Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=stein-eol 2021-02-15T14:20:11+00:00 2021-02-15T14:20:11+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2021-01-24T16:04:54+00:00 urn:sha1:8ebfc19590fe9e3824f2f022559d9ead50e31430 Backport to all supported branches. Change-Id: I4a13bbe959e3324f05d5cf78a3be2415eb2ba7ec (cherry picked from commit 004d9eb5d575fcb140b4d90fb30ced0a81dd3e66) 2020-10-14T09:36:22+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2020-06-22T09:05:32+00:00 urn:sha1:28df01a8b55370bd512aedbef685e12aaaa4b4b0 This fixes the FC Cinder backend usage in Nova. Change-Id: I036cfe3af3dd96625f986a820c78a10e6558b086 Closes-bug: #1884484 (cherry picked from commit 0c8702c96f852eae7a1fb784a260c01c15fb86f3) 2020-09-14T10:09:05+00:00 Mark Goddard mark@stackhpc.com 2020-08-06T09:50:25+00:00 urn:sha1:c6835b12a6f1e8f715aa5c69383a8d1836551496 There are several issues with kolla_set_configs --check: 1. We calculate the destination path incorrectly when comparing a file in a directory, due to passing arguments to os.path.relpath in the wrong order 2. For directories that have not changed, we also attempt to compare them as files, which fails when they are open()ed. 3. If the config JSON does not have a config_files key, it fails with a KeyError. The first two issues affect the fluentd container, which specifies directories as the source, without using a glob. The third affects OVN containers. This patch fixes these issues. Closes-Bug: #1890567 Change-Id: I8921befe51da4282121443849177a7ca5ebe8822 (cherry picked from commit c5320eb22386c34d83435fa0b9aa03b178996b52) 2020-09-03T14:38:36+00:00 Doug Szumski doug@stackhpc.com 2020-07-27T11:03:02+00:00 urn:sha1:e5b5e926895d8833ebc2b54debd74a4d9d72492d Switch to YAJI JSON parser as suggested in [1]. [1] https://docs.fluentd.org/quickstart/faq#i-got-encoding-error-inside-plugin-how-to-fix-it Closes-Bug: #1889065 Change-Id: I2ecd3b029b956e000feaaa9e10a169521ba53d66 (cherry picked from commit 556d4353aa846765557cfdd3c6e087a25248c517) 2020-07-06T14:45:10+00:00 Michele Baldessari michele@acksyn.org 2020-06-11T09:47:02+00:00 urn:sha1:7038e3ff03c6d08e7b794f9087675964ddbbed0a A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we should remove the nss-systemd lookup from containers. The reasons for this are as follows: 1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 when this nss module is triggered it tries to talk to dbus. It triggers a bunch of selinux denials and it makes little sense to open all containers to talk to dbus. In particular, if a container is run as non-privileged and bind-mounts /run from the host, we will hit selinux denials like the following: type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus" 2) It just makes little sense in a kolla-world to have containers talk to dbus/systemd and it saves us some time when a lookup triggers the systemd module for whatever reason. Especially because the nss-systemd module does a few things which are not useful in a container (ensures that the root and nobody users and groups remain resolvable, SystemD's DynamicUser= feature, provide Lookup API via Varlink) The sed regex gives us the wanted results: $ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf --- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000 +++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000 @@ -53,9 +53,9 @@ # group: db files # In order of likelihood of use to accelerate lookup. -passwd: sss files systemd +passwd: sss files shadow: files sss -group: sss files systemd +group: sss files hosts: files dns myhostname services: files sss netgroup: sss Related-Bug: #1883849 Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673 (cherry picked from commit dc2ddfa9750f94430a5b04b62fc1fa6adcb234f8) 2020-04-26T15:09:35+00:00 Dincer Celik hello@dincercelik.com 2020-04-26T14:45:02+00:00 urn:sha1:ebfc0a7bf8da8ea27e5a7527859c201dacf7c5e5 This is a follow up for [1]. "rally-manage db" command was deprecated since 0.10.0 but Ubuntu ships 0.9.1 for Bionic. [1] https://bugs.launchpad.net/kolla/+bug/1856693 Closes-Bug: #1872283 Change-Id: I5fb0fc4e6a8bf7ab07abc9c78f0673e3e764b4d1 2020-04-23T18:22:52+00:00 Rajat Dhasmana rajatdhasmana@gmail.com 2020-03-23T07:33:03+00:00 urn:sha1:e22fb9796e0592d288310b23bd7245885f235cef Glance API image lacked nfs programs/utils to be able to mount NFS exports. This affected Glance usage with Cinder backend when NFS was used as Cinder backend. Closes-Bug: #1868574 Change-Id: I3aac1e6a7f7c5f839b036f15713af949fba206cc (cherry picked from commit cac9d46aa6dbac6631bdcae67db125a88e1c3234) 2020-04-17T11:40:24+00:00 Zuul zuul@review.opendev.org 2020-04-17T11:40:24+00:00 urn:sha1:95e421483e0ff7d7112b7ab981a32e24bf287c6f 2020-04-14T12:44:12+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2020-03-04T09:22:19+00:00 urn:sha1:ab8bcf5a4f4b1a6a8ae698eda80f2a93d00aa84e This fixes the issue when keystone-manage output included backslashes and/or double quotation marks which broke JSON string. Change-Id: Ifae18c407210c12745d29fc4c95dca69aeafe6a8 Closes-bug: #1866017 (cherry picked from commit 33d184a731458bb45d1206bdae4fb172629a76e7) 2020-04-11T13:28:43+00:00 Q.hongtao qihongtao@inspur.com 2020-04-07T01:30:42+00:00 urn:sha1:f7cf4df5ada5553ce4cf2433ebf40276fe59a803 Kolla was missing vitrage-persistor image required by Vitrage for data storage. Change-Id: Id5e143636f9a81e7294b775f3d8b9134bee58054 Closes-Bug: #1869319 (cherry picked from commit ad06096448a585a16ad73b610b0adc81b597ccec)