summaryrefslogtreecommitdiff
path: root/zuul.d
Commit message (Collapse)AuthorAgeFilesLines
* Add a non-voting metal3 CI jobDmitry Tantsur2023-03-062-0/+32
| | | | | | | We'll use only one node as we're limited in resources but that should suffice for a basic test. Change-Id: I8e845d46ba0e13027aa1e628b0ad45eb24f9b387
* [CI] Swap anaconda urlsJulia Kreger2023-01-261-3/+3
| | | | | | | | The anaconda job is failing as were getting a redirect issued back upon attempting to validate URLs. The servers are now directing us to use HTTPS instead. Change-Id: Iac8e6e58653ac616250f4ce3ab3ae7f5164e5b03
* Merge "CI: Reset VM footprint to 2.6GB"Zuul2023-01-111-1/+1
|\
| * CI: Reset VM footprint to 2.6GBJulia Kreger2023-01-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | This commit partially reverts change set I0bfef09a5312a17be54ce5c09805f06b7c349026 where the amount of memory for test VMs was increased to 4GB. This was because excess junk getting stuck in the staged ramdisk images used by CI. Change-Id: Ia0c74cbeecdb9febf9f7a4e76db84e0f378a97fc
* | Use centos grub artifacts with centos ramdisk for vmediaJulia Kreger2023-01-031-0/+3
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It appears we are getting an opcode error when attempting to boot Centos 9-stream utilizing the EFI artifacts from Ubuntu. Technically this should work, however further aftifacts in the boot chain may be signed with other key credentials that Ubuntu's grub does not know about, because the chain of trust is MSFT -> Vendor shim (slow change rate) -> Vendor GRUB -> Kernel Where vendor differences should never work, is if Secure Boot is enforcing. Exception on launch: X64 Exception Type - 06(#UD - Invalid Opcode) CPU Apic ID - 00000000 !!!! A similar Debian bug is open for a very similar issue: https://groups.google.com/g/linux.debian.bugs.dist/c/BOiLLeROrmo However, no additional comments or information have been in follow up to that reported issue. So in the mean time, we're going to try and do what those smarter than I recommend, use the vendor's binaries for their distribution. There is one further, potentially far more depressing possibility, that centos9's kernel doesn't support the type of hardware we're getting. This is suggested by the precise opcode error, UD, https://xem.github.io/minix86/manual/intel-x86-and-64-manual-vol3/o_fe12b1e2a880e0ce-212.html But again, easiest possibility first. Change-Id: Id9bd30bc3c2f1076555317e4a3f277725fa7c1f4
* Fix CIRiccardo Pittau2022-12-291-2/+1
| | | | | | | | | | | - Remove skipsdist that it was never supported and causes breakage when used with usedevelop. - add script to allowlist for pep8 test - disable setuptools autodiscovery - Increase base VM memory according to new requirements for CS9 based IPA Change-Id: I0bfef09a5312a17be54ce5c09805f06b7c349026
* Ironic doesn't use metering; don't start it in CIJay Faulkner2022-12-131-1/+0
| | | | | | | We don't use metering. We do use every byte of ram we can get our hands on. Change-Id: I839c7fd4cb6fe8661a25e6b4e00650575ae17520
* [grenade] Explicitly enable Neutron ML2/OVS services in the CI jobSławek Kapłoński2022-12-091-0/+13
| | | | | | | | | | | | | As with [1] basic grenade job will be switched to run with OVN as Neutron backend, which is default in Devstack, we need to explicitly disable ML2/OVN neutron services in the ironic-grenade job and use ML2/OVS related services in that job. Depends-On: https://review.opendev.org/c/openstack/devstack/+/867065 [1] https://review.opendev.org/c/openstack/grenade/+/862475 Change-Id: I2ef96d1b3e19004f05253dfae508e9f07ae58f63
* Cross test sushy with python 3.10Riccardo Pittau2022-10-201-2/+4
| | | | | | We don't test python 3.8 anymore in antelope Change-Id: I4748f14f7a75ae9da204ffafb61c8e495822f040
