Paradise timeout

[mbuchmann-hpe]

Summary and Scope

Paradise updates take over a minute and sometimes over 1.5 minutes to return from a redfish update request. The current time out of 40 seconds was timing out and returning an error. Increased the timeout to 120 seconds for Paradise Redfish Calls.

DOES THIS CHANGE INVOLVE ANY SCHEME CHANGES? N

REMINDER: HAVE YOU INCREMENTED VERSION NUMBERS? 1.32.0

REMINDER 2: HAVE YOU UPDATED THE COPYRIGHT PER hpe GUIDELINES: (C) Copyright 2014-2021 Hewlett Packard Enterprise Development LP ? Y/N

Issues and Related PRs

• CASMHMS-6182

Testing

Tested on Paradise nodes on Tyr
Also tested on other nodes to make sure the timeout did not affect current updates.

Risks and Mitigations

Adding time to the redfish call may cause the update will cause more time to report a failed attempt, but the time is only being added to the redfish update command, so I do not think this will be a problem.

[github-actions]

👋 Hey! Here is the image we built for you (Artifactory Link):

artifactory.algol60.net/csm-docker/unstable/cray-firmware-action-hmth-test:1.32.0-20240429210317.ddbc668

Use podman or docker to pull it down and inspect locally:

podman pull artifactory.algol60.net/csm-docker/unstable/cray-firmware-action-hmth-test:1.32.0-20240429210317.ddbc668

Or, use this script to pull the image from the build server to a dev system:

Dev System Pull Script

Note the following script only applies to systems running CSM 1.2 or later.

#!/usr/bin/env bash

IMAGE=artifactory.algol60.net/csm-docker/unstable/cray-firmware-action-hmth-test:1.32.0-20240429210317.ddbc668

podman run --rm --network host  \
    quay.io/skopeo/stable copy \
    --src-tls-verify=false \
    --dest-tls-verify=false \
    --dest-username "$(kubectl -n nexus get secret nexus-admin-credential -o json | jq -r '.data.username | @base64d')" \
    --dest-password "$(kubectl -n nexus get secret nexus-admin-credential -o json | jq -r '.data.password | @base64d')" \
    docker://$IMAGE \
    docker://registry.local/$IMAGE

Snyk Report

Coming soon

Software Bill of Materials

cosign download sbom artifactory.algol60.net/csm-docker/unstable/cray-firmware-action-hmth-test:1.32.0-20240429210317.ddbc668 > container_image.spdx

If you don't have cosign, then you can get it here.

Note: this SHA is the merge of 006ec28 and the PR base branch. Good luck and make rocket go now! 🌮 🚀

[github-actions]

👋 Hey! Here is the image we built for you (Artifactory Link):

artifactory.algol60.net/csm-docker/unstable/cray-firmware-action:1.32.0-20240429210320.ddbc668

Use podman or docker to pull it down and inspect locally:

podman pull artifactory.algol60.net/csm-docker/unstable/cray-firmware-action:1.32.0-20240429210320.ddbc668

Or, use this script to pull the image from the build server to a dev system:

Dev System Pull Script

Note the following script only applies to systems running CSM 1.2 or later.

#!/usr/bin/env bash

IMAGE=artifactory.algol60.net/csm-docker/unstable/cray-firmware-action:1.32.0-20240429210320.ddbc668

podman run --rm --network host  \
    quay.io/skopeo/stable copy \
    --src-tls-verify=false \
    --dest-tls-verify=false \
    --dest-username "$(kubectl -n nexus get secret nexus-admin-credential -o json | jq -r '.data.username | @base64d')" \
    --dest-password "$(kubectl -n nexus get secret nexus-admin-credential -o json | jq -r '.data.password | @base64d')" \
    docker://$IMAGE \
    docker://registry.local/$IMAGE

Snyk Report

Coming soon

Software Bill of Materials

cosign download sbom artifactory.algol60.net/csm-docker/unstable/cray-firmware-action:1.32.0-20240429210320.ddbc668 > container_image.spdx

If you don't have cosign, then you can get it here.

Note: this SHA is the merge of 006ec28 and the PR base branch. Good luck and make rocket go now! 🌮 🚀