Open Stack

We are excited to announce the release of:

ironic 18.3.0: OpenStack Bare Metal Provisioning

This release is part of the xena stable release series.

The source is available from:

    https://opendev.org/openstack/ironic

Download the package from:

    https://tarballs.openstack.org/ironic/

Please report issues through:

    https://storyboard.openstack.org/#!/project/943

For more details, please see below.

18.3.0
^^^^^^


Upgrade Notes
*************

* Adds "sha256", "sha384" and "sha512" as supported SNMPv3
  authentication protocols to iRMC driver.


Bug Fixes
*********

* Fixes an issue where if selinux is enabled and enforcing, and the
  published image is a hardlink, the source selinux context is
  preserved, causing access denied when retrieving the image using
  hardlink URL.

* Fixes SNMPv3 message authentication and encryption functionality
  of iRMC driver. The SNMPv3 authentication between iRMC driver and
  iRMC was only by the security name with no passwords and encryption.
  To increase security, the following parameters are now added to the
  node's "driver_info", and can be used for authentication:

  * "irmc_snmp_user"

  * "irmc_snmp_auth_password"

  * "irmc_snmp_priv_password"

  * "irmc_snmp_auth_proto" (Optional, defaults to "sha")

  * "irmc_snmp_priv_proto" (Optional, defaults to "aes")

  "irmc_snmp_user" replaces "irmc_snmp_security". "irmc_snmp_security"
  will be ignored if "irmc_snmp_user" is set. "irmc_snmp_auth_proto"
  and "irmc_snmp_priv_proto" can also be set through the following
  options in the "[irmc]" section of "/etc/ironic/ironic.conf":

  * "snmp_auth_proto"

  * "snmp_priv_proto"

* Fixes a race condition in PXE initialization where logic to retry
  what we suspect as potentially failed PXE boot operations was not
  consulting if an "agent token" had been established, which is the
  very first step in agent initialization.


Other Notes
***********

* Updates the minimum version of "python-scciclient" library to
  "0.11.3".

Changes in ironic 18.2.2..18.3.0
--------------------------------

68efd7970 Move and fix reno config for releasenotes job
6210cae14 Fix selinux context of published image hardlink
8e6a337f2 Prevent pxe retry when agent token exists
793b98132 Fixes for tox 4.0
6aaf4e69e Add support auth protocols for iRMC
ef0e33edf Add SNMPv3 authentication functionality


Diffstat (except docs and test files)
-------------------------------------

ironic/common/utils.py                             |  12 ++
ironic/conf/irmc.py                                |  28 ++-
ironic/drivers/modules/image_utils.py              |  10 +
ironic/drivers/modules/irmc/common.py              | 235 ++++++++++++++++----
ironic/drivers/modules/irmc/inspect.py             |  24 ++-
ironic/drivers/modules/irmc/power.py               |  22 +-
ironic/drivers/modules/pxe_base.py                 |   6 +
releasenotes/config.yaml                           |   5 +
...ix-context-image-hardlink-16f452974abc7327.yaml |   7 +
...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml |   5 +
.../irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml |  28 +++
...e-retry-when-token-exists-a4f38f7da56c1397.yaml |   7 +
reno.yaml                                          |   4 -
tox.ini                                            |   9 +-
20 files changed, 667 insertions(+), 77 deletions(-)