* Switch to 2023.1 Python3 unit tests and generic template nameOpenStack Release Bot2022-09-231-2/+2
| | | | | | | | | | | | This is an automatically generated patch to ensure unit testing is in place for all the of the tested runtimes for antelope. Also, updating the template name to generic one. See also the PTI in governance [1]. [1]: https://governance.openstack.org/tc/reference/project-testing-interface.html Change-Id: Ie1e2138b16929c204235e459df5f9c26885140ab
* CI: Changes to support Anaconda CI jobsJulia Kreger2022-09-062-0/+44
| | | | | | | | | | | Introduces additional job configuration to enable automated integration testing via tempest of the anaconda deployment interface. Also, configures a private subnet with DNS, which is required by anaconda executing, in order to facilitate processing of URLs. Change-Id: I61b5205cf2c9f83dfcabf4314247c76fb6a56acd
* Finally remove support for netboot and the boot_option capabilityDmitry Tantsur2022-08-021-13/+0
| | | | | | | | | | | Instance network boot (not to be confused with ramdisk, iSCSI or anaconda deploy methods) is insecure, underused and difficult to maintain. This change removes a lot of related code from Ironic. The so called "netboot fallback" is still supported for legacy boot when boot device management is not available or is unreliable. Change-Id: Ia8510e4acac6dec0a1e4f5cb0e07008548a00c52
* CI: Pull in diskimage-builder until new release is cutJulia Kreger2022-06-301-0/+2
| | | | Change-Id: I88a4863cd24258eb0b395303738c23e3468615c0
* Merge "Remove netboot jobs from the gate"Zuul2022-06-252-30/+22
|\
| * Remove netboot jobs from the gateDmitry Tantsur2022-05-312-30/+22
| | | | | | | | | | | | | | Netboot option will be removed soon, this change stops covering it. Some jobs have been renamed to reflect the new reality. Change-Id: I7e248c3deb4778fcf59bc64821833987653fbbcd
* | Merge "Use bifrost on centos9 integration job"Zuul2022-06-241-1/+1
|\ \
| * | Use bifrost on centos9 integration jobRiccardo Pittau2022-06-161-1/+1
| | | | | | | | | | | | | | | | | | We don't support CentOS Stream 8 anymore. Change-Id: I90f20395afbb5e4299dc807288d4a44863d56768
* | | Merge "Swap the metalsmith UEFI job for a legacy one"Zuul2022-06-221-2/+2
|\ \ \ | |/ / |/| / | |/
| * Swap the metalsmith UEFI job for a legacy oneDmitry Tantsur2022-05-171-2/+2
| | | | | | | | | | | | | | | | UEFI is well covered by existing jobs, while the legacy job is covering calling install_bootloader. Depends-On: https://review.opendev.org/c/openstack/metalsmith/+/841911 Change-Id: I18c5334a52591f3d8ccced15aee8eb332121dded
* | Merge "CI: Removing ironic job queue"Zuul2022-05-261-1/+0
|\ \
| * | CI: Removing ironic job queueJulia Kreger2022-05-191-1/+0
| |/ | | | | | | | | Change-Id: Idf7991d8f8a8cebcdc0413f26ad31542f8ffa8a8 See: https://zuul-ci.org/docs/zuul/latest/releasenotes.html#relnotes-4-1-0-deprecation-notes
* | devstack: use CentOS 9 for DIB IPA buildsDmitry Tantsur2022-05-251-1/+1
|/ | | | | | | | | | | Additionally bumps CPU model to host-model as centos9 builds now require a subset of CPU processors which include advanced features. Host-model also allows for the VM to still start when running with pure qemu, as opposed to KVM passthrough. https://developers.redhat.com/blog/2021/01/05/building-red-hat-enterprise-linux-9-for-the-x86-64-v2-microarchitecture-level#architectural_considerations_for_rhel_9 Change-Id: Ic261efd4bf6f5929687df5e7b1b51b541554af18
* Merge "Fix names of two jobs"Zuul2022-05-092-7/+7
|\
| * Fix names of two jobsRiccardo Pittau2022-04-202-7/+7
| | | | | | | | | | | | | | | | | | | | | | Making jobs names less misleading This should impact sushy and sushy-tools only sushy change https://review.opendev.org/c/openstack/sushy/+/838662 sushy-tools change https://review.opendev.org/c/openstack/sushy-tools/+/838664 Change-Id: I83f3ac7ddc0662e32c205cd8ec0fab073aeaec56
