commit c4ad080d9a0a79caadac39ecc1a2891219741797
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 12 13:39:33 2020 +0100
Change /run bind mount for neutron/openvswitch
Currently we have a very wide /run mount for all Neutron/OVS services,
which allows sudo/rootwrap to contact with the hosts dbus - all symptoms
are documented in the related bug.
Since we use tcp connections to OVS from Neutron agents - removing
bind mounts.
Closes-Bug: #1861792
Change-Id: Ifee4bec7b2e9ef4e2d624b1411f1a9e6332325c6
(cherry picked from commit 227008cf68aa68f340d95703e85355ae81585506)
Reviewed: https:/ /review. opendev. org/708905 /git.openstack. org/cgit/ openstack/ kolla-ansible/ commit/ ?id=c4ad080d9a0 a79caadac39ecc1 a2891219741797
Committed: https:/
Submitter: Zuul
Branch: stable/train
commit c4ad080d9a0a79c aadac39ecc1a289 1219741797
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 12 13:39:33 2020 +0100
Change /run bind mount for neutron/openvswitch
Currently we have a very wide /run mount for all Neutron/OVS services,
which allows sudo/rootwrap to contact with the hosts dbus - all symptoms
are documented in the related bug.
Since we use tcp connections to OVS from Neutron agents - removing
bind mounts.
Closes-Bug: #1861792
Change-Id: Ifee4bec7b2e9ef 4e2d624b1411f1a 9e6332325c6 340d95703e85355 ae81585506)
(cherry picked from commit 227008cf68aa68f