)]}'
{"specs/retire-static.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"48749d71ce708dca46f1211efc327c113a958e86","unresolved":false,"context_lines":[{"line_number":200,"context_line":"* /afs/openstack.org/project/tarballs.openstack.org (current 134gb)"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"The following directories will be migrated (all others should"},{"line_number":203,"context_line":"regenerate themselves)"},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"* /srv/static/tarballs -\u003e /afs/openstack.org/project/tarballs.openstack.org"},{"line_number":206,"context_line":"* /srv/static/releases -\u003e /afs/openstack.org/project/releases.openstack.org"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_6c289ae1","line":203,"updated":"2019-09-23 14:18:35.000000000","message":"We should migrate them all, some are seldomly updated.","commit_id":"a9c7cd7f7fceb866ced6cc5d003fe3f17d7ea154"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"8df3ff4ba90cb7c58a6d26eb1bba19daf57c29f8","unresolved":false,"context_lines":[{"line_number":200,"context_line":"* /afs/openstack.org/project/tarballs.openstack.org (current 134gb)"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"The following directories will be migrated (all others should"},{"line_number":203,"context_line":"regenerate themselves)"},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"* /srv/static/tarballs -\u003e /afs/openstack.org/project/tarballs.openstack.org"},{"line_number":206,"context_line":"* /srv/static/releases -\u003e /afs/openstack.org/project/releases.openstack.org"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_63997cc2","line":203,"in_reply_to":"3fa7e38b_6c289ae1","updated":"2019-09-24 05:32:49.000000000","message":"ahh, good point that for things like specs, etc. we don\u0027t want to have to trigger builds for every repo that publishes there.  done","commit_id":"a9c7cd7f7fceb866ced6cc5d003fe3f17d7ea154"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"db3188d0372969145185e89e823fee1ec8890632","unresolved":false,"context_lines":[{"line_number":116,"context_line":""},{"line_number":117,"context_line":"* 50-qa.openstack.org.conf"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":"  * currently redirects to broken link"},{"line_number":120,"context_line":"    https://docs.openstack.org/developer/qa"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"The following redirects to ``openstack.org``"},{"line_number":123,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3fa7e38b_a081154d","line":120,"range":{"start_line":119,"start_character":0,"end_line":120,"end_character":43},"updated":"2019-10-04 16:38:40.000000000","message":"We discussed in PTG about having a centralized doc for qa (https://docs.openstack.org/qa) but that is not yet done. Once done we can upcated this redirect.\nok for non-existing link as of now.","commit_id":"63360def6c356e1b8e7fa402c646f222b8ab6633"},{"author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"change_message_id":"94f4d8da5d8c208271cbde81101411f6a900431e","unresolved":false,"context_lines":[{"line_number":216,"context_line":"* XXX: Discussion point: choose one of"},{"line_number":217,"context_line":""},{"line_number":218,"context_line":"  * ``vhost`` entires will be created on files.openstack.org via"},{"line_number":219,"context_line":"    updates to extant puppet"},{"line_number":220,"context_line":"  * start a new files01.opendev.org server, based only on ansible"},{"line_number":221,"context_line":"    roles, to deploy these sites"},{"line_number":222,"context_line":"* XXX: Discussion point: choose one of"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3fa7e38b_04236b07","line":219,"updated":"2019-10-01 19:57:48.000000000","message":"I think we can go with option 1 and decouple this from further infrastructure refactoring.  The puppet vhost stuff is pretty boilerplate and easy to add new things.","commit_id":"63360def6c356e1b8e7fa402c646f222b8ab6633"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"dd7c8c24b09c0b0d7355ab4a049331d91fb25a1e","unresolved":false,"context_lines":[{"line_number":216,"context_line":"* XXX: Discussion point: choose one of"},{"line_number":217,"context_line":""},{"line_number":218,"context_line":"  * ``vhost`` entires will be created on files.openstack.org via"},{"line_number":219,"context_line":"    updates to extant puppet"},{"line_number":220,"context_line":"  * start a new files01.opendev.org server, based only on ansible"},{"line_number":221,"context_line":"    roles, to deploy these sites"},{"line_number":222,"context_line":"* XXX: Discussion point: choose one of"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3fa7e38b_7c22ddbc","line":219,"in_reply_to":"3fa7e38b_04236b07","updated":"2019-10-21 08:00:07.000000000","message":"Per the other point, if we are using our existing \"opendev\" tooling for deploy certificates, etc. I think we make a clean break.  In the same way, it\u0027s not too much effort to make vhosts from templates in ansible either.  This is reflected in the next update.","commit_id":"63360def6c356e1b8e7fa402c646f222b8ab6633"},{"author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"change_message_id":"94f4d8da5d8c208271cbde81101411f6a900431e","unresolved":false,"context_lines":[{"line_number":227,"context_line":"    it), and provision fresh certificates via that.  See"},{"line_number":228,"context_line":"    https://review.opendev.org/#/c/637456/"},{"line_number":229,"context_line":"  * Perhaps there are plans afoot for OpenDev-ing some of these bits?"},{"line_number":230,"context_line":"    Is there some sort of succession planning?"},{"line_number":231,"context_line":"* We should be able to fully test the new sites at this point with"},{"line_number":232,"context_line":"  manual host entries."},{"line_number":233,"context_line":"* DNS entries will be updated to the new locations."}],"source_content_type":"text/x-rst","patch_set":2,"id":"3fa7e38b_a41ff7b5","line":230,"updated":"2019-10-01 19:57:48.000000000","message":"We\u0027ve designed the opendev.org infrastructure from the ground up to be scalable and gitops-driven.  Due to the co-management of the openstack.org zone with the foundation, it\u0027s difficult to enact the same kind of automation (and incurs a significant extra cost).  The most straightforward thing that aligns with our efforts there would be to migrate these documents to an opendev.org url, eg docs.opendev.org/openstack/governance.","commit_id":"63360def6c356e1b8e7fa402c646f222b8ab6633"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"dd7c8c24b09c0b0d7355ab4a049331d91fb25a1e","unresolved":false,"context_lines":[{"line_number":227,"context_line":"    it), and provision fresh certificates via that.  See"},{"line_number":228,"context_line":"    https://review.opendev.org/#/c/637456/"},{"line_number":229,"context_line":"  * Perhaps there are plans afoot for OpenDev-ing some of these bits?"},{"line_number":230,"context_line":"    Is there some sort of succession planning?"},{"line_number":231,"context_line":"* We should be able to fully test the new sites at this point with"},{"line_number":232,"context_line":"  manual host entries."},{"line_number":233,"context_line":"* DNS entries will be updated to the new locations."}],"source_content_type":"text/x-rst","patch_set":2,"id":"3fa7e38b_9c1f996f","line":230,"in_reply_to":"3fa7e38b_a41ff7b5","updated":"2019-10-21 08:00:07.000000000","message":"I think we decided to use CNAME redirects on the _acme-challenge domains to get us half-way ... we use our certificate generation and renewal process for legacy sites in RAX, until such time there is impetus for openstack.org to switch completely.  This is reflected in next update.","commit_id":"63360def6c356e1b8e7fa402c646f222b8ab6633"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"6c4f62ef19dcc4420bc085228073c1a195825a91","unresolved":false,"context_lines":[{"line_number":194,"context_line":"  * security.openstack.org"},{"line_number":195,"context_line":"  * service-types.openstack.org"},{"line_number":196,"context_line":"  * releases.openstack.org"},{"line_number":197,"context_line":"  * tarballs.openstack.org"},{"line_number":198,"context_line":""},{"line_number":199,"context_line":"Currently, SSL certificates are manually provisioned and entered into"},{"line_number":200,"context_line":"puppet secret data, where they are deployed to the host.  We wish to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_ce1c6915","line":197,"updated":"2019-10-21 23:38:44.000000000","message":"docs.starlingx.io as well? (files.o.o just already serves it from AFS currently, but it\u0027s in a similar state to the openstack.org subdomains and may help reiterate the multi-domain nature of the problem we need to solve)","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"08b1a188b04ab27a3c9ec7f030d2fedb778f43f8","unresolved":false,"context_lines":[{"line_number":194,"context_line":"  * security.openstack.org"},{"line_number":195,"context_line":"  * service-types.openstack.org"},{"line_number":196,"context_line":"  * releases.openstack.org"},{"line_number":197,"context_line":"  * tarballs.openstack.org"},{"line_number":198,"context_line":""},{"line_number":199,"context_line":"Currently, SSL certificates are manually provisioned and entered into"},{"line_number":200,"context_line":"puppet secret data, where they are deployed to the host.  We wish to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_4ecab91a","line":197,"in_reply_to":"3fa7e38b_ce1c6915","updated":"2019-10-22 00:27:20.000000000","message":"I think that this makes a good home for things currently served by files.o.o (zuul-ci too?).  But my feeling is that we have enough just getting this to work.\n\nI feel like once these sites have all the framework in place, moving things from files.o.o is not a spec-level process but just a few easy reviews.  So I feel like migration of things there can be tackled at a future point.","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"54bbac2b73c71e248ebfae320a3a086e620bf5d9","unresolved":false,"context_lines":[{"line_number":203,"context_line":"since ``openstack.org`` remains administered by external teams in"},{"line_number":204,"context_line":"RAX\u0027s propietary environment, we will make an exception and setup DNS"},{"line_number":205,"context_line":"validation records manually for these legacy sites until a full"},{"line_number":206,"context_line":"migration of ``openstack.org`` to OpenDev infrastructure is possible."},{"line_number":207,"context_line":"Other domains will use OpenDev nameservers, which support automated"},{"line_number":208,"context_line":"DNS validation renewals."},{"line_number":209,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_8e02f10a","line":206,"updated":"2019-10-22 01:24:54.000000000","message":"Maybe airshipit.org at some point but we currently don\u0027t host anything for it aside from a git redirect. I mentioned starlingx.io because we host static content for their docs site (granted on files.o.o for now). I didn\u0027t bring up zuul-ci.org as it\u0027s already under OpenDev\u0027s DNS management so does not require the CNAME effort. Just trying to indicate that it\u0027s not only openstack.org sites which would be able to take advantage of the CNAME plan for SSL cert management.","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"6c4f62ef19dcc4420bc085228073c1a195825a91","unresolved":false,"context_lines":[{"line_number":203,"context_line":"since ``openstack.org`` remains administered by external teams in"},{"line_number":204,"context_line":"RAX\u0027s propietary environment, we will make an exception and setup DNS"},{"line_number":205,"context_line":"validation records manually for these legacy sites until a full"},{"line_number":206,"context_line":"migration of ``openstack.org`` to OpenDev infrastructure is possible."},{"line_number":207,"context_line":"Other domains will use OpenDev nameservers, which support automated"},{"line_number":208,"context_line":"DNS validation renewals."},{"line_number":209,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_6e19b520","line":206,"updated":"2019-10-21 23:38:44.000000000","message":"and starlingx.io maybe","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"08b1a188b04ab27a3c9ec7f030d2fedb778f43f8","unresolved":false,"context_lines":[{"line_number":203,"context_line":"since ``openstack.org`` remains administered by external teams in"},{"line_number":204,"context_line":"RAX\u0027s propietary environment, we will make an exception and setup DNS"},{"line_number":205,"context_line":"validation records manually for these legacy sites until a full"},{"line_number":206,"context_line":"migration of ``openstack.org`` to OpenDev infrastructure is possible."},{"line_number":207,"context_line":"Other domains will use OpenDev nameservers, which support automated"},{"line_number":208,"context_line":"DNS validation renewals."},{"line_number":209,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_ced549b9","line":206,"in_reply_to":"3fa7e38b_0eae0198","updated":"2019-10-22 00:27:20.000000000","message":"Similar to comment above, I think we\u0027ll have a natural consolidation point after the initial implementation for these other services, but the initial migration will provide the template that makes it easy.\n\nWhat I meant by \"Other domains\" was that new projects coming under the opendev umbrella would be using opendev nameservers","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"8549186a03ac8efda131f8fc78280190b7aa3b75","unresolved":false,"context_lines":[{"line_number":203,"context_line":"since ``openstack.org`` remains administered by external teams in"},{"line_number":204,"context_line":"RAX\u0027s propietary environment, we will make an exception and setup DNS"},{"line_number":205,"context_line":"validation records manually for these legacy sites until a full"},{"line_number":206,"context_line":"migration of ``openstack.org`` to OpenDev infrastructure is possible."},{"line_number":207,"context_line":"Other domains will use OpenDev nameservers, which support automated"},{"line_number":208,"context_line":"DNS validation renewals."},{"line_number":209,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_0eae0198","line":206,"in_reply_to":"3fa7e38b_6e19b520","updated":"2019-10-21 23:54:05.000000000","message":"and airshipit.org? I think we can loosen the \"other domains\" statement below if it turns out the existing domains on rax aren\u0027t moving quickly?","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"6c4f62ef19dcc4420bc085228073c1a195825a91","unresolved":false,"context_lines":[{"line_number":261,"context_line":"replicas)."},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"The AFS volumes are then served by ``static01.opendev.org`` which has"},{"line_number":264,"context_line":"a dedicated role as an AFS to HTTP bridge."},{"line_number":265,"context_line":""},{"line_number":266,"context_line":"The sites in question are:"},{"line_number":267,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_8e1671f1","line":264,"updated":"2019-10-21 23:38:44.000000000","message":"Any particular reason for the server name change?","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"08b1a188b04ab27a3c9ec7f030d2fedb778f43f8","unresolved":false,"context_lines":[{"line_number":261,"context_line":"replicas)."},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"The AFS volumes are then served by ``static01.opendev.org`` which has"},{"line_number":264,"context_line":"a dedicated role as an AFS to HTTP bridge."},{"line_number":265,"context_line":""},{"line_number":266,"context_line":"The sites in question are:"},{"line_number":267,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_8e71910f","line":264,"in_reply_to":"3fa7e38b_8e1671f1","updated":"2019-10-22 00:27:20.000000000","message":"Do you mean why call it \"static\" and not \"files\"?  If so I feel like \"static\" reflects it\u0027s nature as a static web host serving from AFS, where as \"files\" is a bit catch-all.","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"change_message_id":"e70adbe418e3738af6a0c8c03671f28547ab1539","unresolved":false,"context_lines":[{"line_number":325,"context_line":"* For each site, move to production by updating the CNAME entries in"},{"line_number":326,"context_line":"  the ``openstack.org`` domain for the main server to point to"},{"line_number":327,"context_line":"  ``static01.opendev.org``.  Per prior testing, this should be"},{"line_number":328,"context_line":"  transparent."},{"line_number":329,"context_line":"* Old publishing jobs removed"},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Repositories"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_ab1f946e","line":328,"updated":"2019-10-22 14:11:03.000000000","message":"I think we need a \"service\" name here.  We don\u0027t ever want to have to update the openstack.org dns after we set this up, so we should have any numeric hostnames there.  In the future, we may want to replace static01 with static02, or load balance across static01..static0N.  We need to be able to do that without updating all of the names that point to the server.\n\nSo in DNS we should have:\n\n  tarballs.openstack.org. IN CNAME static.opendev.org.\n  static.opendev.org IN CNAME static01.opendev.org.\n\nOr the second could be replaced by one or more A/AAAA records in the load-balancing scenario.","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"4fc3b6ffa7f50bbbaf759ad8ade53f01d7b9ebd4","unresolved":false,"context_lines":[{"line_number":325,"context_line":"* For each site, move to production by updating the CNAME entries in"},{"line_number":326,"context_line":"  the ``openstack.org`` domain for the main server to point to"},{"line_number":327,"context_line":"  ``static01.opendev.org``.  Per prior testing, this should be"},{"line_number":328,"context_line":"  transparent."},{"line_number":329,"context_line":"* Old publishing jobs removed"},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Repositories"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_a636e9e6","line":328,"updated":"2019-10-22 14:15:48.000000000","message":"Oh, yep, we had discussed that as a component of this plan and I didn\u0027t notice it was missing here. Totally agree, thanks!","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"7a2a96a26fd76b61c578c2fb3389b8ecc1493039","unresolved":false,"context_lines":[{"line_number":325,"context_line":"* For each site, move to production by updating the CNAME entries in"},{"line_number":326,"context_line":"  the ``openstack.org`` domain for the main server to point to"},{"line_number":327,"context_line":"  ``static01.opendev.org``.  Per prior testing, this should be"},{"line_number":328,"context_line":"  transparent."},{"line_number":329,"context_line":"* Old publishing jobs removed"},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Repositories"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3fa7e38b_9bd0df55","line":328,"in_reply_to":"3fa7e38b_ab1f946e","updated":"2019-10-22 19:09:33.000000000","message":"\u003e I think we need a \"service\" name here.\n\nYep; the current CNAMEs point to just \"static.openstack.org\" and I had intended to maintain the same model, however you\u0027re right it should be called out.\n\nUpdate adds work items to set that up, and makes it clear in here this it the model to follow.","commit_id":"b875dcf2b38f61d295372cf4bc7138d827a81bc1"}]}