-idrac-interface-__init__-362696b389c86d5d.yaml | 8 + .../notes/ipmi-cipher-suite-499097740f7c86ee.yaml | 18 + ...r-changing-redfish-device-f60ef90ba5675215.yaml | 8 + test-requirements.txt | 2 +- zuul.d/ironic-jobs.yaml | 6 +- zuul.d/project.yaml | 9 - 37 files changed, 692 insertions(+), 416 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index f0902eecb..f19778719 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -20 +20 @@ ansible>=2.5 -python-ibmcclient>=0.1.0,<0.2.0 +python-ibmcclient>=0.1.0,!=0.2.1,<0.3.0 diff --git a/test-requirements.txt b/test-requirements.txt index ab53cb70f..f520f0150 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -23 +23 @@ Pygments>=2.2.0 # BSD -bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0