kolla/swift-sudo-issue-84d37919c980a373.yaml at 0353c51c68c30632ecb29fd0ae4372a375086865 - kolla - OpenDev: Free Software Needs Free Tools

openstack/kolla

Maksim Malchuk 420244f7f0 Fix Swift deployment issue

Swift deployment is broken since CVE-2022-38060 fixed sudoers file in
the I66476a2b396e2cbe41e68ac51f57aae1806b2ed8. The kolla-toolbox
container have their own virtualenv path differs from all other
containers. This change adds the correct sudoers secure_path
configuration needed only for kolla-toolbox conainer.

Related-Bug: #1985784
Change-Id: I3651576ee354364d639c187ff750491667ecab56
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
(cherry picked from commit b8a352647d)

2022-10-09 22:38:14 +03:00

8 lines

252 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     Fixes an issue with Swift deployment via Kolla Ansible caused by
     the fix to CVE-2022-38060.
     The kolla-toolbox container now have its own sudoers secure_path
     configuration which allows the necessary binaries to execute.