Wednesday, 2024-01-03

*** dmellado74 is now known as dmellado700:06
rpittaugood morning ironic! Happy new year! o/08:00
masgharGood morning!09:30
opendevreviewDamien RANNOU proposed openstack/ironic-python-agent master: [WIP] USB device discovery  https://review.opendev.org/c/openstack/ironic-python-agent/+/90276910:57
opendevreviewDamien RANNOU proposed openstack/ironic-python-agent master: [WIP] USB device discovery  https://review.opendev.org/c/openstack/ironic-python-agent/+/90276913:29
opendevreviewRiccardo Pittau proposed openstack/ironic master: Handle LLDP parse Unicode error  https://review.opendev.org/c/openstack/ironic/+/90386113:36
opendevreviewRiccardo Pittau proposed openstack/ironic-inspector master: Handle LLDP parse Unicode error  https://review.opendev.org/c/openstack/ironic-inspector/+/90376013:37
TheJuliagood morning14:10
* TheJulia tries to wake up14:14
TheJuliaHi Nisha_Agarwal 14:57
Nisha_AgarwalTheJulia, hi14:57
opendevreviewMerged openstack/ironic-python-agent master: Update to latest pep8/code style versions  https://review.opendev.org/c/openstack/ironic-python-agent/+/90441614:57
Nisha_AgarwalThis is regarding RHOSP bug14:58
Nisha_AgarwalThere is a comment saying that there are different usernames for different partitions...14:58
TheJuliaYes, I'm looking at it, and leaning towards not actually an OSP or even sushy bug14:58
TheJuliaI'm just trying to figure out why the session is disqualified14:58
Nisha_Agarwali dont know what is the meaning of that14:58
TheJuliabut the API is all lower cased, which makes no sense14:58
TheJuliabut also is non-conformant to dsp026614:59
Nisha_AgarwalWhich API?14:59
TheJuliathe responses coming from the BMC14:59
TheJuliaor, 'bmc'14:59
Nisha_Agarwalstill i didnt get15:00
Nisha_Agarwalcan u elaborate or quote what u meant15:00
TheJuliauhh sure15:00
TheJuliaummmm15:00
TheJuliafor example, you see the error about the "Actions" field in the logs, yes?15:00
Nisha_AgarwalYes15:00
Nisha_Agarwalthat comes because the token is invalidated befor eteh get call and gets the 401 status15:01
TheJuliaOkay, so if you trust me on this real quick, We expect the field name to be 'Actions'15:01
TheJuliasearch the same logs for '_actions'15:01
Nisha_Agarwaleven if the status is 401, that data is passed to the next GET call for the systems15:01
Nisha_Agarwalit is conformant to DMTF. 15:02
TheJuliahttps://redfish.dmtf.org/schemas/v1/ComputerSystem.v1_21_0.yaml15:02
TheJuliaas an OEM field only15:02
TheJuliaId is missing, which we expect as required, and 'boot' is also lower cased15:03
TheJuliahttps://www.dmtf.org/sites/default/files/standards/documents/DSP0266_1.19.0.pdf <-- take a look at page 61 as well15:04
TheJuliaPage 92, 9.6.14 15:06
TheJuliaPage 90, 9.6.615:07
TheJuliaPage 95, 9.7.1 Naming rules should provide insight15:08
Nisha_AgarwalOk15:08
TheJuliaAs for why the session token is suddenly invalid, I have no clue at present.15:08
Nisha_AgarwalSee the output from the ssytem here15:09
Nisha_Agarwalhttps://paste.openstack.org/show/bvmS7TiurFavZaHA1srg/15:09
TheJuliaIt is not like sushy is self invalidating15:09
Nisha_Agarwalthis is the output from GET on "https://<IP>/redfish/v1/Systems/Partition0"15:09
TheJuliaweird15:10
TheJuliaa raw curl correct?15:10
Nisha_Agarwalyes15:10
Nisha_Agarwali have done the curl call15:10
Nisha_Agarwaland secondly if it was non-DMTF, then it wouldnt have passed the deploy when we used basic as the authentication mechanism15:10
Nisha_Agarwaland through devstack actually the same system works15:11
Nisha_Agarwalthats the most wierd thing15:11
TheJuliahttps://www.irccloud.com/pastebin/AZsJvEva/15:11
TheJuliaThat is what sushy gets in response....15:11
