Skip to content

Synchronise 2024.1 with upstream - #231

Merged
priteau merged 4 commits into
stackhpc/2024.1from
upstream/2024.1-2026-08-10
Aug 11, 2026
Merged

Synchronise 2024.1 with upstream#231
priteau merged 4 commits into
stackhpc/2024.1from
upstream/2024.1-2026-08-10

Conversation

@github-actions

Copy link
Copy Markdown

This PR contains a snapshot of 2024.1 from upstream unmaintained/2024.1.

sbauza and others added 4 commits June 20, 2026 09:21
User-supplied scheduler hints can include internal keys like
"_nova_check_type" which cause the scheduler to bypass Placement
candidate selection, request pre-filters, and resource claims.
This can lead to instances being created without proper resource
accounting.

Rather than rejecting the request, silently strip any _nova-prefixed
hints before they reach the scheduler. This is consistent with the
existing hints behavior of ignoring unknown ones and ensures the
probe attempt still costs the attacker money.

Assisted-By: Cursor

Change-Id: Iac4fef93bef0bab3060d40a9ea3e0ebd69a38c37
Closes-Bug: #2151252
Signed-off-by: Sylvain Bauza <sbauza@redhat.com>
(cherry picked from commit 9666894)
(cherry picked from commit 32bd847)
(cherry picked from commit 0e969c5)
(cherry picked from commit 355edcb)
The websocket proxy mutates the CONF host list with the Host header
from the request, which would then poison future requests and/or
lead to a slow resource exhaustion attack. Simply making a copy before
mutation avoids the issue.

Generated-By: Claude Opus 4.6
Closes-Bug: #2158919
Change-Id: Ib13e479337f9b1c8b16952089d1d5f6979976b86
Signed-off-by: Dan Smith <dansmith@redhat.com>
(cherry picked from commit 0612fed)
(cherry picked from commit e488194)
(cherry picked from commit 5fe20b9)
(cherry picked from commit faceea8)
These are good indicators of failing gates, but unmaintained is not
really followed, so let's free up resources by removing these jobs.

Change-Id: Id075bc9afdb414c9cf4cef5b0d35bb7090030057
Signed-off-by: Elod Illes <elod.illes@est.tech>
@github-actions
github-actions Bot requested a review from a team as a code owner August 10, 2026 06:42
@github-actions github-actions Bot added automated Automated action performed by GitHub Actions synchronisation labels Aug 10, 2026
@priteau
priteau enabled auto-merge August 11, 2026 10:07
@priteau
priteau disabled auto-merge August 11, 2026 10:22
@priteau
priteau merged commit 52631f7 into stackhpc/2024.1 Aug 11, 2026
8 checks passed
@priteau
priteau deleted the upstream/2024.1-2026-08-10 branch August 11, 2026 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated action performed by GitHub Actions synchronisation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants