Xena Series Release Notes¶
check if the user input is legal, currently, trove may have a RCE vulnerability. more details see: Stroy 2010004
Added iptables-persistent package in the guest image element for diskimage-builder. The Trove service administrator is able to perform iptables command (leveraging cloud-init config) and persist the change.
The project user can query the project’s own resource quota.
Show network ID for the instance private address.
The default value of the trove guest agent config option
[postgresql] backup_docker_imageis changed to
openstacktrove/db-backup-postgresql:1.1.1. There is nothing to do if the option is not configured explicitly.
Changed the network mode of database container to “bridge” and exposed the service ports. Cloud operator could adjust the iptables to restrict network access from the database container to the outside. An example:
iptables -t filter -I DOCKER-USER 1 -d [restricted-network-range] -i docker0 ! -o docker0 -j REJECT
Fixed backup creation failed issue when using custom container image registry.
Added a periodic task for postgresql datastore to clean up the archived WAL files. Added a check when creating incremental backups for postgresql. A new container image
openstacktrove/db-backup-postgresql:1.1.2is uploaded to docker hub.
Fixed an issue that the replication configuration is lost after resizing instance.