Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1433978

Summary:	Ironic Inspector doesn't hand out IPs based on MAC of provisioning interface
Product:	Red Hat OpenStack	Reporter:	Sai Sindhur Malleni <smalleni>
Component:	openstack-ironic-inspector	Assignee:	Dmitry Tantsur <dtantsur>
Status:	CLOSED WONTFIX	QA Contact:	Raviv Bar-Tal <rbartal>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	10.0 (Newton)	CC:	mburns, slinaber
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	scale_lab
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-03-20 14:48:36 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Sai Sindhur Malleni 2017-03-20 13:43:13 UTC

Description of problem:
It looks like ironic inspector doesn't hand out IPs to only MACs listed in instackenv.json. It hands out IPs to basically "whoever asks". This is leading to a problem when we have an overcloud already deployed and try to introspect some other nodes to scale up the cloud. Specifically if there are some unused interfaces on the overcloud nodes (they are set to dhcp, as they weren't included in nic-config templates explicitly) and all interfaces of the nodes are in the same QinQ VLAN including the provisioning interface, when we try introspection we see the overcloud nodes stealing the introspection IPs and hence the nodes never PXE.

Version-Release number of selected component (if applicable):
RHOP 10 Puddle 2017-03-03.1

How reproducible:
100%

Steps to Reproduce:
1. Deploy overcloud with nodes that have multiple NICs but use only 1 NIC to deploy
2. Try introspection to scale out cloud with remaining nodes
3.

Actual results:
Nodes never PXE/introspect. Overcloud nodes steal IPs

Expected results:
Nodes should introspect.

Additional info:

Comment 1 Dmitry Tantsur 2017-03-20 14:48:36 UTC

Hi! This is by design. We don't necessary know all the MACs, any MACs or the correct MACs.

By the way, this is the key to your issues:

> all interfaces of the nodes are in the same QinQ VLAN including the provisioning interface

In the production situation you want nothing on the provisioning interface, except for undercloud and provisioning NICs.

Hope that helps.