Bug 2129136 - Fix iRMC https certification [OSP 16.2]
Summary: Fix iRMC https certification [OSP 16.2]
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-ironic
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: z5
: 16.2 (Train on RHEL 8.4)
Assignee: OSP Team
QA Contact:
URL:
Whiteboard:
: 2153092 (view as bug list)
Depends On:
Blocks: 1768952 2119228
TreeView+ depends on / blocked
 
Reported: 2022-09-22 16:26 UTC by Lon Hohberger
Modified: 2023-09-19 04:26 UTC (History)
10 users (show)

Fixed In Version: openstack-ironic-13.0.8-2.20221216044846.4d1fa79.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 2129134
: 2129137 (view as bug list)
Environment:
Last Closed: 2023-04-26 12:16:45 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 852806 0 None MERGED Fix iRMC driver to use certification file in HTTPS 2022-09-28 14:23:31 UTC
Red Hat Issue Tracker OSP-18883 0 None None None 2022-09-22 16:54:15 UTC
Red Hat Product Errata RHBA-2023:1763 0 None None None 2023-04-26 12:17:33 UTC

Description Lon Hohberger 2022-09-22 16:26:37 UTC
Description of problem:

The stable/train fix for python-scciclient concerning HTTPS certificate validation requires this change in Ironic in order to work.

Comment 9 Yusuke Okada (fujitsu) 2022-12-02 03:33:09 UTC
Hi,

I verified openstack-ironic-13.0.8-2.20220929054719.d31cae6.el8ost works as expected if I install the following package in the ironic-conductor container.

- python3-packaging

So, please include python3-packaging in the ironic-conductor container.

Could you release this fix in 16.2 z4?

Best regards,
Yusuke Okada

Comment 11 Julia Kreger 2022-12-05 13:43:33 UTC
Unfortunately, I believe that will need to wait until Z5. I'll follow-up with the team later today.

Comment 19 tsaito 2023-01-26 00:50:39 UTC
*** Bug 2153092 has been marked as a duplicate of this bug. ***

Comment 20 Yusuke Okada (fujitsu) 2023-02-22 23:35:36 UTC
Hi Jingjing,

I tried the ironic-conductor in the DCI topic RHOS-16.2-RHEL-8-20230209.n.1, but it didn't work.

The following message appeared.

```
2023-02-22 18:18:15.912 7 ERROR oslo_service.service [req-d1b2c785-d104-481c-953e-e6b305eae721 - - - - -] Error starting thread.: ironic.common.exception.DriverLoadError: Driver, hardware type or interface irmc could not be loaded. Reason: No module named 'packaging'.
2023-02-22 18:18:15.912 7 ERROR oslo_service.service Traceback (most recent call last):
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/stevedore/extension.py", line 195, in _load_plugins
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     verify_requirements,
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/stevedore/named.py", line 158, in _load_one_plugin
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     verify_requirements,
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/stevedore/extension.py", line 223, in _load_one_plugin
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     plugin = ep.resolve()
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2324, in resolve
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     module = __import__(self.module_name, fromlist=['__name__'], level=0)
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/ironic/drivers/irmc.py", line 24, in <module>
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     from ironic.drivers.modules.irmc import bios
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/ironic/drivers/modules/irmc/bios.py", line 24, in <module>
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     from ironic.drivers.modules.irmc import common as irmc_common
2023-02-22 18:18:15.912 7 ERROR oslo_service.service   File "/usr/lib/python3.6/site-packages/ironic/drivers/modules/irmc/common.py", line 23, in <module>
2023-02-22 18:18:15.912 7 ERROR oslo_service.service     from packaging import version
2023-02-22 18:18:15.912 7 ERROR oslo_service.service ModuleNotFoundError: No module named 'packaging'
```

The container image 36cf8d1e9a82 includes openstack-ironic-common-13.0.8-2.20220929054719.d31cae6.el8ost.noarch. It is old one.

```
 [root@dci162e2d ~]# podman inspect ironic_conductor | jq .[].Image
"36cf8d1e9a82166ba9567e0a5a4a40e3476cfb9cd8b1467e65fed6ae06e562ee"
 [root@dci162e2d ~]# podman exec -it ironic_conductor cat /usr/lib/python3.6/site-packages/ironic/drivers/modules/irmc/common.py | grep pack
from packaging import version
 [root@dci162e2d ~]# podman exec -it ironic_conductor rpm -qa | grep ironic-common
openstack-ironic-common-13.0.8-2.20220929054719.d31cae6.el8ost.noarch
```

Could you check and update the topic?

