Thursday, 2021-03-04

*** tosky has quit IRC00:11
*** ociuhandu has joined #openstack-ironic00:45
*** stevebaker has quit IRC00:49
*** ociuhandu has quit IRC00:50
*** stevebaker has joined #openstack-ironic00:51
*** tzumainn has quit IRC01:15
*** zzzeek has quit IRC01:38
*** zzzeek has joined #openstack-ironic01:39
*** rcernin has joined #openstack-ironic01:53
*** rh-jelabarre has quit IRC02:13
*** mkrai has joined #openstack-ironic02:20
openstackgerritwushiming proposed openstack/ironic master: remove unicode from code  https://review.opendev.org/c/openstack/ironic/+/77860202:27
*** andy_ has quit IRC02:32
*** pmannidi has quit IRC02:41
*** andy_ has joined #openstack-ironic02:44
openstackgerritwushiming proposed openstack/metalsmith master: remove unicode from code  https://review.opendev.org/c/openstack/metalsmith/+/77860603:04
*** rcernin has quit IRC03:06
*** rcernin has joined #openstack-ironic03:24
*** rcernin has quit IRC03:26
*** rcernin has joined #openstack-ironic03:27
*** ianychoi_ has joined #openstack-ironic03:40
*** ianychoi has quit IRC03:43
*** jamesdenton has quit IRC03:59
*** jamesdenton has joined #openstack-ironic03:59
*** gyee has quit IRC05:20
openstackgerritwushiming proposed openstack/ironic master: remove unicode from code  https://review.opendev.org/c/openstack/ironic/+/77860205:29
*** yoctozepto has quit IRC06:00
*** yoctozepto has joined #openstack-ironic06:01
*** zzzeek has quit IRC06:03
*** zzzeek has joined #openstack-ironic06:16
*** zzzeek has quit IRC06:25
*** zzzeek has joined #openstack-ironic06:43
*** zzzeek has quit IRC06:44
*** zzzeek has joined #openstack-ironic06:45
*** moshiur has joined #openstack-ironic07:00
*** rcernin has quit IRC07:00
*** uzumaki has quit IRC07:04
*** rcernin has joined #openstack-ironic07:14
*** rcernin has quit IRC07:30
*** anuradha1904 has joined #openstack-ironic07:40
arne_wiebalckGood morning, ironic!07:44
*** rcernin has joined #openstack-ironic07:55
*** rcernin has quit IRC08:00
*** hoonetorg has quit IRC08:03
*** rpittau|afk is now known as rpittau08:08
rpittaugood morning ironic! o/08:08
*** rcernin has joined #openstack-ironic08:12
*** rcernin has quit IRC08:17
*** ociuhandu has joined #openstack-ironic08:23
openstackgerritRiccardo Pittau proposed openstack/bifrost stable/victoria: Upgrade pip version to fix pep-517 enforcing  https://review.opendev.org/c/openstack/bifrost/+/77843408:25
*** mkrai has quit IRC08:26
*** mkrai has joined #openstack-ironic08:27
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Do not test building an iso  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77862008:28
*** uzumaki has joined #openstack-ironic08:29
*** rajinir_ has joined #openstack-ironic08:29
*** TheJulia_ has joined #openstack-ironic08:29
*** bbezak_ has joined #openstack-ironic08:29
*** ildikov_ has joined #openstack-ironic08:29
*** seongsoocho_ has joined #openstack-ironic08:29
*** andrein_ has joined #openstack-ironic08:29
*** buhman_ has joined #openstack-ironic08:30
*** parallax_ has joined #openstack-ironic08:30
*** johnsom_ has joined #openstack-ironic08:30
*** persia has joined #openstack-ironic08:31
*** seongsoocho_ has quit IRC08:33
*** mnasiadka_ has joined #openstack-ironic08:33
*** rpittau_ has joined #openstack-ironic08:33
*** jrollen has joined #openstack-ironic08:33
*** seongsoocho_ has joined #openstack-ironic08:33
*** seongsoocho_ has quit IRC08:34
*** seongsoocho_ has joined #openstack-ironic08:36
*** tosky has joined #openstack-ironic08:36
*** seongsoocho has quit IRC08:36
*** seongsoocho_ is now known as seongsoocho08:36
*** ociuhandu has quit IRC08:40
*** ociuhandu has joined #openstack-ironic08:41
*** mnasiadka has quit IRC08:43
