commit 4d856317e39ef2c1ac05f7575b7110506c503f9f
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 12 13:39:33 2020 +0100
Change /run bind mount for neutron/openvswitch
Currently we have a very wide /run mount for all Neutron/OVS services,
which allows sudo/rootwrap to contact with the hosts dbus - all symptoms
are documented in the related bug.
Since we use tcp connections to OVS from Neutron agents - removing
bind mounts.
Closes-Bug: #1861792
Change-Id: Ifee4bec7b2e9ef4e2d624b1411f1a9e6332325c6
(cherry picked from commit 227008cf68aa68f340d95703e85355ae81585506)
Reviewed: https:/ /review. opendev. org/707598 /git.openstack. org/cgit/ openstack/ kolla-ansible/ commit/ ?id=4d856317e39 ef2c1ac05f7575b 7110506c503f9f
Committed: https:/
Submitter: Zuul
Branch: stable/rocky
commit 4d856317e39ef2c 1ac05f7575b7110 506c503f9f
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 12 13:39:33 2020 +0100
Change /run bind mount for neutron/openvswitch
Currently we have a very wide /run mount for all Neutron/OVS services,
which allows sudo/rootwrap to contact with the hosts dbus - all symptoms
are documented in the related bug.
Since we use tcp connections to OVS from Neutron agents - removing
bind mounts.
Closes-Bug: #1861792
Change-Id: Ifee4bec7b2e9ef 4e2d624b1411f1a 9e6332325c6 340d95703e85355 ae81585506)
(cherry picked from commit 227008cf68aa68f