openstack/kolla.git/releasenotes/notes, branch train-eol

libvirt: add Cyrus SASL packages for DIGEST-MD5

2022-03-11T20:38:25+00:00

Adds Cyrus SASL packages necessary for the DIGEST-MD5 and SCRAM-SHA-256 mechanisms. These can be used for libvirt SASL authentication. Change-Id: I13e19ca29eeab40cd08fa3afe2cdf7531867f81b Partial-Bug: #1964013 (cherry picked from commit e1efa9d257c45e5f99364974ea66a6d6ba5a5605)

Build CentOS Stream 8 images

2022-03-04T09:55:43+00:00

This is part of the effort to allow a migration path for operators using CentOS 7 and Train today. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/831265 Change-Id: I75373eb21c4269c20f72603ad4cf162a472de25b (cherry picked from commit 67d6d28b6208cc004a50f19be1386d88c2404bc4)

Merge "Mitigate two Log4j vulnerabilities in Apache Storm" into stable/train

2022-02-10T13:16:52+00:00

Drop CentOS Linux 8 image builds

2022-02-09T08:21:25+00:00

(cherry picked from commit 405fca90f2c8d3763ac56ce8b925611d136bba6c) Change-Id: I95ea4a66a80bf035f8bd1180790c7e0c85d759ed (cherry picked from commit 07f519996381789c1f21850cfc9b27f3b86a6f4c)

Mitigate two Log4j vulnerabilities in Apache Storm

2022-01-27T09:42:27+00:00

The Log4j version was bumped on GitHub [1] but it is still pending inclusion in a release of Apache Storm. Apply the alternative mitigation recommended by Log4j [2] of removing the JndiLookup class from the classpath. [1] https://github.com/apache/storm/pull/3427 [2] https://logging.apache.org/log4j/2.x/security.html Change-Id: Ib3ecd73f9e39e320acb2c5f0962b8af9b1a817e9 (cherry picked from commit 448e4f56aa6218a66b0074329d322c0b6089b2e6)

Fix _get_images_dir when pip-installed with --user

2021-06-18T07:47:44+00:00

There are two cases where pip installs kolla share into ~/.local/share/kolla: - with `pip install --user kolla` - with `pip install kolla` as non-root This patch helps kolla find the share dir in these cases. Closes-Bug: #1930544 Change-Id: I0b3eb6744a34a601266179fb358510a5c500e6ba (cherry picked from commit db78657c231663f3e8ebbc18de43c06ddaa94c97)

Enable Debian updates repo

2021-06-16T15:14:57+00:00

Backport below Wallaby switching bullseye to buster. Closes-Bug: #1931544 Change-Id: I8460a4159c8da8ae0b856867e068d30fbffb4d34 (cherry picked from commit 789c9c3b84e84796ac8211112fa29f415f560c88)

Merge "[CI] Trust only infra mirrors and fix APT mirrors" into stable/train

2021-05-10T18:39:53+00:00

[CI] Trust only infra mirrors and fix APT mirrors

2021-05-10T12:21:59+00:00

Infra mirrors get their indices rebuilt to avoid broken indices (due to partial update). Unfortunately, this wipes out the cryptographic signatures. Our approach so far was disabling apt security features globally. However, this is not a valid choice for external repos. It hid an issue we introduced with new RabbitMQ repos missing proper keys installed in the image. This caused permanent failures outside of our CI. Our process should be as close as possible to users' experience. This patch makes CI trust only the mirrors that have their indices rebuilt (so infra mirrors). For Train, fixed missing override parts as well. And it includes also: - I8209770ca1353fd89aacef0859ca3a373645c6b2 - Icb745f628c1c50d9f20df022b08ddc46fccc270c - Id3b55ac470a977be7ee7decdef3b49e8d89a130f Change-Id: Ic5abc4b87fd76f87aba383abf43e95ba70629fcb Co-Authored-By: Marcin Juszkiewicz (cherry picked from commit c364c8be85f4653bf7af1c7ac0378823553e7441) (cherry picked from commit 4a482380408d107c59119b379add34f4b8e87ad7)

Merge "Fix Mistral source images to respect upper-constraints" into stable/train

2021-05-07T21:48:25+00:00