kolla-ansible

  1. Series wallaby
  2. Bug #1931615
  3. Comment #16

Comment 16 for bug 1931615

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/train)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/801720
Committed: https://opendev.org/openstack/kolla-ansible/commit/f725a500a11ee04144042676f393aec62bfed1c0
Submitter: "Zuul (22348)"
Branch: stable/train

commit f725a500a11ee04144042676f393aec62bfed1c0
Author: Radosław Piliszek <email address hidden>
Date: Thu Jun 10 17:26:38 2021 +0000

    Disable docker's ip-forward when iptables disabled

    With the new default since Wallaby, starting Docker makes it
    enable forwarding and not filter it at all.
    This may pose a security risk and should be mitigated.

    Closes-Bug: #1931615
    Change-Id: I5129136c066489fdfaa4d93741c22e5010b7e89d
    (cherry picked from commit 0fa4ee56eb86eb7d4b4e3bb9d9c9993f6906c1bd)