* | Merge "Fix v6 CI job - Return it to normal non-voting status"Zuul2022-05-052-4/+12
|\ \
| * | Fix v6 CI job - Return it to normal non-voting statusJulia Kreger2022-05-042-4/+12
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Fixes the IPv6 job by utilizing HOST_IPV6 instead of SERVICE_IPV6, as Devstack now automatically wraps SERVICE_IPV6 with brackets as if it is for a URL. * Locks ipv6 job to bios mode. Ubuntu Focal OVMF/EDK2 does not support IPv6 PXE boot by default. * Split from Devstack in terms of IP usage, since full explicit V6 usage is not a thing anymore. 4+6 is the default in devstack and regardless of what we set on the job we see both now used. So we delineate apart our usage for our own sanity. * Reduce VM Interface count for IPv6 in an attempt to eliminate in-kernel routing confusion by two interfaces on the same physical network. * Set IPv6 mode to dhcpv6-stateless due to fun issues in dhcp clients. When we move to UEFI, this will need to be changed to stateful as stateless is not supported in general by OVMF/E2DK. Once the job has run in normal non-voting for a while, and we ensure that it seems to be stable, we can make it voting again. Change-Id: Ia833bfb64c6c3cc8e48cbe34ed200536652a8adf
* | Drop lower-constraints.txt and its testingGhanshyam Mann2022-04-301-1/+0
|/ | | | | | | | | | | | | As discussed in TC PTG[1] and TC resolution[2], we are dropping the lower-constraints.txt file and its testing. We will keep lower bounds in the requirements.txt file but with a note that these are not tested lower bounds and we try our best to keep them updated. [1] https://etherpad.opendev.org/p/tc-zed-ptg#L326 [2] https://governance.openstack.org/tc/resolutions/20220414-drop-lower-constraints.html#proposal Change-Id: Ide6b3e9d6c1171f1ae568c256a3e9affa45de17b
* Grenade: Change to use bios because we have funky networkingJulia Kreger2022-04-041-0/+4
| | | | | | | | | | | | | | | | | | Grenade, for some confusing reason, creates a separate network, and uses that for upgrade testing as opposed to the original network the VMs were bound to. If Julia's memory is correct, this was for multinode upgrade testing. Anyway, When in UEFI mode, it appears that the TFTP packets don't get tracked nor cross the boundrary. We likley need to explicitly address this, but first, lets get the job working as it was and can then update it. Also, update requirements because markupsafe removed soft_unicode method taht was deprecated since a while. Jinja2 started using the new soft_str method since version 3.0.0 Change-Id: Iaebe966569962b0d3d43774d57b570469479f159
* Add Python3 zed unit testsOpenStack Release Bot2022-03-241-2/+2
| | | | | | | | | | | This is an automatically generated patch to ensure unit testing is in place for all the of the tested runtimes for zed. See also the PTI in governance [1]. [1]: https://governance.openstack.org/tc/reference/project-testing-interface.html Change-Id: I7ac9a2c84d60ca722e2343a5ca21d8c8b2b1ba71
* Deprecate instance network bootDmitry Tantsur2022-02-231-1/+1
| | | | | | | It's insecure and not very popular. See this post for details: http://lists.openstack.org/pipermail/openstack-discuss/2021-December/026224.html Change-Id: I9a2df47bb8c08cc991b3c615a9eb533aba3171f4
* CI: force config drive on the multinode job's subnodeDmitry Tantsur2022-02-211-0/+1
| | | | | | | We need configdrives to pass information reliably, and the new cirros image does not work without them. Change-Id: I6cafa050d5c1c8289483f968d26c50485fd4528a
* Merge "CI: use a custom cirros partition image instead of the default"Zuul2022-02-161-5/+1
|\
