Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2023-06-20T15:42:50+00:00 2023-06-20T15:42:50+00:00 Maksim Malchuk maksim.malchuk@gmail.com 2023-06-19T18:14:11+00:00 urn:sha1:3dcfde5cc0f3b964681790aef28c5dbb4c631907 Closes-Bug: #2024390 Change-Id: I84c7633765749a5e9ced983505ef290c32154ccc Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com> (cherry picked from commit 11f90f3746f6affd34885019a82eb94d3c098ee9) 2023-06-19T11:02:42+00:00 Maksim Malchuk maksim.malchuk@gmail.com 2023-06-18T20:30:55+00:00 urn:sha1:7ae289a5e5e9f07e0a2fe4ce5e3fa0aece27b784 Closes-Bug: #2024018 Change-Id: I7eb97c6bfb65f26b044f26fece09521836ac5a3b Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com> (cherry picked from commit 2e2900e00bb88a38ea51c925d2c6c0cfcd5841bb) 2023-03-27T15:46:15+00:00 Vladislav Belogrudov v.belogrudov@yadro.com 2023-03-22T12:27:01+00:00 urn:sha1:885b27a679dde8175a27803dd71e12f68c70a0f8 Closes-Bug: #2012508 Change-Id: I7d9c53297db1a9bd14e3e69b58867293014af69b (cherry picked from commit d98b48092571e2e7730d259cbd638f67ab3e19df) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-27T07:57:16+00:00 Vladislav Belogrudov v.belogrudov@yadro.com 2022-04-27T07:54:25+00:00 urn:sha1:b9aa91381391c8aaabc7c76de39e5ee258562f4c Cinder-volume container can operate on multipath devices but fails to do so due to absent multipath package for several images. This fix explicitely adds multipath to the image. Closes-Bug: #1970541 Change-Id: I14af40078508b06e46866b77ab200228ec827a0d 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2021-11-01T10:41:21+00:00 Zuul zuul@review.opendev.org 2021-11-01T10:41:21+00:00 urn:sha1:896480988843dc22303e42b9170808d20829970b