Skip to content

Conversation

noonedeadpunk
Copy link
Contributor

@noonedeadpunk noonedeadpunk commented Jul 10, 2025

In CAPO version v0.11.2 there is a severe bug allowing to accomplish
Denial of Service by any tenant.

Manual removal of VM by tenant which is managed by CAPO results
in a pod crash in a loop. This has been fixed with [1] and is part
of the 0.12.2 release.

This is alternative patch to #152 due to messing up with introduction
of DCO requirement.

[1] kubernetes-sigs/cluster-api-provider-openstack#2477

In CAPO version v0.11.2 there is a severe bug allowing to accomplish
Denial of Service by any tenant.

Manual removal of VM by tenant which is managed by CAPO results
in a pod crash in a loop. This has been fixed with [1] and is part
of the  0.12.2 release.

Signed-off-by: Dmitriy Rabotyagov <[email protected]>
More modern CAPO also requires corresponding CAPI , otherwise
VM creation fails with:
`no matches for kind \"Image\" in version \"openstack.k-orc.cloud/v1alpha1\`

Signed-off-by: Dmitriy Rabotyagov <[email protected]>
CAPO 0.12.0 has removed ORC [1] and now it needs to be installed
additionally.

[1] https://github.com/kubernetes-sigs/cluster-api-provider-openstack/releases/tag/v0.12.0

Signed-off-by: Dmitriy Rabotyagov <[email protected]>
@mnaser
Copy link
Member

mnaser commented Aug 31, 2025

The approach I rather take here is a new role specific for the k-orc since it's just a dependency, so I'm going to add a new role to this and add it as a dependency instead.

I'll see if we can use Kustomize as well.

Signed-off-by: Mohammed Naser <[email protected]>
Signed-off-by: Mohammed Naser <[email protected]>
Signed-off-by: Mohammed Naser <[email protected]>
Signed-off-by: Mohammed Naser <[email protected]>
Signed-off-by: Mohammed Naser <[email protected]>
@mnaser
Copy link
Member

mnaser commented Sep 1, 2025

alright, it's working great now, I just have to add the nodeSelector patch and we should be able to land this.

@jrosser @noonedeadpunk lmk if this is looking good, i dont think it should break you and keeps things nice and organized.

@mnaser
Copy link
Member

mnaser commented Sep 2, 2025

alright, this should sort out all of the issues surrounding pre-commit and linters..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants