-
Notifications
You must be signed in to change notification settings - Fork 23
WIP: SKC baremetal environment #1964
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: stackhpc/2025.1
Are you sure you want to change the base?
Conversation
skc-baremetal-environment
etc/kayobe/environments/stackhpc-baremetal/ansible/provision-overcloud.yml
Outdated
Show resolved
Hide resolved
| # to setup the Kayobe user account. Default is {{ os_distribution }}. | ||
| controller_bootstrap_user: "{{ os_distribution if os_distribution == 'ubuntu' else 'cloud-user' }}" | ||
| #controller_bootstrap_user: "{{ os_distribution if os_distribution == 'ubuntu' else 'cloud-user' }}" | ||
| controller_bootstrap_user: 'rocky' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We need to drop this, I think this is just a work around because your AIO is not using the SKC host image.
We might want to retry with the SKC host image.
| --- | ||
|
|
||
| stackhpc_enable_cis_benchmark_hardening_hook: true | ||
| stackhpc_enable_cis_benchmark_hardening_hook: false |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Lets work around this by using an RSA key.
| @@ -0,0 +1,83 @@ | |||
| --- | |||
|
|
|||
| - name: Register baremetal compute nodes | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@assumptionsandg lets make sure we get changes from @m-bull in here.
| redfish_verify_ca: "{{ ironic_redfish_verify_ca }}" | ||
|
|
||
| ironic_redfish_verify_ca: false | ||
| ironic_redfish_address: "{{ redfish_address }}" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We need to remove this line, this needs to be be a host variable.
|
|
||
| ironic_driver_info: | ||
| redfish_system_id: "{{ ironic_redfish_system_id }}" | ||
| redfish_address: "http://192.168.33.3:34343" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this should be:
redfish_address: "{{ ironic_redfish_address }}"
So the address comes from the host_var.
| @@ -0,0 +1,3 @@ | |||
| --- | |||
|
|
|||
| kolla_enable_ironic: true No newline at end of file | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
kolla_enable_ironic_inspector: false needs to go here.
@assumptionsandg there are other ones too I think? like dnsmasq?
| ############################################################################### | ||
| # Ironic configuration. | ||
|
|
||
| # Specify the list of hardware types to load during service initialization. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we need to re-work this one... lets remove all the changes here (use ironic defaults), and only change it if we really need to.
Lets just set this in the enroll playbook, all the interfaces, with nice defaults in the group vars can be changed (e.g. to ipxe) if needed.
| @@ -0,0 +1,236 @@ | |||
| <domain type='qemu' id='26'> | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We might want to replace this with one from upstream ironic here:
https://github.com/openstack/ironic/blob/e3b943a34b137cc0a4731e35264003759c73b126/devstack/tools/ironic/templates/vm.xml#L4
| @@ -0,0 +1,5 @@ | |||
| [sushy-libvirt] | |||
| testvm0 baremetal_compute_network_address=192.168.33.159 | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we should set ironic_redfish_address on the host here, so its more like the real world.
| @@ -0,0 +1,3 @@ | |||
| --- | |||
|
|
|||
| stackhpc_enable_cis_benchmark_hardening_hook: false No newline at end of file | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we should try with an RSA key rather than have this I think.
No description provided.