Open Stack

We are overjoyed to announce the release of:

ironic 12.1.3: OpenStack Bare Metal Provisioning

This release is part of the stein stable release series.

The source is available from:

    https://opendev.org/openstack/ironic

Download the package from:

    https://tarballs.openstack.org/null/

Please report issues through:

    https://storyboard.openstack.org/#!/project/943

For more details, please see below.

12.1.3
^^^^^^


Security Issues
***************

* Node secrets (such as BMC credentials) are no longer logged when
  JSON RPC is used and DEBUG logging is enabled.


Bug Fixes
*********

* An issue regarding the "ansible" deploy interface. The discovery
  playbook used to gather wwn and serials was broken for python3 due
  to the dict().keys() object not being a list in python3.

* Fixes an issue with using serial number as root device hints with
  the "ansible" deploy interface.

* Fixes an issue regarding the "ansible" deploy interface. Node
  deployment was broken for any image that was not public because the
  original request context was not available anymore at the time some
  image information was fetched.

* Fixes spurious deployment warnings being logged by the "ironic-
  conductor" service indicating that the heartbeats from the
  deployment ramdisk could not be processed in "DEPLOYWAIT" state.

* Fixes issue where the resource list API returned results with
  requested fields only until the API MAX_LIMIT. After the API
  MAX_LIMIT is reached the API started ignoring user requested fields.
  This fix will make sure that the next url generated by the
  pagination code will include the user requested fields as query
  parameter.

* Fixes an issue where baremetal node deployment would fail on
  clouds with a high number of security groups. Listing the security
  groups took too long. Instead of listing all security groups, a
  query filter was added to list only the security groups to be used
  for the network. (See bug 2006256
  (https://storyboard.openstack.org/#!/story/2006256).)

* Fixed the issue
  (https://storyboard.openstack.org/#!/story/2006429) with node being
  locked for longer than "[console]subprocess_timeout" seconds when
  shellinabox process fails to start before the specifed timeout
  elapses.

* Fixes a possible console lockup issue
  (https://storyboard.openstack.org/#!/story/2006514) in case of PID
  file not being yet created while daemon start has call already
  returned success return code.

* Fixes an issue wherein asynchronous out-of-band deploy steps in
  deployment template fails to execute. See story 2006342 for details.

* Fixes a bug with the grub ramdisk boot template handling, such
  that the template now properly references the user provided kernal
  and ramdisk. Previously the deployment ramdisk and kernel was
  referenced in the template.

* Fixes an issue where clean steps of "redfish" BIOS interface do
  not boot up the IPA ramdisk after cleaning reboot. See story 2006217
  for details.

* Fixes an issue in updating firmware using "update_firmware_sum"
  clean step from management interface of "ilo" hardware type with an
  error stating that unable to connect to iLO address due to
  authentication failure. See story 2006223 for details.

* Fixes an issue in powering-on of server in "ilo" hardware type.
  Server was failing to return success for power-on operation if no
  bootable device was found. See story 2006288 for details.

* Fixes an issue in creation of RAID for "ilo5" RAID interface
  wherein second time RAID creation fails. See story 2006321 for
  details.

Changes in ironic 12.1.2..12.1.3
--------------------------------

0785477a6 Do not ignore 'fields' query parameter when building next url
3dc0a92d2 Mask secrets when logging in json_rpc
899a0d378 Read in non-blocking fashion when starting console
39196ca9e grub configuration should use user kernel & ramdisk
7b3d60c10 Change log level based on node status
18a45e8b4 Fix typo in handling of exception FailedToGetIPAddressOnPort
2f3b5e929 Do not wait for console being started on timeout
ba0e73fa1 Asynchronous out of band deploy steps fails to execute
15cba675f Check for deploy.deploy deploy step in heartbeat
82ce9a67b Fixing broken links
1ab940a2e Direct bridge to be setup
06f5f0937 RAID creation fails with 'ilo5' RAID interface
ea72083c2 iLO firmware update fails with 'update_firmware_sum' clean step
4014612ca Enable testing adoption in the CI
bfa8f07a7 Fixes power-on failure for 'ilo' hardware type
3c4ba3f2d Ansible driver: fix deployment with serial specified as root device hint
7caf22fe0 Filter security group list on the ID's we expect
8c4015364 CI: stop using pyghmi from git master
6bff4ddfb IPA does not boot up after cleaning reboot for 'redfish' bios interface
9dbec70d7 Ansible module: fix deployment for private and/or shared images
1b27bb715 Fix serial/wwn gathering for ansible+python3


