)]}'
{"doc/source/specs/ussuri/resource-properties-api.rst":[{"author":{"_account_id":25625,"name":"Tetsuro Nakamura","email":"tetsuro.nakamura.bc@hco.ntt.co.jp","username":"tetsuro0907"},"change_message_id":"12619340a587482f69a260fffeb53c2ec637a0c2","unresolved":false,"context_lines":[{"line_number":66,"context_line":"-----------------"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Extra capabilities will gain an additional property, ``private``, which marks"},{"line_number":69,"context_line":"them as non-enumerable. This allows operators to add sensitive metadata to"},{"line_number":70,"context_line":"resources without worrying about exposing them to users."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* The notion of \u0027private\u0027 capabilities has not existed prior, and assumes that"},{"line_number":73,"context_line":"  a given property will be either private for all resources, or public for all."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_720734cb","line":70,"range":{"start_line":69,"start_character":24,"end_line":70,"end_character":56},"updated":"2020-03-17 09:52:21.000000000","message":"Any examples? I understand the existing data model can support it theoretically, but I don\u0027t come up with the use case for this.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"f83aa5d56702e4a139187c0dee717c48f6ccb075","unresolved":false,"context_lines":[{"line_number":66,"context_line":"-----------------"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Extra capabilities will gain an additional property, ``private``, which marks"},{"line_number":69,"context_line":"them as non-enumerable. This allows operators to add sensitive metadata to"},{"line_number":70,"context_line":"resources without worrying about exposing them to users."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* The notion of \u0027private\u0027 capabilities has not existed prior, and assumes that"},{"line_number":73,"context_line":"  a given property will be either private for all resources, or public for all."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_ca3ad5e5","line":70,"range":{"start_line":69,"start_character":24,"end_line":70,"end_character":56},"in_reply_to":"1fa4df85_720734cb","updated":"2020-03-18 17:02:17.000000000","message":"I can\u0027t think of an example of a sensitive metadata immediately, though there are other use-cases, for example if an operator wants to add bookkeeping metadata such as chassis serial numbers or things like, an operator contact email or something, maybe you don\u0027t want those to be enumerable to users.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":25625,"name":"Tetsuro Nakamura","email":"tetsuro.nakamura.bc@hco.ntt.co.jp","username":"tetsuro0907"},"change_message_id":"91a8b401d51718d7da30d9c3b44f118581a54a0e","unresolved":false,"context_lines":[{"line_number":66,"context_line":"-----------------"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Extra capabilities will gain an additional property, ``private``, which marks"},{"line_number":69,"context_line":"them as non-enumerable. This allows operators to add sensitive metadata to"},{"line_number":70,"context_line":"resources without worrying about exposing them to users."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* The notion of \u0027private\u0027 capabilities has not existed prior, and assumes that"},{"line_number":73,"context_line":"  a given property will be either private for all resources, or public for all."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_de192e88","line":70,"range":{"start_line":69,"start_character":24,"end_line":70,"end_character":56},"in_reply_to":"1fa4df85_ca3ad5e5","updated":"2020-03-19 05:44:19.000000000","message":"I\u0027m okay to have that private feature if you want, but at least I\u0027d like to see those implementation patches separately to enable the main \"getting properties feature\" and to enable that \"private\" feature. We\u0027d like to enable features step by step as long as it is possible and as long as that step is necessary. Just thinking out loud.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"f8896c5f6351dfbb9ef837eb5a14c0c0ea87920d","unresolved":false,"context_lines":[{"line_number":66,"context_line":"-----------------"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Extra capabilities will gain an additional property, ``private``, which marks"},{"line_number":69,"context_line":"them as non-enumerable. This allows operators to add sensitive metadata to"},{"line_number":70,"context_line":"resources without worrying about exposing them to users."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* The notion of \u0027private\u0027 capabilities has not existed prior, and assumes that"},{"line_number":73,"context_line":"  a given property will be either private for all resources, or public for all."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_6ba5cc46","line":70,"range":{"start_line":69,"start_character":24,"end_line":70,"end_character":56},"in_reply_to":"1fa4df85_de192e88","updated":"2020-03-19 20:15:15.000000000","message":"Makes sense to me, the first set of patches will not include this.