OpenSearch 2.12 builds broken

Bug #2054586 reported by Michal Nasiadka
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla
Status tracked in Caracal
Antelope
Fix Released
Critical
Unassigned
Bobcat
Fix Released
Critical
Unassigned
Caracal
Fix Released
Critical
Unassigned
Yoga
Fix Committed
Critical
Unassigned
Zed
Fix Released
Critical
Unassigned

Bug Description

OpenSearch 2.12 has introduced a requirement to set an environment variable for initial admin password that is not weak.

See https://github.com/opensearch-project/data-prepper/issues/3978 and https://github.com/opensearch-project/security/issues/3624

Changed in kolla:
status: New → In Progress
description: updated
Changed in kolla:
importance: Undecided → Critical
description: updated
Revision history for this message
Maksim Malchuk (mmalchuk) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (master)

Reviewed: https://review.opendev.org/c/openstack/kolla/+/909644
Committed: https://opendev.org/openstack/kolla/commit/756ee984c3c761514115c342e7cba9a3cb533d02
Submitter: "Zuul (22348)"
Branch: master

commit 756ee984c3c761514115c342e7cba9a3cb533d02
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 21 11:10:30 2024 +0100

    opensearch: set OPENSEARCH_INITIAL_ADMIN_PASSWORD

    Since 2.12 OpenSearch requires setting initial admin password,
    that is not trivial/weak.

    Closes-Bug: #2054586

    Change-Id: I6b6ef656bc2009a2dc3cdfcb01956d50fba4b7b9

Changed in kolla:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla (stable/2023.2)

Fix proposed to branch: stable/2023.2
Review: https://review.opendev.org/c/openstack/kolla/+/909559

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla (stable/2023.1)

Fix proposed to branch: stable/2023.1
Review: https://review.opendev.org/c/openstack/kolla/+/909560

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla (stable/zed)

Fix proposed to branch: stable/zed
Review: https://review.opendev.org/c/openstack/kolla/+/909821

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla (unmaintained/yoga)

Fix proposed to branch: unmaintained/yoga
Review: https://review.opendev.org/c/openstack/kolla/+/909822

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (stable/2023.2)

Reviewed: https://review.opendev.org/c/openstack/kolla/+/909559
Committed: https://opendev.org/openstack/kolla/commit/3927238ade1ead641d387f9edfdfb3789a429142
Submitter: "Zuul (22348)"
Branch: stable/2023.2

commit 3927238ade1ead641d387f9edfdfb3789a429142
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 21 11:10:30 2024 +0100

    opensearch: set OPENSEARCH_INITIAL_ADMIN_PASSWORD

    Since 2.12 OpenSearch requires setting initial admin password,
    that is not trivial/weak.

    Closes-Bug: #2054586

    Change-Id: I6b6ef656bc2009a2dc3cdfcb01956d50fba4b7b9
    (cherry picked from commit 756ee984c3c761514115c342e7cba9a3cb533d02)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (stable/2023.1)

Reviewed: https://review.opendev.org/c/openstack/kolla/+/909560
Committed: https://opendev.org/openstack/kolla/commit/95b7c30cfd06e2edca29670b138b385ee94fae41
Submitter: "Zuul (22348)"
Branch: stable/2023.1

commit 95b7c30cfd06e2edca29670b138b385ee94fae41
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 21 11:10:30 2024 +0100

    opensearch: set OPENSEARCH_INITIAL_ADMIN_PASSWORD

    Since 2.12 OpenSearch requires setting initial admin password,
    that is not trivial/weak.

    Closes-Bug: #2054586

    Change-Id: I6b6ef656bc2009a2dc3cdfcb01956d50fba4b7b9
    (cherry picked from commit 756ee984c3c761514115c342e7cba9a3cb533d02)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (stable/zed)

Reviewed: https://review.opendev.org/c/openstack/kolla/+/909821
Committed: https://opendev.org/openstack/kolla/commit/24b31bff55dc05228cbf2e8e9e360d565838e3fa
Submitter: "Zuul (22348)"
Branch: stable/zed

commit 24b31bff55dc05228cbf2e8e9e360d565838e3fa
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 21 11:10:30 2024 +0100

    opensearch: set OPENSEARCH_INITIAL_ADMIN_PASSWORD

    Since 2.12 OpenSearch requires setting initial admin password,
    that is not trivial/weak.

    Closes-Bug: #2054586

    Change-Id: I6b6ef656bc2009a2dc3cdfcb01956d50fba4b7b9
    (cherry picked from commit 756ee984c3c761514115c342e7cba9a3cb533d02)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (unmaintained/yoga)

Reviewed: https://review.opendev.org/c/openstack/kolla/+/909822
Committed: https://opendev.org/openstack/kolla/commit/d0a7d42715806309a38d1c6f8820448ef6f90cf8
Submitter: "Zuul (22348)"
Branch: unmaintained/yoga

commit d0a7d42715806309a38d1c6f8820448ef6f90cf8
Author: Michal Nasiadka <email address hidden>
Date: Wed Feb 21 11:10:30 2024 +0100

    opensearch: set OPENSEARCH_INITIAL_ADMIN_PASSWORD

    Since 2.12 OpenSearch requires setting initial admin password,
    that is not trivial/weak.

    Change [1] has been bundled with this commit, since it's an ancestor
    in newer branches, but it won't build without this one.

    Mark bifrost as unbuildable for now, see [2].

    [1]: https://review.opendev.org/c/openstack/kolla/+/909823
    [2]: https://review.opendev.org/c/openstack/bifrost/+/909844

    Closes-Bug: #2054586

    Change-Id: I6b6ef656bc2009a2dc3cdfcb01956d50fba4b7b9
    (cherry picked from commit 756ee984c3c761514115c342e7cba9a3cb533d02)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 16.4.0

This issue was fixed in the openstack/kolla 16.4.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 17.3.0

This issue was fixed in the openstack/kolla 17.3.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 15.6.0

This issue was fixed in the openstack/kolla 15.6.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.