Skip to content

Conversation

@andfasano
Copy link
Member

@andfasano andfasano commented Jan 25, 2022

This patch adds a new config var INSTALLER_PROXY so that the installer could use a local proxy (in our CI jobs, we already deploy a proxy in the baremetalds-devscript-proxy step). In addition, all outgoing traffic will be disabled

Co-author: @derekhiggins

cc @hardys

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jan 25, 2022
@openshift-ci openshift-ci bot requested review from russellb and zaneb January 25, 2022 14:30
@hardys
Copy link

hardys commented Jan 25, 2022

(in our CI jobs, we already deploy a proxy in the baremetalds-devscript-proxy step

How do we expect developers to deploy the proxy for local testing? I was expecting to still need something similar to #1192 so we can easily enable a proxy on the virthost, even if that's not required in CI?

@andfasano andfasano force-pushed the add-proxy-setting branch 4 times, most recently from 08a069c to 118543f Compare January 25, 2022 16:23
@andfasano
Copy link
Member Author

(in our CI jobs, we already deploy a proxy in the baremetalds-devscript-proxy step

How do we expect developers to deploy the proxy for local testing? I was expecting to still need something similar to #1192 so we can easily enable a proxy on the virthost, even if that's not required in CI?

I think we could add another block to kick off the squid container, using something similar to CI test. The immediate goal anyhow now was to support the CI.

@andfasano
Copy link
Member Author

(in our CI jobs, we already deploy a proxy in the baremetalds-devscript-proxy step

How do we expect developers to deploy the proxy for local testing? I was expecting to still need something similar to #1192 so we can easily enable a proxy on the virthost, even if that's not required in CI?

I think we could add another block to kick off the squid container, using something similar to CI test. The immediate goal anyhow now was to support the CI.

update: waiting for the job results, but very likely the already existing proxy defined by the CI cannot be used as it is, so another one should be required

@andfasano
Copy link
Member Author

Revamping #1192

@andfasano
Copy link
Member Author

/test pj-rehearse

@openshift-ci
Copy link

openshift-ci bot commented Jan 28, 2022

@andfasano: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

  • /test e2e-metal-ipi
  • /test e2e-metal-ipi-ovn-ipv6
  • /test e2e-metal-ipi-serial-ipv4
  • /test e2e-metal-ipi-serial-ovn-ipv6
  • /test images

The following commands are available to trigger optional jobs:

  • /test e2e-metal-ipi-ovn-dualstack
  • /test e2e-metal-ipi-upgrade
  • /test e2e-metal-ipi-upgrade-ovn-ipv6
  • /test e2e-metal-ipi-virtualmedia

Use /test all to run the following jobs that were automatically triggered:

  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-ovn-dualstack
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-ovn-ipv6
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-serial-ipv4
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-serial-ovn-ipv6
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-virtualmedia
  • pull-ci-openshift-metal3-dev-scripts-master-images
Details

In response to this:

/test pj-rehearse

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@andfasano
Copy link
Member Author

/retest

@andfasano
Copy link
Member Author

/test e2e-metal-ipi

@andfasano andfasano changed the title [WIP] Allow installer to use a proxy Allow installer to use a proxy Jan 31, 2022
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jan 31, 2022
@andfasano
Copy link
Member Author

Added ipv6 support

/hold

@openshift-ci openshift-ci bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jan 31, 2022
@andfasano
Copy link
Member Author

/hold cancel

@hardys @derekhiggins The patch looks ready, could you please review it? Thanks

@hardys
Copy link

hardys commented Feb 8, 2022

/approve

@openshift-ci
Copy link

openshift-ci bot commented Feb 8, 2022

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: hardys

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 8, 2022
@andfasano
Copy link
Member Author

/retest

# Proxy related configuration
if [[ ! -z "$INSTALLER_PROXY" ]]; then
export EXT_SUBNET=${EXTERNAL_SUBNET_V6}
if [[ "$IP_STACK" = "v4" ]]; then
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: double = for consistency

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I used the same approach for the preovious ip_stack comparisons in the same file, maybe we could also address such kind of more global changes in some other prs as also @hardys suggested

fi

# Configure a local proxy to be used for the installation
if [[ ! -z "${INSTALLER_PROXY}" ]]; then
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: -n instead of ! -z
guess it's too late as we use ! -z everywhere!