| * CI: use a custom cirros partition image instead of the defaultDmitry Tantsur2022-02-161-5/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Cirros partition images are not compatible with local boot since they don't ship grub (nor a normal root partition). This change adds a script that builds a partition image with UEFI artifacts present. It still cannot be booted in legacy mode, but it's a progress. Set the tempest plugin's partition_netboot option. We need it to inform the tempest plugin about the ability to do local boot. This option already exists but is never set. Also set the new default_boot_option parameter, which will be introduced and used in Iaba563a2ecbca029889bc6894b2a7f0754d27b88. Remove netboot from most of the UEFI jobs. Change-Id: I15189e7f5928126c6b336b1416ce6408a4950062
* | Clean up jobs with legacy namesDmitry Tantsur2022-02-032-9/+9
|/ | | | | | | | | | Not everyone on the team even knows what pxe_ipmitool used to mean :) Furthermore, we don't need "ipa" in job names, everything uses IPA for... even longer than pxe_ipmitool does not exist. While here, one job was clearly meant to use BIOS boot, but it does not. Change-Id: I8a37efa0f222361f30ddb7fa621548685a40f961
* Re-enable the standalone jobDmitry Tantsur2022-02-011-5/+2
| | | | Change-Id: Ieefdfc0ec287b5fed42f7c7d6d213cbd2f8cd927
* Avoid non-Stream CentOS and temporary disable the standalone jobDmitry Tantsur2022-01-311-2/+5
| | | | | | | The standalone job is failing because of a bug in IPA. To fix it we need to make DIB jobs operational, and they're failing because of CentOS repos. Change-Id: I8bd051ea709d328cb5efa2c2cbd5a226bdb4cfd3
* Merge "CI: reduce api worker processes to 1"Zuul2021-12-121-0/+4
|\
| * CI: reduce api worker processes to 1Julia Kreger2021-12-081-0/+4
| | | | | | | | | | | | | | | | | | | | | | CI is memory intensive, and we realistically don't need 2 or more API workers running for every single WSGI process which does not implement it's own specific override value. This should reduce the memory footprint by an average of six processes which consume 60-90 MB each. Change-Id: Ia0a986152c2b9fc9c5ff54cf698a351db452fbbd
* | CI: Lower test VM memory by 200MB19.0.0Julia Kreger2021-12-081-1/+1
|/ | | | | | We're seeing OOM events in CI, hopefully this helps. Change-Id: Id8c0e4830011ca2fa526df461ed5b9b01f769cf9
* devstack: provide a default for OS_CLOUDDmitry Tantsur2021-12-081-12/+0
| | | | | | Not having it breaks the inspector grenade job. Change-Id: I7ee28a85cb2005dd69e6711b301cd029b8ca40cc
* Add a unit test job with Sushy from sourceDmitry Tantsur2021-11-252-0/+26
| | | | | | | The final goal is to run it on sushy itself to make sure there are no regressions. Change-Id: I6f4bee9a3fa439b1477c41c82304652a801ea55e
* CI: Fix devstack plugin with RBAC changesJulia Kreger2021-11-191-0/+12
| | | | | | | | | | | | | | | | | | | | Changes a neutron call to be project scoped as system scoped can't create a resource and, and removes the unset which no longer makes sense now that I86ffa9cd52454f1c1c72d29b3a0e0caa3e44b829 has merged removing the legacy vars from devstack. Also renames intenral use setting of OS_CLOUD to IRONIC_OS_CLOUD as some services were still working with system scope or some sort of mixed state occuring previously as some of the environment variables were present still, however they have been removed from devstack. This change *does* explicitly set an OS_CLOUD variable as well on the base ironic job. This is because things like grenade for Xena will expect the variable to be present. Depends-On: https://review.opendev.org/c/openstack/devstack/+/818449 Change-Id: I912527d7396a9c6d8ee7e90f0c3fd84461d443c1
* Yoga: Change default boot mode to uefiJulia Kreger2021-10-041-11/+27
| | | | | | | | Change the default boot mode to UEFI, as discussed during the end of the Wallaby release cycle and previously agreed a very long time ago by the Ironic community. Change-Id: I6d735604d56d1687f42d0573a2eed765cbb08aec
