OpenStack Compute (nova)

Migration config containing secret should not be created in /tmp

Bug #2018592 reported by Franciszek Przewoźny
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Fix Released
Undecided
Franciszek Przewoźny

Bug Description

In nova->placement upgrade procedure document (https://docs.openstack.org/placement/latest/admin/upgrade-to-stein.html) /tmp/migrate-db.rc is an example location for migration config. As this file contains secrets for both nova_api and placement databases, it is insecure to keep in /tmp/ directory (as most of admins will forget to shred and remove it). It should be changed from /tmp/migrate-db.rc to f.e. /root/migrate-db.rc

Tags: placement
Franciszek Przewoźny (fprzewozn)
Changed in placement:
assignee: nobody → Franciszek Przewoźny (fprzewozn)
OpenStack Infra (hudson-openstack)
Changed in placement:
status: New → In Progress
Revision history for this message
Franciszek Przewoźny (fprzewozn) wrote :

https://review.opendev.org/c/openstack/placement/+/882436

Revision history for this message
Franciszek Przewoźny (fprzewozn) wrote :

moved to nova

affects: placement → nova
tags: added: placement
Franciszek Przewoźny (fprzewozn)
Changed in nova:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/placement 11.0.0.0rc1

This issue was fixed in the openstack/placement 11.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.