*** parallax has quit IRC08:43
*** buhman has quit IRC08:43
*** persia_ has quit IRC08:43
*** rajinir has quit IRC08:43
*** rpittau has quit IRC08:43
*** johnsom has quit IRC08:43
*** TheJulia has quit IRC08:43
*** andrein has quit IRC08:43
*** ildikov has quit IRC08:43
*** bbezak has quit IRC08:43
*** ajya has quit IRC08:43
*** jroll has quit IRC08:43
*** mnasiadka_ is now known as mnasiadka08:43
*** rajinir_ is now known as rajinir08:43
*** ildikov_ is now known as ildikov08:43
*** TheJulia_ is now known as TheJulia08:43
*** bbezak_ is now known as bbezak08:43
*** johnsom_ is now known as johnsom08:43
*** buhman_ is now known as buhman08:43
*** rpittau_ is now known as rpittau08:43
*** parallax_ is now known as parallax08:43
*** andrein_ is now known as andrein08:43
*** ociuhandu has quit IRC08:45
*** gryf has quit IRC08:46
*** mkrai has quit IRC08:46
*** ociuhandu has joined #openstack-ironic08:46
*** gryf has joined #openstack-ironic08:47
*** ociuhandu has quit IRC08:55
*** dougsz has joined #openstack-ironic08:55
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Use tinycore 12 to build tinyipa  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77658708:55
*** hoonetorg has joined #openstack-ironic08:55
*** ociuhandu has joined #openstack-ironic09:01
*** ajya has joined #openstack-ironic09:03
*** ociuhandu has quit IRC09:05
*** ociuhandu has joined #openstack-ironic09:05
*** derekh has joined #openstack-ironic09:07
*** lucasagomes has joined #openstack-ironic09:09
*** rcernin has joined #openstack-ironic09:13
*** mkrai has joined #openstack-ironic09:14
*** rcernin has quit IRC09:17
*** ociuhandu has quit IRC09:24
*** xinliang has joined #openstack-ironic09:26
*** ociuhandu has joined #openstack-ironic09:37
*** sshnaidm|afk is now known as sshnaidm|aoff09:41
*** sshnaidm|aoff is now known as sshnaidm|off09:41
openstackgerritMerged openstack/bifrost master: Consistent pip_opts handling + drop --no-cache-dir  https://review.opendev.org/c/openstack/bifrost/+/77391809:52
*** ociuhandu has quit IRC09:57
*** paras333 has joined #openstack-ironic09:57
openstackgerritVerification of a change to openstack/ironic failed: Always retry locking when performing task handoff  https://review.opendev.org/c/openstack/ironic/+/77824110:05
*** ociuhandu has joined #openstack-ironic10:14
*** ociuhandu has quit IRC10:22
*** ociuhandu has joined #openstack-ironic10:30
*** ociuhandu has quit IRC10:30
*** ociuhandu has joined #openstack-ironic10:30
*** frigo has joined #openstack-ironic10:33
*** zzzeek has quit IRC10:35
*** zzzeek has joined #openstack-ironic10:35
*** ociuhandu has quit IRC10:36
*** ociuhandu has joined #openstack-ironic10:43
*** xinliang has quit IRC10:50
*** JayF has quit IRC10:51
openstackgerritAija Jauntēva proposed openstack/ironic master: Add Redfish RAID interface to idrac HW type  https://review.opendev.org/c/openstack/ironic/+/77443310:52
*** JayF has joined #openstack-ironic10:56
*** k_mouza has joined #openstack-ironic10:59
*** anuradha1904 has quit IRC11:07
iurygregorygood morning Ironic =)11:08
*** rcernin has joined #openstack-ironic11:08
*** rcernin has quit IRC11:13
frigohello Ironic! rpittau I gave https://review.opendev.org/c/openstack/bifrost/+/778459/3/scripts/install-deps.sh a try and I still get the same error. (again personally, I switched to the master branch, I don't know if bifrost has any user of the Victoria branch)11:17
jandersgood morning / afternoon arne_wiebalck rpittau iurygregory and Ironic o/11:32
openstackgerritMerged openstack/ironic-python-agent stable/ussuri: Use UPPER_CONSTRAINTS_FILE to deal with ipa-builder  https://review.opendev.org/c/openstack/ironic-python-agent/+/77815311:39
rpittauhey janders :)11:42
rpittaufrigo: that's weird, I tested that on a centos 8 stream machine11:43
rpittauhey iurygregory :)11:43
iurygregoryjanders, rpittau o/11:43
*** mkrai has quit IRC11:52
*** tkajinam has quit IRC11:56
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent master: Preapre to use tinycore 12  https://review.opendev.org/c/openstack/ironic-python-agent/+/77865811:59
openstackgerritDmitry Tantsur proposed openstack/ironic master: Switch to JSON RPC from ironic-lib  https://review.opendev.org/c/openstack/ironic/+/77714712:03
*** paras333 has quit IRC12:12
*** paras333_ has joined #openstack-ironic12:13
*** ociuhandu has quit IRC12:21
*** rcernin has joined #openstack-ironic12:24
*** rcernin has quit IRC12:29
*** ociuhandu has joined #openstack-ironic12:37
*** ociuhandu has quit IRC12:42
*** alexmcleod has quit IRC12:44
jandersI still have the baremetal bifrost setup that I used for baremetal testing and I wanted to play around with baremetal deploys12:46
janderswhat's the best way to get an image suitable for baremetal deploys (ideally CentOS or Fedora, but can be anything really)?12:46
*** rcernin has joined #openstack-ironic12:48
*** alexmcleod has joined #openstack-ironic12:50
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent master: Prepare to use tinycore 12  https://review.opendev.org/c/openstack/ironic-python-agent/+/77865812:52
*** rcernin has quit IRC12:53
*** ociuhandu has joined #openstack-ironic12:53
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Use tinycore 12 to build tinyipa  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77658712:53
*** ociuhandu has quit IRC12:59
*** ociuhandu has joined #openstack-ironic13:06
*** alexmcleod has quit IRC13:18
*** alexmcleod has joined #openstack-ironic13:20
janderssee you tomorrow Ironic o/13:23
iurygregorybye janders o/13:27
*** rh-jelabarre has joined #openstack-ironic13:33
*** rloo has joined #openstack-ironic13:41
*** frigo has quit IRC13:46
*** derekh has quit IRC13:52
*** derekh has joined #openstack-ironic13:52
*** paras333_ has quit IRC13:55
openstackgerritsonali bhausaheb borkar proposed openstack/ironic master: DRAC : idrac-redfish inspect updates pxe port  https://review.opendev.org/c/openstack/ironic/+/69332814:00
*** frigo has joined #openstack-ironic14:08
TheJuliagood morning14:10
iurygregorygood morning TheJulia =)14:10
arne_wiebalckGood morning, TheJulia o/14:11
rpittaugood morning TheJulia :)14:11
*** uzumaki has quit IRC14:12
TheJuliaIs anyone noticing grenade seems not quite the happienst of CI jobs?14:13
iurygregorymaster? or stable/branches?14:13
TheJuliamaster14:14
* iurygregory looks14:15
* TheJulia sees a lack of "wtf" on the allocation change14:16
iurygregoryTheJulia, https://zuul.opendev.org/t/openstack/builds?job_name=ironic-grenade&project=openstack%2Fironic&branch=master14:17
iurygregoryO.o14:17
iurygregorydoesn't look bad I would say14:17
TheJuliaokay, then it hates me14:17
iurygregoryprobably =(14:17
iurygregorydo you have a link for the patch?14:17
iurygregoryI can take a look14:17
TheJuliathe volume/targets rbac patch14:17
TheJuliaI don't have it handy14:17
iurygregoryfound it14:17
TheJuliaI'm in a LOT of pain, I tweeked my back14:17
iurygregoryouch =(14:17
iurygregorygo to bed14:18
TheJuliaThat is where I've been for the last 12 hours14:19
TheJuliaI've been over-doing it exercising and I think it is just stregthening core fighting with my back.14:20
TheJuliaglorious coffee14:20
*** ociuhandu has quit IRC14:21
*** ociuhandu has joined #openstack-ironic14:22
rpittauthere's definitely something weird going on with ironic-standalone-ipa-src14:27
*** ociuhandu has quit IRC14:28
rpittauhttp://paste.openstack.org/show/803230/14:32
iurygregorywow O.o14:34
*** tzumainn has joined #openstack-ironic14:43
*** ianychoi__ has joined #openstack-ironic14:46
TheJuliaugh14:47
*** rcernin has joined #openstack-ironic14:49
*** ianychoi_ has quit IRC14:49
rpittaummm seems was working until yesterday14:52
*** uzumaki has joined #openstack-ironic14:53
*** ociuhandu has joined #openstack-ironic14:54
*** rcernin has quit IRC14:54
openstackgerritDmitry Tantsur proposed openstack/ironic-lib master: Fixes parsing blkid output with iSCSI devices  https://review.opendev.org/c/openstack/ironic-lib/+/77871414:54
openstackgerritDmitry Tantsur proposed openstack/ironic master: [DNM] Test the CI fix  https://review.opendev.org/c/openstack/ironic/+/77871814:56
TheJuliadtantsur: aren't you on pto?14:56
*** ociuhandu has quit IRC14:56
*** ociuhandu has joined #openstack-ironic14:57
rpittauhe was too fast, I just got it now :)15:00
openstackgerritvinay50muddu proposed openstack/ironic master: Add clean/deploy steps to manage certificates  https://review.opendev.org/c/openstack/ironic/+/76379115:02
openstackgerritRiccardo Pittau proposed openstack/ironic master: Enforce autospec in test_volume_connector  https://review.opendev.org/c/openstack/ironic/+/77872115:07
iurygregorywow15:10
*** ociuhandu has quit IRC15:13
*** ociuhandu has joined #openstack-ironic15:14
*** ociuhandu has quit IRC15:19
openstackgerritMoshiur Rahman proposed openstack/ironic-python-agent-builder master: Fix: IPA image building with OpenSuse.  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77872615:20
ajyaHi, ironic-standalone, ironic-standalone-redfish are failing for many patches. Is this smth already known?15:27
TheJuliaYes, I think dmitry already submitted the fix15:27
*** ociuhandu has joined #openstack-ironic15:29
ajyaok, thx15:29
*** gyee has joined #openstack-ironic15:52
openstackgerritMoshiur Rahman proposed openstack/ironic-python-agent-builder master: Fix: IPA image building with OpenSuse. This PR is also related to the following PR in diskimage-builder: https://review.opendev.org/c/openstack/diskimage-builder/+/778723  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77872616:01
TheJuliasadness: ./ironic/api/controllers/v1/allocation.py:305:5: C901 'AllocationsController.post' is too complex (19)16:07
rpittaulol16:12
TheJuliaI'm actually bumping it because it wouldn't end up being very pretty to start breaking it apart at the moment :(16:13
TheJuliawell, I could break it into pre-processing16:14
TheJuliaand then leave the rest16:14
TheJuliaI'll let you guys decide16:14
openstackgerritRiccardo Pittau proposed openstack/ironic master: Enforce autospec in test_port  https://review.opendev.org/c/openstack/ironic/+/77874316:21
*** ayoung has quit IRC16:23
*** frigo has quit IRC16:27
*** ayoung has joined #openstack-ironic16:28
*** Madkiss has joined #openstack-ironic16:29
*** moshiur has quit IRC16:41
*** rcernin has joined #openstack-ironic16:50
*** rcernin has quit IRC16:55
*** lucasagomes has quit IRC17:05
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Do not build iso for ussuri ipa  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77862017:08
rpittauthe things I do for ipa ^17:12
TheJuliaheh17:12
*** ociuhandu_ has joined #openstack-ironic17:14
iurygregoryfingers crossed17:15
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Do not build iso for ussuri ipa  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77862017:15
*** ociuhandu has quit IRC17:17
rpittaummmm that might not work though, for the same problem.... :(17:17
rpittauneed to change the job role17:18
*** ociuhandu_ has quit IRC17:18
iurygregoryoh =(17:19
