)]}' { "log": [ { "commit": "6cca9b5107d9558372242107088b67eab4dfe619", "tree": "8dec2b44f63ad4eedeb1f2b707b06bb84ecf3456", "parents": [ "56341df867e12f24673dcf186db14609d444b5ae", "30cc11693695ee0e0c877dc7baca4ace8ee2e19f" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Jan 14 14:39:50 2019 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Jan 14 14:39:50 2019 +0000" }, "message": "Merge \"Network OVS: ovs ports must be in an ovs bridge config\" into release/2019.2.0" }, { "commit": "56341df867e12f24673dcf186db14609d444b5ae", "tree": "66b9fd3887b51bdaae1bd82a6b4ec8bbb3350faa", "parents": [ "3387f33fd79bc40d749ff7114498d5d95366a761", "0a95cd3d819edb7c6f989f3b0d30afc53025390f" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Jan 14 14:39:21 2019 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Jan 14 14:39:21 2019 +0000" }, "message": "Merge \"Remove ovs from dpdk bridge config\" into release/2019.2.0" }, { "commit": "30cc11693695ee0e0c877dc7baca4ace8ee2e19f", "tree": "5d2f01109604e36efd698589ec1e26aeb6a14484", "parents": [ "3387f33fd79bc40d749ff7114498d5d95366a761" ], "author": { "name": "Oleg Bondarev", "email": "obondarev@mirantis.com", "time": "Wed Nov 28 12:32:30 2018 +0400" }, "committer": { "name": "Oleg Bondarev", "email": "obondarev@mirantis.com", "time": "Mon Jan 14 11:16:49 2019 +0000" }, "message": "Network OVS: ovs ports must be in an ovs bridge config\n\nIf they are not, they won\u0027t be brought up on restart.\n\nChange-Id: Ic60c4fd8010cf9e376254c2a98a0eec7b9182305\nRelated-Prod: PROD-25269\n(cherry picked from commit daf24a924711536c1c9a30db2b4c3e7c1463fa10)\n" }, { "commit": "0a95cd3d819edb7c6f989f3b0d30afc53025390f", "tree": "99a620d483e3de455c8018ff48c6188a4f3848e7", "parents": [ "712e17ea731277f37b8987beb92aa6bbdd34ae93" ], "author": { "name": "Oleg Bondarev", "email": "obondarev@mirantis.com", "time": "Wed Nov 28 16:41:32 2018 +0400" }, "committer": { "name": "Oleg Bondarev", "email": "obondarev@mirantis.com", "time": "Fri Jan 11 14:22:39 2019 +0000" }, "message": "Remove ovs from dpdk bridge config\n\nThis partially reverts commit f4d2d7ddce4297ffb65d78c151c2ab12c4443f74\nOVS in config file leads to errors with dpdk bridge setup after\nreboot and eventually to dpdk bridge absence.\nError is like: \"ifup@br\\x2dprv.service: Unit is bound to\ninactive unit sys-subsystem-net-devices-br\\x2dprv.device. Stopping, too.\"\n\nThe patch is also fixing success criteria for bridge creation to\navoid false positive when some ports have similar names.\n\nChange-Id: I939b649542c79f49a8136e89fec5803db7d4c7da\nRelated-Prod: PROD-25241\nRelated-Prod: PROD-25269\n(cherry picked from commit fdbdecfabb6af00849acb06efe254e22f4679a2a)\n" }, { "commit": "3387f33fd79bc40d749ff7114498d5d95366a761", "tree": "920a00aefd0a4c8469adba5d98f7d13afa124ee2", "parents": [ "712e17ea731277f37b8987beb92aa6bbdd34ae93" ], "author": { "name": "root", "email": "root@cfg01.oshyshko-oscore-test-cookiecutter-model-2839.local", "time": "Fri Jan 11 08:55:32 2019 +0000" }, "committer": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Fri Jan 11 12:38:40 2019 +0000" }, "message": "Add flexible management of lvm filters\n\nAllow user to flexibly manage filters in lvm.conf via\nlinux:storage:lvm_filters dictionary\n\nChange-Id: I37928610f0ec2bd3ef6f5eac2e5d555a0ce39aa2\nRelated-Prod: PROD-26396\n(cherry picked from commit 40bb5e7efd03e98606c06abf8a55a0e47bf7dab9)\n" }, { "commit": "712e17ea731277f37b8987beb92aa6bbdd34ae93", "tree": "924072ffeb00b1c66981f1f12426348a00eecc5c", "parents": [ "34735578170c4cf9847a2712687d24d6c59eb947" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Thu Jan 10 19:32:20 2019 +0200" }, "committer": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Thu Jan 10 20:57:49 2019 +0000" }, "message": "Refactor lvm:filter logic\n\n * Apply filter, only if something has been passed\n * lvm support lvm.conf check - lets use it!\n * Changes in lvm.conf must be\n reflected in initramfs \u003d\u003e add corresponding trigger\n\nProd-related: PROD-26396 (PROD:26396)\n\nChange-Id: I7055f78db52773cbf7d4f11e255110ca9053f4be\n(cherry picked from commit a5bf9f4c2535430abd124619e2db827c9c51f3e8)\n" }, { "commit": "34735578170c4cf9847a2712687d24d6c59eb947", "tree": "42ed3684db773c57d2bd828afa652535501216fd", "parents": [ "a3a73d0ddd2b61fd68a55c1e4f00ad18a2097fb5", "ac05e4d6941e644e64a40042614c496748a22279" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Wed Dec 26 11:51:10 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Wed Dec 26 11:51:10 2018 +0000" }, "message": "Merge \"Improve bond interfaces monitoring\"" }, { "commit": "ac05e4d6941e644e64a40042614c496748a22279", "tree": "0eedd71b2899c0ffa1492f858595aa16a4ffccc3", "parents": [ "1cd80ba3e51f7fccae6dfbbba916da97541b0b73" ], "author": { "name": "Ildar Svetlov", "email": "isvetlov@mirantis.com", "time": "Tue Dec 25 15:02:58 2018 +0400" }, "committer": { "name": "Ildar Svetlov", "email": "isvetlov@mirantis.com", "time": "Tue Dec 25 15:57:09 2018 +0400" }, "message": "Improve bond interfaces monitoring\n\n- enable bond telegraf input plugin by default on every host\nwhere bond interface enabled;\n- disable SystemRxPacketsDroppedTooHigh and\nSystemRxPacketsDroppedLongTermTooHigh alerts for bond slaves;\n\nChange-Id: I17961a3133226b0878f553635b33216a23226015\nRelated-PROD: PROD-25272 (PROD:25272)\n" }, { "commit": "a3a73d0ddd2b61fd68a55c1e4f00ad18a2097fb5", "tree": "6b60b301918f340e40aa21ea6a51464f2b4f86dc", "parents": [ "1cd80ba3e51f7fccae6dfbbba916da97541b0b73" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Thu Dec 06 14:49:58 2018 +0200" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Mon Dec 24 19:03:08 2018 +0200" }, "message": "Implement global apt preferences opt\n\n * Misc: fix \u0027humanname\u0027 processing\n * require salt-formula-salt\u003d0.4+201812211629.9b3097a or higer\n - add dep. salt\n\nProd-relate: PROD-25786 (PROD:25786)\n\nChange-Id: Ie93425d579a44e1a9775a37e9592530c1e0be02c\n" }, { "commit": "1cd80ba3e51f7fccae6dfbbba916da97541b0b73", "tree": "de947216d09231b416ecdcf0beee8acf37dfb034", "parents": [ "4416e363a48ec06eaafa6f9f434d85bcc0876dad" ], "author": { "name": "Ivan Udovichenko", "email": "iudovichenko@mirantis.com", "time": "Wed Dec 19 02:28:24 2018 +0300" }, "committer": { "name": "Ivan Udovichenko", "email": "iudovichenko@mirantis.com", "time": "Wed Dec 19 02:31:01 2018 +0300" }, "message": "Change device file system\n\nshm file system does not exist on the target OS (Ubuntu 16.04),\nbut tmpfs does.