Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2024-04-30T19:21:17+00:00 2024-04-30T19:21:17+00:00 Michal Wyszkowski michal.wyszkowski99@gmail.com 2024-04-22T11:03:38+00:00 urn:sha1:99ccc25e8a4d1e51f3d7f14258e9bb6f6bab688f Closes-Bug: 2062572 Change-Id: I456a5b8f66aa88a82fb54938e8df7195d127d9cd (cherry picked from commit abb969502f75517844bd44c25e0484c7495284d2) 2024-04-29T14:15:49+00:00 Michal Nasiadka mnasiadka@gmail.com 2024-04-29T09:41:43+00:00 urn:sha1:42cc971bf27dd65b63cf5ab766b714e6fca7dd13 openvswitch package is already installed in nova-base from CentOS NFV SIG repos - and in nova-compute we don't enable this repo - so we get openvswitch installed from RDO packages. Closes-Bug: #2064098 Change-Id: If39e045357563111219a008fa7a81a82ef906627 (cherry picked from commit de7939a9754cffafb77b518f9efa8be5af91d67f) 2023-12-22T07:22:10+00:00 Alex-Welsh alex@stackhpc.com 2023-11-28T13:08:58+00:00 urn:sha1:9dc637d4755e4ae00dedd3a367fa64b42159d49d Added the --local_cell argument to nova db sync commands during bootstrap and upgrade. This was previously thought to have no effect [1], but has since been discovered to fail when rotating the nova database password. [1] https://opendev.org/openstack/kolla-ansible/src/branch/master/ansible/roles/nova/tasks/bootstrap_service.yml#L2-L3 Closes-Bug: #2045558 Change-Id: Ic64eb51325b3503a14ebab9b9ff2f4d9caec734a (cherry picked from commit de1487f05187387aea3f113dcbb6926734b1ce6b) 2023-11-27T11:40:56+00:00 Jeffrey Zhang zhang.lei.fly@gmail.com 2023-10-22T07:41:30+00:00 urn:sha1:ddfa9a6de35c978eff1d4d625ed2ccc50c9699ed when configure `remote_filesystem_transport` to rsync, rsync binary is required. Change-Id: I07be614846be9305f0775df22a6d931ceab1720a (cherry picked from commit 92cedcd2b155907ab65884a0ba4dbae480900d28) 2023-08-22T09:22:43+00:00 Pierre Riteau pierre@stackhpc.com 2023-03-28T07:03:20+00:00 urn:sha1:3e2afe2f6ecebaa6bd45fcedc25663c7c3780872 NOTE: Specific to the Zed release, the KOLLA_UPGRADE_CHECK feature is not guaranteed to be present in the nova_api image. As such. a label has been added to be checked for in Kolla-Ansible. Related-Bug: #1957080 Change-Id: I6cbbdfcd40a8f486a3a636b41d704ee6ffafb812 (cherry picked from commit 48b5980c6352ad4e5cf0ac6da369140910c8f389) 2023-04-12T06:22:34+00:00 Rafal Lewandowski rafal@stackhpc.com 2023-03-29T09:15:32+00:00 urn:sha1:096963aebc410dcdbad47a8d04e9eef70fad8ee9 Closes-Bug: #2012821 Change-Id: I989cedce7a9af3882b5510d3479b29150139e861 (cherry picked from commit 2783fb710710103fe6aca3ff18c976590ca15e09) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-10-04T17:53:57+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-10-04T10:07:40+00:00 urn:sha1:9e92e4c8e494ec345ccce1eff739f18bf9035c9b This is necessary if using nova-compute with RBD backend (directly, not via Cinder) and wishing to make an instance image to Glance while (1) following the recommended Ceph permissions which do not give Nova write permissions to the images' pool or (2) not using RBD with Glance or (3) not revealing what Glance actually uses as the backend (hiding locations). Change-Id: I88e1e0ca01b2b2effad9515b905cc761fbb5d2d4 2022-09-27T10:02:23+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-09-15T14:13:12+00:00 urn:sha1:8d209901fa86c58eee45502f3bb8e9ee7c84a885 The goal of the swtpm project is to provide a TPM emulator (TPM 1.2 & TPM 2) that can be integrated into virtualized environments, such as virtual machines and containers. Nova supports it for quite a while: https://review.opendev.org/c/openstack/nova/+/631363 Change-Id: Ifb7e0f1632805807851720873a70179218bdf372 2022-09-27T07:40:06+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-05T14:53:34+00:00 urn:sha1:878b00013b01e3d02a704ce7c9fac1629cd1a705 OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731