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent-builder master: Do not build iso for ussuri ipa  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77862017:27
rpittaulet's try this ^ approach17:27
* rpittau battery level low17:27
rpittaubye everyone!17:27
*** rpittau is now known as rpittau|afk17:27
iurygregorybye17:29
*** dougsz has quit IRC17:30
openstackgerritJulia Kreger proposed openstack/ironic master: Allocation support for project scoped RBAC  https://review.opendev.org/c/openstack/ironic/+/77834017:33
TheJuliaerr17:36
TheJuliapep817:36
* TheJulia re-runs unit tests17:36
openstackgerritJulia Kreger proposed openstack/ironic master: Allocation support for project scoped RBAC  https://review.opendev.org/c/openstack/ironic/+/77834017:39
TheJuliakaboom17:41
*** dking has joined #openstack-ironic17:41
*** dking has quit IRC17:41
TheJuliawould it be wrong to thank bands in the release notes?17:42
*** dking has joined #openstack-ironic17:42
iurygregoryTheJulia, probably.. but we have the commit message :D17:44
TheJuliabut...but....17:44
TheJuliarelease notes17:44
TheJuliawell, commit message of the prelude or the release note will likely list some bands :)17:45
iurygregoryto me is ok to thank bands in the release notes17:45
iurygregoryI don't see any problem :D17:46
iurygregorynot sure about others XD17:46
dkingHello folks. I'm having some trouble using the redfish driver. It's not sending any credentials, so it always gets a 401. Eventually, I had to check by using "nc -l" with an HTTP URL to confirm. Has anybody heard of that before? Could it be a sushy issue?17:47
iurygregorydking, the redfish credentions are in the node17:48
iurygregorymaybe you didn't set?17:48
iurygregoryhttps://docs.openstack.org/ironic/latest/admin/drivers/redfish.html#registering-a-node-with-the-redfish-driver17:49
openstackgerritJulia Kreger proposed openstack/ironic master: Volume targets/connectors Project Scoped RBAC  https://review.opendev.org/c/openstack/ironic/+/77631417:50
openstackgerritJulia Kreger proposed openstack/ironic master: Project scope driver vendor pass-through  https://review.opendev.org/c/openstack/ironic/+/77676717:50
openstackgerritJulia Kreger proposed openstack/ironic master: Follow-up on project scoped trait tests  https://review.opendev.org/c/openstack/ironic/+/77676817:50
openstackgerritJulia Kreger proposed openstack/ironic master: Allocation support for project scoped RBAC  https://review.opendev.org/c/openstack/ironic/+/77834017:50
dkingiurygregory: Unless I got a spelling error, they should be set under .driver_info.17:51
dkingHere's .driver_info: { "ipmi_address": "10.200.4.34", "ipmi_username": "ironic", "ipmi_password": "******", "deploy_kernel": "http://10.129.15.1:8888/ipa.vmlinuz", "deploy_ramdisk": "http://10.129.15.1:8888/ipa.initramfs", "redfish_address": "http://10.129.15.1:5555", "redfish_username": "ironic", "redfish_password": "******", "redfish_system_id": "/redfish/v1/Systems/1", "redfish_verify_ca": "False", "redfish_auth_type": "basi17:52
dkingc" }17:52
dkingThe redfish_address isn't real, as it's me using it for testing to try to sort this out, but the rest is. I did confirm through logs that the actual credentials are correct. So, unless I spelled one of the variables wrong, it should be in there.17:53
*** outbrito has quit IRC17:55
*** outbrito has joined #openstack-ironic17:55
*** paras333_ has joined #openstack-ironic17:58
iurygregoryI'm wondering why you have ipmi_* ...18:00
dkingiurygregory: Originally, it was using IPMI, and that still works. I was just testing out Redfish on this one.18:01
iurygregorythis is a virtual baremetal or real hardware?18:01
dkingReal hardware.18:01
