openstack/kolla-ansible
Code Issues Proposed changes
ddadaa282e
kolla-ansible/ansible/roles
History
Sean Mooney ddadaa282e always add service_user section to nova.conf 
As of I3629b84d3255a8fe9d8a7cea8c6131d7c40899e8 nova
now requires the service_user section to be configured
to address CVE-2023-2088. This change adds
the service user section to the nova.conf template in
the nova and nova-cell roles.

Related-Bug: #2004555
Signed-off-by: Sven Kieske <kieske@osism.tech>
Change-Id: I2189dafca070accfd8efcd4b8cc4221c6decdc9f
(cherry picked from commit a77ea13ef1)
(cherry picked from commit 03c12abbcc)
(cherry picked from commit cb105dc293)
(cherry picked from commit efe6650d09)
2023-05-16 04:20:21 +00:00
..
aodh Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
barbican Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
bifrost Fix maximum width of the DIB Multiline-YAML 2023-04-14 16:36:22 +03:00
blazar Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
ceilometer Add a flag to handle RabbitMQ high availability 2023-01-13 15:40:08 +00:00
ceph-rgw Integrate oslo-config-validator 2022-12-21 17:19:09 +00:00
certificates Merge "certificates: generate libvirt TLS certificates" 2022-02-03 19:11:03 +00:00
cinder always add service_user section to nova.conf 2023-05-16 04:20:21 +00:00
cloudkitty Merge "cloudkitty: set cafile for fetcher_keystone" 2023-03-20 10:41:19 +00:00
collectd Integrate oslo-config-validator 2022-12-21 17:19:09 +00:00
common Fix Bash variable expansion issues in openrc file 2023-04-25 14:46:11 +03:00
cyborg Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
designate Designate: provide certificates file to use for neutron client requests 2023-04-23 01:13:32 +03:00
destroy Remove kafka, storm, zookeeper 2022-12-08 06:50:15 +00:00
etcd etcd: Set the proper peer and client protocol when tls is enabled 2023-03-01 14:25:56 +00:00
freezer Remove system scope token to access services 2023-01-26 17:52:00 -06:00
glance Default neutron_tls_proxy and glance_tls_proxy to haproxy_tag 2023-01-30 16:45:56 +00:00
gnocchi Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
grafana Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
hacluster hacluster: Use nodename to align with nova service names 2023-02-18 04:33:59 +00:00
haproxy-config Stop firewalld config during kolla genconfig 2023-01-11 12:03:49 +00:00
heat Remove system scope token to access services 2023-01-26 17:52:00 -06:00
horizon Add LimitRequestBody configuration for Horizon 2023-03-29 14:51:28 +03:00
influxdb Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
ironic ironic: fix dev mode for inspector 2023-03-15 09:44:35 +00:00
iscsi Merge "iscsi: Use assert on checks for readability" 2023-03-12 13:50:01 +00:00
kafka Merge "Integrate oslo-config-validator" 2023-01-03 17:40:00 +00:00
keystone Merge "Fix deploy/genconfig in check mode" 2023-03-23 10:55:24 +00:00
kuryr Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
loadbalancer Merge "loadbalancer: Use assert on checks for readability" 2023-02-13 16:19:50 +00:00
loadbalancer-config Add proxysql-config role and wrap it in loadbalancer-config role 2022-08-09 12:16:16 +02:00
magnum magnum: Fix trustee creation after ansible-collections-openstack bump 2023-03-23 16:18:58 +00:00
manila Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
mariadb Merge "mariadb: add mariadb_datadir_volume parameter" 2023-04-19 08:27:42 +00:00
masakari Configure coordination in default for masakari-api 2023-04-17 20:02:42 +02:00
memcached Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
mistral Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
module-load Drop support for /etc/modules 2020-08-25 20:20:57 +01:00
monasca Remove support for deploying OpenStack Monasca 2022-11-11 15:48:11 +00:00
multipathd Integrate oslo-config-validator 2022-12-21 17:19:09 +00:00
murano Remove system scope token to access services 2023-01-26 17:52:00 -06:00
neutron Merge "neutron: Use assert on checks for readability" 2023-02-17 08:55:28 +00:00
nova always add service_user section to nova.conf 2023-05-16 04:20:21 +00:00
nova-cell always add service_user section to nova.conf 2023-05-16 04:20:21 +00:00
octavia Merge "Fix Bash variable expansion issues in openrc file" 2023-05-16 01:58:48 +00:00
octavia-certificates [docs] Unify project's naming convention 2021-01-27 20:08:41 +01:00
opensearch opensearch: default dashboards tag to opensearch_tag 2023-04-17 12:37:33 +00:00
openvswitch Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
ovn-controller Add neutron_ovn_availability_zones parameter 2023-03-06 13:28:28 +00:00
ovn-db Correct ovn-ctl --db-nb-pidfile usage in templates 2023-05-04 10:33:51 +01:00
ovs-dpdk Integrate oslo-config-validator 2022-12-21 17:19:09 +00:00
placement Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
prechecks Revert "ansible: bump min to 2.13 and max to 2.14" 2023-04-20 09:26:11 +00:00
prometheus Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
proxysql-config Fix issues introduced by ansible-lint 6.6.0 2022-09-21 14:34:54 +00:00
prune-images Performance: replace unconditional include_tasks with import_tasks 2020-08-28 16:12:03 +00:00
rabbitmq Fix faulty precheck for RabbitMQ 2023-04-20 13:28:39 +02:00
redis Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
sahara Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
senlin Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
service-cert-copy Add kolla_externally_managed_cert option 2021-03-02 18:09:06 +01:00
service-config-validate Integrate oslo-config-validator 2022-12-21 17:19:09 +00:00
service-images-pull Add service-images-pull tag to tasks in the service-images-pull role 2022-12-19 20:13:17 +01:00
service-ks-register Adding container_engine to kolla_toolbox module 2022-11-04 15:32:30 +01:00
service-precheck Add Ansible group check to prechecks 2020-02-28 16:23:14 +00:00
service-rabbitmq Adding container_engine to kolla_toolbox module 2022-11-04 15:32:30 +01:00
service-stop/tasks Fix kolla-ansible stop with heterogeneous hosts 2020-03-23 17:21:53 +00:00
skyline Add skyline service 2023-01-31 13:47:18 +08:00
solum Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
storm Merge "Integrate oslo-config-validator" 2023-01-03 17:40:00 +00:00
swift Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
tacker Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
telegraf Merge "Integrate oslo-config-validator" 2023-01-03 17:40:00 +00:00
trove Switch trove-api to wsgi running under apache. 2023-02-02 01:22:59 +00:00
venus Fix prechecks in check mode 2023-01-12 14:27:36 +00:00
vitrage Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
watcher Merge "Fix prechecks in check mode" 2023-01-16 11:14:45 +00:00
zookeeper Merge "Integrate oslo-config-validator" 2023-01-03 17:40:00 +00:00
zun Merge "zun: Use assert on checks for readability" 2023-02-13 16:19:48 +00:00