Best regards,
Yusuke Okada

Comment 23 Julia Kreger 2023-02-27 16:19:11 UTC
(In reply to Yusuke Okada (fujitsu) from comment #20)

> I tried the ironic-conductor in the DCI topic RHOS-16.2-RHEL-8-20230209.n.1,
> but it didn't work.

Greetings,

This is because that build is a 16.2.4 build, and not a 16.2.5 build.

-Julia

Comment 26 Yusuke Okada (fujitsu) 2023-03-10 15:27:52 UTC
Hi Jingjing and Julia,

Now the DCI topic RHOS-16.2-RHEL-8-20230301.n.1 is available but it still contains old ironic package.

```
(undercloud) [stack@dci162e2d ~]$ sudo podman inspect ironic_conductor | jq .[].Config.Labels
{
  "architecture": "x86_64",
  "batch": "16.2_20230228.1",
  "build-date": "2023-02-28T23:31:27",
...
  "summary": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "tcib_managed": "true",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/rhosp16/openstack-ironic-conductor/images/16.2.4-15",
  "vcs-ref": "1e45b870c84d2337e5d48cf054f3fdb88e38e00a",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "16.2.4"
}
(undercloud) [stack@dci162e2d ~]$ sudo podman inspect ironic_conductor | jq .[].Image
"8c9a8e3ebacb6c3554b690a2f3e0a6570ca23cd13e7b7b56691f8703ac18483b"
(undercloud) [stack@dci162e2d ~]$ sudo podman exec ironic_conductor rpm -qa | grep ironic-common
openstack-ironic-common-13.0.8-2.20220929054719.d31cae6.el8ost.noarch
```

Jingjing, could you check the DCI component again?

Best regards,
Yusuke Okada

Comment 30 Yusuke Okada (fujitsu) 2023-04-01 01:00:21 UTC
Hi Jingjing and Julia,

I verified the fix with the DCI component RHOS-16.2-RHEL-8-20230324.n.1.

---
[stack@dci162e2d ~]$ sudo podman exec ironic_conductor rpm -qa | grep ironic-common
openstack-ironic-common-13.0.8-2.20221216044846.4d1fa79.el8ost.noarch
[stack@dci162e2d ~]$ sudo podman inspect ironic_conductor | jq .[].Config.Labels
{
  "architecture": "x86_64",
  "batch": "16.2_20230323.1",
  "build-date": "2023-03-24T06:48:50",
  "com.redhat.component": "openstack-ironic-conductor-container",
  "com.redhat.license_terms": "https://www.redhat.com/agreements",
...
  "config_id": "tripleo_step4",
  "container_name": "ironic_conductor",
  "description": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "distribution-scope": "public",
  "io.buildah.version": "1.27.3",
  "io.k8s.description": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "io.k8s.display-name": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "io.openshift.expose-services": "",
  "io.openshift.tags": "rhosp osp openstack osp-16.2",
  "maintainer": "OpenStack TripleO Team",
  "managed_by": "tripleo-Undercloud",
  "name": "rhosp16/openstack-ironic-conductor",
  "release": "1",
  "summary": "Red Hat OpenStack Platform 16.2 ironic-conductor",
  "tcib_managed": "true",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/rhosp16/openstack-ironic-conductor/images/16.2.5-1",
  "vcs-ref": "bf892105dbec36fc6badeddaaad4496972052eeb",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "16.2.5"
}
---

Thank you for providing the fix!

Best regards,
Yusuke Okada

Comment 35 errata-xmlrpc 2023-04-26 12:16:45 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 16.2.5 (Train) bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:1763

Comment 36 Red Hat Bugzilla 2023-09-19 04:26:54 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days


Note You need to log in before you can comment on or make changes to this bug.