dkingAnd redfish by itself from the command line using redfishtool works, and we use it quite often for tasks. Actually, even if I send the same command from the logs that fails, but just include the creds, I get back a good response.18:02
*** derekh has quit IRC18:03
iurygregorythe credetials you set for redfish you are able to do some curl and get a 200 response from https://<bmc>/v1/redfish ?18:03
iurygregoryoh ok18:03
*** paras333_ has quit IRC18:03
dkingYep. I copied and pasted to be sure. And then I added the creds.18:04
openstackgerritTzu-Mainn Chen proposed openstack/ironic master: expose owner and lessee in baremetal volume policy  https://review.opendev.org/c/openstack/ironic/+/76763118:06
iurygregorythe driver is set to redfish, but maybe having ipmi credentials in the driver_info is making things go crazy? (not sure if is a valid assumption)18:07
iurygregoryI never saw this before =(18:07
iurygregoryanything in conductor logs?18:07
TheJuliatzumainn: you may want to consider rebasing on 77631418:08
tzumainnTheJulia, ah, okay!18:09
dkingNot really, other than just the message that authentication failed. I also got an earlier warning about not validating the SSL CA, and for the current URL, complaints that it's not HTTPS (which I changed so I could see the unencrypted request easier).18:09
TheJuliatzumainn: the node change has merged, the ports changes are 1x+2, and the volume/connectors is next in that series18:10
tzumainno, nice!18:10
tzumainner, oh, nice!18:10
TheJuliatzumainn: also, just uploaded allocations18:10
dkingI suppose that I could try removing the IPMI stuff. I suppose that I'm wondering where that is handled, whether in the driver, or in conductor.18:10
* TheJulia is marking all the old policies as deprecated now18:10
TheJuliathat shouldn't impact it :\18:12
dkingYeah, from the  code, that shouldn't make a difference. It looks like it just pulls what it needs.18:20
*** iurygregory has quit IRC18:22
*** iurygregory has joined #openstack-ironic18:22
iurygregorygot dc -.-' tks freenode18:23
arne_wiebalckbye everyone o/18:27
dkingo/18:27
*** rcernin has joined #openstack-ironic18:50
*** rcernin has quit IRC18:56
*** mgagne has quit IRC18:56
*** mgagne has joined #openstack-ironic18:57
*** rcernin has joined #openstack-ironic19:12
*** rcernin has quit IRC19:17
openstackgerritJulia Kreger proposed openstack/ironic master: Deprecate legacy policies, update project scoped docs  https://review.opendev.org/c/openstack/ironic/+/77876719:22
TheJuliaka-boom19:23
TheJulialbragstad: ^19:23
lbragstadzomg19:31
lbragstadso - that's the last bit?19:31
lbragstadhttps://review.opendev.org/q/topic:secure-rbac+project:openstack/ironic+status:open19:31
TheJuliauhh, chagne wise I think so19:32
TheJuliaintegrated CI jobs would be next19:32
TheJuliaand after that I likely need to spend time looking at DB performance19:32
lbragstadwow - awesome19:35
lbragstadnice work folks!19:35
stevebakerw00t19:40
lbragstadso - iiuc project personas will only have access to a small portion of ironic's API19:41
TheJuliaabout a third of total $things, but it is 85-90% of the substance if that makes sense19:44
*** juanoterocas has joined #openstack-ironic19:48
TheJuliaI guess at some point we can add support for things like custom deploy templates (oh tzumainn!) with associated owner and access level19:48
*** rcernin has joined #openstack-ironic20:00
*** k_mouza has quit IRC20:19
TheJulialbragstad: before I go digging, any talk of integrated system scope + project scope jobs yet?20:32
lbragstadintegrated?20:33
TheJulialike run services in system scope based accounts20:33
TheJuliain particular I'm thinking nova talking to ironic in system scope instead of scope20:34