\n\nPROD-25485 (PROD:25485)\n\nChange-Id: I6a5b4802b92159f6f2e16757d6340a2fd7d8beae\n" }, { "commit": "4416e363a48ec06eaafa6f9f434d85bcc0876dad", "tree": "47d1cbee5be4daaf42e61b36a5303dd506271b97", "parents": [ "fc6a9ee5849a93f2608e40a3c691496825ef0d4a", "5cfece741bd264865fa5443e38d2ba91c58e0265" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Sat Dec 15 06:49:02 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Sat Dec 15 06:49:02 2018 +0000" }, "message": "Merge \"Updating reference from github to gerrit - Changing Maintainer to dev@mirantis.com\"" }, { "commit": "5cfece741bd264865fa5443e38d2ba91c58e0265", "tree": "0efb732a1e693ccd2d7a0c1090fd05c33e34ae69", "parents": [ "c5fdd049bfca24da45ab0fd238d4df7bbe2d3d95" ], "author": { "name": "Pavel Cizinsky", "email": "pcizinsky@mirantis.com", "time": "Wed Dec 12 12:02:25 2018 +0100" }, "committer": { "name": "Pavel Cizinsky", "email": "pcizinsky@mirantis.com", "time": "Thu Dec 13 10:46:28 2018 +0100" }, "message": "Updating reference from github to gerrit\n - Changing Maintainer to dev@mirantis.com\n\n Related: PROD-25327 (PROD:25327)\n\nChange-Id: Ic10aaaeb5e36e6829656f7c1103387c97f9c2e79\n" }, { "commit": "fc6a9ee5849a93f2608e40a3c691496825ef0d4a", "tree": "003c93a31ad614854344f9ae3e26278430a5ea48", "parents": [ "c5fdd049bfca24da45ab0fd238d4df7bbe2d3d95" ], "author": { "name": "Ildar Svetlov", "email": "isvetlov@mirantis.com", "time": "Tue Dec 11 13:18:40 2018 +0400" }, "committer": { "name": "Ildar Svetlov", "email": "isvetlov@mirantis.com", "time": "Tue Dec 11 17:23:23 2018 +0400" }, "message": "Rework sotftnet stats based alerts\n\nChange-Id: I2a3032824c168200a7a1d389fafe95ef04ae7452\nRelted-PROD: PROD-25593 (PROD:25593)\n" }, { "commit": "c5fdd049bfca24da45ab0fd238d4df7bbe2d3d95", "tree": "e2fcf1dc56505601b876a26c4ce6440fdd3f2035", "parents": [ "d661608345b81547bf0d0704a56ed3fadfb19858", "52dd34e2a5e8418800d69f6b6ef37096976e9c52" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Thu Dec 06 15:19:46 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Thu Dec 06 15:19:46 2018 +0000" }, "message": "Merge \"Add require ifenslave before start configuring bonding interfaces.\"" }, { "commit": "d661608345b81547bf0d0704a56ed3fadfb19858", "tree": "a2cc6fffa4a2e935359b87895d08c67aba1913cb", "parents": [ "0ad53f3d7e500b7852d5e9a11b4756d511b80d3e", "3f42259982ecfe9f3f307712bae8b0a9f1b39ca3" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Dec 03 12:32:56 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Dec 03 12:32:56 2018 +0000" }, "message": "Merge \"Add setting mac address for ovs_port\"" }, { "commit": "52dd34e2a5e8418800d69f6b6ef37096976e9c52", "tree": "be83b4369e785223989dd5386db184180e481ca3", "parents": [ "ea4c5ef39749d30d40c4fee76a028d44e0bd4902" ], "author": { "name": "Mikhail Samoylov", "email": "msamoylov@mirantis.com", "time": "Thu Nov 29 16:52:47 2018 +0300" }, "committer": { "name": "Mikhail Samoylov", "email": "msamoylov@mirantis.com", "time": "Mon Dec 03 13:43:29 2018 +0300" }, "message": "Add require ifenslave before start configuring bonding interfaces.\n\nThe main problem was that bond0 interface on gtw01 node is down.\nIts happend because in linux salt formula we are starting package\nconfiguring before installed it.\nAnd we have the following behaviour in this scenario:\n1. Formula creates files with network interfaces settings\nand systemd trie to up it.\n2. For bonding interface we need a package ifenslave-2.6\n3. While we haven\u0027t ifenslave-2.6 package on system bond0 building\nfailed on cmp and gtw nodes, after first failed attempt systemd\nexecutes ifdown and after second attempt ifdown was\nsuccessful (on compute nodes, but not on gtw).\n\nCloses: PROD-23109\n\nChange-Id: Ic5f4de785a617ec5024dd8d6e479f4b3e61dfec4\n" }, { "commit": "0ad53f3d7e500b7852d5e9a11b4756d511b80d3e", "tree": "0ba5836f0c0adb8da5b45eb32fda0acba8f5764c", "parents": [ "858843613d489d8bda1eb122c452043b953bf67d", "70d0978da990ab5c6df88ae40ea494b253c5d23d" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Dec 03 09:43:41 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Dec 03 09:43:41 2018 +0000" }, "message": "Merge \"Generalizing services and overrides in linux.system.service Adding tests for linux.system.service\"" }, { "commit": "858843613d489d8bda1eb122c452043b953bf67d", "tree": "d7dc4cf80e6b02d4c67d9bd268c8a99a21013e30", "parents": [ "ea4c5ef39749d30d40c4fee76a028d44e0bd4902", "0afceda0e04419644b959059db951645e7b824d1" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Dec 03 09:18:34 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Dec 03 09:18:34 2018 +0000" }, "message": "Merge \"Fix report generator. br devices are skipped in output.\"" }, { "commit": "70d0978da990ab5c6df88ae40ea494b253c5d23d", "tree": "ab9c1bf16942ce36c10f53f6579f7cda3ac40e62", "parents": [ "0afceda0e04419644b959059db951645e7b824d1" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Fri Nov 30 16:04:59 2018 +0100" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Fri Nov 30 17:14:52 2018 +0100" }, "message": "Generalizing services and overrides in linux.system.service\nAdding tests for linux.system.service\n\nProd-Related: PROD-22528\n\nChange-Id: I46ca9a16b35af7f271053c0b6abb2c331f9c4c6b\n" }, { "commit": "3f42259982ecfe9f3f307712bae8b0a9f1b39ca3", "tree": "2ed2b85d2be1e71b5604b89031a4e29266fec66b", "parents": [ "ea4c5ef39749d30d40c4fee76a028d44e0bd4902" ], "author": { "name": "Ann Taraday", "email": "akamyshnikova@mirantis.com", "time": "Thu Nov 29 11:37:29 2018 +0400" }, "committer": { "name": "Ann Taraday", "email": "akamyshnikova@mirantis.com", "time": "Thu Nov 29 11:39:22 2018 +0400" }, "message": "Add setting mac address for ovs_port\n\nRequried for I7f9651b6cbe39afce2ebd989aab582dbda643654\n\nChange-Id: I2a7768cd0899070fb095dd49cc3e678cd540cf3a\nRelated-PROD: PROD-25286\n" }, { "commit": "0afceda0e04419644b959059db951645e7b824d1", "tree": "9a24a38552eea2832dc879149df34c087ec7198c", "parents": [ "fae59fb28253c02a14c397e2c483ccd80da7358d" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Mon Nov 26 13:31:36 2018 +0100" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Mon Nov 26 13:31:36 2018 +0100" }, "message": "Fix report generator.\nbr devices are skipped in output.\n\nChange-Id: Ie3cc7b243b5c26a24ec4accf0fb6846b83018a13\n" }, { "commit": "ea4c5ef39749d30d40c4fee76a028d44e0bd4902", "tree": "bb5dba8252664b9c38a3ac3b53c214b2c2002831", "parents": [ "fae59fb28253c02a14c397e2c483ccd80da7358d", "b47417be7de36291ee0eebcf6cb784e5a610e84f" ], "author": { "name": "Pavel Cizinsky", "email": "pcizinsky@mirantis.com", "time": "Thu Nov 22 13:27:17 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Thu Nov 22 13:27:17 2018 +0000" }, "message": "Merge \"Move to Mirantis owned docker images for tests - This is a temporary solution until we have our own images\"" }, { "commit": "fae59fb28253c02a14c397e2c483ccd80da7358d", "tree": "3245bd2e4fbbb19b7342c72d54b6c56803b3e6b7", "parents": [ "04ff008203e2ceb31b36efd477d99e595f1c8c9c" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Wed Nov 21 10:10:10 2018 +0100" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Wed Nov 21 10:10:10 2018 +0100" }, "message": "Adding ability to set up optional groups for user.\n\nChange-Id: I0109e9b5298253fac0dac090066c313e8f7fccbb\n" }, { "commit": "b47417be7de36291ee0eebcf6cb784e5a610e84f", "tree": "89e97ef2439e92a654136c6d46276b3674f6c8b2", "parents": [ "04ff008203e2ceb31b36efd477d99e595f1c8c9c" ], "author": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Tue Nov 20 15:08:58 2018 +0100" }, "committer": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Tue Nov 20 15:08:58 2018 +0100" }, "message": "Move to Mirantis owned docker images for tests\n - This is a temporary solution until we have our own images\n\n Fixes: PROD-24956 (PROD:24956)\n\nChange-Id: I7785138ce40d9f717d0c8a1d57ce62d801443ccc\n" }, { "commit": "04ff008203e2ceb31b36efd477d99e595f1c8c9c", "tree": "791cb754e4441fd63819c8f096de45fce7dc85d4", "parents": [ "fca64a1ae72fff6eab0a35f23f16376e48f3cd12", "e9b72f38639c04d2ecbd51052e427bffa2187bbf" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Nov 12 18:56:16 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Nov 12 18:56:16 2018 +0000" }, "message": "Merge \"Update Gemfile and Makefile configuration - One Gemfile for all formulas tests - Update Makefile for OpenStack tests\"" }, { "commit": "fca64a1ae72fff6eab0a35f23f16376e48f3cd12", "tree": "df814ce66c2d3a4e597e031faa211981c8eac97b", "parents": [ "5aa7a5908cbe9b287c75e8c70461ec4de800fb18", "1dafcf37d9c8a4d7344fa99130b8c154fcc4e02b" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Thu Nov 08 15:21:04 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Thu Nov 08 15:21:04 2018 +0000" }, "message": "Merge \"Fix obsolete parameter.