Diffstat (except docs and test files)
-------------------------------------

devstack/lib/ironic                                |   6 +-
ironic/api/controllers/v1/allocation.py            |   3 +-
ironic/api/controllers/v1/chassis.py               |   3 +-
ironic/api/controllers/v1/collection.py            |   5 +
ironic/api/controllers/v1/conductor.py             |   3 +-
ironic/api/controllers/v1/deploy_template.py       |   2 +-
ironic/api/controllers/v1/node.py                  |   3 +-
ironic/api/controllers/v1/port.py                  |   3 +-
ironic/api/controllers/v1/portgroup.py             |   3 +-
ironic/api/controllers/v1/volume_connector.py      |   3 +-
ironic/api/controllers/v1/volume_target.py         |   3 +-
ironic/common/json_rpc/client.py                   |   6 +-
ironic/common/json_rpc/server.py                   |   8 +-
ironic/common/neutron.py                           |  21 +--
ironic/common/pxe_utils.py                         |   2 +-
ironic/conductor/manager.py                        |  30 ++++-
ironic/conductor/task_manager.py                   |  20 ++-
ironic/conductor/utils.py                          |   2 +
ironic/drivers/modules/agent.py                    |   9 +-
ironic/drivers/modules/agent_base_vendor.py        |  48 +++++--
ironic/drivers/modules/ansible/deploy.py           |  16 ++-
.../modules/ansible/playbooks/library/facts_wwn.py |   5 +-
.../playbooks/roles/discover/tasks/roothints.yaml  |   2 +-
ironic/drivers/modules/console_utils.py            |  74 +++++++++--
ironic/drivers/modules/ilo/management.py           |   3 +
ironic/drivers/modules/ilo/power.py                |  23 +++-
ironic/drivers/modules/ilo/raid.py                 |  24 +---
ironic/drivers/modules/iscsi_deploy.py             |  11 +-
ironic/drivers/modules/pxe_grub_config.template    |   4 +-
ironic/drivers/modules/redfish/bios.py             |  50 ++++++--
.../unit/api/controllers/v1/test_allocation.py     |  21 +++
.../unit/api/controllers/v1/test_conductor.py      |  18 +++
.../api/controllers/v1/test_deploy_template.py     |  17 +++
.../unit/api/controllers/v1/test_portgroup.py      |  20 +++
.../api/controllers/v1/test_volume_connector.py    |  22 ++++
.../unit/api/controllers/v1/test_volume_target.py  |  18 +++
.../unit/drivers/modules/ansible/test_deploy.py    |  48 +++----
.../unit/drivers/modules/ilo/test_management.py    |  22 +++-
.../unit/drivers/modules/redfish/test_bios.py      |  59 +++++++--
.../unit/drivers/modules/test_agent_base_vendor.py | 142 ++++++++++++++++++++-
.../unit/drivers/modules/test_console_utils.py     |  99 +++++++++++---
.../unit/drivers/modules/test_iscsi_deploy.py      |  21 +++
.../{set-stack-key.yaml => pre.yaml}               |   4 +-
.../run.yaml                                       |   1 -
playbooks/legacy/grenade-dsvm-ironic/run.yaml      |   1 -
.../notes/bug-2006266-85da234583ca0c32.yaml        |   6 +
.../notes/bug-2006275-a5ca234683ca4c32.yaml        |   5 +
releasenotes/notes/bug-35702-25da234580ca0c31.yaml |   7 +
...wait-errors-during-deploy-5a4279c0c1a6d4d9.yaml |   6 +
...lds-missing-from-next-url-fd9fddf8e70b65ea.yaml |   8 ++
...up-list-add-query-filters-f72cfcefa1e093d2.yaml |   9 ++
...onsole-subprocess-timeout-d3eccfe0440013d7.yaml |   7 +
...hellinabox-pipe-not-ready-f860c4b7a1ef71a8.yaml |   7 +
...-out-of-band-deploy-steps-1f5967e7bfcabbf9.yaml |   6 +
.../notes/jsonrpc-logging-21670015bb845182.yaml    |   5 +
...b-use-user-kernel-ramdisk-7d572fe130932605.yaml |   5 +
...dfish-bios-cleaning-fails-fee32f04dd97cbd2.yaml |   6 +
...sum-firmware-update-fails-622883e4785313c1.yaml |   8 ++
...fails-with-no-boot-device-b698fef59b04e515.yaml |   7 +
...21-ilo5-raid-create-fails-1bb1e648da0db0f1.yaml |   6 +
zuul.d/ironic-jobs.yaml                            |   6 +-
zuul.d/legacy-ironic-jobs.yaml                     |   4 -
78 files changed, 1159 insertions(+), 206 deletions(-)