Skip to content

snmpv3-password

Obtain per-node SNMPv3 credentials

Defined in workflows/argo-events/workflowtemplates/snmpv3-password.yaml

Prints credentials to workflow logs, like bmc-password. Use the same
master as the conductor. The image must contain ironic.common.snmpv3.
The ironic-snmpv3-master Secret must exist in the workflow namespace.
This only derives credentials; run configure_snmpv3_user to program the BMC.

Set NODE to the Ironic node UUID and use the appropriate OS_CLOUD.
Read the service tag from its inspection inventory, then submit:

SERVICE_TAG=$(openstack baremetal node inventory save "$NODE" \
  | jq -r '.inventory.system_vendor.serial_number')

argo -n argo-events submit --from workflowtemplate/snmpv3-password \
  -p service_tag="$SERVICE_TAG" --watch

The optional prefix parameter defaults to uc. Override with
-p prefix=ucsl1 to match a conductor configured with that prefix.
Prefixes accept 1 to 16 lowercase ASCII letters or digits and affect
only the username, not the passphrases.

Use username, auth_passphrase and privacy_passphrase from the logs in
the monitoring system. Authentication and privacy protocols must match
the configure_snmpv3_user runbook (defaults: SHA and AES).

Workflow Diagram

graph TB; subgraph snmpv3-password direction TB style snmpv3-password fill:#fafaff; snmpv3-password__main{{<span style="font-size:20px">main</span> <span style="color:green">image: ironic</span>}} style snmpv3-password__main fill:lightgray,stroke:#aaa; end