\"" }, { "commit": "e9b72f38639c04d2ecbd51052e427bffa2187bbf", "tree": "68f99b86325c43c50bc45fccab3fff1963d7b08f", "parents": [ "93b9ae9245f7a90cd4a5086cf51944007d594769" ], "author": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Wed Nov 07 14:43:36 2018 +0100" }, "committer": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Wed Nov 07 17:36:49 2018 +0100" }, "message": "Update Gemfile and Makefile configuration\n - One Gemfile for all formulas tests\n - Update Makefile for OpenStack tests\n\nFixes: PROD-24408 (PROD:24408)\nChange-Id: Id3371922e0755fc9af7ef52c894972ed49c57fd5\n" }, { "commit": "5aa7a5908cbe9b287c75e8c70461ec4de800fb18", "tree": "25432b93a8ba571cb713312bceef5d95dc316a0e", "parents": [ "93b9ae9245f7a90cd4a5086cf51944007d594769", "f4d2d7ddce4297ffb65d78c151c2ab12c4443f74" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Wed Nov 07 14:20:19 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Wed Nov 07 14:20:19 2018 +0000" }, "message": "Merge \"Always bring up OVS bridges\"" }, { "commit": "93b9ae9245f7a90cd4a5086cf51944007d594769", "tree": "2035a4c25eb1b468c9c4fc2f16c5832064cb0da9", "parents": [ "b938dde500941ea1024da66084665f9532497e7e" ], "author": { "name": "Gleb Galkin", "email": "ggalkin@mirantis.com", "time": "Thu Oct 18 13:57:30 2018 +0300" }, "committer": { "name": "Gleb Galkin", "email": "ggalkin@mirantis.com", "time": "Tue Nov 06 13:09:13 2018 +0300" }, "message": "PAM changes for supporting duo 2FA solution\n\nMulti-Factor Authentication (MFA) for sshd+PAM\nhttps://duo.com/product/multi-factor-authentication-mfa\n\nRelated-Prod: PROD-24422\nChange-Id: Iddec5a5e99e7db5d7f173ad939d3fd0cac1cd22b\n" }, { "commit": "b938dde500941ea1024da66084665f9532497e7e", "tree": "9c53c1194b5f2613437d293989f30865ca03b252", "parents": [ "dd80ea394b62892d1fe828611a5218311297069d", "517a910f29846f1d9667b2dcea2211c94c37ab7b" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Fri Nov 02 11:25:32 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Fri Nov 02 11:25:32 2018 +0000" }, "message": "Merge \"Don\u0027t try to update timezone when grain noservices is set\"" }, { "commit": "f4d2d7ddce4297ffb65d78c151c2ab12c4443f74", "tree": "4697ee874a6fa566acec0bcb2d39a2ef2b86f6ef", "parents": [ "af661e7ac16b9c2f23e97e57fe8fe066203ec846" ], "author": { "name": "Dennis Dmitriev", "email": "ddmitriev@mirantis.com", "time": "Thu Nov 01 06:44:53 2018 +0200" }, "committer": { "name": "Denis Dmitriev", "email": "ddmitriev@mirantis.com", "time": "Thu Nov 01 19:38:51 2018 +0000" }, "message": "Always bring up OVS bridges\n\nLinux bridges are automatically set UP when\nany parent interface is UP.\n\nBut for OVS bridges it doesn\u0027t work.\n\nFor dpdk and non-dpdk bridges, always create a\nconfig file in /etc/network/interfaces.u/ and\nbring the bridge interface up after it is configured,\neven if it doesn\u0027t have IP address.\n\nChange-Id: I92888ce0d373e412dfb7ed2e2398c0d4d008e301\nCloses-Bug: https://mirantis.jira.com/browse/PROD-24343\n" }, { "commit": "1dafcf37d9c8a4d7344fa99130b8c154fcc4e02b", "tree": "ebda2266aaa5cc7abbe0ed345191827ebcdfc536", "parents": [ "3ded6e48077b3f4bc44cfd04236f63c55b5a10de" ], "author": { "name": "Martin Horak", "email": "horak.martin@gmail.com", "time": "Wed Sep 05 08:18:51 2018 +0200" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Thu Nov 01 16:54:45 2018 +0100" }, "message": "Fix obsolete parameter.\n\nChange-Id: Ic79a50793dfbff220244a410bdf36bcf8dfb21a1\n" }, { "commit": "dd80ea394b62892d1fe828611a5218311297069d", "tree": "9d120bcfbc466d98de06db250039da6233c0d67f", "parents": [ "00cdbe635e4e53640eff46e6390d173ed6334d72", "35815c0ec4e1791f1195b298889a25a6ecc3a48d" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Thu Nov 01 12:29:43 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Thu Nov 01 12:29:43 2018 +0000" }, "message": "Merge \"Introduce template option for linux.system.file\"" }, { "commit": "00cdbe635e4e53640eff46e6390d173ed6334d72", "tree": "67a3a689df47ed6ecfb430407493eaaeabb09b49", "parents": [ "af661e7ac16b9c2f23e97e57fe8fe066203ec846" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Wed Oct 31 16:41:54 2018 +0100" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Thu Nov 01 10:58:25 2018 +0100" }, "message": "Feature: Global noifupdown check.\n\nIssue description:\n\n PXE interfaces, which are used by salt should not be restarted\nduring salt calls, otherwise communication between salt master and\nsalt minion would be interrupted.\n Therefore it is possible to specify \"noifupdown: True\" in pillars\nfor this interface or group of interfaces, which are used for PXE\nnetwork.\n This pillar structure will remain until one removes it manualy.\n It is not possible to remove it during deploy and enforce network\nstate without touching the model.\n\n It is possible to override pillars from CLI like:\n # salt ctl01* state.apply linux.network.interface \\\n pillar\u003d\u0027{\"linux\":{\"network\":{\"interface\":{\"ens3\":{\"noifupdown\":True}}}}}\u0027\n\n However it is not easy/possible to predict all interfaces for PXE\nnetwork.\n\nSolution:\n Provide global noifupdown pillar value check.\n If it exists, noifupdown will take effect and not otherwise.\n So our deployment would have next steps:\n - Execute: linux.network.interface pillar\u003d\u0027{\"linux\":{\"network\":{\"noifupdown\":True}}}\u0027\n - Reboot node to enable kernel params like hugepages etc.\n - Execute: linux.network.interface with no params to ensure PXE.\n\nPipelines may pass this parameter to control noifupdown behavior.\n\nChange-Id: I8863f972c7805e4bf4f9e104d6c0ddf055c39cb1\n" }, { "commit": "35815c0ec4e1791f1195b298889a25a6ecc3a48d", "tree": "d168e14cbfe527a0f066b6a4843521edf43fb8dc", "parents": [ "af661e7ac16b9c2f23e97e57fe8fe066203ec846" ], "author": { "name": "Gabor Orosz", "email": "gabor.orosz@ericsson.com", "time": "Fri Sep 07 17:31:05 2018 +0200" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Wed Oct 31 18:00:11 2018 +0200" }, "message": "Introduce template option for linux.system.file\n\nChange-Id: Ifb45b2cf72d71caa9c8a63f8e7684fd15b81e450\nImplements: jira/CLOUDB-487\nSigned-off-by: Gabor Orosz \u003cgabor.orosz@ericsson.com\u003e\n" }, { "commit": "af661e7ac16b9c2f23e97e57fe8fe066203ec846", "tree": "90d9469137f7725a07d26e134ca7930ffac6f72c", "parents": [ "999aff8c6fb2ca19db848148b254fb259bc22fda", "4be6e49698ed44fe95e981daf6339c3f9732a0b5" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Tue Oct 30 06:54:50 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Tue Oct 30 06:54:50 2018 +0000" }, "message": "Merge \"Tune default thresholds for the nstat_time_squeeze based alerts\"" }, { "commit": "999aff8c6fb2ca19db848148b254fb259bc22fda", "tree": "e9f0c79e9c4159d8d499eaa71869f41baf4fb335", "parents": [ "adb2f07dd17ce134740a6e2139dc4d07be84d6d7", "eb04f1e6e39bc47ef44c54700f80928a804c38a1" ], "author": { "name": "Filip Pytloun", "email": "filip@pytloun.cz", "time": "Fri Oct 26 17:40:19 2018 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 26 17:40:19 2018 +0200" }, "message": "Merge pull request #170 from car-da/master\n\nchange logic when I define user.gid" }, { "commit": "4be6e49698ed44fe95e981daf6339c3f9732a0b5", "tree": "c4523966848aa55ee500e197d12f18abd39f6e67", "parents": [ "adb2f07dd17ce134740a6e2139dc4d07be84d6d7" ], "author": { "name": "Ildar Svetlov", "email": "isvetlov@mirantis.com", "time": "Fri Oct 26 12:58:03 2018 +0400" }, "committer": { "name": "Ildar Svetlov", "email": "isvetlov@mirantis.com", "time": "Fri Oct 26 15:46:19 2018 +0400" }, "message": "Tune default thresholds for the nstat_time_squeeze based alerts\n\nCurrent thresholds don\u0027t matche real warning/minor values for\nthe time_squeeze numbers. As a result we have false positive.