We are overjoyed to announce the release of: ironic 12.1.3: OpenStack Bare Metal Provisioning This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 12.1.3 ^^^^^^ Security Issues *************** * Node secrets (such as BMC credentials) are no longer logged when JSON RPC is used and DEBUG logging is enabled. Bug Fixes ********* * An issue regarding the "ansible" deploy interface. The discovery playbook used to gather wwn and serials was broken for python3 due to the dict().keys() object not being a list in python3. * Fixes an issue with using serial number as root device hints with the "ansible" deploy interface. * Fixes an issue regarding the "ansible" deploy interface. Node deployment was broken for any image that was not public because the original request context was not available anymore at the time some image information was fetched. * Fixes spurious deployment warnings being logged by the "ironic- conductor" service indicating that the heartbeats from the deployment ramdisk could not be processed in "DEPLOYWAIT" state. * Fixes issue where the resource list API returned results with requested fields only until the API MAX_LIMIT. After the API MAX_LIMIT is reached the API started ignoring user requested fields. This fix will make sure that the next url generated by the pagination code will include the user requested fields as query parameter. * Fixes an issue where baremetal node deployment would fail on clouds with a high number of security groups. Listing the security groups took too long. Instead of listing all security groups, a query filter was added to list only the security groups to be used for the network. (See bug 2006256 (https://storyboard.openstack.org/#!/story/2006256).) * Fixed the issue (https://storyboard.openstack.org/#!/story/2006429) with node being locked for longer than "[console]subprocess_timeout" seconds when shellinabox process fails to start before the specifed timeout elapses. * Fixes a possible console lockup issue (https://storyboard.openstack.org/#!/story/2006514) in case of PID file not being yet created while daemon start has call already returned success return code. * Fixes an issue wherein asynchronous out-of-band deploy steps in deployment template fails to execute. See story 2006342 for details. * Fixes a bug with the grub ramdisk boot template handling, such that the template now properly references the user provided kernal and ramdisk. Previously the deployment ramdisk and kernel was referenced in the template. * Fixes an issue where clean steps of "redfish" BIOS interface do not boot up the IPA ramdisk after cleaning reboot. See story 2006217 for details. * Fixes an issue in updating firmware using "update_firmware_sum" clean step from management interface of "ilo" hardware type with an error stating that unable to connect to iLO address due to authentication failure. See story 2006223 for details. * Fixes an issue in powering-on of server in "ilo" hardware type. Server was failing to return success for power-on operation if no bootable device was found. See story 2006288 for details. * Fixes an issue in creation of RAID for "ilo5" RAID interface wherein second time RAID creation fails. See story 2006321 for details. Changes in ironic 12.1.2..12.1.3 -------------------------------- 0785477a6 Do not ignore 'fields' query parameter when building next url 3dc0a92d2 Mask secrets when logging in json_rpc 899a0d378 Read in non-blocking fashion when starting console 39196ca9e grub configuration should use user kernel & ramdisk 7b3d60c10 Change log level based on node status 18a45e8b4 Fix typo in handling of exception FailedToGetIPAddressOnPort 2f3b5e929 Do not wait for console being started on timeout ba0e73fa1 Asynchronous out of band deploy steps fails to execute 15cba675f Check for deploy.deploy deploy step in heartbeat 82ce9a67b Fixing broken links 