commit 8be74eb8cb8c177dd2c2ac23ea9b8a4edccb6e87
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 12 13:39:33 2020 +0100
Change /run bind mount for neutron/openvswitch
Currently we have a very wide /run mount for all Neutron/OVS services,
which allows sudo/rootwrap to contact with the hosts dbus - all symptoms
are documented in the related bug.
Since we use tcp connections to OVS from Neutron agents - removing
bind mounts.
Closes-Bug: #1861792
Change-Id: Ifee4bec7b2e9ef4e2d624b1411f1a9e6332325c6
(cherry picked from commit 227008cf68aa68f340d95703e85355ae81585506)
Reviewed: https:/ /review. opendev. org/709115 /git.openstack. org/cgit/ openstack/ kolla-ansible/ commit/ ?id=8be74eb8cb8 c177dd2c2ac23ea 9b8a4edccb6e87
Committed: https:/
Submitter: Zuul
Branch: stable/stein
commit 8be74eb8cb8c177 dd2c2ac23ea9b8a 4edccb6e87
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 12 13:39:33 2020 +0100
Change /run bind mount for neutron/openvswitch
Currently we have a very wide /run mount for all Neutron/OVS services,
which allows sudo/rootwrap to contact with the hosts dbus - all symptoms
are documented in the related bug.
Since we use tcp connections to OVS from Neutron agents - removing
bind mounts.
Closes-Bug: #1861792
Change-Id: Ifee4bec7b2e9ef 4e2d624b1411f1a 9e6332325c6 340d95703e85355 ae81585506)
(cherry picked from commit 227008cf68aa68f