)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"change_message_id":"8b825d229d255712eb30a39a851ac2aa47956fac","unresolved":false,"context_lines":[{"line_number":17,"context_line":"the keytabs -- a keytab should only ever be in use on one host at a"},{"line_number":18,"context_line":"time, so we are better off keeping the keytabs in a specific host_var"},{"line_number":19,"context_line":"for the host they are used on, rather than being in a group and"},{"line_number":20,"context_line":"possibly deployed on servers where they are not used."},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"Depends-On: https://review.opendev.org/668610"},{"line_number":23,"context_line":"Change-Id: Icda92bb234adc00f6718c1c656e8f069ce2704c4"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"9fb8cfa7_a632a3f1","line":20,"updated":"2019-07-03 00:05:08.000000000","message":"I agree with the result, but it\u0027s perfectly legit to have identical keytabs on multiple hosts (eg, we have zuul jobs which use the same keytabs; and if we had an authenticated webfarm, we would put the same keytab on all the heads).  And in fact, we are putting the afsadmin keytab on both of the mirror hosts.  However, I agree that the long term goal is for there to be one mirror-update host, and we certainly don\u0027t need a group for that.  This seems like an overuse of groups (there are several like that in this file, and I think we should pull them out as we go like this).","commit_id":"ece14bbfb08424303502ed329aaa7e76cea13981"}]}