1ab940a2e Direct bridge to be setup 06f5f0937 RAID creation fails with 'ilo5' RAID interface ea72083c2 iLO firmware update fails with 'update_firmware_sum' clean step 4014612ca Enable testing adoption in the CI bfa8f07a7 Fixes power-on failure for 'ilo' hardware type 3c4ba3f2d Ansible driver: fix deployment with serial specified as root device hint 7caf22fe0 Filter security group list on the ID's we expect 8c4015364 CI: stop using pyghmi from git master 6bff4ddfb IPA does not boot up after cleaning reboot for 'redfish' bios interface 9dbec70d7 Ansible module: fix deployment for private and/or shared images 1b27bb715 Fix serial/wwn gathering for ansible+python3 Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 6 +- ironic/api/controllers/v1/allocation.py | 3 +- ironic/api/controllers/v1/chassis.py | 3 +- ironic/api/controllers/v1/collection.py | 5 + ironic/api/controllers/v1/conductor.py | 3 +- ironic/api/controllers/v1/deploy_template.py | 2 +- ironic/api/controllers/v1/node.py | 3 +- ironic/api/controllers/v1/port.py | 3 +- ironic/api/controllers/v1/portgroup.py | 3 +- ironic/api/controllers/v1/volume_connector.py | 3 +- ironic/api/controllers/v1/volume_target.py | 3 +- ironic/common/json_rpc/client.py | 6 +- ironic/common/json_rpc/server.py | 8 +- ironic/common/neutron.py | 21 +-- ironic/common/pxe_utils.py | 2 +- ironic/conductor/manager.py | 30 ++++- ironic/conductor/task_manager.py | 20 ++- ironic/conductor/utils.py | 2 + ironic/drivers/modules/agent.py | 9 +- ironic/drivers/modules/agent_base_vendor.py | 48 +++++-- ironic/drivers/modules/ansible/deploy.py | 16 ++- .../modules/ansible/playbooks/library/facts_wwn.py | 5 +- .../playbooks/roles/discover/tasks/roothints.yaml | 2 +- ironic/drivers/modules/console_utils.py | 74 +++++++++-- ironic/drivers/modules/ilo/management.py | 3 + ironic/drivers/modules/ilo/power.py | 23 +++- ironic/drivers/modules/ilo/raid.py | 24 +--- ironic/drivers/modules/iscsi_deploy.py | 11 +- ironic/drivers/modules/pxe_grub_config.template | 4 +- ironic/drivers/modules/redfish/bios.py | 50 ++++++-- .../unit/api/controllers/v1/test_allocation.py | 21 +++ .../unit/api/controllers/v1/test_conductor.py | 18 +++ .../api/controllers/v1/test_deploy_template.py | 17 +++ .../unit/api/controllers/v1/test_portgroup.py | 20 +++ .../api/controllers/v1/test_volume_connector.py | 22 ++++ .../unit/api/controllers/v1/test_volume_target.py | 18 +++ .../unit/drivers/modules/ansible/test_deploy.py | 48 +++---- .../unit/drivers/modules/ilo/test_management.py | 22 +++- .../unit/drivers/modules/redfish/test_bios.py | 59 +++++++-- .../unit/drivers/modules/test_agent_base_vendor.py | 142 ++++++++++++++++++++- .../unit/drivers/modules/test_console_utils.py | 99 +++++++++++--- .../unit/drivers/modules/test_iscsi_deploy.py | 21 +++ .../{set-stack-key.yaml => pre.yaml} | 4 +- .../run.yaml | 1 - playbooks/legacy/grenade-dsvm-ironic/run.yaml | 1 - .../notes/bug-2006266-85da234583ca0c32.yaml | 6 + .../notes/bug-2006275-a5ca234683ca4c32.yaml | 5 + releasenotes/notes/bug-35702-25da234580ca0c31.yaml | 7 + ...wait-errors-during-deploy-5a4279c0c1a6d4d9.yaml | 6 + ...lds-missing-from-next-url-fd9fddf8e70b65ea.yaml | 8 ++ ...up-list-add-query-filters-f72cfcefa1e093d2.yaml | 9 ++ ...onsole-subprocess-timeout-d3eccfe0440013d7.yaml | 7 + ...hellinabox-pipe-not-ready-f860c4b7a1ef71a8.yaml | 7 + ...-out-of-band-deploy-steps-1f5967e7bfcabbf9.yaml | 6 + .../notes/jsonrpc-logging-21670015bb845182.yaml | 5 + ...b-use-user-kernel-ramdisk-7d572fe130932605.yaml | 5 + ...dfish-bios-cleaning-fails-fee32f04dd97cbd2.yaml | 6 + ...sum-firmware-update-fails-622883e4785313c1.yaml | 8 ++ ...fails-with-no-boot-device-b698fef59b04e515.yaml | 7 + ...21-ilo5-raid-create-fails-1bb1e648da0db0f1.yaml | 6 + zuul.d/ironic-jobs.yaml | 6 +- zuul.d/legacy-ironic-jobs.yaml | 4 - 78 files changed, 1159 insertions(+), 206 deletions(-)