lbragstadso - keystone has a protection test gate that sets up tempest and exercises all APIs with all 9 personas, is that what you're talking about?20:34
TheJuliano20:34
lbragstadoh - gotcha20:34
TheJuliaerr, instead of project scope20:34
lbragstadno - i don't think we've crossed that bridge, yet20:34
TheJulianeeded to complete that last sentence20:35
lbragstadthere are a couple different ways to do that i think20:35
lbragstad1.) nova just using the user token and whatever scope that is20:35
TheJuliaThat is what I had a feeling of, that might be something to look at next week20:35
TheJuliayeah, I'm thinking nova is going to need a knob on the virt driver20:35
TheJuliasince the user can't just claim metal20:35
lbragstad2.) nova requesting a system-scoped token from keystone to access system-specific APIs in ironic20:35
* TheJulia senses a PTG session or three20:36
lbragstadyeah - certainly something to figure out before things are enabled by default20:37
lbragstaddansmith is actually realizing some of that with the nova-ceph-rbd job right now20:37
TheJuliaYeah, I think we've got things such that someone can operate in project scope with owner access, but I think we're going to end up with at least one knob on nova to govern if things like "lessee" is populated20:38
dansmithisn't that more of a service account thing than a scoping one?20:39
TheJuliaSince that is also a deployment operational consideration that some may want and others not20:39
dansmithI wouldn't expect you'd want nova's service user to have system scope, if I understand what that means20:39
TheJuliawell, I'd expect even a service account to be able to have system scoped rights because some service interaction is going to need to be slightly elevated and that provides a means as long as the original requestor token/context gets passed along so rights can be validated and the like.20:40
dansmithI would consider nova a user of ironic, not an admin of ironic20:41
TheJuliasystem scope != admin20:41
dansmithdoesn't system scope imply admin/operator level control?20:41
TheJuliasystem member can provide rights required while not granting full admin rights to burn down the deployment20:42
dansmithI understand they're not the same thing, but I guess I'm not sure when you'd want an unprivileged user to have system scope, and I'd expect nova to be unprivileged in ironic for admin type operations20:42
TheJuliaI quite literally can't just give random baremetal out and users can't see baremetal they don't own or lease20:42
*** rcernin has quit IRC20:43
TheJulianope, it has to have something because a user itself can't claim ownership or use over a machine without something else going "you can use it"20:43
TheJuliaAlso, at a minimum a reader is needed as well for resource tracker/placement20:44
dansmithokay, I can't even parse those sentences, but.. that's okay :)20:44
TheJuliasorry :(20:45
TheJuliaTechnically, if we want to go completely unprivileged and reader-only for resource tracking/placement, we would need to evolve the allocations api in ironic to select a physical node or candidate nodes for nova and placement, and that would require some way to allow nodes to accessed since they are pre-existing $things.20:47
TheJuliathat would involve a complete re-do on the dynamics most likely20:48
*** k_mouza has joined #openstack-ironic20:50
*** k_mouza has quit IRC20:55
*** openstackgerrit has quit IRC21:05
*** rcernin has joined #openstack-ironic21:09
*** rcernin has quit IRC21:49
*** rcernin has joined #openstack-ironic22:29
jandersgood morning Ironic o/22:30
jandersstevebaker sorry to hear about the quakes impacting NZ :(22:31
stevebakerjanders: I slept through the 2:30 one :)22:32