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah we should perhaps consider a future PR to align on one convention (and other issues like quoting and [ vs [[ - not a blocker for this though IMO since it's a cosmetic (and as you say pre-existing) issue

@elfosardo
Copy link
Member

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Feb 9, 2022
@derekhiggins
Copy link
Collaborator

/test e2e-metal-ipi-serial-ovn-ipv6

2 similar comments
@andfasano
Copy link
Member Author

/test e2e-metal-ipi-serial-ovn-ipv6

@andfasano
Copy link
Member Author

/test e2e-metal-ipi-serial-ovn-ipv6

@andfasano
Copy link
Member Author

e2e-metal-ipi-serial-ovn-ipv6 failure does not seem related to the current patch, retrying once

/test e2e-metal-ipi-serial-ovn-ipv6

@andfasano
Copy link
Member Author

/test e2e-metal-ipi-serial-ovn-ipv6

@hardys
Copy link

hardys commented Feb 11, 2022

/test e2e-metal-ipi-serial-ovn-ipv6

Looking at sippy this seems to still be perma-failing, seems like we need the https://bugzilla.redhat.com/show_bug.cgi?id=2049117 pending timeout fixes? If you're happy that's the cause I'd suggest we override this job to make progress.

@hardys
Copy link

hardys commented Feb 11, 2022

/test e2e-metal-ipi-ovn-dualstack

@andfasano
Copy link
Member Author

/test e2e-metal-ipi-serial-ovn-ipv6

Looking at sippy this seems to still be perma-failing, seems like we need the https://bugzilla.redhat.com/show_bug.cgi?id=2049117 pending timeout fixes? If you're happy that's the cause I'd suggest we override this job to make progress.

Yes, I've also prepared a PR (openshift/origin#26833) to be used for fixing it (by @bfournie openshift/origin#26810), we can override it

@andfasano
Copy link
Member Author

andfasano commented Feb 11, 2022

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

@openshift-ci
Copy link

openshift-ci bot commented Feb 11, 2022

@andfasano: /override requires a failed status context or a job name to operate on.
The following unknown contexts were given:

  • e2e-metal-ipi-serial-ovn-ipv6

Only the following contexts were expected:

  • ci/prow/e2e-metal-ipi
  • ci/prow/e2e-metal-ipi-ovn-dualstack
  • ci/prow/e2e-metal-ipi-ovn-ipv6
  • ci/prow/e2e-metal-ipi-serial-ipv4
  • ci/prow/e2e-metal-ipi-serial-ovn-ipv6
  • ci/prow/e2e-metal-ipi-virtualmedia
  • ci/prow/images
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-ovn-dualstack
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-ovn-ipv6
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-serial-ipv4
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-serial-ovn-ipv6
  • pull-ci-openshift-metal3-dev-scripts-master-e2e-metal-ipi-virtualmedia
  • pull-ci-openshift-metal3-dev-scripts-master-images
  • tide
Details

In response to this:

/override e2e-metal-ipi-serial-ovn-ipv6

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@andfasano
Copy link
Member Author

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

@openshift-ci
Copy link

openshift-ci bot commented Feb 11, 2022

@andfasano: Overrode contexts on behalf of andfasano: ci/prow/e2e-metal-ipi-serial-ovn-ipv6

Details

In response to this:

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@hardys
Copy link

hardys commented Feb 11, 2022

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

@openshift-ci
Copy link

openshift-ci bot commented Feb 11, 2022

@hardys: Overrode contexts on behalf of hardys: ci/prow/e2e-metal-ipi-serial-ovn-ipv6

Details

In response to this:

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@andfasano
Copy link
Member Author

/test e2e-metal-ipi

@andfasano
Copy link
Member Author

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

@openshift-ci
Copy link

openshift-ci bot commented Feb 14, 2022

@andfasano: Overrode contexts on behalf of andfasano: ci/prow/e2e-metal-ipi-serial-ovn-ipv6

Details

In response to this:

/override ci/prow/e2e-metal-ipi-serial-ovn-ipv6

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-merge-robot openshift-merge-robot merged commit bacf996 into openshift-metal3:master Feb 14, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants