Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2023-03-23T08:59:13+00:00 2023-03-23T08:59:13+00:00 Michal Nasiadka mnasiadka@gmail.com 2023-01-31T10:27:54+00:00 urn:sha1:a8d0098bd2575bbfab6155265d649bb0e4e729f6 Closes-Bug: #2000782 Change-Id: I5cf944c509f23d430665de458cbbdb2fd31db7bb (cherry picked from commit d7d43bed84dff0c394a28730fef593bdfbb064f2) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2022-03-01T17:00:20+00:00 Michal Nasiadka mnasiadka@gmail.com 2022-02-24T16:01:51+00:00 urn:sha1:1ed3a2897445ad3ffefc2cff98218f7e207c34b9 This reverts commit 360d335e94246d7095672c5aa92b59afa380a059. Reason for revert: I don't think that's still needed. Change-Id: I67adef1762d36f23b84ab8a2297e1f3385082b8a 2021-10-04T09:12:24+00:00 Pierre Riteau pierre@stackhpc.com 2021-10-04T09:12:24+00:00 urn:sha1:5a850592022450d9af85c37b0266fa9b7d317173 We have been configuring neutron to use /etc/neutron/api-paste.ini for more than a month now. Remove this file from its old location before Xena is released. Stop creating /usr/share/neutron which is now unused. Change-Id: Ic90cd8e3065fa629d5ad67abaf7c193fd845259a 2021-08-12T08:05:50+00:00 Pierre Riteau pierre@stackhpc.com 2021-08-12T08:05:50+00:00 urn:sha1:22def6336de9cdd872244f32429445405dc0bd3c CentOS binary packages for Xena have moved Neutron's api-paste.ini file to /etc/neutron [1]. Make this file available at the old location [2] for compatiblity with kolla-ansible, until the configuration is modified to use the new location. [1] https://review.rdoproject.org/r/c/openstack/neutron-distgit/+/34845 [2] /usr/share/neutron/api-paste.ini Change-Id: I2295884ef3b4c3bf4b087599322b0c5761e7b775 2021-04-27T15:26:18+00:00 Michał Nasiadka mnasiadka@gmail.com 2021-04-27T15:23:26+00:00 urn:sha1:a4f6a8f05b45838338ee1c6a78f278d49486ac03 Those plugins have been already removed from source images, this change removes them from binary. Change-Id: If21a21296489c1f243bb46f2595ff94d999bd686 2021-04-13T11:21:39+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2021-04-12T12:32:00+00:00 urn:sha1:38fcd184e872bf460a1a65e3342e9806e9b7a05a With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e