Commit Graph

13066 Commits

Author SHA1 Message Date
Zuul 8bdf1fca91 Merge "docs: augment security docs" 2024-06-03 22:09:04 +00:00
Julia Kreger b64a8ff6ef Follow-up: minor wording change from 920706
Just changing "deployment or cleaning operations" to
"inband operations", since the agent can run in many
different inband operational steps.

Change-Id: Iaaa03ebc3dab724eb7afb0ee686bd22c8a2879be
2024-05-31 07:06:56 -07:00
Julia Kreger 268b28f527 Enhance security notes in config description
Some of the configuation knobs require more specific details
regarding security or denial of service related possibilities
if tuned to inappropriate values.

Overall, just some minor improvements for clarity

Change-Id: I008d6e00a528bddba0f843f34968155a9da3ff36
2024-05-31 14:04:51 +00:00
Julia Kreger 9f456bb63c docs: augment security docs
A quick review of the security documentation yielded a need
to revise and clarify the security documentation a little,
which includes a couple security related features.

And also fix the syntax on the example policy entries while
adding a missing third, ! results in a "default false" response.

Change-Id: I3d10ca4631703051109c443d5591a7e86f858c66
2024-05-31 07:04:30 -07:00
Zuul 2f41bf1a0d Merge "Fix some typo in servicing doc" 2024-05-29 15:40:22 +00:00
Zuul 9d791077a3 Merge "Use specific element to detect database backend" 2024-05-29 15:09:41 +00:00
Zuul 7fafe27ba7 Merge "Add pre-commit configuration and docs" 2024-05-29 11:58:35 +00:00
Zuul a3ec7e7dc9 Merge "Update front page of contributor guide" 2024-05-29 11:13:34 +00:00
Zuul 33f3f6b26c Merge "Add Node Servicing to api-ref" 2024-05-29 02:36:43 +00:00
Jay Faulkner c6328874a5 Update front page of contributor guide
This highlights:
- The dev-quickstart guide, which is more up to date than most
  contributor docs.
- Common docs (OpenDev / OpenStack contributor guides)
- Bug information (also very up to date)

This removes:
- Top-level link to BfV and multitenant devstacks; these configs are
  linked from devstack-guide
- Hilariously out of date information around branch support

Change-Id: If47d9776c65c91b972a3fab8364eacc50a29b2bb
Depends-On: https://review.opendev.org/c/openstack/ironic/+/920365
2024-05-28 14:34:40 +00:00
Kaifeng Wang a52cba727e Fix some typo in servicing doc
Some word refer to cleaning steps while should be servicing step.

Change-Id: I417635a0cbb8643d997bc317ad81772d411cd7bd
2024-05-28 19:30:42 +08:00
Jay Faulkner b44cad8e5e Fix CI issues in codespell/pep8
Codespell upgrade caused failures, fixed spelling where
appropriate, added ignores where appropriate.

Some new package release broke pep8 runs; fixed by no
longer pinning Pygments version.

Change-Id: I670bbb170823d6a0ace8eeb9d9e486e8e9bf7404
2024-05-28 02:38:31 -07:00
Zuul df6342d1ab Merge "Fix negative lookahead assertion syntax error" 2024-05-23 16:19:33 +00:00
cid 74b148b685 Fix negative lookahead assertion syntax error
Python regexes are deprecated in Zuul, so this commit updates the
configuration to use RE2-compatible syntax.

Change-Id: If4973be103076f5a3879dc630e104d129377f7da
2024-05-23 13:56:19 +01:00
Jay Faulkner 1285417c7a Add Node Servicing to api-ref
Adding service verb and service_steps attributes to API reference.

Change-Id: I7078f3b9e415c30ab45291bef8c52a66ff7eab8c
2024-05-21 14:33:44 -07:00
Takashi Kajinami 9bed01d2f6 Use specific element to detect database backend
... instead of using the whole url string. The url string may include
the pattern and the current logic is not robust enough to ignore
wired naming.

Change-Id: I80c59c67773f868b45f1ff3b34877c1bab73b225
2024-05-16 00:56:37 +09:00
Julia Kreger 0d2a2e4bf4 docs: allow the state diagram to be larger
The state digram is constrainted into a frame of the page rendering
and the prior configuration set it to be a maximum of 660 pixels,
however we should allow the image to be aligned to page size which
can result in a larger image, but still constrained slightly so
spinx includes a link to the image.

Change-Id: I19350fc010bd5aac798b2d57ea3d2eb98239a457
2024-05-15 06:48:40 -07:00
Zuul 339e149c50 Merge "Add servicing states to states doc, fix state diagram" 2024-05-15 04:22:53 +00:00
Zuul c31fea571b Merge "docs: Cleanup/revise Secure Boot docs" 2024-05-14 23:12:19 +00:00
Zuul b8bcfc33cb Merge "Remove SQLAlchemy tips jobs" 2024-05-14 17:22:53 +00:00
Zuul 4b35da4ece Merge "[devstack] Upload images with --file instead of stdin" 2024-05-14 15:48:13 +00:00
Zuul dcace881bc Merge "docs: revise notes around iso booting for clarity" 2024-05-13 16:37:25 +00:00
Jay Faulkner 74ecde7ea0 Add servicing states to states doc, fix state diagram
Good news, pydot (original) is maintained again and pydot2 apparently is
not. By switching to pydot instead of the fork, svg generation works
now.

This adds states for servicing, and swaps us back to svg for the
regenerated diagram.

Change-Id: I410182ee04293434d889747ddec229870c908d91
2024-05-10 14:31:55 -07:00
Zuul a2f4b2f410 Merge "Fix spurious CI job failures around partition images" 2024-05-08 23:05:37 +00:00
Dan Smith a0f48b6425 [devstack] Upload images with --file instead of stdin
This makes all the image upload commands in the devstack plugin use
--file instead of stdin redirection, and also uses an absolute path.
One of the commands was already doing it this way. By doing the upload
like this, it makes the devstack plugin usable with the OCaaS devstack
mode (for faster openstack client ops) since we can't pass the image
stream via stdin. Most people will be using --file for uploading
anyway, so this is probably more realistic anyway.

Change-Id: I8d97ed731133d02aed46a078c50769692ad7ba04
2024-05-08 11:00:44 -07:00
Julia Kreger 5a75e9afbb docs: detail limitation of use of config drive + rebuild
Change-Id: I2054d6a87d7dcf74004d3404c73e39a100f1fe9b
2024-05-07 10:31:34 -07:00
Julia Kreger 8d0b556e3d Fix spurious CI job failures around partition images
Cirros partition images have some underlying limitations,
meaning it is not ideal for any step which requires the image
to hae commands executed in it to perform operations, such as
mounting additional filesystems in UEFI mode, or installing
grub in BIOS mode.

This is because cirros images are an unpacked ramdisk, in other
words, the posted disk image *has no* contents on the root
filesystem of the image. While we attempt to unpack[0] this as well,
this can also fail creating false failures resulting in check
jobs failing and then working on recheck.

As the constraint is the same as the BIOS mode check, and there
is no realistic fix, this change removes the boot mode check and
thus always disables partition image testing with tempest *when*
cirros is in use.

note 0: We presently unpack using a virtual machine launch so it
takes place with the same process as when cirros starts, however
linux doesn't always boot, and the tools don't really determine
if that is the case or not, and if we retool it, we should just
move to a direct extraction and image re-pack.

Change-Id: I7687ff1eddb14d22b981860d4c4c9b172bae45b7
2024-05-07 09:40:32 -07:00
Zuul 5717c7e599 Merge "docs: document stance on partition image use" 2024-05-06 10:49:17 +00:00
Zuul 38aa6433cb Merge "reno: Update master for unmaintained/zed" 2024-05-06 09:53:32 +00:00
Zuul 3134f13acf Merge "doc: Fix wrong example of [ipmi] cipher_suite_versions" 2024-05-06 08:34:34 +00:00
OpenStack Release Bot 13ab26188c reno: Update master for unmaintained/zed
Update the zed release notes configuration to build from
unmaintained/zed.

Change-Id: I473ad6309784bc3e672eedb556d1694a2e5f99f5
2024-05-06 06:23:45 +00:00
Takashi Kajinami 198e2ceb3b doc: Fix wrong example of [ipmi] cipher_suite_versions
The example suggests python-style representation but this is not
actually parsed as expected.