stevebakerthere is a tsunami evacuation up north but it sounds like there is not much happening22:32
jandersex-cyclone Niran may cause some weird weather in the northern parts of the North Island later in the week: https://www.metoc.navy.mil/jtwc/products/sh2321.gif hope that it will either track further away from NZ or the timing will be such that it won't add to the existing challenges22:34
jandersit gave us a bit of a fright here earlier this week22:34
janderslt's a cat 3 - cat 4 right now but will be a low by the time it gets to more southern latitudes22:35
stevebakerlike a covid lockdown, earthquakes, tsunami warning isn't enough. Poor Northland :/22:36
jandersyeah :(22:36
janderswe can deal with covid or with natural disasters but both at the same time is not something that people can be reasonably prepared for :(22:37
* stevebaker looks at texas22:39
stevebakerthis is very relaxing to watch22:45
stevebakerhttps://www.facebook.com/watch/live/?v=491328542233540&ref=watch_permalink22:45
jandersthanks for sharing stevebaker22:47
iurygregorymorning janders o/22:47
jandersI hope there won't be much tsunami impact although those things can be non-obvious (water level going way down before going way up) so mass evacuation is definitely the right thing to do22:47
jandershey iurygregory o/22:47
jandersdo you guys have much experience with building images for baremetal deployments with bifrost?22:48
jandersI suppose just downloading a CentOS cloud image won't do, need to build a whole-disk image with DIB right?22:48
stevebakerjanders: I'm building whole disk images for bifrost right now to try and get my head around UEFI boot issues22:50
*** juanoterocas has quit IRC22:50
stevebakerbiab, lunch time22:52
*** rcernin has quit IRC22:54
*** rcernin has joined #openstack-ironic22:54
*** tkajinam has joined #openstack-ironic22:57
iurygregoryjanders, I never did .-.23:29
jandersthanks iurygregory I will try figure it out after progressing some metal3 work23:37
iurygregoryno worries23:42
*** stevebaker has quit IRC23:42
iurygregoryI think dmitry downloaded some images and included in the directory23:42
jandersI also see easy looking guide here:23:43
jandershttps://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/pdf/bare_metal_provisioning/Red_Hat_OpenStack_Platform-16.1-Bare_Metal_Provisioning-en-US.pdf23:43
janderspage 3123:43
janderson first glance it seems more suitable for customising RHOSP overclouds specifically but I see the tool in the Fedora repo too so might be useful for the entire Red Hat OS Family23:44
*** stevebaker has joined #openstack-ironic23:44
stevebaker(back)23:47
jandersstevebaker with UEFI whole disk images, do we still need kernel/ramdisk/EFI partition image, or is everything contained within the disk image itself (my guess)?23:53
stevebakerjanders: its a single .qcow2 file23:53
jandersthank you stevebaker I thought that would be the case - from this seems the doco I found may be for building baremetal images but not whole-disk baremetal images23:54
TheJuliastevebaker: do you want to talk about uefi?23:54
stevebakerTheJulia: I do, I just want to try one more thing23:54
* TheJulia is worried23:55
TheJuliaOkay23:55
jandersTheJulia stevebaker do you need to discuss specifics, or do you think I may learn how to build a UEFI wholedisk image from listening in?23:56
TheJuliathis shouldn't be mystical or magical23:56
TheJuliabut maybe ?!?23:56
jandersthere is a decent looking guide for VMs in the DIB repo: https://opendev.org/openstack/diskimage-builder/src/branch/master/doc/source/user_guide/building_an_image.rst but not a lot for wholedisk-baremetal-uefi23:59

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!