)]}'
{"playbooks/test-review.yaml":[{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"17b785ff8bff7b1b8b2aa7e53eb8ea28d23c1708","unresolved":false,"context_lines":[{"line_number":25,"context_line":"          email: \u0027project.creator@example.com\u0027"},{"line_number":26,"context_line":"          http_password: \u0027secret\u0027"},{"line_number":27,"context_line":"          groups:"},{"line_number":28,"context_line":"            - Administrators"},{"line_number":29,"context_line":"        status_code: 201"},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"    - name: Create CI group"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"57ebf582_e21917d9","line":28,"updated":"2021-07-26 20:22:11.000000000","message":"Will this be sufficient? Our production ACLs assign more permissions to the Project Bootstrappers group which openstack-project-creator is also a member of there. I suppose this is a good place to start though.","commit_id":"13a2c0c7ae4f86edcbaebce8b8859dedeff0d6a8"},{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"523c5f17e1d1314d891595c6416dd225f21dde60","unresolved":false,"context_lines":[{"line_number":25,"context_line":"          email: \u0027project.creator@example.com\u0027"},{"line_number":26,"context_line":"          http_password: \u0027secret\u0027"},{"line_number":27,"context_line":"          groups:"},{"line_number":28,"context_line":"            - Administrators"},{"line_number":29,"context_line":"        status_code: 201"},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"    - name: Create CI group"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"79a67a52_b88062e8","line":28,"in_reply_to":"57ebf582_e21917d9","updated":"2021-07-26 22:11:31.000000000","message":"I think it is sufficient because we are not actually creating projects with the user (yet anyway), we are just triggering reindexing which is an admin permission.","commit_id":"13a2c0c7ae4f86edcbaebce8b8859dedeff0d6a8"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"17b785ff8bff7b1b8b2aa7e53eb8ea28d23c1708","unresolved":false,"context_lines":[{"line_number":93,"context_line":"          ssh-keygen -t ed25519 -f /root/.ssh/id_25519 -P \"\""},{"line_number":94,"context_line":"          curl -X POST --user \"admin:secret\" -H \"Content-Type: text/plain\" -d@/root/.ssh/id_25519.pub http://localhost:8081/a/accounts/admin/sshkeys"},{"line_number":95,"context_line":"          ssh-keyscan -p 29418 localhost \u003e\u003e /root/.ssh/known_hosts"},{"line_number":96,"context_line":"          ssh-keyscan -p 29418 localhost \u003e\u003e /home/gerrit2/.ssh/known_hosts"},{"line_number":97,"context_line":""},{"line_number":98,"context_line":"          git config --global user.name \"Admin\""},{"line_number":99,"context_line":"          git config --global user.email \"admin@example.com\""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"39ec5d7a_b72c7beb","line":96,"updated":"2021-07-26 20:22:11.000000000","message":"I expect OpenSSH to choke on this file later if it\u0027s not owned by gerrit2. However we could relpace both of these lines to updating /etc/ssh/ssh_known_hosts instead right?","commit_id":"13a2c0c7ae4f86edcbaebce8b8859dedeff0d6a8"},{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"523c5f17e1d1314d891595c6416dd225f21dde60","unresolved":false,"context_lines":[{"line_number":93,"context_line":"          ssh-keygen -t ed25519 -f /root/.ssh/id_25519 -P \"\""},{"line_number":94,"context_line":"          curl -X POST --user \"admin:secret\" -H \"Content-Type: text/plain\" -d@/root/.ssh/id_25519.pub http://localhost:8081/a/accounts/admin/sshkeys"},{"line_number":95,"context_line":"          ssh-keyscan -p 29418 localhost \u003e\u003e /root/.ssh/known_hosts"},{"line_number":96,"context_line":"          ssh-keyscan -p 29418 localhost \u003e\u003e /home/gerrit2/.ssh/known_hosts"},{"line_number":97,"context_line":""},{"line_number":98,"context_line":"          git config --global user.name \"Admin\""},{"line_number":99,"context_line":"          git config --global user.email \"admin@example.com\""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"91a04338_652e495f","line":96,"in_reply_to":"39ec5d7a_b72c7beb","updated":"2021-07-26 22:11:31.000000000","message":"It seems to work. I\u0027m guessing because openssh special cases root? maybe for the same reason that /etc/ssh/ssh_known_hosts would work?","commit_id":"13a2c0c7ae4f86edcbaebce8b8859dedeff0d6a8"}],"playbooks/zuul/test_gerrit_renames.yaml":[{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"23f643f2bbd7024324fcda115c74fbb67549f439","unresolved":true,"context_lines":[{"line_number":1,"context_line":"repos:"},{"line_number":2,"context_line":"  - old: y/test-project"},{"line_number":3,"context_line":"    new: x/test-project"},{"line_number":4,"context_line":"groups:"},{"line_number":5,"context_line":"  - old: CI-tools"},{"line_number":6,"context_line":"    new: CI-tools-updated"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"106a5d84_1c959ab9","line":4,"updated":"2021-07-28 02:59:16.000000000","message":"this wants to be \"gerrit_groups\" to match the rename playbook; i proposed a follow-on you can squash into this if you like at [1] that tests the id of the renamed group remains consistent\n\n[1] https://review.opendev.org/c/opendev/system-config/+/802645","commit_id":"3adb3b34c7f78b4999ab38f5e4a465993dfd5fdc"}]}