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":25625,"name":"Tetsuro Nakamura","email":"tetsuro.nakamura.bc@hco.ntt.co.jp","username":"tetsuro0907"},"change_message_id":"12619340a587482f69a260fffeb53c2ec637a0c2","unresolved":false,"context_lines":[{"line_number":111,"context_line":""},{"line_number":112,"context_line":"  * Normal response code: ``200 OK``"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"  * Error response code(s): None"},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"  * Example response (for ``physical:host`` resource type):"},{"line_number":117,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_3748ce85","line":114,"range":{"start_line":114,"start_character":28,"end_line":114,"end_character":32},"updated":"2020-03-17 09:52:21.000000000","message":"I expect 404  for resource type that does not exist.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"f83aa5d56702e4a139187c0dee717c48f6ccb075","unresolved":false,"context_lines":[{"line_number":111,"context_line":""},{"line_number":112,"context_line":"  * Normal response code: ``200 OK``"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"  * Error response code(s): None"},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"  * Example response (for ``physical:host`` resource type):"},{"line_number":117,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_ea3d51dd","line":114,"range":{"start_line":114,"start_character":28,"end_line":114,"end_character":32},"in_reply_to":"1fa4df85_3748ce85","updated":"2020-03-18 17:02:17.000000000","message":"Good point, will fix.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":25625,"name":"Tetsuro Nakamura","email":"tetsuro.nakamura.bc@hco.ntt.co.jp","username":"tetsuro0907"},"change_message_id":"12619340a587482f69a260fffeb53c2ec637a0c2","unresolved":false,"context_lines":[{"line_number":160,"context_line":"          \"value\": \"36\""},{"line_number":161,"context_line":"        }"},{"line_number":162,"context_line":"      ]"},{"line_number":163,"context_line":"    }"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"* ``PATCH /v1/\u003cresource_type\u003e/properties/\u003cproperty_name\u003e``"},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_b25dac16","line":163,"updated":"2020-03-17 09:52:21.000000000","message":"Just to make sure, does this mean there are 48 hosts that has 48 vcpus, 32 hosts that has 24 vcpus, 16 that has 36?","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"f8896c5f6351dfbb9ef837eb5a14c0c0ea87920d","unresolved":false,"context_lines":[{"line_number":160,"context_line":"          \"value\": \"36\""},{"line_number":161,"context_line":"        }"},{"line_number":162,"context_line":"      ]"},{"line_number":163,"context_line":"    }"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"* ``PATCH /v1/\u003cresource_type\u003e/properties/\u003cproperty_name\u003e``"},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_6b538c3a","line":163,"in_reply_to":"1fa4df85_3e540221","updated":"2020-03-19 20:15:15.000000000","message":"Done","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"f83aa5d56702e4a139187c0dee717c48f6ccb075","unresolved":false,"context_lines":[{"line_number":160,"context_line":"          \"value\": \"36\""},{"line_number":161,"context_line":"        }"},{"line_number":162,"context_line":"      ]"},{"line_number":163,"context_line":"    }"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"* ``PATCH /v1/\u003cresource_type\u003e/properties/\u003cproperty_name\u003e``"},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_ea16b155","line":163,"in_reply_to":"1fa4df85_b25dac16","updated":"2020-03-18 17:02:17.000000000","message":"Yes, that is exactly right. It\u0027s perhaps a confusing example. Consider also, for a property like \"arch\" or something:\n\n  \"values\": [\n    { \"count\": 48, \"value\": \"x86\" },\n    { \"count\": 32, \"value\": \"arm\" }\n  ]\n\nThat would indicate there being 48 x86 nodes and 32 ARM nodes.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":25625,"name":"Tetsuro Nakamura","email":"tetsuro.nakamura.bc@hco.ntt.co.jp","username":"tetsuro0907"},"change_message_id":"91a8b401d51718d7da30d9c3b44f118581a54a0e","unresolved":false,"context_lines":[{"line_number":160,"context_line":"          \"value\": \"36\""},{"line_number":161,"context_line":"        }"},{"line_number":162,"context_line":"      ]"},{"line_number":163,"context_line":"    }"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"* ``PATCH /v1/\u003cresource_type\u003e/properties/\u003cproperty_name\u003e``"},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_3e540221","line":163,"in_reply_to":"1fa4df85_ea16b155","updated":"2020-03-19 05:44:19.000000000","message":"Thanks. The new example would be better.","commit_id":"079eafd57b9636de80af05d014d6392da2ffed54"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"ed1da3c49419152edbd83857e64824a767036b13","unresolved":false,"context_lines":[{"line_number":101,"context_line":"REST API impact"},{"line_number":102,"context_line":"---------------"},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"Because the space of properties and their valuesets for a given resource type"},{"line_number":105,"context_line":"may be quite large, this functionality will be broken into two endpoints: one"},{"line_number":106,"context_line":"to list all possible keys, and another to list possible values for each key."