Merge pull request #1359 from rackerlabs/update-enroll

feat: update enroll and resource class assignment to new hardware categorization

Author: cardoe

.github/workflows/containers.yaml

@@ -124,7 +124,6 @@ jobs:
         # if you add a container here, add it to the 'clean_containers' job below
         container:
           - name: ironic-nautobot-client
-          - name: nova-flavors
           - name: ansible
           - name: understack-tests
 
@@ -186,7 +185,6 @@ jobs:
           - openstack-client
           - dnsmasq
           - ironic-nautobot-client
-          - nova-flavors
           - ansible
           - understack-tests
 

components/ironic/values.yaml

@@ -88,7 +88,7 @@ conf:
       loader_file_paths: "snponly.efi:/usr/lib/ipxe/snponly.efi"
     inspector:
       extra_kernel_params: ipa-collect-lldp=1
-      hooks: "$default_hooks,parse-lldp,local-link-connection,physical-network"
+      hooks: "$default_hooks,parse-lldp,local-link-connection,physical-network,resource-class"
     # enable sensors and metrics for redfish metrics - https://docs.openstack.org/ironic/latest/admin/drivers/redfish/metrics.html
     sensor_data:
       send_sensor_data: true
@@ -217,6 +217,8 @@ pod:
             mountPath: /var/lib/dnsmasq/
           - name: understack-data
             mountPath: /var/lib/understack
+          - name: device-types
+            mountPath: /var/lib/understack/device-types
           - name: ironic-etc-snippets
             mountPath: /etc/ironic/ironic.conf.d
             readOnly: true
@@ -230,6 +232,9 @@ pod:
           - name: understack-data
             persistentVolumeClaim:
               claimName: understack-data
+          - name: device-types
+            configMap:
+              name: device-types
           - name: ironic-etc-snippets
             projected:
               sources:

components/openstack/templates/automation-baremetal-manage.yaml.tpl

@@ -0,0 +1,47 @@
+---
+apiVersion: generators.external-secrets.io/v1alpha1
+kind: Password
+metadata:
+  name: "baremetal-manage-{{ .Values.regionName }}"
+spec:
+  length: 32
+  digits: 6
+  symbols: 4
+  symbolCharacters: "~!@#$%^*()_+-={}[]<>?"
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: "baremetal-manage-{{ .Values.regionName }}"
+spec:
+  refreshInterval: 20160m
+  target:
+    name: baremetal-manage
+    template:
+      engineVersion: v2
+      type: Opaque
+      metadata:
+        labels:
+          understack.rackspace.com/keystone-role: infra-readwrite
+          understack.rackspace.com/keystone-user: "baremetal-manage-{{ .Values.regionName }}"
+      data:
+        password: "{{ `{{ .password }}` }}"
+        clouds.yaml: |
+          clouds:
+            understack:
+              auth:
+                auth_url: "{{ .Values.keystoneUrl }}"
+                user_domain_name: "service"
+                username: "baremetal-manage-{{ .Values.regionName }}"
+                password: "{{ `{{ .password }}` }}"
+                project_domain_name: "infra"
+                project_name: "baremetal"
+              region_name: "{{ .Values.regionName }}"
+              interface: "public"
+              identity_api_version: 3
+  dataFrom:
+  - sourceRef:
+      generatorRef:
+        apiVersion: generators.external-secrets.io/v1alpha1
+        kind: Password
+        name: "baremetal-manage-{{ .Values.regionName }}"

components/openstack/templates/secretstore-openstack.yaml.tpl

@@ -25,6 +25,7 @@ rules:
   - list
   - watch
   resourceNames:
+  - baremetal-manage
   - svc-acct-argoworkflow
   - svc-acct-netapp
   - cinder-netapp-config