2024.1 Series Release Notes¶

18.0.1¶

Fixes an issue where inspection_callback_url was templated with leading whitespace. This caused the ipa-inspection-callback-url kernel command line argument to be incorrectly set, leading to Ironic Python Agent posting introspection data back to Ironic rather than Ironic Inspector when using the enable_inspector option.

When enable_inspector is set to false (the default), the new built-in inspection implementation is now configured. Note that
- The new implementation has not at the moment of writing achieved a complete feature parity with ironic-inspector: see https://docs.openstack.org/ironic/latest/admin/inspection/index.html for the available features.
- Whether inspection actually runs is not defined by this parameter but rather by inspect_nodes (or the --inspect argument to ./bifrost-cli enroll).

If ironic-inspector support is disabled via enable_inspector set to false, the service will be stopped and removed on upgrade. Nodes that use the inspector inspect interface will be changed to agent when running online data migrations.

Ubuntu 20.04 “Focal” is no longer a supported operating system, please use 22.04 “Jammy” instead.

The variable include_dhcp_server has been completely removed, please use enable_dhcp instead.

Switches to using the snponly binary for iPXE on UEFI instead of the default ipxe.efi. This has been recommended by the Ironic project for some time since snponly.efi generally has more stable networking support. Change the ipxe_efi_binary variable to revert if needed.

No longer installs the full iPXE binary (ipxe.pxe) that is not used by Ironic.

Fixes Bifrost’s creation of accounts and Keystone account usage to align with the newer role based access control within Ironic. Ironic deprecated the legacy access policy, which utilized custom roles baremetal_admin and baremetal_observer in the Wallaby release of OpenStack, and Bifrost now utilizes a mix of a project scoped and system scoped admin accounts with Keystone to facilitate authentication and authorization to resources.

Removes the rootwrap privilege escalation framework. Ironic no longer uses it, and Bifrost does not use the Inspector PXE filters that require root.

Fixes an issue where online data migrations were not performed in the default Bifrost configuration where localhost is used as the database address. See LP#2036772 for details.