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"* ``GET /v1/\u003cresource_type\u003e/properties``"},{"line_number":109,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_46f7325a","line":106,"range":{"start_line":104,"start_character":0,"end_line":106,"end_character":76},"updated":"2020-04-01 20:27:30.000000000","message":"This could lead to clients having to perform a large number of requests, one for each key. What about adding another call like with Nova GET /v2.1/servers/detail?\n\nGET /v1/\u003cresource_type\u003e/properties/detail would return all keys and their values.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"3c875e0a2d1c74095f26e4a63c0a64d387661170","unresolved":false,"context_lines":[{"line_number":101,"context_line":"REST API impact"},{"line_number":102,"context_line":"---------------"},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"Because the space of properties and their valuesets for a given resource type"},{"line_number":105,"context_line":"may be quite large, this functionality will be broken into two endpoints: one"},{"line_number":106,"context_line":"to list all possible keys, and another to list possible values for each key."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"* ``GET /v1/\u003cresource_type\u003e/properties``"},{"line_number":109,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_712032f8","line":106,"range":{"start_line":104,"start_character":0,"end_line":106,"end_character":76},"in_reply_to":"df33271e_46f7325a","updated":"2020-04-01 20:43:44.000000000","message":"Sure, though in that case I would prefer an API that responds in a general structure that gets \"filled in\" if a ?detail\u003d1 argument is passed, e.g.:\n\n  [\n    { \"property\": \"local_gb\" },\n    { \"property\": \"memory_mb\" },\n    ..\n  ]\n\nWith ?detail\u003d1:\n\n  [\n    { \"property\": \"local_gb\", \"values\": [..] },\n    { \"property\": \"memory_mb\", \"values\": [..] },\n    ..\n  ]\n\nWhat do you think about that?","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a42b2cfd89c6ffb86271d2104758d7b15fb88b1d","unresolved":false,"context_lines":[{"line_number":101,"context_line":"REST API impact"},{"line_number":102,"context_line":"---------------"},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"Because the space of properties and their valuesets for a given resource type"},{"line_number":105,"context_line":"may be quite large, this functionality will be broken into two endpoints: one"},{"line_number":106,"context_line":"to list all possible keys, and another to list possible values for each key."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"* ``GET /v1/\u003cresource_type\u003e/properties``"},{"line_number":109,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_8262afac","line":106,"range":{"start_line":104,"start_character":0,"end_line":106,"end_character":76},"in_reply_to":"df33271e_712032f8","updated":"2020-04-02 16:10:51.000000000","message":"That should be fine as well.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"06d105c79abf5c1b8919e8e4015dc4d4a3bf7dd5","unresolved":false,"context_lines":[{"line_number":120,"context_line":"  .. sourcecode:: json"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"    ["},{"line_number":123,"context_line":"      \"local_gb\","},{"line_number":124,"context_line":"      \"memory_mb\","},{"line_number":125,"context_line":"      \"vcpus\","},{"line_number":126,"context_line":"      \"custom_capabilities.first\","},{"line_number":127,"context_line":"      \"custom_capabilities.second\""},{"line_number":128,"context_line":"    ]"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_e3270ab6","line":125,"range":{"start_line":123,"start_character":0,"end_line":125,"end_character":14},"updated":"2020-03-23 22:03:01.000000000","message":"I was going to say that these are hypervisor_properties rather than network_properties, but in my development environment reserving with either produces the same result. I need to check what is exactly the difference.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"3faeb03722ad3fe9580dd6f451418d51e61975f5","unresolved":false,"context_lines":[{"line_number":120,"context_line":"  .. sourcecode:: json"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"    ["},{"line_number":123,"context_line":"      \"local_gb\","},{"line_number":124,"context_line":"      \"memory_mb\","},{"line_number":125,"context_line":"      \"vcpus\","},{"line_number":126,"context_line":"      \"custom_capabilities.first\","},{"line_number":127,"context_line":"      \"custom_capabilities.second\""},{"line_number":128,"context_line":"    ]"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_ccff40ff","line":125,"range":{"start_line":123,"start_character":0,"end_line":125,"end_character":14},"in_reply_to":"df33271e_e3270ab6","updated":"2020-03-27 21:21:38.000000000","message":"This has confused me as well, because from what I can tell, there is no difference: https://opendev.org/openstack/blazar/src/branch/master/blazar/plugins/oshosts/host_plugin.py#L570-L575\n\nYet, in at least one place, only resource_properties is used: https://opendev.org/openstack/blazar/src/branch/master/blazar/plugins/oshosts/host_plugin.py#L412-L413\n\nMy proposal going forward would be to drop the plugin-specific *_properties and just use resource_properties as a general filter/selection mechanism across all plugins.