kolla-ansible/releasenotes/notes/cve-2023-2088-51e7e050be2139bf.yaml
Sean Mooney ddadaa282e always add service_user section to nova.conf
As of I3629b84d3255a8fe9d8a7cea8c6131d7c40899e8 nova
now requires the service_user section to be configured
to address CVE-2023-2088. This change adds
the service user section to the nova.conf template in
the nova and nova-cell roles.

Related-Bug: #2004555
Signed-off-by: Sven Kieske <kieske@osism.tech>
Change-Id: I2189dafca070accfd8efcd4b8cc4221c6decdc9f
(cherry picked from commit a77ea13ef1)
(cherry picked from commit 03c12abbcc)
(cherry picked from commit cb105dc293)
(cherry picked from commit efe6650d09)
2023-05-16 04:20:21 +00:00

10 lines
270 B
YAML

---
fixes:
- |
Configuration of service user tokens for all Nova and Cinder services
is now done automatically, to ensure security of block-storage volume
data.
See `LP#[2004555] <https://bugs.launchpad.net/nova/+bug/2004555>`__ for
more details.