Skip to content

Add support for graphical consoles#640

Draft
steveb wants to merge 4 commits intoopenstack-k8s-operators:mainfrom
steveb:graphical-console
Draft

Add support for graphical consoles#640
steveb wants to merge 4 commits intoopenstack-k8s-operators:mainfrom
steveb:graphical-console

Conversation

@steveb
Copy link
Copy Markdown
Collaborator

@steveb steveb commented Oct 30, 2025

When the ironic spec graphicalConsoles is set to "Enabled" the following occurs:

  • a novncproxy container is added to the conductor pod
  • a route is added for users to access novncproxy URLs
  • conductor config is modified to enable graphical console drivers
  • [vnc] config enables the kubernetes container_provider[1]

Depends-On: openstack-k8s-operators/openstack-operator#1633
Jira: OSPRH-20211
[1] https://review.opendev.org/c/openstack/ironic/+/962242

Describe your changes

Jira Ticket Link

Jira:

Checklist before requesting a review

  • I have performed a self-review of my code and confirmed it passes tests
  • Performed pre-commit run --all
  • Tested operator image in a test/dev environment. It can be CRC via install_yamls or a hotstack instance (optional)
  • Verified that no failures present in logs(optional):
    • ironic-operator-build-deploy-kuttl
    • podified-multinode-ironic-deployment

@openshift-ci openshift-ci bot requested review from olliewalsh and stuggi October 30, 2025 21:43
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Oct 30, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: steveb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@softwarefactory-project-zuul
Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/3e6f4be009d34ecfbfd18d037f86dbf5

openstack-k8s-operators-content-provider FAILURE in 9m 24s
⚠️ podified-multinode-ironic-deployment SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider

@steveb steveb force-pushed the graphical-console branch from 63004fb to 2f9267c Compare November 3, 2025 21:11
@softwarefactory-project-zuul
Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/df1715ed20f64daabd4f1d348b436699

openstack-k8s-operators-content-provider FAILURE in 9m 17s
⚠️ podified-multinode-ironic-deployment SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Nov 3, 2025

@steveb: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/functional 2f9267c link true /test functional
ci/prow/precommit-check 2f9267c link true /test precommit-check

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@softwarefactory-project-zuul
Copy link
Copy Markdown

Merge Failed.

This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset.
Warning:
Error merging github.com/openstack-k8s-operators/ironic-operator for 640,806c2986555d269e8bdf3acafed2300aca5c0a4b

steveb added 4 commits April 1, 2026 12:42
When the ironic spec graphicalConsoles is set to "Enabled" the following
occurs:

- a novncproxy container is added to the conductor pod
- a route is added for users to access novncproxy URLs
- conductor config is modified to enable graphical console drivers
- [vnc] config enables the kubernetes container_provider

Jira: OSPRH-20211
Currently graphical console pods (and related secrets) are created in the
openstack namespace. This increases security risks in 2 ways:
- Ironic service account is given access to secrets in the openstack
  namespace
- Graphical console pods share network namespace with other ironic
  services

Putting graphical console pods improves isolation with the rest of the
control plane. A future enhancement could be to create a namespace per
tenant to improve isolation of graphical console pods between tenants.

Jira: OSPRH-20211
This removes irmc, idrac, ilo, and inspector from enabled interfaces
as they have been removed upstream. This shouldn't land now but could be
used as a starting point when RHOSO-19 development begins.
@softwarefactory-project-zuul
Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/bee9bf548f8b42089d281988ac283c47

openstack-k8s-operators-content-provider FAILURE in 10m 51s
⚠️ podified-multinode-ironic-deployment SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant