We jubilantly announce the release of: ironic-inspector 10.4.0: Hardware introspection for OpenStack Bare Metal This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Adds an "accelerators" plugin to identify acclerator devices and update the bare metal node for future scheduling. The accelerator devices will be saved to node properties under the key "accelerators". Introduces a configuration option "[accelerators]known_devices" to specify a configuration file which contains required information to identify accelerator devices, by default it uses the in-tree configuration file named "known_accelerators.yaml". * The dnsmasq pxe-filter now supports mapping between host InfiniBand MAC to EthernetOverInfiniBand MAC. (This was previously only supported by the iptables pxe-filter.) * By default the DHCP filtering will open the DHCP server for any node when introspection is active. It will only block DHCP for enrolled nodes that are not being introspected. Doing so is required to support interface discovery (which by default will enroll the pxe port to ironic if not present). This behaviour is not always wanted, as nodes not managed by ironic may boot the inspection image. A new option was added "[pxe_filter]deny_unknown_macs" which allow changeing this behaviour so that the DHCP server only allow enrolled nodes being introspected and deny everything else. Note: If this option is "True", nodes must have at least one enrolled port prior to introspection. Bug Fixes ********* * Fixes the node identification logic to enable a user to list the "redfish_address" label for "driver_info" field values for identification of a machine using the "[DEFAULT]ipmi_address_fields" configuration option. Previously the host would just not be matched as the full URL would be evaluated instead of what the URL may resolve to. Changes in ironic-inspector 10.3.0..10.4.0 ------------------------------------------ b4f008f Revert "Power off before inspection" 7a067a9 pxe filter - option to always block unknown hosts 245cbed Correct the docstring for _should_enable_unknown_hosts 2f6df39 Limit inspector jobs to 1 testing VM 4644981 Add NVIDIA V100 to known accelerator devices 9a89c30 Fix l-c and mysql GRANT syntex for Ubuntu Focal 34b264e Power off before inspection de2a27a Identify accelerator devices during introspection f4648fa Replace retrying with tenacity 6792848 Minor doc fix to kernel options bbc5cd7 Fix URL parsing to enable redfish_address matching 17f58aa Log outcome of `check_conditions` method. 6732d5e Follow up to incorrect pxe-enabled was set Diffstat (except docs and test files) ------------------------------------- ironic_inspector/common/ironic.py | 18 +- ironic_inspector/conf/__init__.py | 2 + ironic_inspector/conf/accelerators.py | 35 ++++ ironic_inspector/conf/default.py | 3 +- ironic_inspector/conf/iptables.py | 2 +- ironic_inspector/conf/pxe_filter.py | 9 + ironic_inspector/known_accelerators.yaml | 9 + ironic_inspector/node_cache.py | 3 +- ironic_inspector/plugins/accel_device.py | 78 ++++++++ ironic_inspector/pxe_filter/base.py | 77 ++++++++ ironic_inspector/pxe_filter/dnsmasq.py | 16 +- ironic_inspector/pxe_filter/iptables.py | 95 ++++------ ironic_inspector/rules.py | 13 +- ironic_inspector/test/functional.py | 2 +- ironic_inspector/test/unit/test_common_ironic.py | 37 ++++ .../test/unit/test_dnsmasq_pxe_filter.py | 54 +++++- ironic_inspector/test/unit/test_iptables.py | 205 ++++++++------------- ironic_inspector/test/unit/test_node_cache.py | 26 +++ .../test/unit/test_plugins_accel_device.py | 52 ++++++ ironic_inspector/test/unit/test_pxe_filter.py | 197 ++++++++++++++++++++ lower-constraints.txt | 11 +- .../notes/accelerators-2aa4f0cedf359810.yaml | 10 + ...e-filter-eoib-mac-support-7567bbc7c6bf1878.yaml | 6 + ...-deny-unknown-host-option-b84b2aa1f7f49a17.yaml | 17 ++ .../support_redfish_address-94eae2c0d2879f53.yaml | 8 + requirements.txt | 11 +- setup.cfg | 1 + tools/test-setup.sh | 4 +- zuul.d/ironic-inspector-jobs.yaml | 1 + 31 files changed, 791 insertions(+), 226 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a31f8d9..bbf3a80 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ automaton>=1.9.0 # Apache-2.0 -alembic>=0.9.6 # MIT +alembic>=1.4.2 # MIT @@ -17,0 +18 @@ pytz>=2013.6 # MIT +PyYAML>=5.3.1 @@ -22 +23 @@ oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=4.40.0 # Apache-2.0 +oslo.db>=6.0.0 # Apache-2.0 @@ -32 +33 @@ oslo.utils>=3.33.0 # Apache-2.0 -retrying!=1.3.0,>=1.2.3 # Apache-2.0 +tenacity>=6.2.0 # Apache-2.0 @@ -34,2 +35,2 @@ stevedore>=1.20.0 # Apache-2.0 -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT -tooz>=1.64.0 # Apache-2.0 +SQLAlchemy>=1.2.19 # MIT +tooz>=2.5.1 # Apache-2.0