\n\nChange-Id: I6990c101fe671c05d75d0640fd6799667b5f3fa1\nRelated-PROD: PROD-24406 (PROD:24406)\n" }, { "commit": "eb04f1e6e39bc47ef44c54700f80928a804c38a1", "tree": "e9f0c79e9c4159d8d499eaa71869f41baf4fb335", "parents": [ "adb2f07dd17ce134740a6e2139dc4d07be84d6d7" ], "author": { "name": "Jaroslav Steinhaisl", "email": "jaroslav.steinhaisl@t-mobile.cz", "time": "Fri Oct 26 13:40:32 2018 +0200" }, "committer": { "name": "Jaroslav Steinhaisl", "email": "jaroslav.steinhaisl@t-mobile.cz", "time": "Fri Oct 26 13:40:32 2018 +0200" }, "message": "change logic when I define user.gid\n" }, { "commit": "adb2f07dd17ce134740a6e2139dc4d07be84d6d7", "tree": "a6b42af09c1756324ad4c30c31b37d583be64d9a", "parents": [ "a0d8b2d8b108bff351d6ed60ad427dcbdccc57de" ], "author": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Wed Oct 24 12:02:43 2018 +0200" }, "committer": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Wed Oct 24 12:02:43 2018 +0200" }, "message": "Freeze inspec version for salt-formulas tests\n\t- in inspec \u003e\u003d 3.0.0 there are changes in schema\n\t which require to have tests/integration dir\n\t to contain tests, otherwise fails\n\t- this is temporary workaround until we decide\n\t proper fix\n\nChange-Id: Ie251c093e3d66532d027a47a56272936cf3cbcb3\n" }, { "commit": "a0d8b2d8b108bff351d6ed60ad427dcbdccc57de", "tree": "73467ecdcfc7a7cdf5c77e6d70fb02c8e658eb7b", "parents": [ "f129a2cad92d53c780bf6245561d0cc4170545e7" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Mon Oct 22 14:12:05 2018 +0200" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Mon Oct 22 14:12:05 2018 +0200" }, "message": "Linux formula should be able to create non-unique users.\n\nChange-Id: I3338950ed3726a750149d849d33813b0eeed50c0\n" }, { "commit": "f129a2cad92d53c780bf6245561d0cc4170545e7", "tree": "4b8e503b1339f32a222ded4454bec0cf1af84cb7", "parents": [ "17cb8b5d017fc6b1854431240623ffd210adf2c2", "75ea11e54d708a6929e9128f25da2d03fee123a6" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Oct 22 10:08:28 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Mon Oct 22 10:08:28 2018 +0000" }, "message": "Merge \"Bring in ovs_config module/state\"" }, { "commit": "17cb8b5d017fc6b1854431240623ffd210adf2c2", "tree": "7105385021dcb917b70b8092515a1c6572896a11", "parents": [ "67aea14ddbc5e13b75a928beb92d037a7c24174e" ], "author": { "name": "Ivan Berezovskiy", "email": "iberezovskiy@mirantis.com", "time": "Fri Sep 21 16:06:36 2018 +0400" }, "committer": { "name": "Ivan Berezovskiy", "email": "iberezovskiy@mirantis.com", "time": "Tue Oct 09 18:52:30 2018 +0400" }, "message": "Disable/enable for swap entities\n\n* Add ability to disable some swap entities and enable others\n\nChange-Id: Ic2f947f7b9fc6f29411a9171d68eb0836fce29ed\nRelated-task: #PROD-23150 (PROD:23150)\n" }, { "commit": "67aea14ddbc5e13b75a928beb92d037a7c24174e", "tree": "c9595305336af23a53665f9ee0baa34107d751e3", "parents": [ "8fd00ac7174a86fa34b50089724190ea5f169fb6", "d1a268baeaf4d2814ae02072165d952fe2be35e9" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Tue Oct 09 08:44:50 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Tue Oct 09 08:44:50 2018 +0000" }, "message": "Merge \"Adding network resource grab script. Useful during environment setup.\"" }, { "commit": "d1a268baeaf4d2814ae02072165d952fe2be35e9", "tree": "cca65dcd0884fdde544d76d6410c32695e100367", "parents": [ "bd8c8416e317bc5804586245127d820cb02cee11" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Wed Oct 03 16:36:04 2018 +0200" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Tue Oct 09 10:28:53 2018 +0200" }, "message": "Adding network resource grab script.\nUseful during environment setup.\n\nChange-Id: Ic8d4d82cc6f6afb0ac2a6e4285c3b681bb895b6d\n" }, { "commit": "8fd00ac7174a86fa34b50089724190ea5f169fb6", "tree": "e838952be0bbaf049e193456a055dc5daa36e247", "parents": [ "bd8c8416e317bc5804586245127d820cb02cee11" ], "author": { "name": "Anton Samoylov", "email": "asamoylov@mirantis.com", "time": "Fri Oct 05 23:25:44 2018 +0400" }, "committer": { "name": "Anton Samoylov", "email": "asamoylov@mirantis.com", "time": "Sat Oct 06 00:37:05 2018 +0400" }, "message": "Fix typo in parameter name inside login.defs jinja template\n\nThis typo mistake affects behavior of user.present module function\nas it uses \u0027useradd\u0027 linux utility under the hood.\nMissing USERGROUPS_ENAB parameter \u003d\u003d do not create user groups by default.\nThis change in behavior of useradd util breaks all states, which are relaying\non creation of user group during new user creation procedure, e.g. set up\ncassandra backups.\n\nChange-Id: Ie17aae58fc6673b9c5d53bb68f681446f30d0a1a\nRelated-bug: PROD-23741\n" }, { "commit": "bd8c8416e317bc5804586245127d820cb02cee11", "tree": "7b545bf35fb4bba8c4d78e3b6d3d1e9a95aced84", "parents": [ "098f5cef8089245892924efe897cfa58f429f180", "ff331d84bf40dfce2154946a30922349bb965192" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Tue Oct 02 19:07:48 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Tue Oct 02 19:07:48 2018 +0000" }, "message": "Merge \"Reworked \u0027unless\u0027 for adding ports to bridge\"" }, { "commit": "098f5cef8089245892924efe897cfa58f429f180", "tree": "a767598431c87c81a049c2b5c81f9729269c3a47", "parents": [ "a81066e81af397dbafb3d0bcf4c6de880b96d362", "b0592f0cc28da06c36f064ee455dbc2f7ab480e3" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Tue Oct 02 19:07:34 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Tue Oct 02 19:07:34 2018 +0000" }, "message": "Merge \"Removed hardcoded dpdk0 for dpdk_ovs_port\"" }, { "commit": "a81066e81af397dbafb3d0bcf4c6de880b96d362", "tree": "7710df6a5f1465fb7b893b9f3cb8b19b4aac3a96", "parents": [ "dda5fab96866d1684e0f9b5a3173b8bde196c341", "b877d8c931e1c375d803287e9f0a4539552a6246" ], "author": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Tue Oct 02 18:53:59 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Tue Oct 02 18:53:59 2018 +0000" }, "message": "Merge \"Use linux.system.shell state\"" }, { "commit": "b877d8c931e1c375d803287e9f0a4539552a6246", "tree": "3826194caca6c2bfedd8a3b58f61d9c68584e6d1", "parents": [ "e4ea94f1bbc5430d0d1138c85837cc6948d0f3f0" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Oct 02 13:35:20 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Oct 02 18:34:54 2018 +0300" }, "message": "Use linux.system.shell state\n\nhttps://gerrit.mcp.mirantis.com/25351/ was merged but linux.system.shell\nstate wasn\u0027t included into init.yml and was never used.