* Add Python3 yoga unit testsOpenStack Release Bot2021-09-221-2/+2
| | | | | | | | | | | This is an automatically generated patch to ensure unit testing is in place for all the of the tested runtimes for yoga. See also the PTI in governance [1]. [1]: https://governance.openstack.org/tc/reference/project-testing-interface.html Change-Id: I1972b0a70173a259d72a8f9d1a2df4221038ac61
* Disable Neutron firewallJulia Kreger2021-09-201-0/+5
| | | | | | | | | | | | | | | Neutron's firewall initialization with OVS seems to be the source of our pain with ports not being found by ironic jobs. This is because firewall startup errors crashes out the agent with a RuntimeError while it is deep in it's initial __init__ sequence. This ultimately seems to be rooted with communication with OVS itself, but perhaps the easiest solution is to just disable the firewall.... Related: https://bugs.launchpad.net/neutron/+bug/1944201 Change-Id: I303989a825a7e35f1cb7b401134fd63553f6791c
* Dial back gate job memory allocationJulia Kreger2021-09-151-1/+1
| | | | | | | | | | | | | | | | | Observed an OOM incident causing ironic-tempest-ipa-partition-pxe_ipmitool to fail. One vm started, the other seemed to try to start twice, but both times stopped shortly into the run and the base OS had recorded in it an OOM failure. It appears the actual QEMU memory footprint being consumed when configured at 3GB is upwards of 4GB, which obviously is too big to fit in our 8GB VM instance. Dialing back slightly, in hopes it stabilizes the job. Change-Id: Id8cef722ed305e96d89b9960a8f60f751f900221
* Set postgresql password encryption for FIPS complianceSteve Baker2021-08-051-1/+0
| | | | | | | This is part of the work to add jobs which confirm ironic works with FIPS enabled, but this change is also appropriate non-FIPS jobs. Change-Id: I4af4e811104088d28d7be6df53c26e72db039e08
* Add lower-constraints job to current development branchRiccardo Pittau2021-07-301-0/+1
| | | | | | | | | | | | | | | The lower-constraints test was removed becuase of an issue where pip could not correctly determine the required packages versions to install, ending in an almost infinite loop that would end up in timeout, failure, and general mayhem. Recently the issue has been fixed and, if properly configured, the lower-constraints test can provide good indication of which minimum versions are required to support the current code. This patch adds the test back to the current development branch. The long term goal is to keep the lower-constraints file in the stable branches, but remove the test job to avoid issues during backports. Change-Id: I5fff32ec5dd1a045116bcf02349650b1f5e3a196
* Merge "Scoped RBAC Devstack Plugin support"Zuul2021-07-212-0/+26
|\
| * Scoped RBAC Devstack Plugin supportJulia Kreger2021-07-152-0/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds support to the ironic devstack plugin to configure ironic to be used in a scope-enforcing mode in line with the Secure RBAC effort. This change also defines two new integration jobs *and* changes one of the existing integration. In these cases, we're testing functional crub interactions, integration with nova, and integration with ironic-inspector. As other services come online with their plugins and devstack code being able to set the appropriate scope enforcement configuration, we will be able to change the overall operating default for all of ironic's jobs and exclude the differences. This effort identified issues in ironic-tempest-plugin, tempest, devstack, and required plugin support in ironic-inspector as well, and is ultimately required to ensure we do not break the Secure RBAC. Luckilly, it all works. Change-Id: Ic40e47cb11a6b6e9915efcb12e7912861f25cae7
View Lorry Controller Status