New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support IPA running on top of CoreOS #188
Support IPA running on top of CoreOS #188
Conversation
dtantsur
commented
Jun 28, 2021
•
edited
edited
- Clean up [inspector]extra_kernel_params
- Enable the custom-agent deploy interface
- Allow configuring CoreOS IPA as a new entrypoint
4eb6911
to
211a358
Compare
8e616eb
to
3ea9a8d
Compare
|
||
ROOTFS_FILE=/shared/html/images/ironic-python-agent.rootfs | ||
IGNITION_FILE=/shared/html/ironic-python-agent.ign | ||
ISO_FILE=/shared/html/images/ironic-python-agent.iso |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we make this configurable via argument to the script instead of a hardcoded FFILENAME?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm actually not very particular about the FFILENAME here, but it does make sense that the name is ironic-python-agent
because its a intermediate image. I'll apply the name change to the rhcos-downloader image and test them together.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think not supporting custom names here will make the diff smaller with the upstream version (which does hardcode ironic-python-agent).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So...is the plan to still use the openshift fork of ironic? This has implications in the installer's startironic.sh script and in CBO for day-2 because the way ironic and its dependencies are started varies in metal3 vs. openshift versions.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The openshift fork of ironic will be re-synced with metal3 soon(ish), once Riccardo comes back from PTO.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
there it is #190
3ea9a8d
to
fc95331
Compare
Tested the new entrypoint in isolation locally. Seems to work. |
/retest |
/test e2e-metal-ipi |
This option should contain only parameters unique to inspection. Standard kernel parameters go to boot interface configurations (pxe_append_params, kernel_append_params). Add missing [ilo] configuration since ilo-virtual-media is supported. (cherry picked from commit 97eb7e4)
fc95331
to
d62d790
Compare
I've added two commits from metal3 that are required for this feature to work. |
Required for metal3-io/metal3-docs#180. (cherry picked from commit 8c34ff6)
d62d790
to
c913572
Compare
/retest |
1 similar comment
/retest |
/test prevalidation-e2e-metal-ipi-virtualmedia-prevalidation |
/test e2e-metal-ipi |
Adds a new entrypoint /bin/configure-coreos-ipa to be run as an init container after the images are downloaded.
c913572
to
77332d1
Compare
/retest |
1 similar comment
/retest |
@@ -25,6 +25,8 @@ else | |||
INSPECTOR_EXTRA_ARGS=" ipa-inspection-callback-url=${IRONIC_BASE_URL}:5050/v1/continue" | |||
fi | |||
|
|||
. /bin/coreos-ipa-common.sh |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is a race condition. At least in the installer's startironic.sh script, the way to identify whether an image is fully downloaded, there exists a curl loop to check for finished file. Looks like this statement here is meant to add the kernel params, but when the httpd container is started, the images are not yet downloaded and the kernel params will not be set.
I did move the startup of the httpd container around in my installer fork as a test and it worked fine but it still feels racy.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Don't all containers in a pod wait until initContainers are finished?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah, they're not initContainers in this case. Still, won't this wait work? https://github.com/kirankt/installer/blob/222922cab48056f85fb04716cb40591394200882/data/data/bootstrap/baremetal/files/usr/local/bin/startironic.sh.template#L152
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You're right. That should catch it. But in practice the curl loops have been left in place to confirm whether the download is indeed finished. In my testing too, this has been the case.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You mean, the curl was required in your case? If so, that's a bug we should fix separately, I guess.
/retest |
1 similar comment
/retest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dtantsur, kirankt The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/retest Please review the full test history for this PR and help us cut down flakes. |
10 similar comments
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |
/retest Please review the full test history for this PR and help us cut down flakes. |