Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2023-12-22T07:22:10+00:00 2023-12-22T07:22:10+00:00 Alex-Welsh alex@stackhpc.com 2023-11-28T13:08:58+00:00 urn:sha1:9dc637d4755e4ae00dedd3a367fa64b42159d49d Added the --local_cell argument to nova db sync commands during bootstrap and upgrade. This was previously thought to have no effect [1], but has since been discovered to fail when rotating the nova database password. [1] https://opendev.org/openstack/kolla-ansible/src/branch/master/ansible/roles/nova/tasks/bootstrap_service.yml#L2-L3 Closes-Bug: #2045558 Change-Id: Ic64eb51325b3503a14ebab9b9ff2f4d9caec734a (cherry picked from commit de1487f05187387aea3f113dcbb6926734b1ce6b) 2023-11-27T11:40:56+00:00 Jeffrey Zhang zhang.lei.fly@gmail.com 2023-10-22T07:41:30+00:00 urn:sha1:ddfa9a6de35c978eff1d4d625ed2ccc50c9699ed when configure `remote_filesystem_transport` to rsync, rsync binary is required. Change-Id: I07be614846be9305f0775df22a6d931ceab1720a (cherry picked from commit 92cedcd2b155907ab65884a0ba4dbae480900d28) 2023-08-22T09:22:43+00:00 Pierre Riteau pierre@stackhpc.com 2023-03-28T07:03:20+00:00 urn:sha1:3e2afe2f6ecebaa6bd45fcedc25663c7c3780872 NOTE: Specific to the Zed release, the KOLLA_UPGRADE_CHECK feature is not guaranteed to be present in the nova_api image. As such. a label has been added to be checked for in Kolla-Ansible. Related-Bug: #1957080 Change-Id: I6cbbdfcd40a8f486a3a636b41d704ee6ffafb812 (cherry picked from commit 48b5980c6352ad4e5cf0ac6da369140910c8f389) 2023-04-12T06:22:34+00:00 Rafal Lewandowski rafal@stackhpc.com 2023-03-29T09:15:32+00:00 urn:sha1:096963aebc410dcdbad47a8d04e9eef70fad8ee9 Closes-Bug: #2012821 Change-Id: I989cedce7a9af3882b5510d3479b29150139e861 (cherry picked from commit 2783fb710710103fe6aca3ff18c976590ca15e09) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-10-04T17:53:57+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-10-04T10:07:40+00:00 urn:sha1:9e92e4c8e494ec345ccce1eff739f18bf9035c9b This is necessary if using nova-compute with RBD backend (directly, not via Cinder) and wishing to make an instance image to Glance while (1) following the recommended Ceph permissions which do not give Nova write permissions to the images' pool or (2) not using RBD with Glance or (3) not revealing what Glance actually uses as the backend (hiding locations). Change-Id: I88e1e0ca01b2b2effad9515b905cc761fbb5d2d4 2022-09-27T10:02:23+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-09-15T14:13:12+00:00 urn:sha1:8d209901fa86c58eee45502f3bb8e9ee7c84a885 The goal of the swtpm project is to provide a TPM emulator (TPM 1.2 & TPM 2) that can be integrated into virtualized environments, such as virtual machines and containers. Nova supports it for quite a while: https://review.opendev.org/c/openstack/nova/+/631363 Change-Id: Ifb7e0f1632805807851720873a70179218bdf372 2022-09-27T07:40:06+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-05T14:53:34+00:00 urn:sha1:878b00013b01e3d02a704ce7c9fac1629cd1a705 OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0