Open Stack

We jubilantly announce the release of:

ironic-inspector 10.4.0: Hardware introspection for OpenStack Bare
Metal

This release is part of the victoria stable release series.

The source is available from:

    https://opendev.org/openstack/ironic-inspector

Download the package from:

    https://tarballs.openstack.org/ironic-inspector/

Please report issues through:

    https://storyboard.openstack.org/#!/project/944

For more details, please see below.

10.4.0
^^^^^^


New Features
************

* Adds an "accelerators" plugin to identify acclerator devices and
  update the bare metal node for future scheduling. The accelerator
  devices will be saved to node properties under the key
  "accelerators". Introduces a configuration option
  "[accelerators]known_devices" to specify a configuration file which
  contains required information to identify accelerator devices, by
  default it uses the in-tree configuration file named
  "known_accelerators.yaml".

* The dnsmasq pxe-filter now supports mapping between host
  InfiniBand MAC to EthernetOverInfiniBand MAC. (This was previously
  only supported by the iptables pxe-filter.)

* By default the DHCP filtering will open the DHCP server for any
  node when introspection is active. It will only block DHCP for
  enrolled nodes that are not being introspected. Doing so is required
  to support interface discovery (which by default will enroll the pxe
  port to ironic if not present). This behaviour is not always wanted,
  as nodes not managed by ironic may boot the inspection image.

  A new option was added "[pxe_filter]deny_unknown_macs" which allow
  changeing this behaviour so that the DHCP server only allow enrolled
  nodes being introspected and deny everything else.

  Note: If this option is "True", nodes must have at least one
    enrolled port prior to introspection.


Bug Fixes
*********

* Fixes the node identification logic to enable a user to list the
  "redfish_address" label for "driver_info" field values for
  identification of a machine using the "[DEFAULT]ipmi_address_fields"
  configuration option. Previously the host would just not be matched
  as the full URL would be evaluated instead of what the URL may
  resolve to.

Changes in ironic-inspector 10.3.0..10.4.0
------------------------------------------

b4f008f Revert "Power off before inspection"
7a067a9 pxe filter - option to always block unknown hosts
245cbed Correct the docstring for _should_enable_unknown_hosts
2f6df39 Limit inspector jobs to 1 testing VM
4644981 Add NVIDIA V100 to known accelerator devices
9a89c30 Fix l-c and mysql GRANT syntex for Ubuntu Focal
34b264e Power off before inspection
de2a27a Identify accelerator devices during introspection
f4648fa Replace retrying with tenacity
6792848 Minor doc fix to kernel options
bbc5cd7 Fix URL parsing to enable redfish_address matching
17f58aa Log outcome of `check_conditions` method.
6732d5e Follow up to incorrect pxe-enabled was set


Diffstat (except docs and test files)
-------------------------------------

ironic_inspector/common/ironic.py                  |  18 +-
ironic_inspector/conf/__init__.py                  |   2 +
ironic_inspector/conf/accelerators.py              |  35 ++++
ironic_inspector/conf/default.py                   |   3 +-
ironic_inspector/conf/iptables.py                  |   2 +-
ironic_inspector/conf/pxe_filter.py                |   9 +
ironic_inspector/known_accelerators.yaml           |   9 +
ironic_inspector/node_cache.py                     |   3 +-
ironic_inspector/plugins/accel_device.py           |  78 ++++++++
ironic_inspector/pxe_filter/base.py                |  77 ++++++++
ironic_inspector/pxe_filter/dnsmasq.py             |  16 +-
ironic_inspector/pxe_filter/iptables.py            |  95 ++++------
ironic_inspector/rules.py                          |  13 +-
ironic_inspector/test/functional.py                |   2 +-
ironic_inspector/test/unit/test_common_ironic.py   |  37 ++++
.../test/unit/test_dnsmasq_pxe_filter.py           |  54 +++++-
ironic_inspector/test/unit/test_iptables.py        | 205 ++++++++-------------
ironic_inspector/test/unit/test_node_cache.py      |  26 +++
.../test/unit/test_plugins_accel_device.py         |  52 ++++++
ironic_inspector/test/unit/test_pxe_filter.py      | 197 ++++++++++++++++++++
lower-constraints.txt                              |  11 +-
.../notes/accelerators-2aa4f0cedf359810.yaml       |  10 +
...e-filter-eoib-mac-support-7567bbc7c6bf1878.yaml |   6 +
...-deny-unknown-host-option-b84b2aa1f7f49a17.yaml |  17 ++
.../support_redfish_address-94eae2c0d2879f53.yaml  |   8 +
requirements.txt                                   |  11 +-
setup.cfg                                          |   1 +
tools/test-setup.sh                                |   4 +-
zuul.d/ironic-inspector-jobs.yaml                  |   1 +
31 files changed, 791 insertions(+), 226 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index a31f8d9..bbf3a80 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5 +5 @@ automaton>=1.9.0 # Apache-2.0
-alembic>=0.9.6 # MIT
+alembic>=1.4.2 # MIT
@@ -17,0 +18 @@ pytz>=2013.6 # MIT
+PyYAML>=5.3.1
@@ -22 +23 @@ oslo.context>=2.19.2 # Apache-2.0
-oslo.db>=4.40.0 # Apache-2.0
+oslo.db>=6.0.0 # Apache-2.0
@@ -32 +33 @@ oslo.utils>=3.33.0 # Apache-2.0
-retrying!=1.3.0,>=1.2.3 # Apache-2.0
+tenacity>=6.2.0  # Apache-2.0
@@ -34,2 +35,2 @@ stevedore>=1.20.0 # Apache-2.0
-SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT
-tooz>=1.64.0 # Apache-2.0
+SQLAlchemy>=1.2.19 # MIT
+tooz>=2.5.1 # Apache-2.0