\n\nThis commit fixes this.\n\nRelated-Prod: PROD-23581\n\nChange-Id: I89e09247dd2566b8a5b0c0e67e8ca9c789ed57f6\n" }, { "commit": "dda5fab96866d1684e0f9b5a3173b8bde196c341", "tree": "c0cf36c9b4a67adae4431569b2289947aaac2ad0", "parents": [ "e4ea94f1bbc5430d0d1138c85837cc6948d0f3f0" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Oct 02 15:59:52 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Oct 02 16:32:44 2018 +0300" }, "message": "Drop CIS 5.4.1.4\n\nCIS 5.4.1.4 should be configured in /etc/default/useradd\n\ncis-5-4-1-4.yml attempts to configure this item in\npillar that relates to /etc/login.defs and should be removed.\n\nRelated-Prod: PROD-23600\n\nChange-Id: Iea93a54a44df919c07001fc02e3551276ef9583c\n" }, { "commit": "e4ea94f1bbc5430d0d1138c85837cc6948d0f3f0", "tree": "77c6186324c7c4dc82a2bcc15ca1ec9cfddeeb54", "parents": [ "23b0e658e578d6115cc2721d99f61aae5c3bf6f8", "4b7ec79d3c3e476fbbfd6ae6dcf0ec04ecee1276" ], "author": { "name": "Martin Polreich", "email": "mpolreich@mirantis.com", "time": "Tue Oct 02 09:13:09 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "mail@domain.com", "time": "Tue Oct 02 09:13:09 2018 +0000" }, "message": "Merge \"Remove systemd.source prefix from logs tag\"" }, { "commit": "4b7ec79d3c3e476fbbfd6ae6dcf0ec04ecee1276", "tree": "9baab2ca9a6b4f102d9548f98c4ed4f659ad727a", "parents": [ "83d7f9708beb032d42849ee1218f7d16c18509c3" ], "author": { "name": "Michal Kobus", "email": "mkobus@mirantis.com", "time": "Thu Sep 27 17:04:45 2018 +0200" }, "committer": { "name": "Michal Kobus", "email": "mkobus@mirantis.com", "time": "Mon Oct 01 14:52:29 2018 +0200" }, "message": "Remove systemd.source prefix from logs tag\n\nTo simplify filtering in Kibana change\nsystemd.source prefix to record field \"source\".\n\nChange-Id: I7729ae6721a1050a938370a588d35313f91f971a\nRelated-bug: PROD-21827 (PROD:21827)\n" }, { "commit": "ff331d84bf40dfce2154946a30922349bb965192", "tree": "ee7d6a14477927e8121ed5d59cad39e18d56ac41", "parents": [ "b0592f0cc28da06c36f064ee455dbc2f7ab480e3" ], "author": { "name": "Dmitry Ukov", "email": "dukov@mirantis.com", "time": "Fri Sep 28 22:36:54 2018 +0400" }, "committer": { "name": "Dmitry Ukov", "email": "dukov@mirantis.com", "time": "Sat Sep 29 13:59:00 2018 +0400" }, "message": "Reworked \u0027unless\u0027 for adding ports to bridge\n\nPrevious implementation was not able to add port \u0027dpdk0\u0027 to bridge\n\u0027br-dpdk0\u0027 since both matches \u0027grep\u0027 condition. To fix this we need to\nlook for port in a particular bridge\n\nChange-Id: Ie83cebc3ab73c45a48f68fae2d6f474743215908\n" }, { "commit": "b0592f0cc28da06c36f064ee455dbc2f7ab480e3", "tree": "69ec0b94eee5465b713961e2930bb9a952b6f915", "parents": [ "23b0e658e578d6115cc2721d99f61aae5c3bf6f8" ], "author": { "name": "Dmitry Ukov", "email": "dukov@mirantis.com", "time": "Fri Sep 28 22:33:13 2018 +0400" }, "committer": { "name": "Dmitry Ukov", "email": "dukov@mirantis.com", "time": "Sat Sep 29 13:57:03 2018 +0400" }, "message": "Removed hardcoded dpdk0 for dpdk_ovs_port\n\nChange-Id: Ia8690d3968aa6c8491ec62b73f78afd6b2361c60\n" }, { "commit": "23b0e658e578d6115cc2721d99f61aae5c3bf6f8", "tree": "838559a5181168f17853aa1a9880118b132b0713", "parents": [ "f1c123ca5feba8da1e886aa3d54e0d99cf23c77c", "579f6df95c1b46c4d5b4839eda17a13f49b2f8a3" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Fri Sep 28 21:22:44 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Fri Sep 28 21:22:44 2018 +0000" }, "message": "Merge \"CIS 5.4.4\"" }, { "commit": "579f6df95c1b46c4d5b4839eda17a13f49b2f8a3", "tree": "8aa92407e528e1c537d410c1be4f311d93af15fb", "parents": [ "bf79ba4369955f42511ad655fa891623a38d0a65" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Fri Sep 28 16:05:30 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Fri Sep 28 16:05:05 2018 +0000" }, "message": "CIS 5.4.4\n\n* 5.4.4 Ensure default user umask is 027 or more restrictive (Scored)\n\nChange-Id: Idc219e7f6e8ab4b7e3d24a36f95f8aab4eff3160\nRelated-Prod: PROD-18386\n" }, { "commit": "f1c123ca5feba8da1e886aa3d54e0d99cf23c77c", "tree": "14012f5c3694f38cdda91ecd821b89b65541d7d4", "parents": [ "bf79ba4369955f42511ad655fa891623a38d0a65" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Fri Sep 28 16:32:25 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Fri Sep 28 16:32:25 2018 +0300" }, "message": "Always include grub.sls\n\nChange-Id: If1bbd97b5719c53193f6287c4a025e6ef0dafbb0\nRelated-Prod: PROD-18386\n" }, { "commit": "bf79ba4369955f42511ad655fa891623a38d0a65", "tree": "4f2ea150e08d38b73dcbc9ea1591fa24575e611d", "parents": [ "47e41f45c8a3d489cc290d0dd3bdaeccba266e10" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 27 13:56:38 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 27 18:00:46 2018 +0000" }, "message": "CIS 5.4.1.x\n\n* CIS 5.4.1.1 Ensure password expiration is 90 days or less (Scored)\n* CIS 5.4.1.2 Ensure minimum days between password changes is 7 or more (Scored)\n* CIS 5.4.1.3 Ensure password expiration warning days is 7 or more (Scored)\n* CIS 5.4.1.4 Ensure inactive password lock is 30 days or less (Scored)\n\nRelated-Prod: PROD-18386\n\nChange-Id: I42697c31823c631acb1528ca917b39c069fb72bf\n" }, { "commit": "47e41f45c8a3d489cc290d0dd3bdaeccba266e10", "tree": "113c36cea18eb7ad08723fa9f97697b0b7ff4301", "parents": [ "83d7f9708beb032d42849ee1218f7d16c18509c3" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 27 14:10:09 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 27 17:15:10 2018 +0300" }, "message": "Per-user password expiration parameter\n\nThe following parameters defined in /etc/login.defs can\nbe overridden per-user:\n\n* PASS_MAX_DAYS\n* PASS_MIN_DAYS\n* PASS_WARN_DAYS\n* INACTIVE\n\nRelated-Prod: PROD-18386\n\nChange-Id: I5b182128f9dd8a043b48fb86e61febb2fd5c7e0a\n" }, { "commit": "83d7f9708beb032d42849ee1218f7d16c18509c3", "tree": "9df973bfec6c1ed99e45810878c601aa96c978dd", "parents": [ "6e38b02c508ab1b08cd843baa400808805a3dc4f", "41581866f44b9a03e4b3adea37aa9da569d9841c" ], "author": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Tue Sep 25 13:02:51 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Tue Sep 25 13:02:51 2018 +0000" }, "message": "Merge \"Remove tralling-spaces from preferences_repo\"" }, { "commit": "6e38b02c508ab1b08cd843baa400808805a3dc4f", "tree": "5fd62145359a15b5ab67bcd0ee6857de2f4f55ef", "parents": [ "73f29d733f68bc48b0eb5266b44b29addea8c36c", "ba028c3e95488e07fbe2a01992301d1b52747162" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Tue Sep 25 09:07:56 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Tue Sep 25 09:07:56 2018 +0000" }, "message": "Merge \"CIS 5.4.4, 5.4.5\"" }, { "commit": "41581866f44b9a03e4b3adea37aa9da569d9841c", "tree": "2b7e614c518668b06c18b6f17df79030be28dae1", "parents": [ "73f29d733f68bc48b0eb5266b44b29addea8c36c" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Sep 21 15:28:30 2018 +0300" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Sep 21 15:30:40 2018 +0300" }, "message": "Remove tralling-spaces from preferences_repo\n\n * apt tool sensetive for tralling spaces, and 2 files\n aka:\n cat -E mcp_saltstack\n $\n Package: libsodium18$\n Pin: release o\u003dSaltStack$\n Pin-Priority: 50$\n $\n Package: *$\n Pin: release o\u003dSaltStack$\n Pin-Priority: 1100$\n $\n # VS\n cat -E mcp_saltstack\n $\n Package: libsodium18$\n Pin: release o\u003dSaltStack$\n Pin-Priority: 50$\n $\n Package: *$\n Pin: release o\u003dSaltStack$\n Pin-Priority: 1100$\n $\n Make\u0027s different logic for apt\n\nChange-Id: Ia5fdbe319a65b0fa017c8c065905db1837f9f982\n" }, { "commit": "73f29d733f68bc48b0eb5266b44b29addea8c36c", "tree": "ed0a01c2ac944e723535aa07fec9ba9f5f47a232", "parents": [ "173e7eb8593c45dcf199788d20954649a756a054" ], "author": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Wed Sep 19 10:29:37 2018 +0200" }, "committer": { "name": "Dzmitry Stremkouski", "email": "dstremkouski@mirantis.com", "time": "Wed Sep 19 10:29:39 2018 +0200" }, "message": "Fixing dpdk disabled case for pillars with ovs_dpdk_port\n\nProd-Related: EME-405\n\nChange-Id: Id9a8ebefb227c4b0a99d8cdd955c39401720bbee\n" }, { "commit": "517a910f29846f1d9667b2dcea2211c94c37ab7b", "tree": "ff22c54ed2a3eca01ab9b098d712ef3414b1fc65", "parents": [ "75a4eb54a616cfb087079124d342f25af2aa53bc" ], "author": { "name": "Bruno Binet", "email": "bruno.binet@gmail.com", "time": "Fri Sep 07 09:22:14 2018 +0000" }, "committer": { "name": "Petr Michalec", "email": "epcim@apealive.net", "time": "Wed Sep 19 09:34:16 2018 +0200" }, "message": "Don\u0027t try to update timezone when grain noservices is set\n\nas it will fail because dbus service is not running\n\nChange-Id: I498f5b09b146c643f4d53ab0cb65146274f12b5d\n" }, { "commit": "173e7eb8593c45dcf199788d20954649a756a054", "tree": "2aa0aefd592e1d79cca0baec41662d26cc701167", "parents": [ "5bcad94f8230c17391dc7e1581ba871d07e01160", "4494a47bd513c04d51fbd604849ba96d850c239f" ], "author": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Tue Sep 18 08:53:07 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Tue Sep 18 08:53:07 2018 +0000" }, "message": "Merge \"Implement repo.pinning logic\"" }, { "commit": "5bcad94f8230c17391dc7e1581ba871d07e01160", "tree": "5e982aac3a70862555f981a74a0dd5ddff121918", "parents": [ "f317e9e0ddc910c0dec1348ce634ee1c7590bc93", "148e1b89edd760ebc9d260b63f264bfe0d86481f" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Mon Sep 17 09:31:51 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Mon Sep 17 09:31:51 2018 +0000" }, "message": "Merge \"Add option to disable automatic write of sysfs attributes\"" }, { "commit": "4494a47bd513c04d51fbd604849ba96d850c239f", "tree": "8473af60c8d8241969aa080ecc53b0fe891e5e45", "parents": [ "f317e9e0ddc910c0dec1348ce634ee1c7590bc93" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Sep 14 19:19:23 2018 +0300" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Mon Sep 17 12:26:00 2018 +0300" }, "message": "Implement repo.pinning logic\n\n * Ubuntu pinning params allow to be used\n multiply times. In same time, old `list`\n format now allowing to be predictable\n iterated inside jinja\n\nRelated-Bug: PROD-21604 (PROD:21604)\n\nChange-Id: If1c0f0f834a296b9a19d0af5fc7673c9229a7ac5\n" }, { "commit": "f317e9e0ddc910c0dec1348ce634ee1c7590bc93", "tree": "54c2f735ed116b8b0e13f84d963232c12b0f386b", "parents": [ "6285d18bac43ce691a986bb5c26d96a91058bf7f", "def4bdd9310df03366c8826caadd629ecb67f8c8" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Fri Sep 14 10:59:06 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Fri Sep 14 10:59:06 2018 +0000" }, "message": "Merge \"CIS 1.1.21 Disable Automounting\"" }, { "commit": "6285d18bac43ce691a986bb5c26d96a91058bf7f", "tree": "e085534ceb9c75911b4aba0038e54f35753c86b3", "parents": [ "1b2923988dd0346a6586938911d54b7a684e4017", "32b969eaa747c68d7b164dc6cfaca308f18d9a82" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Thu Sep 13 18:17:36 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Thu Sep 13 18:17:36 2018 +0000" }, "message": "Merge \"Fix grub.cfg permissions (CIS 1.4.1)\"" }, { "commit": "148e1b89edd760ebc9d260b63f264bfe0d86481f", "tree": "9d8d2d096a7fe6ef07dd0907e7d9f167b58cd27b", "parents": [ "e28c250deba9cb3491175c8498b0fe601fe6afe0" ], "author": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Thu Sep 13 15:54:25 2018 +0200" }, "committer": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Thu Sep 13 17:20:42 2018 +0200" }, "message": "Add option to disable automatic write of sysfs attributes\n\nFixes: PROD-23149 (PROD:23149)\n\nChange-Id: I14c68a0a519a63951571f966fae72fd01ec2e556\n" }, { "commit": "1b2923988dd0346a6586938911d54b7a684e4017", "tree": "96513bb35a639d3d1f0b7621229b2e667ab4c88d", "parents": [ "e28c250deba9cb3491175c8498b0fe601fe6afe0" ], "author": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Thu Sep 13 16:04:51 2018 +0200" }, "committer": { "name": "Martin Polreich", "email": "polreichmartin@gmail.com", "time": "Thu Sep 13 16:04:51 2018 +0200" }, "message": "Fix Python version for Travis CI tests\n\nChange-Id: Ibbbb99511544ab3bb1532b71942fea15ae0f34a1\n" }, { "commit": "def4bdd9310df03366c8826caadd629ecb67f8c8", "tree": "ec398aeecfa37138be813cccc4c3426d25fdb063", "parents": [ "e28c250deba9cb3491175c8498b0fe601fe6afe0" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Fri Aug 17 09:41:58 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 13 14:22:12 2018 +0300" }, "message": "CIS 1.1.21 Disable Automounting\n\nRelated-Prod: PROD-22653\n\nChange-Id: I5b389309f0cb2890cf9a9a777348efb5a9d7d735\n" }, { "commit": "32b969eaa747c68d7b164dc6cfaca308f18d9a82", "tree": "87cb2cafa9f52fdc517a6f51bf7243d0c4300532", "parents": [ "052d582b5f119a66b2dcfd2dbb4ce6f513718827" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Sep 12 19:47:30 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 13 11:13:16 2018 +0000" }, "message": "Fix grub.cfg permissions (CIS 1.4.1)\n\n* CIS 1.4.1 Ensure permissions on bootloader config are configured\n\nRelated-Prod: PROD-22655\n\nChange-Id: Ia282baae0be5c038d42b672758662aaed9aae6f5\n" }, { "commit": "e28c250deba9cb3491175c8498b0fe601fe6afe0", "tree": "8813b3752740f8a952f61020855f99d8885d7d4f", "parents": [ "e999baaf2b19eb46ec3da670946edae8a246c108", "4326d345c7b76f06386865d604c33899faaf4260" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Thu Sep 13 11:11:54 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Thu Sep 13 11:11:54 2018 +0000" }, "message": "Merge \"CIS compliance (packages)\"" }, { "commit": "e999baaf2b19eb46ec3da670946edae8a246c108", "tree": "878ad83f2c3199fb56e6169b7b1e9c32f6b84e0c", "parents": [ "052d582b5f119a66b2dcfd2dbb4ce6f513718827", "ee7b811a6289a3d479193291c2d20db3c1b46945" ], "author": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Thu Sep 13 10:57:50 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Thu Sep 13 10:57:50 2018 +0000" }, "message": "Merge \"CIS compliance (modprobe.d)\"" }, { "commit": "052d582b5f119a66b2dcfd2dbb4ce6f513718827", "tree": "510aa565cc63af6b057c57000999ce2872e44e09", "parents": [ "e6268087382f209e69575c33058b7765af068d74", "48e66a3a5c77b557d55a8bcac4bb8add82d7a6c9" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Wed Sep 12 13:32:23 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Wed Sep 12 13:32:23 2018 +0000" }, "message": "Merge \"Fix permissions on /etc/{at,cron}.allow\"" }, { "commit": "ee7b811a6289a3d479193291c2d20db3c1b46945", "tree": "7b3ac10c639eb5b6e937aed6c3ee0be676f08c0b", "parents": [ "e6268087382f209e69575c33058b7765af068d74" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 22 12:46:08 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 11 18:55:21 2018 +0300" }, "message": "CIS compliance (modprobe.d)\n\n* CIS 1.1.1.1 Ensure mounting of cramfs filesystems is disabled\n* CIS 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled\n* CIS 1.1.1.3 Ensure mounting of jffs2 filesystems is disabled\n* CIS 1.1.1.4 Ensure mounting of hfs filesystems is disabled\n* CIS 1.1.1.5 Ensure mounting of hfsplus filesystems is disabled\n* CIS 1.1.1.6 Ensure mounting of squashfs filesystems is disabled\n* CIS 1.1.1.7 Ensure mounting of udf filesystems is disabled\n* CIS 1.1.1.8 Ensure mounting of FAT filesystems is disabled\n* CIS 3.5.1 Ensure DCCP is disabled\n* CIS 3.5.2 Ensure SCTP is disabled\n* CIS 3.5.3 Ensure RDS is disabled\n* CIS 3.5.4 Ensure TIPC is disabled\n\nRelated-Prod: PROD-20756\nRelated-Prod: PROD-20757\nRelated-Prod: PROD-20758\nRelated-Prod: PROD-20759\n\nChange-Id: Ia8bf992498ef739a4a40fb108fcb449900caf6e3\n" }, { "commit": "e6268087382f209e69575c33058b7765af068d74", "tree": "63bc9b0daf2ffd97297f95be987fa40695b8b0f3", "parents": [ "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf", "ca10ffa318c8ec6735f0b6740a9a70f9f494c1c8" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Tue Sep 11 15:51:05 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Tue Sep 11 15:51:05 2018 +0000" }, "message": "Merge \"CIS compliance (/dev/shm mount options)\"" }, { "commit": "48e66a3a5c77b557d55a8bcac4bb8add82d7a6c9", "tree": "496fc856e5651fe39369e5f27bd131eb957f6bbf", "parents": [ "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 11 16:35:47 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 11 16:35:47 2018 +0300" }, "message": "Fix permissions on /etc/{at,cron}.allow\n\nPermissions 640 root:root doesn\u0027t allow regular user to read\n/etc/{at,cron}.allow files, that changes behavior of at / crontab\ncommands:\n\n* crontab command can\u0027t read /etc/cron.allow and allow any user to modify\n their crontab files.\n* at command can\u0027t read /etc/at.allow and deny every user.\n\nat / crontab files have SGID bits set, so setting correct group\non /etc/{at,cron}.allow fixes the issue.\n\nChange-Id: I4a3fc8d8e823498d6715e26307424e3065cbd6ca\n" }, { "commit": "ba028c3e95488e07fbe2a01992301d1b52747162", "tree": "a74e08d30d378ebff97c5d6b00974f729cf2d781", "parents": [ "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 04 13:01:13 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 11 16:33:14 2018 +0300" }, "message": "CIS 5.4.4, 5.4.5\n\n* CIS 5.4.4 Ensure default user umask is 027 or more restrictive (Scored)\n* CIS 5.4.5 Ensure default user shell timeout is 900 seconds or less (Scored)\n\nRelated-Prod: PROD-20765\n\nChange-Id: I5ff5e5bc76e1d87432caec70f2b35eec288e9213\n" }, { "commit": "4326d345c7b76f06386865d604c33899faaf4260", "tree": "54827d2d13a552afca40dd7386071d8ac40693a1", "parents": [ "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Apr 26 17:21:22 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Sep 06 05:50:31 2018 +0000" }, "message": "CIS compliance (packages)\n\n* CIS 1.5.4 Ensure prelink is disabled\n* CIS 2.3.1 Ensure NIS Client is not installed\n* CIS 2.3.2 Ensure rsh client is not installed\n* CIS 2.3.3 Ensure talk client is not installed\n* CIS 2.3.4 Ensure telnet client is not installed\n\nChange-Id: I0eb11d39deaa28f238a2e618bf95cc248189197c\n" }, { "commit": "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf", "tree": "7ff2086944f355ff598e15b4b1cff2ba5ff4bec2", "parents": [ "3ded6e48077b3f4bc44cfd04236f63c55b5a10de", "a0d31d18f8c3456f6826ed83f3e46b69cd611f81" ], "author": { "name": "mcp-jenkins", "email": "mcp-jenkins@mirantis.com", "time": "Wed Sep 05 13:07:03 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Wed Sep 05 13:07:03 2018 +0000" }, "message": "Merge \"Configure /etc/login.defs\"" }, { "commit": "ca10ffa318c8ec6735f0b6740a9a70f9f494c1c8", "tree": "2a502df78483ae602001f36bd9dff7c68bfbb059", "parents": [ "0f084a01cee47a299fb2f60791a3296728000e55" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 04 18:50:53 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Sep 05 11:51:07 2018 +0300" }, "message": "CIS compliance (/dev/shm mount options)\n\n* CIS 1.1.14 Ensure nodev option set on /dev/shm partition (Scored)\n* CIS 1.1.15 Ensure nosuid option set on /dev/shm partition (Scored)\n* CIS 1.1.16 Ensure noexec option set on /dev/shm partition (Scored)\n\nRelated-Prod: PROD-22652\n\nChange-Id: I35f371ce36bae6104e0176f63bd43a8fc4e5bad3\n" }, { "commit": "3ded6e48077b3f4bc44cfd04236f63c55b5a10de", "tree": "b6721a744ede6f6e980f4a4fe519a4be5b7be319", "parents": [ "11ef3737d2ca10ee5bedbbb716bee5360ed3087c", "483746480ae014bc18fb826052ff224305918789" ], "author": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Tue Sep 04 18:21:37 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Tue Sep 04 18:21:37 2018 +0000" }, "message": "Merge \"Set user shell even if user is system\"" }, { "commit": "a0d31d18f8c3456f6826ed83f3e46b69cd611f81", "tree": "d948cc1cafb6fedecee486b87c2407933ca9ec3d", "parents": [ "0f084a01cee47a299fb2f60791a3296728000e55" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 04 14:43:09 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 04 21:18:23 2018 +0300" }, "message": "Configure /etc/login.defs\n\nRelated-Prod: PROD-21969\n\nChange-Id: I1c30189ee85605a5c68861d98f00bf5ac5e772c2\n" }, { "commit": "483746480ae014bc18fb826052ff224305918789", "tree": "55939c7eb14b076470d319820128555af4176618", "parents": [ "0f084a01cee47a299fb2f60791a3296728000e55" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 04 11:04:02 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Sep 04 11:15:15 2018 +0300" }, "message": "Set user shell even if user is system\n\nlinux/system/user.sls ignores \u0027shell\u0027 option if a\nuser is system. This is quite strange behavior, and it\nbreaks CIS:\n* 5.4.2 Ensure system accounts are non-login\n\nChange-Id: I32dd44ac4fcc1425ea47eb4cf60acf41f6ce0887\nRelated-Prod: PROD-20764\n" }, { "commit": "11ef3737d2ca10ee5bedbbb716bee5360ed3087c", "tree": "e2ad4f8c35239aaad97f45b7d055c450aa4bb9c0", "parents": [ "0f084a01cee47a299fb2f60791a3296728000e55" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Mon Sep 03 15:32:07 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Mon Sep 03 15:32:07 2018 +0300" }, "message": "CIS 6.1.2-6.1.9\n\nCIS items copied from cisbench:\n* CIS 6.1.2 Ensure permissions on /etc/passwd are configured (Scored)\n* CIS 6.1.3 Ensure permissions on /etc/shadow are configured (Scored)\n* CIS 6.1.4 Ensure permissions on /etc/group are configured (Scored)\n* CIS 6.1.5 Ensure permissions on /etc/gshadow are configured (Scored)\n* CIS 6.1.6 Ensure permissions on /etc/passwd- are configured (Scored)\n* CIS 6.1.7 Ensure permissions on /etc/shadow- are configured (Scored)\n* CIS 6.1.8 Ensure permissions on /etc/group- are configured (Scored)\n* CIS 6.1.9 Ensure permissions on /etc/gshadow- are configured (Scored)\n\nChange-Id: I195d08a98c2401a9b0fa8f146ee4b365f933fa1f\n" }, { "commit": "0f084a01cee47a299fb2f60791a3296728000e55", "tree": "19d0c9500ddb74cc1e29eb47462d5feb675b3d41", "parents": [ "75a4eb54a616cfb087079124d342f25af2aa53bc" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 29 14:46:38 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Fri Aug 31 11:52:10 2018 +0300" }, "message": "Manage /etc/{at,cron}.{allow,deny} files\n\nRelated-Prod: PROD-22546\nRelated-Prod: PROD-22664\n\nChange-Id: I66a35ef3d2436541ef70f02e2631fa8d4d86e5e9\n" }, { "commit": "75ea11e54d708a6929e9128f25da2d03fee123a6", "tree": "78c350a9b7f18fd34e7a12df77489b5cc83a7565", "parents": [ "75a4eb54a616cfb087079124d342f25af2aa53bc" ], "author": { "name": "Michael Polenchuk", "email": "mpolenchuk@mirantis.com", "time": "Wed Aug 22 14:34:11 2018 +0400" }, "committer": { "name": "Michael Polenchuk", "email": "mpolenchuk@mirantis.com", "time": "Fri Aug 24 10:03:32 2018 +0400" }, "message": "Bring in ovs_config module/state\n\nChange-Id: I32463501947d6f60e41351102365f435b63651d5\n" }, { "commit": "75a4eb54a616cfb087079124d342f25af2aa53bc", "tree": "1cbf589619a1298b24d0095c928b41b5c495e055", "parents": [ "ad85db09b0b8d9c708bf0e2ecd56f77c7bdf1db1" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Wed Aug 22 16:32:04 2018 +0300" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Wed Aug 22 16:32:49 2018 +0300" }, "message": "Disable cis-3-3-3 rule\n\nChange-Id: I956da1f26e500eae693827ed5dce0f7e65e291bc\nCloses-Bug: PROD-22520 (PROD:22520)\n" }, { "commit": "ad85db09b0b8d9c708bf0e2ecd56f77c7bdf1db1", "tree": "bc9277d5416fdc2f3dfe9bebd418ad1912f47895", "parents": [ "af730f9602bd9a81d1a22fa3bec80e63a661d534" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 22 12:46:08 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 22 12:46:08 2018 +0300" }, "message": "Remove non-existent CIS items\n\nChange-Id: I91bfb8e2a06fc0499addd376db9e38483a6756d0\n" }, { "commit": "af730f9602bd9a81d1a22fa3bec80e63a661d534", "tree": "ac944a3eb0470ed55237243857aff1da3337e0ba", "parents": [ "cf1b5b322a077dc8d6f9bf5b36a7a0a71a2b3a06" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Aug 16 11:29:55 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Aug 21 10:29:33 2018 +0300" }, "message": "CIS compliance (sysctl, limits)\n\n* CIS 1.5.1 Ensure core dumps are restricted\n* CIS 1.5.3 Ensure address space layout randomization (ASLR) is enabled\n* CIS 3.1.2 Ensure packet redirect sending is disabled\n* CIS 3.2.1 Ensure source routed packets are not accepted\n* CIS 3.2.2 Ensure ICMP redirects are not accepted\n* CIS 3.2.3 Ensure secure ICMP redirects are not accepted\n* CIS 3.2.4 Ensure suspicious packets are logged\n* CIS 3.2.5 Ensure broadcast ICMP requests are ignored\n* CIS 3.2.6 Ensure bogus ICMP responses are ignored\n* CIS 3.2.7 Ensure Reverse Path Filtering is enabled\n* CIS 3.2.8 Ensure TCP SYN Cookies is enabled\n\nAll sysctls are valid for Ubuntu 14.04, Ubuntu 16.04.\n\nChange-Id: I48f34c55d97a78c253d4810db46b2a04ff5c0c1a\n" }, { "commit": "cf1b5b322a077dc8d6f9bf5b36a7a0a71a2b3a06", "tree": "f3252b4da96fa722d7994b1dff1d6526ebd81461", "parents": [ "d87f461319b5b7c2dbb6d4160773c9d4abf046f3" ], "author": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Mon Aug 20 15:13:23 2018 +0000" }, "committer": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Mon Aug 20 15:13:23 2018 +0000" }, "message": "Revert \"CIS compliance (modprobe.d)\"\n\nThis reverts commit d87f461319b5b7c2dbb6d4160773c9d4abf046f3.\n\nChange-Id: If175b29f2e130ecf5041e7b0be20f15485089ffa\n" }, { "commit": "d87f461319b5b7c2dbb6d4160773c9d4abf046f3", "tree": "6d56e2c40bb026e6b229d1173c64107569d46376", "parents": [ "809834c85eba328b2c4f3509542a9aa7c9413c72" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Aug 16 11:29:55 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Mon Aug 20 13:05:41 2018 +0300" }, "message": "CIS compliance (modprobe.d)\n\n* CIS 1.1.1.1 Ensure mounting of cramfs filesystems is disabled\n* CIS 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled\n* CIS 1.1.1.3 Ensure mounting of jffs2 filesystems is disabled\n* CIS 1.1.1.4 Ensure mounting of hfs filesystems is disabled\n* CIS 1.1.1.5 Ensure mounting of hfsplus filesystems is disabled\n* CIS 1.1.1.6 Ensure mounting of squashfs filesystems is disabled\n* CIS 1.1.1.7 Ensure mounting of udf filesystems is disabled\n* CIS 1.1.1.8 Ensure mounting of FAT filesystems is disabled\n* CIS 3.5.1 Ensure DCCP is disabled\n* CIS 3.5.2 Ensure SCTP is disabled\n* CIS 3.5.3 Ensure RDS is disabled\n* CIS 3.5.4 Ensure TIPC is disabled\n\nRelated-Prod: PROD-20756\nRelated-Prod: PROD-20757\nRelated-Prod: PROD-20758\nRelated-Prod: PROD-20759\n\nChange-Id: I719984829978caf0401e78daaabf1adfb0d1cfdf\n" }, { "commit": "809834c85eba328b2c4f3509542a9aa7c9413c72", "tree": "f3252b4da96fa722d7994b1dff1d6526ebd81461", "parents": [ "4bf87625a6a2efca03f8c2925a2293f4f287d163" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Mon Aug 13 19:14:42 2018 +0300" }, "committer": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Aug 17 08:55:03 2018 +0000" }, "message": "Extend modprobe files functionality\n\nSupport full set of options defined in\n\n man modprobe.d\n\nChange-Id: I3d30b6bc261ef308ae6afd963f13fda1e4b22c0d\n" }, { "commit": "4bf87625a6a2efca03f8c2925a2293f4f287d163", "tree": "0673e40fa5e36abce0b7f661ae1b9d84d51a04fb", "parents": [ "42b64a1f29a8f447d3e9e5a77db99bee85f87d2a" ], "author": { "name": "Dennis Dmitriev", "email": "ddmitriev@mirantis.com", "time": "Thu Jul 06 21:07:27 2017 +0300" }, "committer": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Aug 17 08:50:38 2018 +0000" }, "message": "Fix pillar tests\n\n * Update run_tests.sh to the latest revision\n * drop odd .kitchen.vagrant.yml\n\nRelated-Bug: PROD-20730 (PROD:20730)\n\nChange-Id: I367800a60ad17020700a76670d1216dfdfcfe692\n" }, { "commit": "42b64a1f29a8f447d3e9e5a77db99bee85f87d2a", "tree": "6daf0ac103f97db204e4c7af9c4c7e06e64d5ca5", "parents": [ "081647356fe40bda9cde9336d5acfc9eb0bcd18e" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Aug 17 11:47:45 2018 +0300" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Fri Aug 17 11:48:36 2018 +0300" }, "message": "Misc fixes\n\n * Add\\fix __virtual__ for modules\n * Remove unneded multiline for repo.sls\n\nChange-Id: I1f8d321b68dfe6a44264b4ddcd6cd0c576938da1\n" }, { "commit": "081647356fe40bda9cde9336d5acfc9eb0bcd18e", "tree": "c4b20fae0c5c7293f76d441cd8a15d9b82c0f80d", "parents": [ "b7c2ef4b5790ca7d6af1af4e39f152cea314cf05", "cc7263a275e6ce0b6c249240217ec6bfc39af05e" ], "author": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Fri Aug 17 06:43:41 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit2@84b5d06f6116", "time": "Fri Aug 17 06:43:41 2018 +0000" }, "message": "Merge \"CIS 3.3.3 Ensure IPv6 is disabled\"" }, { "commit": "b7c2ef4b5790ca7d6af1af4e39f152cea314cf05", "tree": "7455f2f8d463e2524929c6f8a07b30e751858cd4", "parents": [ "7903ba97da7cd57176479cb0b39beb937de94ebd" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Thu Aug 16 14:21:39 2018 +0300" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Thu Aug 16 17:27:26 2018 +0300" }, "message": "Fix linux_enforce_hostname for test env\n\n * Add TODO-proper fix for state - native salt fun.\n But due bug[1] in saltstack - we can\u0027t enable\n proper solution now\n\n[1] https://github.com/saltstack/salt/pull/45748/files/74599bbdfcf99f45d3a31296887097fade31cbf1\n\nRelated-PROD: PROD-20730\n\nChange-Id: I11b6d81ae0f9a7864518f638e8fc423e4e087285\n" } ], "next": "cc7263a275e6ce0b6c249240217ec6bfc39af05e" }