openstack/kolla.git/docker/fluentd, branch zed-eom

Merge "Drop elasticsearch, kibana and logstash"

2022-12-07T13:30:25+00:00

Drop elasticsearch, kibana and logstash

2022-12-06T14:57:51+00:00

Support has been dropped in kolla-ansible, the upgrade path is opensearch. Change-Id: I6f32aacb4e0b7dd1eb7206e02425b16f5beae4f0

Remove monasca, kafka, storm and zookeeper.

2022-12-06T12:58:10+00:00

Monasca, kafka, storm and zookeeper have been removed in kolla-ansible [1],[2]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/861392 [2]: https://review.opendev.org/c/openstack/kolla-ansible/+/865029 Change-Id: I0958a9353bc4585c4f65a1d316328a0e80b0b8b7

Fix writable rootwrap/privsep config

2022-10-10T15:06:05+00:00

Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298

flatten images a bit

2022-04-21T18:53:14+00:00

As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0

Adjust permissions on _extend_start files.

2022-04-11T15:22:24+00:00

Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0

drop infra_image_prefix

2022-04-11T06:22:21+00:00

We have one install_type only now so that infra stuff is not needed anymore. Change-Id: I60d50ba7699d46d001eaef365fb84b0ce8e9b262

Unify curl use (customisation options)

2022-03-11T12:58:05+00:00

This change adds and unifies an ability to override hardcoded URLs for air-gapped environments via the usual blocks mechanism. Also, this change replaces ENV with ARG instruction for the variables used only in building images, and uses bash variable expansion where it possible. This change is a continuation of the I46b77978926fc2b578a68d1aaa944b2198af0685 Change-Id: I1fbad333b1bc95484e6f4c5145d5936a0e2db84f Signed-off-by: Maksim Malchuk

Futureproof the uninstallation of offending es gems

2022-01-27T11:21:39+00:00

Uninstall based on version range. Change-Id: I353ef9b6b8da0e726c17ad2e06995d3690731e1d

Unpin td-agent and cap elasticsearch gem

2022-01-27T09:49:32+00:00

With [0] the version of td-agent being installed was pinned, which isn't sustainable in the long run, so we drop the pin. Latest version of the elasticsearch gem no longer works with older (OSS) versions of Elasticsearch. This is fixed by downgrading the version of the elasticsearch gems. [0] Iefcdd3100b7e3c5320bc5f1286a18251bdeab885 Related-Bug: 1930867 Closes-Bug: 1954759 Signed-off-by: Dr. Jens Harbott Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823155 Change-Id: I3045786e863b098d7339d1066aef6c857aa5f97f