Bug 1433978 - Ironic Inspector doesn't hand out IPs based on MAC of provisioning interface
Summary: Ironic Inspector doesn't hand out IPs based on MAC of provisioning interface
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-ironic-inspector
Version: 10.0 (Newton)
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Dmitry Tantsur
QA Contact: Raviv Bar-Tal
URL:
Whiteboard: scale_lab
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-03-20 13:43 UTC by Sai Sindhur Malleni
Modified: 2017-03-20 14:48 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-03-20 14:48:36 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Sai Sindhur Malleni 2017-03-20 13:43:13 UTC
Description of problem:
It looks like ironic inspector doesn't hand out IPs to only MACs listed in instackenv.json. It hands out IPs to basically "whoever asks". This is leading to a problem when we have an overcloud already deployed and try to introspect some other nodes to scale up the cloud. Specifically if there are some unused interfaces on the overcloud nodes (they are set to dhcp, as they weren't included in nic-config templates explicitly) and all interfaces of the nodes are in the same QinQ VLAN including the provisioning interface, when we try introspection we see the overcloud nodes stealing the introspection IPs and hence the nodes never PXE.

Version-Release number of selected component (if applicable):
RHOP 10 Puddle 2017-03-03.1

How reproducible:
100%

Steps to Reproduce:
1. Deploy overcloud with nodes that have multiple NICs but use only 1 NIC to deploy
2. Try introspection to scale out cloud with remaining nodes
3.

Actual results:
Nodes never PXE/introspect. Overcloud nodes steal IPs

Expected results:
Nodes should introspect.

Additional info:

Comment 1 Dmitry Tantsur 2017-03-20 14:48:36 UTC
Hi! This is by design. We don't necessary know all the MACs, any MACs or the correct MACs.

By the way, this is the key to your issues:

> all interfaces of the nodes are in the same QinQ VLAN including the provisioning interface

In the production situation you want nothing on the provisioning interface, except for undercloud and provisioning NICs.

Hope that helps.


Note You need to log in before you can comment on or make changes to this bug.