TheJuliacould we somehow be hitting some sort of different dialect15:12
Nisha_Agarwalwe dont hit the issue when we do using devstack15:12
TheJuliaI looked at a another log from a recent 17.x case with full blown HPE servers, Everything was upper case as we expect15:13
TheJuliaI guess a challenge is the logs I'm looking at have rotated at least once15:15
TheJuliaThings start with us trying to call task.driver.management.detect_vendor(task)15:16
TheJuliaWhen you did devstack, what version of devstack and what version of the sushy library? Maybe there is a difference between wallaby and the version you used15:18
TheJulia?15:18
TheJuliaAlso, when you curled, did you do it as a session request, or a basic auth interaction?15:20
TheJuliaDid session auth work on devstack?15:21
Nisha_AgarwalTheJulia, when we did devtsack we tested with bobcat release for this server15:23
Nisha_Agarwalwhen we used curl, that time i did it as a session token15:24
Nisha_Agarwalsession auth token worked with devstack15:24
TheJuliaso this comes down to something between Wallaby and Bobcat15:25
Nisha_Agarwaland moreover if there is DMTF issue then it will not work with basic authentication also15:25
Nisha_Agarwalbut for it has worked with basic authentication15:26
TheJuliawell, there *is* with the responses we get from the bmc when we attempt session auth15:26
TheJuliawell, we authenticate, things go sideways afterwards15:27
Nisha_Agarwalyes authenication fails and returns 40115:27
Nisha_Agarwali did that manually15:27
TheJuliawell, in the logs I have, it works, we get a response back, we don't log it was invalid or missing the session uri15:28
TheJuliathe connector would then use it to retry the request15:28
Nisha_Agarwalwith default authentication as "auto", when we keep on trying deploy upon failures , then out of 10 times it crosses that GET call one time and takes the system to wait-callback15:29
Nisha_Agarwalthis above ^ behaviour is seen on current RHOSP 17.1 version15:30
TheJuliaYeah, auto's handling is only if session auth doesn't work, it does work upfront, it is just that the response behavior is exceptionally weird, i.e. all lower case responses with limited fields15:30
Nisha_Agarwalhttps://paste.openstack.org/show/bKBx58BeU1dYEyXPnJdJ/15:31
Nisha_Agarwalthis is the pdb log which i had collected in Dec15:32
TheJuliaWhen you created your session, how did you create it? I'm wondering if maybe there is a different session service path or something going on because we did retool some of the session service handling at one poitn15:32
Nisha_Agarwalhttps://<IP>/redfish/v1/SessionService/Sessions/15:32
TheJuliaso was that from devstack15:34
TheJulia?15:34
Nisha_AgarwalStrange thing is that when we just remove the header "Connection: close" it works fine in RHOSP environment15:34
Nisha_Agarwalthe above pdb is from RHOSP sushy library15:34
TheJuliaok15:34
TheJuliaThat is just bizare that forcing the connection to not close would change the response body.15:35
Nisha_AgarwalIt just doesnt change the response body as i know but it doesnt invalidates the token (i.e. it doesnt get the 401 status) 15:36
TheJuliawait, is the BMC invalidating the token?15:36
Nisha_Agarwalas when we dont use the header as "Connection: close" the default connection header is "Connection: keep-alive"15:36
Nisha_AgarwalLooks like....15:36
TheJuliaYeah, under no circumstances can we use keep-alive15:36
TheJuliaby chance, did you try upstream sushy from the wallaby branch at all?15:39
Nisha_Agarwallatest sushy?15:41
Nisha_Agarwalupstream wallaby we have not tried in this RHOSP setup. We can try15:42
Nisha_AgarwalTheJulia, it looks like sushy has some mapping for _actions etc field names as deploy works fine when we use basic authentication and even when we tested with devstack15:43
