-
- Downloads
Support authentication in Bifrost
* Switch from python-ironic-inspector-client to openstacksdk in ironic-inspector-rules. This allows us to use clouds.yaml to provide credentials. * Enable authentication in Bifrost. Passwords are auto-generated by Bifrost, and stored files in /root/.config/bifrost/. This change depends on a Kolla Ansible patch that ensures that these credentials are persisted between recreations of the bifrost container. * Copy clouds.yaml and (if present) a CA certificate from the Bifrost container to the seed host, under the Kayobe Ansible user (stack). This allows us to use the credentials to register introspection rules. * This patch is needed by a Kolla Ansible patch that enables TLS in Bifrost, since we need the CA certificate on the host to register introspection rules when TLS is enabled. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/851837 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/851838 Story: 2010206 Task: 45930 Change-Id: I757f1bb72afb01a4f1689bed292f5b71b9048fa0
Showing
- ansible/overcloud-provision.yml 0 additions, 1 deletionansible/overcloud-provision.yml
- ansible/roles/ironic-inspector-rules/README.md 1 addition, 2 deletionsansible/roles/ironic-inspector-rules/README.md
- ansible/roles/ironic-inspector-rules/defaults/main.yml 3 additions, 3 deletionsansible/roles/ironic-inspector-rules/defaults/main.yml
- ansible/roles/ironic-inspector-rules/library/os_ironic_inspector_rule.py 22 additions, 39 deletions...ronic-inspector-rules/library/os_ironic_inspector_rule.py
- ansible/roles/ironic-inspector-rules/tasks/main.yml 1 addition, 11 deletionsansible/roles/ironic-inspector-rules/tasks/main.yml
- ansible/roles/kolla-bifrost/templates/kolla/config/bifrost/bifrost.yml 0 additions, 3 deletions.../kolla-bifrost/templates/kolla/config/bifrost/bifrost.yml
- ansible/seed-credentials.yml 45 additions, 0 deletionsansible/seed-credentials.yml
- ansible/seed-introspection-rules.yml 1 addition, 4 deletionsansible/seed-introspection-rules.yml
- kayobe/cli/commands.py 2 additions, 0 deletionskayobe/cli/commands.py
- kayobe/tests/unit/cli/test_commands.py 4 additions, 0 deletionskayobe/tests/unit/cli/test_commands.py
- releasenotes/notes/seed-clouds-yaml-cbaf1961c5f8ceb0.yaml 9 additions, 0 deletionsreleasenotes/notes/seed-clouds-yaml-cbaf1961c5f8ceb0.yaml
Loading
Please register or sign in to comment