kolla-ansible

docker_yum_gpgkey not used consistently

Bug #1934913 reported by Mark Goddard on 2021-07-07

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	kolla-ansible	Fix Released	Medium	Unassigned

Bug Description

Currently, if you override docker_yum_url, the repo must contain a GPG key at {{ docker_yum_url }}/gpg, despite the fact that the GPG key URL can be overridden separately via docker_yum_gpgkey. A local mirror is unlikely to contain this key.

Tags:

Mark Goddard (mgoddard) on 2021-07-07

Changed in kolla-ansible:
importance:	Undecided → Medium

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-07-07: Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/799863

Changed in kolla-ansible:
status:	New → In Progress

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-09: Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/799863
Committed: https://opendev.org/openstack/kolla-ansible/commit/54737cd13f90a695d126d39a779199dd51dc8653
Submitter: "Zuul (22348)"
Branch: master

commit 54737cd13f90a695d126d39a779199dd51dc8653
Author: Mark Goddard <email address hidden>
Date: Wed Jul 7 17:18:26 2021 +0100

baremetal: use docker_yum_gpgkey to fetch docker GPG key

    Currently, if you override docker_yum_url, the repo must contain a GPG
    key at {{ docker_yum_url }}/gpg, despite the fact that the GPG key URL
    can be overridden separately via docker_yum_gpgkey. This change uses
    docker_yum_gpgkey consistently, avoiding the need to keep the key in the
    repo.

Closes-Bug: #1934913
Change-Id: If8e6a02ce0760123f7b076c711727ef575965192

Changed in kolla-ansible:
status:	In Progress → Fix Released

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-10: Fix proposed to kolla-ansible (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/804013

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-10: Fix proposed to kolla-ansible (stable/victoria)

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/804014

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-10: Fix proposed to kolla-ansible (stable/ussuri)

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/804015

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-11: Fix merged to kolla-ansible (stable/ussuri)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/804015
Committed: https://opendev.org/openstack/kolla-ansible/commit/3acfef48fa72f9dbdf2a2127f39508ece608b56b
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit 3acfef48fa72f9dbdf2a2127f39508ece608b56b
Author: Mark Goddard <email address hidden>
Date: Wed Jul 7 17:18:26 2021 +0100

baremetal: use docker_yum_gpgkey to fetch docker GPG key

    Currently, if you override docker_yum_url, the repo must contain a GPG
    key at {{ docker_yum_url }}/gpg, despite the fact that the GPG key URL
    can be overridden separately via docker_yum_gpgkey. This change uses
    docker_yum_gpgkey consistently, avoiding the need to keep the key in the
    repo.

Closes-Bug: #1934913
Change-Id: If8e6a02ce0760123f7b076c711727ef575965192

tags:	added: in-stable-ussuri
tags:	added: in-stable-victoria

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-11: Fix merged to kolla-ansible (stable/victoria)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/804014
Committed: https://opendev.org/openstack/kolla-ansible/commit/5e5efd804d6d0b276262b45e4b6f5de314125cf1
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 5e5efd804d6d0b276262b45e4b6f5de314125cf1
Author: Mark Goddard <email address hidden>
Date: Wed Jul 7 17:18:26 2021 +0100

baremetal: use docker_yum_gpgkey to fetch docker GPG key

    Currently, if you override docker_yum_url, the repo must contain a GPG
    key at {{ docker_yum_url }}/gpg, despite the fact that the GPG key URL
    can be overridden separately via docker_yum_gpgkey. This change uses
    docker_yum_gpgkey consistently, avoiding the need to keep the key in the
    repo.

Closes-Bug: #1934913
Change-Id: If8e6a02ce0760123f7b076c711727ef575965192

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-08-11: Fix merged to kolla-ansible (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/804013
Committed: https://opendev.org/openstack/kolla-ansible/commit/e45bde6368b4392a9a472ef0a6555c1bfd036957
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit e45bde6368b4392a9a472ef0a6555c1bfd036957
Author: Mark Goddard <email address hidden>
Date: Wed Jul 7 17:18:26 2021 +0100

baremetal: use docker_yum_gpgkey to fetch docker GPG key

    Currently, if you override docker_yum_url, the repo must contain a GPG
    key at {{ docker_yum_url }}/gpg, despite the fact that the GPG key URL
    can be overridden separately via docker_yum_gpgkey. This change uses
    docker_yum_gpgkey consistently, avoiding the need to keep the key in the
    repo.

Closes-Bug: #1934913
Change-Id: If8e6a02ce0760123f7b076c711727ef575965192

tags:

added: in-stable-wallaby

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-09-02: Fix included in openstack/kolla-ansible 12.2.0

This issue was fixed in the openstack/kolla-ansible 12.2.0 release.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-10-14: Fix included in openstack/kolla-ansible 13.0.0.0rc1

#10

This issue was fixed in the openstack/kolla-ansible 13.0.0.0rc1 release candidate.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2021-11-23: Fix included in openstack/kolla-ansible 10.4.0