TheJuliaThe internal storage name is _actions actually15:45
TheJuliabut that only gets assigned after it logged the response, which seems more like coincidence than anything else.15:46
TheJuliaso, rhosp 17.1 appears to have the session auth fixes we did back in 202215:46
Nisha_Agarwalhttps://paste.openstack.org/show/brnNPbcb2DNovLnvC8yH/15:50
Nisha_Agarwalthis is the output from upstream stable wallaby15:50
TheJuliaheh15:52
TheJuliaso it works it looks like15:52
Nisha_Agarwalcan we delete this paste file, it has complete credentials of the system15:52
TheJulianope....15:52
Nisha_Agarwali mistakenly forgot to remove it15:52
Nisha_Agarwalediting is possible?15:53
TheJuliafungi: o/ you around15:53
fungii am15:53
TheJuliaany way to nuke a paste ?15:54
fungiyeah, just a sec and i'll wipe it15:54
TheJuliamuch appreciated15:54
TheJuliaokay, so... why does rhosp and wallaby behave differently15:54
opendevreviewDamien RANNOU proposed openstack/ironic-python-agent master: [WIP] USB device discovery  https://review.opendev.org/c/openstack/ironic-python-agent/+/90276915:55
fungiNisha_Agarwal: TheJulia: i've deleted that paste now, so it's no longer accessible, but you likely still want to consider anything you pasted compromised since someone may have seen it in the interim16:00
Nisha_Agarwalfungi thanks16:00
TheJuliathanks fungi!16:00
fungiany time! don't hesitate to let me know if you need anything else16:02
Nisha_AgarwalTheJulia, strange thing is that when i use the python shell inside container and do same calls, the GET call for the Systems URI gets same output as upstream wallaby16:09
Nisha_Agarwalhttps://paste.openstack.org/show/bct9awc403ymTYL7yITj/16:09
Nisha_Agarwalthis is from the RHOSP ironic-conductor container16:10
Nisha_AgarwalTheJulia, do u still need the databse dump in the bugzilla16:10
Nisha_Agarwalif so please share the procedure to create the ironic db dump in RHOSP16:11
TheJuliaso that is valid output, what we would expect16:11
TheJuliaso, No, I don't need the DB, initially I was thinking this was some weird session handling bug16:11
Nisha_AgarwalTheJulia, it still looks like that16:12
Nisha_Agarwalbut the output in RHOSP is different than what we do manually is more wierd16:12
TheJuliayeah, can you access the manufacturer field on the system object?16:12
Nisha_AgarwalI do not see the manufacturer field in the output16:16
TheJuliahmm, what about the id field, I guess the thing is your looking at raw json the object is based upon, not the loaded object output16:18
Nisha_Agarwal"Id": "Partition0",16:20
rpittaugood night! o/17:15
opendevreviewJulia Kreger proposed openstack/ironic master: Handle Power On/Off for child node cases  https://review.opendev.org/c/openstack/ironic/+/89657022:47
opendevreviewJulia Kreger proposed openstack/ironic master: Redfish UefiHttp boot support  https://review.opendev.org/c/openstack/ironic/+/90096423:03
opendevreviewJulia Kreger proposed openstack/ironic master: Add HTTP versions of network boot interfaces  https://review.opendev.org/c/openstack/ironic/+/90096523:03
opendevreviewJulia Kreger proposed openstack/ironic master: Log upon completion of power sync  https://review.opendev.org/c/openstack/ironic/+/89133423:06
opendevreviewJulia Kreger proposed openstack/ironic master: docs: add distribution specific chain of trust warning around grub  https://review.opendev.org/c/openstack/ironic/+/90459723:24
opendevreviewJulia Kreger proposed openstack/ironic master: Make bandit voting on check and gate  https://review.opendev.org/c/openstack/ironic/+/87949823:31

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!