Bug 2129136

Summary: Fix iRMC https certification [OSP 16.2]
Product: Red Hat OpenStack Reporter: Lon Hohberger <lhh>
Component: openstack-ironicAssignee: OSP Team <rhos-maint>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: high    
Version: 16.2 (Train)CC: fj-lsoft-ofuku, hjensas, jkreger, jniu, jparoly, jschluet, rhos-maint, sbaker, tsaito, yusokada
Target Milestone: z5Keywords: OtherQA, Triaged
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-ironic-13.0.8-2.20221216044846.4d1fa79.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2129134
: 2129137 (view as bug list) Environment:
Last Closed: 2023-04-26 12:16:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1768952, 2119228    

Description Lon Hohberger 2022-09-22 16:26:37 UTC
Description of problem:

The stable/train fix for python-scciclient concerning HTTPS certificate validation requires this change in Ironic in order to work.

Comment 9 Yusuke Okada (fujitsu) 2022-12-02 03:33:09 UTC
Hi,

I verified openstack-ironic-13.0.8-2.20220929054719.d31cae6.el8ost works as expected if I install the following package in the ironic-conductor container.

- python3-packaging

So, please include python3-packaging in the ironic-conductor container.

Could you release this fix in 16.2 z4?

Best regards,
Yusuke Okada

Comment 11 Julia Kreger 2022-12-05 13:43:33 UTC
Unfortunately, I believe that will need to wait until Z5. I'll follow-up with the team later today.

Comment 19 tsaito 2023-01-26 00:50:39 UTC
*** Bug 2153092 has been marked as a duplicate of this bug. ***

Comment 20 Yusuke Okada (fujitsu) 2023-02-22 23:35:36 UTC
Hi Jingjing,

I tried the ironic-conductor in the DCI topic RHOS-16.2-RHEL-8-20230209.n.1, but it didn't work.

The following message appeared.

```
2023-02-22 18:18:15.912 7 ERROR oslo_service.service [req-d1b2c785-d104-481c-953e-e6b305eae721 - - - - -] Error starting thread.: ironic.common.exception.DriverLoadError: Driver, hardware type or interface irmc could not be loaded. Reason: No module named 'packaging'.
2023-02-22 18:18:15.912 7 ERROR oslo_service.service Traceback (most recent call last):
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/stevedore/extension.py", line 195, in _load_plugins
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     verify_requirements,
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/stevedore/named.py", line 158, in _load_one_plugin
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     verify_requirements,
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/stevedore/extension.py", line 223, in _load_one_plugin
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     plugin = ep.resolve()
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2324, in resolve
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     module = __import__(self.module_name, fromlist=['__name__'], level=0)
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/ironic/drivers/irmc.py", line 24, in <module>
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     from ironic.drivers.modules.irmc import bios
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/ironic/drivers/modules/irmc/bios.py", line 24, in <module>
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     from ironic.drivers.modules.irmc import common as irmc_common
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/ironic/drivers/modules/irmc/common.py", line 23, in <module>
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     from packaging import version
2023-02-22 18:18:15.912 7 ERROR oslo_service.service ModuleNotFoundError: No module named 'packaging'
```

The container image 36cf8d1e9a82 includes openstack-ironic-common-13.0.8-2.20220929054719.d31cae6.el8ost.noarch. It is old one.

```
 [root@dci162e2d ~]# podman inspect ironic_conductor | jq .[].Image
"36cf8d1e9a82166ba9567e0a5a4a40e3476cfb9cd8b1467e65fed6ae06e562ee"
 [root@dci162e2d ~]# podman exec -it ironic_conductor cat /usr/lib/python3.6/site-packages/ironic/drivers/modules/irmc/common.py | grep pack
from packaging import version
 [root@dci162e2d ~]# podman exec -it ironic_conductor rpm -qa | grep ironic-common
openstack-ironic-common-13.0.8-2.20220929054719.d31cae6.el8ost.noarch
```

Could you check and update the topic?

Best regards,
Yusuke Okada

Comment 23 Julia Kreger 2023-02-27 16:19:11 UTC
(In reply to Yusuke Okada (fujitsu) from comment #20)

> I tried the ironic-conductor in the DCI topic RHOS-16.2-RHEL-8-20230209.n.1,
> but it didn't work.

Greetings,

This is because that build is a 16.2.4 build, and not a 16.2.5 build.

-Julia

Comment 26 Yusuke Okada (fujitsu) 2023-03-10 15:27:52 UTC
Hi Jingjing and Julia,

Now the DCI topic RHOS-16.2-RHEL-8-20230301.n.1 is available but it still contains old ironic package.

```
(undercloud) [stack@dci162e2d ~]$ sudo podman inspect ironic_conductor | jq .[].Config.Labels
{
  "architecture": "x86_64",
  "batch": "16.2_20230228.1",
  "build-date": "2023-02-28T23:31:27",
...
  "summary": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "tcib_managed": "true",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/rhosp16/openstack-ironic-conductor/images/16.2.4-15",
  "vcs-ref": "1e45b870c84d2337e5d48cf054f3fdb88e38e00a",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "16.2.4"
}
(undercloud) [stack@dci162e2d ~]$ sudo podman inspect ironic_conductor | jq .[].Image
"8c9a8e3ebacb6c3554b690a2f3e0a6570ca23cd13e7b7b56691f8703ac18483b"
(undercloud) [stack@dci162e2d ~]$ sudo podman exec ironic_conductor rpm -qa | grep ironic-common
openstack-ironic-common-13.0.8-2.20220929054719.d31cae6.el8ost.noarch
```

Jingjing, could you check the DCI component again?

Best regards,
Yusuke Okada

Comment 30 Yusuke Okada (fujitsu) 2023-04-01 01:00:21 UTC
Hi Jingjing and Julia,

I verified the fix with the DCI component RHOS-16.2-RHEL-8-20230324.n.1.

---
[stack@dci162e2d ~]$ sudo podman exec ironic_conductor rpm -qa | grep ironic-common
openstack-ironic-common-13.0.8-2.20221216044846.4d1fa79.el8ost.noarch
[stack@dci162e2d ~]$ sudo podman inspect ironic_conductor | jq .[].Config.Labels
{
  "architecture": "x86_64",
  "batch": "16.2_20230323.1",
  "build-date": "2023-03-24T06:48:50",
  "com.redhat.component": "openstack-ironic-conductor-container",
  "com.redhat.license_terms": "https://www.redhat.com/agreements",
...
  "config_id": "tripleo_step4",
  "container_name": "ironic_conductor",
  "description": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "distribution-scope": "public",
  "io.buildah.version": "1.27.3",
  "io.k8s.description": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "io.k8s.display-name": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "io.openshift.expose-services": "",
  "io.openshift.tags": "rhosp osp openstack osp-16.2",
  "maintainer": "OpenStack TripleO Team",
  "managed_by": "tripleo-Undercloud",
  "name": "rhosp16/openstack-ironic-conductor",
  "release": "1",
  "summary": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "tcib_managed": "true",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/rhosp16/openstack-ironic-conductor/images/16.2.5-1",
  "vcs-ref": "bf892105dbec36fc6badeddaaad4496972052eeb",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "16.2.5"
}
---

Thank you for providing the fix!

Best regards,
Yusuke Okada

Comment 35 errata-xmlrpc 2023-04-26 12:16:45 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 16.2.5 (Train) bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:1763

Comment 36 Red Hat Bugzilla 2023-09-19 04:26:54 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days