)]}'
{"defaults/main.yaml":[{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2207c5badbc239660b2c5797aee7f979446efe9a","unresolved":true,"context_lines":[{"line_number":5,"context_line":"thales_client_gid: 42481"},{"line_number":6,"context_line":"thales_client_uid: 42481"},{"line_number":7,"context_line":"thales_client_path: linux/libc6_11/amd64/nfast"},{"line_number":8,"context_line":"thales_load_sharing_enabled: false"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"ee933d0f_4d548b30","line":8,"range":{"start_line":8,"start_character":0,"end_line":8,"end_character":34},"updated":"2021-02-10 22:35:57.000000000","message":"I don\u0027t think this is needed anymore?","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"}],"releasenotes/notes/add-ha-c41f45eaa1aba077.yaml":[{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2102a06aeeb475bf17556e8a7b1420a2eb558a27","unresolved":true,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    This version adds support for using more than one nshield HSM in load"},{"line_number":5,"context_line":"    sharing mode.  There is a new variable `nshield_hsms` that accepts"},{"line_number":6,"context_line":"    a list of HSM IP addresses and associated esn data.  See"},{"line_number":7,"context_line":"    `vars.yaml.sample` for an example.  Note that HSM Pools are"},{"line_number":8,"context_line":"    not supported at this time."},{"line_number":9,"context_line":"deprecations:"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"549b9826_c9d32178","line":6,"range":{"start_line":6,"start_character":30,"end_line":6,"end_character":54},"updated":"2021-02-17 15:55:53.000000000","message":"This needs to be removed.","commit_id":"a4b5337a3082cc3bcd70ececc5e9d0e215162fd7"}],"tasks/client.yaml":[{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2207c5badbc239660b2c5797aee7f979446efe9a","unresolved":true,"context_lines":[{"line_number":91,"context_line":"  lineinfile:"},{"line_number":92,"context_line":"      path: /opt/nfast/cknfastrc"},{"line_number":93,"context_line":"      line: CKNFAST_LOADSHARING \u003d 1"},{"line_number":94,"context_line":"  when: \"{{ nshield_hsms|length  \u003e 1 }}\""},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"- name: create snmp.conf"},{"line_number":97,"context_line":"  copy:"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"bac5447e_d3011617","line":94,"updated":"2021-02-10 22:35:57.000000000","message":"It may be cleaner to combine the \"create cknfastrc\" and this task into a single template task.","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"},{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2207c5badbc239660b2c5797aee7f979446efe9a","unresolved":true,"context_lines":[{"line_number":111,"context_line":"      debug: var\u003danonkneti.stdout_lines"},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"    - name: enroll client to HSM \"{{ item.ip }}\""},{"line_number":114,"context_line":"      command: /opt/nfast/bin/nethsmenroll --force {{ item }} {{ anonkneti.stdout_lines[0] }}"},{"line_number":115,"context_line":"  loop: \"{{ nshield_hsms }}\""},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"- name:  set selinux contexts for /opt/nfast"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"d85683fe_48340fb6","line":114,"range":{"start_line":114,"start_character":54,"end_line":114,"end_character":58},"updated":"2021-02-10 22:35:57.000000000","message":"item.ip","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"}],"tasks/main.yaml":[{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2207c5badbc239660b2c5797aee7f979446efe9a","unresolved":true,"context_lines":[{"line_number":4,"context_line":"    args:"},{"line_number":5,"context_line":"      nshield_hsms:"},{"line_number":6,"context_line":"        - name: Legacy variables HSM"},{"line_number":7,"context_line":"          esn: \"{{ thales_hsm_config_location }}\""},{"line_number":8,"context_line":"          ip: \"{{ thales_hsm_ip_address }}\""},{"line_number":9,"context_line":"  when: nshield_hsms is not defined and thales_hsm_ip_address is defined"},{"line_number":10,"context_line":"  notify: legacy vars warning"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3de3b717_0b806270","line":7,"range":{"start_line":7,"start_character":19,"end_line":7,"end_character":45},"updated":"2021-02-10 22:35:57.000000000","message":"If we decide to drop the \"hsm-\" from the ESN, we\u0027ll need a fancy filter to drop that prefix from the legacy var.","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"}],"tasks/rfs.yaml":[{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2207c5badbc239660b2c5797aee7f979446efe9a","unresolved":true,"context_lines":[{"line_number":7,"context_line":"      script: \"{{ role_path }}/files/add_ips.py --config-dir /opt/nfast/kmdata/{{ item.esn }}/config --ips {{ thales_client_ips }}\""},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"    - name: push new config to the HSM and check that it was successful"},{"line_number":10,"context_line":"      shell: \"/opt/nfast/bin/cfg-pushnethsm -a {{ item.ip }} /opt/nfast/kmdata/{{ item.esn }}/config/config.new \u0026\u0026 sleep 5 \u0026\u0026 diff /opt/nfast/kmdata/{{ item.esn }}/config/config /opt/nfast/kmdata/{{ item.esn }}/config/config.new\"  # noqa 204"},{"line_number":11,"context_line":"      register: result"},{"line_number":12,"context_line":"      until: result.rc \u003d\u003d 0"},{"line_number":13,"context_line":"      retries: 10"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"12630366_22db5073","line":10,"range":{"start_line":10,"start_character":142,"end_line":10,"end_character":149},"updated":"2021-02-10 22:35:57.000000000","message":"So over here we\u0027d change these to /opt/nfast/kmdata/hsm-{{ item.esn }}/config/config so that the new \"esn\" variables only contain the actual ESN.","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"}],"vars.yaml.sample":[{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"2207c5badbc239660b2c5797aee7f979446efe9a","unresolved":true,"context_lines":[{"line_number":11,"context_line":"nshield_hsms:"},{"line_number":12,"context_line":"  - name: \"My HSM 1\""},{"line_number":13,"context_line":"    ip: 192.168.1.1"},{"line_number":14,"context_line":"    esn: hsm-F90F-02A0-B937"},{"line_number":15,"context_line":"  - name: \"My HSM 2\""},{"line_number":16,"context_line":"    ip: 192.168.1.1"},{"line_number":17,"context_line":"    esn: hsm-A90F-02B0-4E37"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"d733cb20_d32b3a3b","line":14,"range":{"start_line":14,"start_character":9,"end_line":14,"end_character":13},"updated":"2021-02-10 22:35:57.000000000","message":"Technically ESNs don\u0027t include this part.  It may make sense for us to drop it now since we\u0027re deprecating the \"thales_hsm_config_location\" variable.","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"},{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"df858f6c7acf6f39eabc54bbe31fff01e27b64f2","unresolved":true,"context_lines":[{"line_number":11,"context_line":"nshield_hsms:"},{"line_number":12,"context_line":"  - name: \"My HSM 1\""},{"line_number":13,"context_line":"    ip: 192.168.1.1"},{"line_number":14,"context_line":"    esn: hsm-F90F-02A0-B937"},{"line_number":15,"context_line":"  - name: \"My HSM 2\""},{"line_number":16,"context_line":"    ip: 192.168.1.1"},{"line_number":17,"context_line":"    esn: hsm-A90F-02B0-4E37"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"0d819cae_7cdd8cad","line":14,"range":{"start_line":14,"start_character":9,"end_line":14,"end_character":13},"in_reply_to":"d733cb20_d32b3a3b","updated":"2021-02-11 13:09:33.000000000","message":"I was thinking about this after I logged off work yesterday, and I think we may not need the users to give us the ESN at all.  We\u0027re already using anonkneti in the client tasks to get the ESN from the IP: https://opendev.org/openstack/ansible-role-thales-hsm/src/branch/master/tasks/client.yaml#L82-L84","commit_id":"fa73732ec5bfded3d5e70733a7fb41fe97f5c2db"}]}