We eagerly announce the release of: ironic-inspector 11.4.1: Hardware introspection for OpenStack Bare Metal This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.4.1 ^^^^^^ Bug Fixes * Fixes an issue where inspection would fail if an IPv6 address wrapped in brackets is used for the redfish BMC address. See bug: 2036455 (https://bugs.launchpad.net/ironic/+bug/2036455). * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes the Role Based Access Control state and capabilities to align with OpenStack Community RBAC goals which includes support for a "service" role by default to enable inter-service communication to be configured without an "admin" username. In large part, these changes were missed as the Inspector service is considered an "admin-only" service. Also in alignment with overall community position changes, where the "admin" role is sufficent without an explicit "system" scope. To help ensure a high level of security, explicit testing was also added for the "manager" role, which is unavailable as that role is reserved for administrative functions inside of a tenant's project. Changes in ironic-inspector 11.4.0..11.4.1 ------------------------------------------ 0c395ae Fix RBAC access for service/admin user access b43ce63 Handle LLDP parse Unicode error fbe087f Handle bracketed IPv6 redfish_address 7c182e8 tests: Replace assertItemsEqual with assertCountEqual 97b259d Update TOX_CONSTRAINTS_FILE for stable/2023.1 b128eeb Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/common/ironic.py | 4 + ironic_inspector/plugins/lldp_basic.py | 11 +- ironic_inspector/policy.py | 34 +- ironic_inspector/test/unit/db/test_api.py | 12 +- ironic_inspector/test/unit/test_acl.py | 359 ++++++++++++++++++++- ironic_inspector/test/unit/test_common_ironic.py | 8 + .../notes/bug-2036455-bd3f6381b78c20db.yaml | 7 + .../notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 + ...or-openstack-rbac-changes-7ca8533f76e504d5.yaml | 14 + tox.ini | 10 +- 11 files changed, 442 insertions(+), 27 deletions(-)