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"06d105c79abf5c1b8919e8e4015dc4d4a3bf7dd5","unresolved":false,"context_lines":[{"line_number":150,"context_line":"      \"private\": false,"},{"line_number":151,"context_line":"      \"values\": ["},{"line_number":152,"context_line":"        {"},{"line_number":153,"context_line":"          \"count\": 48,"},{"line_number":154,"context_line":"          \"value\": \"x86\""},{"line_number":155,"context_line":"        },"},{"line_number":156,"context_line":"        {"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_63401a37","line":153,"range":{"start_line":153,"start_character":0,"end_line":153,"end_character":22},"updated":"2020-03-23 22:03:01.000000000","message":"Would it make sense to hide count for operators who want to hide details about the size of their infra?","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"ed1da3c49419152edbd83857e64824a767036b13","unresolved":false,"context_lines":[{"line_number":150,"context_line":"      \"private\": false,"},{"line_number":151,"context_line":"      \"values\": ["},{"line_number":152,"context_line":"        {"},{"line_number":153,"context_line":"          \"count\": 48,"},{"line_number":154,"context_line":"          \"value\": \"x86\""},{"line_number":155,"context_line":"        },"},{"line_number":156,"context_line":"        {"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_711b1272","line":153,"range":{"start_line":153,"start_character":0,"end_line":153,"end_character":22},"in_reply_to":"df33271e_0c0ac81f","updated":"2020-04-01 20:27:30.000000000","message":"The use case would be any commercial cloud? I could see this API being useful for their UI, yet not wanting to show this data. \n\nI am hesitant to define count in the API, as we cannot remove it later. \n\nIf the rationale for providing count is to give information about the number of available resources for each user, it may be too limited anyway as they may want to know how many resources exist for a combination of properties.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"59620eef121b9ed554d8acc729f16d7c7d7bb976","unresolved":false,"context_lines":[{"line_number":150,"context_line":"      \"private\": false,"},{"line_number":151,"context_line":"      \"values\": ["},{"line_number":152,"context_line":"        {"},{"line_number":153,"context_line":"          \"count\": 48,"},{"line_number":154,"context_line":"          \"value\": \"x86\""},{"line_number":155,"context_line":"        },"},{"line_number":156,"context_line":"        {"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_99db414d","line":153,"range":{"start_line":153,"start_character":0,"end_line":153,"end_character":22},"in_reply_to":"df33271e_426c279b","updated":"2020-04-02 21:32:24.000000000","message":"Done","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a42b2cfd89c6ffb86271d2104758d7b15fb88b1d","unresolved":false,"context_lines":[{"line_number":150,"context_line":"      \"private\": false,"},{"line_number":151,"context_line":"      \"values\": ["},{"line_number":152,"context_line":"        {"},{"line_number":153,"context_line":"          \"count\": 48,"},{"line_number":154,"context_line":"          \"value\": \"x86\""},{"line_number":155,"context_line":"        },"},{"line_number":156,"context_line":"        {"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_426c279b","line":153,"range":{"start_line":153,"start_character":0,"end_line":153,"end_character":22},"in_reply_to":"df33271e_51ed2eb5","updated":"2020-04-02 16:10:51.000000000","message":"Let\u0027s do that and revisit count in a future spec.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"3faeb03722ad3fe9580dd6f451418d51e61975f5","unresolved":false,"context_lines":[{"line_number":150,"context_line":"      \"private\": false,"},{"line_number":151,"context_line":"      \"values\": ["},{"line_number":152,"context_line":"        {"},{"line_number":153,"context_line":"          \"count\": 48,"},{"line_number":154,"context_line":"          \"value\": \"x86\""},{"line_number":155,"context_line":"        },"},{"line_number":156,"context_line":"        {"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_0c0ac81f","line":153,"range":{"start_line":153,"start_character":0,"end_line":153,"end_character":22},"in_reply_to":"df33271e_63401a37","updated":"2020-03-27 21:21:38.000000000","message":"I\u0027m not sure--is that a real use case? I\u0027d propose we default to exposing this (operators can always completely disable this API if they want). Maybe another policy can handle confidentiality of that granularity if we end up needing it later.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"3c875e0a2d1c74095f26e4a63c0a64d387661170","unresolved":false,"context_lines":[{"line_number":150,"context_line":"      \"private\": false,"},{"line_number":151,"context_line":"      \"values\": ["},{"line_number":152,"context_line":"        {"},{"line_number":153,"context_line":"          \"count\": 48,"},{"line_number":154,"context_line":"          \"value\": \"x86\""},{"line_number":155,"context_line":"        },"},{"line_number":156,"context_line":"        {"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_51ed2eb5","line":153,"range":{"start_line":153,"start_character":0,"end_line":153,"end_character":22},"in_reply_to":"df33271e_711b1272","updated":"2020-04-01 20:43:44.000000000","message":"The point about combinations makes sense. Given that, I propose we just remove the \"count\" value for now.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"06d105c79abf5c1b8919e8e4015dc4d4a3bf7dd5","unresolved":false,"context_lines":[{"line_number":186,"context_line":"Security impact"},{"line_number":187,"context_line":"---------------"},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"All capabilities will be private by default, which should reduce the liklihood"},{"line_number":190,"context_line":"of exposure. However, by default future capabilities will be public. If this"},{"line_number":191,"context_line":"is not understood, there is some risk of property exposure over time."},{"line_number":192,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_a02e98a2","line":189,"range":{"start_line":189,"start_character":69,"end_line":189,"end_character":78},"updated":"2020-03-23 22:03:01.000000000","message":"likelihood","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"3faeb03722ad3fe9580dd6f451418d51e61975f5","unresolved":false,"context_lines":[{"line_number":186,"context_line":"Security impact"},{"line_number":187,"context_line":"---------------"},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"All capabilities will be private by default, which should reduce the liklihood"},{"line_number":190,"context_line":"of exposure. However, by default future capabilities will be public. If this"},{"line_number":191,"context_line":"is not understood, there is some risk of property exposure over time."},{"line_number":192,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_4c13305d","line":189,"range":{"start_line":189,"start_character":69,"end_line":189,"end_character":78},"in_reply_to":"df33271e_a02e98a2","updated":"2020-03-27 21:21:38.000000000","message":"Done","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"06d105c79abf5c1b8919e8e4015dc4d4a3bf7dd5","unresolved":false,"context_lines":[{"line_number":187,"context_line":"---------------"},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"All capabilities will be private by default, which should reduce the liklihood"},{"line_number":190,"context_line":"of exposure. However, by default future capabilities will be public. If this"},{"line_number":191,"context_line":"is not understood, there is some risk of property exposure over time."},{"line_number":192,"context_line":""},{"line_number":193,"context_line":"We could improve security at the expense of operator experience if we require"},{"line_number":194,"context_line":"that capabilities are explicitly registered before being attached to a"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_80043419","line":191,"range":{"start_line":190,"start_character":13,"end_line":191,"end_character":69},"updated":"2020-03-23 22:03:01.000000000","message":"This is an odd behavior given that we would make existing capabilities private. I would prefer if it was private by default, but configurable via blazar.conf.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"},{"author":{"_account_id":29100,"name":"Jason Anderson","email":"jasonanderson@uchicago.edu","username":"jasonanderson"},"change_message_id":"3faeb03722ad3fe9580dd6f451418d51e61975f5","unresolved":false,"context_lines":[{"line_number":187,"context_line":"---------------"},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"All capabilities will be private by default, which should reduce the liklihood"},{"line_number":190,"context_line":"of exposure. However, by default future capabilities will be public. If this"},{"line_number":191,"context_line":"is not understood, there is some risk of property exposure over time."},{"line_number":192,"context_line":""},{"line_number":193,"context_line":"We could improve security at the expense of operator experience if we require"},{"line_number":194,"context_line":"that capabilities are explicitly registered before being attached to a"}],"source_content_type":"text/x-rst","patch_set":4,"id":"df33271e_ec25e4ac","line":191,"range":{"start_line":190,"start_character":13,"end_line":191,"end_character":69},"in_reply_to":"df33271e_80043419","updated":"2020-03-27 21:21:38.000000000","message":"Sure, we can default to private if you want. I think default\u003dpublic makes more sense long term, so we will require lots of deployments overriding this, but it is a bit safer.","commit_id":"e602456d3624fb9bce787d539b500244a10cc1a6"}]}