Change-Id: I21ce1db655f81cd3fb3a0a0b92f8b81ff1e77c45
2024-05-04 18:38:58 +09:00
Zuul f39594fcec Merge "Remove eventlet workarounds" 2024-05-03 17:53:15 +00:00
Jay Faulkner e4c2f884cb Remove eventlet workarounds
The bugs these work around have been fixed for a long time, and we
require modern eventlet for Ironic. Let's remove the workaround.

Change-Id: Idecb3c5a774aecc6b65d0abd0262fe4b8625c6b7
2024-05-03 07:57:27 -07:00
Jay Faulkner 9c955685c4 Add pre-commit configuration and docs
pre-commit is a git hooks framework which does lots of useful things
before you commit, like validating lint and codespell -- easy things to
forget, especially in a post-codespell world.

Related-bug: 2047654
Change-Id: I22738f9dceebe194e5aedff8815cd786013de456
2024-05-01 14:00:30 -07:00
Zuul 820ec7ddc7 Merge "Replace cinderclient usage with openstacksdk" 2024-05-01 17:22:26 +00:00
Julia Kreger 021117e354 docs: revise notes around iso booting for clarity
Had someone try to boot the tinycore ISO on a UEFI machine, and they
got a nice error. Just turns out we needed to update our docs a little
bit to provide appropriate clarity.

Change-Id: I1adfb62ea22d0b58740ceadc8c338fc04d9b78de
2024-05-01 10:14:20 -07:00
Zuul dec5780fca Merge "Inject a randomized publisher id" 2024-05-01 04:58:12 +00:00
Zuul 06c492aad5 Merge "Remove special treatment of .json for API objects" 2024-05-01 04:55:26 +00:00
Zuul 0e4adceda3 Merge "Run neutron for the functional test job" 2024-05-01 04:55:23 +00:00
Steve Baker 91d4bacbec Replace cinderclient usage with openstacksdk
Change-Id: Ib4a533584da85281d425fdbffa12a52d4838e185
Closes-Bug: #2042494
2024-05-01 07:58:41 +12:00
Takashi Kajinami 1e4ef9395a Remove old excludes
These are detected as errors since the clean up was done[1] in
the requirements repository.

[1] 314734e938f107cbd5ebcc7af4d9167c11347406

Also remove the note about old pip's behavior because the resolver
in recent pip no longer requires specific order.

Change-Id: I742ea0192398b9e9b78b969fa81f65621d9490de
2024-04-30 22:43:13 +09:00
Zuul 384c692f59 Merge "Fix iscsi url generate method for ipxe" 2024-04-29 22:57:31 +00:00
Zuul d49a1b907c Merge "ci: re-enable grenade test job" 2024-04-29 22:52:48 +00:00
Zuul b6b8ee07ce Merge "Replace glanceclient usage with openstacksdk" 2024-04-29 15:26:56 +00:00
Zuul 3a95a38b65 Merge "Redfish: fix error formatting when mounting vmedia" 2024-04-29 14:41:34 +00:00
Dmitry Tantsur f43587effd
Redfish: fix error formatting when mounting vmedia
Also add missing error into the message.

Change-Id: I9610add40afbb7beb30d375a3a455434f5446cc7
2024-04-29 14:11:06 +02:00
frankming dcf059af9e Fix iscsi url generate method for ipxe
Boot from volume feature has a ipxe template render step, and it need
to generate iscsi urls for booting the volume. However, it not works. In
the function, lun field should be hexadecimal instead of decimal,
according to SAN URIs description at https://ipxe.org/sanuri. So we
need to fix it.

Closes-Bug: #2055355
Change-Id: I080ca42c9ba05f2a4e0752312b79a32bef825752
Signed-off-by: frankming <chen27508959@outlook.com>
2024-04-29 17:06:34 +08:00
Zuul 08209c48ab Merge "docs: update ilo docs regarding status -> use redfish" 2024-04-29 08:30:06 +00:00
Steve Baker 978afbd5a1 Replace glanceclient usage with openstacksdk
Closes-Bug: #2042495
Change-Id: Ic8421bd937a3a1ab6c3b86c259cd929810c0532e
2024-04-29 12:30:33 +12:00