Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug 1867165: baremetal: allow configuring bootstrap mac addresses #4052

Merged
merged 1 commit into from
Nov 10, 2020

Conversation

stbenjam
Copy link
Member

If users are unable to define the mac addresses for the bootstrap host,
they won't be able to set static DHCP reservations for the host. Many
corporate environments do not allow unrestricted DHCP.

@stbenjam
Copy link
Member Author

/label platform/baremetal

@openshift-ci-robot openshift-ci-robot added platform/baremetal IPI bare metal hosts platform bugzilla/severity-high Referenced Bugzilla bug's severity is high for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. labels Aug 13, 2020
@openshift-ci-robot
Copy link
Contributor

@stbenjam: This pull request references Bugzilla bug 1867165, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target release (4.6.0) matches configured target release for branch (4.6.0)
  • bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)

In response to this:

Bug 1867165: baremetal: allow configuring bootstrap mac addresses

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@stbenjam stbenjam changed the title Bug 1867165: baremetal: allow configuring bootstrap mac addresses [WIP] Bug 1867165: baremetal: allow configuring bootstrap mac addresses Aug 13, 2020
@openshift-ci-robot openshift-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 13, 2020
@abhinavdahiya
Copy link
Contributor

Also IMO this is not a change that we should be doing in code freeze-reduce bugs cycle. The attached bug is not a bug rather a feature request and should probably be prioritized through our JIRA processes.

@stbenjam
Copy link
Member Author

Also IMO this is not a change that we should be doing in code freeze-reduce bugs cycle. The attached bug is not a bug rather a feature request and should probably be prioritized through our JIRA processes.

The platform is unusable in some environments without this which IMHO makes it a bug -- accessing hardware BMC's (baseboard management controllers) is something you want to restrict and you can't without being able to assign a specific IP to the bootstrap.

This is even more important in light of #3929, as a user installing without a provisioning network no longer has a dedicated, private provisioning network.

/cc @celebdor

@hardys
Copy link
Contributor

hardys commented Aug 18, 2020

The platform is unusable in some environments without this which IMHO makes it a bug -- accessing hardware BMC's (baseboard management controllers) is something you want to restrict and you can't without being able to assign a specific IP to the bootstrap.

I agree, this is a usability bug since we know the installer won't work in environments that don't allow DHCP pools without explicit reservations.

@stbenjam
Copy link
Member Author

/test e2e-metal-ipi

@dhellmann
Copy link
Contributor

/approve
/retest

@stbenjam stbenjam changed the title [WIP] Bug 1867165: baremetal: allow configuring bootstrap mac addresses Bug 1867165: baremetal: allow configuring bootstrap mac addresses Oct 28, 2020
@openshift-ci-robot openshift-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Oct 28, 2020
@stbenjam
Copy link
Member Author

stbenjam commented Nov 5, 2020

/refresh

@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Nov 5, 2020

@stbenjam: The following tests failed, say /retest to rerun all failed tests:

Test name Commit Details Rerun command
ci/prow/e2e-openstack 23ff904 link /test e2e-openstack
ci/prow/e2e-crc cae0b88 link /test e2e-crc
ci/prow/e2e-ovirt cae0b88 link /test e2e-ovirt

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@hardys
Copy link
Contributor

hardys commented Nov 5, 2020

/approve

@hardys
Copy link
Contributor

hardys commented Nov 5, 2020

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Nov 5, 2020
@dhellmann
Copy link
Contributor

/approve

@stbenjam
Copy link
Member Author

stbenjam commented Nov 5, 2020

This needs an installer team member to approve, as we're touching a few files outside our directories (e.g., data/data/install.openshift.io_installconfigs.yaml)

/assign @abhinavdahiya @staebler

Copy link
Contributor

@staebler staebler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine to me. I just have a couple nits.

pkg/types/baremetal/validation/libvirt.go Outdated Show resolved Hide resolved
pkg/types/baremetal/platform.go Outdated Show resolved Hide resolved
pkg/types/baremetal/platform.go Outdated Show resolved Hide resolved
pkg/types/baremetal/platform.go Outdated Show resolved Hide resolved
@openshift-ci-robot openshift-ci-robot removed the lgtm Indicates that a PR is ready to be merged. label Nov 10, 2020
If users are unable to define the mac addresses for the bootstrap host,
they won't be able to set static DHCP reservations for the host. Many
corporate environments do not allow unrestricted DHCP.

Co-authored-by: Matthew Staebler <staebler@redhat.com>
Copy link
Contributor

@staebler staebler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Nov 10, 2020
@openshift-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dhellmann, hardys, staebler

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci-robot openshift-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 10, 2020
@openshift-bot
Copy link
Contributor

/retest

Please review the full test history for this PR and help us cut down flakes.

@openshift-merge-robot
Copy link
Contributor

@stbenjam: The following tests failed, say /retest to rerun all failed tests:

Test name Commit Details Rerun command
ci/prow/e2e-ovirt 5556d62 link /test e2e-ovirt
ci/prow/e2e-aws-fips 5556d62 link /test e2e-aws-fips
ci/prow/e2e-crc 5556d62 link /test e2e-crc

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@openshift-merge-robot openshift-merge-robot merged commit 0af1061 into openshift:master Nov 10, 2020
@openshift-ci-robot
Copy link
Contributor

@stbenjam: All pull requests linked via external trackers have merged:

Bugzilla bug 1867165 has been moved to the MODIFIED state.

In response to this:

Bug 1867165: baremetal: allow configuring bootstrap mac addresses

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@stbenjam stbenjam deleted the mac branch November 10, 2020 21:11
hardys pushed a commit to hardys/installer that referenced this pull request Jul 28, 2021
In openshift#4052 we added interfaces to control the MAC addresses for the
NICs in the bootstrap VM, so that in environments where DHCP pools
are not allowed, a static reservation can be made.

Unfortunately that doesn't work in ipv6 environments currently,
because NetworkManager needs a specific configuration similar to
that applied via the MCO[1] for cluster hosts to ensure the
generated client-ID is derived from the MAC and predictable.

[1] https://github.com/openshift/machine-config-operator/blob/master/templates/common/on-prem/files/NetworkManager-onprem.conf.yaml
openshift-cherrypick-robot pushed a commit to openshift-cherrypick-robot/installer that referenced this pull request Sep 29, 2021
In openshift#4052 we added interfaces to control the MAC addresses for the
NICs in the bootstrap VM, so that in environments where DHCP pools
are not allowed, a static reservation can be made.

Unfortunately that doesn't work in ipv6 environments currently,
because NetworkManager needs a specific configuration similar to
that applied via the MCO[1] for cluster hosts to ensure the
generated client-ID is derived from the MAC and predictable.

[1] https://github.com/openshift/machine-config-operator/blob/master/templates/common/on-prem/files/NetworkManager-onprem.conf.yaml
AnnaZivkovic pushed a commit to AnnaZivkovic/installer that referenced this pull request Apr 1, 2022
In openshift#4052 we added interfaces to control the MAC addresses for the
NICs in the bootstrap VM, so that in environments where DHCP pools
are not allowed, a static reservation can be made.

Unfortunately that doesn't work in ipv6 environments currently,
because NetworkManager needs a specific configuration similar to
that applied via the MCO[1] for cluster hosts to ensure the
generated client-ID is derived from the MAC and predictable.

[1] https://github.com/openshift/machine-config-operator/blob/master/templates/common/on-prem/files/NetworkManager-onprem.conf.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. bugzilla/severity-high Referenced Bugzilla bug's severity is high for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. lgtm Indicates that a PR is ready to be merged. platform/baremetal IPI bare metal hosts platform
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants