)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"7d50281383702b9ab9637f2a4622efb67cf8c232","unresolved":false,"context_lines":[{"line_number":4,"context_line":"Commit:     Scott Solkhon \u003cscott.solkhon@gresearch.co.uk\u003e"},{"line_number":5,"context_line":"CommitDate: 2019-08-14 15:12:39 +0000"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Decrypt keyring files using ansible-vault"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This commit allows Cinder and Glance keys to be decrypted using"},{"line_number":10,"context_line":"ansible-vault."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"7faddb67_b9700ba6","line":7,"range":{"start_line":7,"start_character":7,"end_line":7,"end_character":8},"updated":"2019-08-14 15:51:06.000000000","message":"ceph","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"7d50281383702b9ab9637f2a4622efb67cf8c232","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Decrypt keyring files using ansible-vault"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This commit allows Cinder and Glance keys to be decrypted using"},{"line_number":10,"context_line":"ansible-vault."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Change-Id: I0c841f40782480e405b1cbb4a5627b900e625f69"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"7faddb67_395c1b18","line":9,"range":{"start_line":9,"start_character":36,"end_line":9,"end_character":37},"updated":"2019-08-14 15:51:06.000000000","message":"ceph","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"}],"ansible/roles/glance/tasks/ceph.yml":[{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"c49945f1ccb35d026a23aa1c4259a0cbdf7554b4","unresolved":false,"context_lines":[{"line_number":39,"context_line":"          key \u003d {{ cephx_key.keyring.key }}"},{"line_number":40,"context_line":"    dest: \"{{ node_config_directory }}/glance-api/ceph.client.glance.keyring\""},{"line_number":41,"context_line":"    mode: \"0600\""},{"line_number":42,"context_line":"    decrypt: yes"},{"line_number":43,"context_line":"  become: true"},{"line_number":44,"context_line":"  when:"},{"line_number":45,"context_line":"    - glance_services[\u0027glance-api\u0027].host_in_groups | bool"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_7ce36106","line":42,"updated":"2019-08-14 16:49:32.000000000","message":"I don\u0027t think it makes sense when we use copy with content does it?","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"9c72d109bf9c7b7fa98ee5927cf20f10df5cf9b2","unresolved":false,"context_lines":[{"line_number":39,"context_line":"          key \u003d {{ cephx_key.keyring.key }}"},{"line_number":40,"context_line":"    dest: \"{{ node_config_directory }}/glance-api/ceph.client.glance.keyring\""},{"line_number":41,"context_line":"    mode: \"0600\""},{"line_number":42,"context_line":"    decrypt: yes"},{"line_number":43,"context_line":"  become: true"},{"line_number":44,"context_line":"  when:"},{"line_number":45,"context_line":"    - glance_services[\u0027glance-api\u0027].host_in_groups | bool"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_5cb1c58e","line":42,"in_reply_to":"7faddb67_7ce36106","updated":"2019-08-14 17:07:21.000000000","message":"good catch","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"}],"releasenotes/notes/vaulted-keyring-files-ab1252156542fbac.yaml":[{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"7d50281383702b9ab9637f2a4622efb67cf8c232","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_d9d14759","line":2,"range":{"start_line":2,"start_character":0,"end_line":2,"end_character":8},"updated":"2019-08-14 15:51:06.000000000","message":"I guess we rather use \u0027feature\u0027 for this kind but could be wrong. @mgoddard","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":29543,"name":"Scott Solkhon","email":"scott.solkhon@gresearch.co.uk","username":"scott.solkhon"},"change_message_id":"82ff042ed6e3ae695cae39fadd869b2b48935a4a","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_2ae03797","line":2,"range":{"start_line":2,"start_character":0,"end_line":2,"end_character":8},"in_reply_to":"7faddb67_9cee5d1f","updated":"2019-08-14 19:16:41.000000000","message":"I was not too sure which one to use but I\u0027ll update in the next patch to feature :)","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"c49945f1ccb35d026a23aa1c4259a0cbdf7554b4","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_9cee5d1f","line":2,"range":{"start_line":2,"start_character":0,"end_line":2,"end_character":8},"in_reply_to":"7faddb67_d9d14759","updated":"2019-08-14 16:49:32.000000000","message":"+1","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"7d50281383702b9ab9637f2a4622efb67cf8c232","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"},{"line_number":6,"context_line":"    cluster."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_d9e86717","line":4,"range":{"start_line":4,"start_character":4,"end_line":4,"end_character":11},"updated":"2019-08-14 15:51:06.000000000","message":"Ceph keyring","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"c49945f1ccb35d026a23aa1c4259a0cbdf7554b4","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"},{"line_number":6,"context_line":"    cluster."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_9cd89d52","line":4,"range":{"start_line":4,"start_character":22,"end_line":4,"end_character":39},"updated":"2019-08-14 16:49:32.000000000","message":"We should probably be nice and do this for all our external ceph integrations - just look for keyring copy tasks in glance, cinder, nova, gnocchi \u0026 manila","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"7d50281383702b9ab9637f2a4622efb67cf8c232","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"},{"line_number":6,"context_line":"    cluster."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_398adb63","line":4,"range":{"start_line":4,"start_character":40,"end_line":4,"end_character":56},"updated":"2019-08-14 15:51:06.000000000","message":"can now be stored encrypted","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"c49945f1ccb35d026a23aa1c4259a0cbdf7554b4","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"},{"line_number":6,"context_line":"    cluster."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_bcf31909","line":4,"range":{"start_line":4,"start_character":4,"end_line":4,"end_character":11},"in_reply_to":"7faddb67_d9e86717","updated":"2019-08-14 16:49:32.000000000","message":"Ceph","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"7d50281383702b9ab9637f2a4622efb67cf8c232","unresolved":false,"context_lines":[{"line_number":2,"context_line":"security:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Keyring files for Cinder and Glance can be encrypted using Ansible-Vault"},{"line_number":5,"context_line":"    and stored in the \u0027node_custom_config\u0027 path when using an external Ceph"},{"line_number":6,"context_line":"    cluster."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"7faddb67_79d93381","line":5,"range":{"start_line":5,"start_character":4,"end_line":5,"end_character":47},"updated":"2019-08-14 15:51:06.000000000","message":"in the config directory","commit_id":"63cb13acc17afac75f3634a82029baba36bd2063"}]}