Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=master 2022-12-06T14:57:51+00:00 2022-12-06T14:57:51+00:00 Michal Nasiadka mnasiadka@gmail.com 2022-12-06T13:06:55+00:00 urn:sha1:e221ac8f2704a21461f9b36134816329a43272cc Support has been dropped in kolla-ansible, the upgrade path is opensearch. Change-Id: I6f32aacb4e0b7dd1eb7206e02425b16f5beae4f0 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-11T06:22:21+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-08T10:38:13+00:00 urn:sha1:a1510870e86f9cde6537ac2cbbfb055337843c90 We have one install_type only now so that infra stuff is not needed anymore. Change-Id: I60d50ba7699d46d001eaef365fb84b0ce8e9b262 2022-04-04T11:37:32+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-04T11:35:01+00:00 urn:sha1:976465c448c4de2bd323021b946770b26ab1e912 elasticsearch-oss package fails to install if we install it with Java: INFO:kolla.common.utils.elasticsearch:could not find java; set JAVA_HOME INFO:kolla.common.utils.elasticsearch:error: %prein(elasticsearch-oss-0:6.8.23-1.noarch) scriptlet failed, exit status 1 INFO:kolla.common.utils.elasticsearch:Error in PREIN scriptlet in rpm package elasticsearch-oss Backport down to ussuri needed. Change-Id: I72d7920acd8d15941c8c57a4186186212b273a38 2022-01-25T13:21:35+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-01-25T12:08:45+00:00 urn:sha1:d13c41b776b092a5fd4934962032d354c1822539 New pip has nice features for detection of conflicting requirements. When installing from PyPI, as we do in source images, running the latest pip+setuptools+wheel is recommended. This change covers entries missed in I4ae3a82cc796a60450c2a35beba32972964bc5d0 Change-Id: I0d69009b8b736b59b122ad29a9a5f6a22b041513 2021-08-31T11:01:00+00:00 Piotr Parczewski piotr@stackhpc.com 2021-08-25T12:59:53+00:00 urn:sha1:f31fbab84f215e12e5042a948a81cde6b5831678 Newest elasticsearch python library required by Curator does no longer work against the last OSS version of Elasticsearch (7.10.2). Pin it to the last known working version. Closes-Bug: #1941073 Change-Id: Ic8f0554c95c1903640c98a7831b829c1f88f49ff 2021-01-25T15:43:18+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-01-25T15:43:18+00:00 urn:sha1:ffe08baa72048fdaa6c5f24b67721db7178a5928 We install pip in base image so why repeat? Change-Id: Id903880b121d87d75b7b14084b0961b9ce99deba 2020-12-11T13:00:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2020-12-10T15:46:29+00:00 urn:sha1:7db2f100195c7aecde449e47d758c784850bd456 Curator got requirements sorted out upstream and builds fine now without hack. This reverts curator part of https://review.opendev.org/c/openstack/kolla/+/755339/ Change-Id: Iabe5b9684a7bf0e39a7dca824e6705b5069560bf