)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"e037057b05b1fdd82abd48fda79182b1b3fc4d59","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"818b4f4c_1472319d","updated":"2022-09-23 07:49:07.000000000","message":"Makes sense. Added few lines into reference guide too.","commit_id":"50eeb0f96ace50daffac9e75e98090afaba43d6e"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"322bbdf02ef9d1ca05e0e646efe6aafea2d51b08","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"43e67571_4114f281","updated":"2022-09-30 06:39:18.000000000","message":"thx for the updates","commit_id":"cea5e80227c3a742437fe16451e6f355fda76599"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"2a7d6a7b00d42ab3dd992869010b61afcda2b6a3","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":9,"id":"30f34fd8_addc1407","updated":"2022-09-30 11:11:44.000000000","message":"Good enough.","commit_id":"ee2bb48968261e9d5f6aef227373b97382f1849b"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"8667efb823fb573b137afd69a9f1546eb55174ab","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":10,"id":"fd589227_0651e343","updated":"2022-09-30 11:49:23.000000000","message":"Ah, that\u0027s what I get for being in a hurry!","commit_id":"86991c708fe8a93f0c879a28000dea02382b64fb"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"db91f7235b950083cfd3b812d768ad57f96b7975","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"da12bace_7fc1131c","updated":"2022-10-03 09:27:25.000000000","message":"Just notice the reno has to be renamed because it includes \"azure\" in the filename...","commit_id":"aadf0cd212be0a36005f77ac739740018eaf18db"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"61ea3ca524908391c58d89f1a2aea0043fa36aef","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"83034efa_998e777e","in_reply_to":"da12bace_7fc1131c","updated":"2022-10-03 10:37:02.000000000","message":"Indeed, done!","commit_id":"aadf0cd212be0a36005f77ac739740018eaf18db"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"d591518d00049ab14f6edf97e9fd9cc58ea61aee","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":13,"id":"757d3fb8_87f7f27c","updated":"2022-10-04 09:59:38.000000000","message":"Recheck (kolla-ansible-debian-source-upgrade failed)","commit_id":"98929761191e265474459a0b73fdbeb07afd2bb4"}],"ansible/roles/keystone/templates/wsgi-keystone.conf.j2":[{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"203544a5640ec83519964e032e6b1944b5ea1104","unresolved":true,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{# Note(darmach): with external tls enabled OIDC on Azure redirection -#}"},{"line_number":43,"context_line":"{# fails, as it attempts to redirect to http endpoint -#}"},{"line_number":44,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":45,"context_line":"    ServerName {{ keystone_public_url }}"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"cad4afc3_64b51a38","line":42,"range":{"start_line":42,"start_character":3,"end_line":42,"end_character":7},"updated":"2022-09-21 12:55:02.000000000","message":"note is usually uppercase","commit_id":"4c0204ae13faf79a7dbf2ffe502ff29d8ecb1243"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"97c2bc50e7335d6dbf536e672c42a4daba07f718","unresolved":false,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{# Note(darmach): with external tls enabled OIDC on Azure redirection -#}"},{"line_number":43,"context_line":"{# fails, as it attempts to redirect to http endpoint -#}"},{"line_number":44,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":45,"context_line":"    ServerName {{ keystone_public_url }}"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"91256c62_76318974","line":42,"range":{"start_line":42,"start_character":3,"end_line":42,"end_character":7},"in_reply_to":"cad4afc3_64b51a38","updated":"2022-09-23 13:37:11.000000000","message":"Done","commit_id":"4c0204ae13faf79a7dbf2ffe502ff29d8ecb1243"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"203544a5640ec83519964e032e6b1944b5ea1104","unresolved":true,"context_lines":[{"line_number":69,"context_line":"    OIDCScope \"{{ keystone_federation_oidc_scopes }}\""},{"line_number":70,"context_line":"    OIDCMetadataDir {{ keystone_container_federation_oidc_metadata_folder }}"},{"line_number":71,"context_line":"{% if keystone_federation_oidc_jwks_uri %}"},{"line_number":72,"context_line":"    {# Note(darmach): OIDCOAuthVerifyJwksUri can be used with auth-openidc -#}"},{"line_number":73,"context_line":"    {# endpoint for openstack-cli on Azure -#}"},{"line_number":74,"context_line":"    OIDCOAuthVerifyJwksUri {{ keystone_federation_oidc_jwks_uri }}"},{"line_number":75,"context_line":"{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"3c45d318_42325157","line":72,"range":{"start_line":72,"start_character":7,"end_line":72,"end_character":11},"updated":"2022-09-21 12:55:02.000000000","message":"ditto","commit_id":"4c0204ae13faf79a7dbf2ffe502ff29d8ecb1243"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"97c2bc50e7335d6dbf536e672c42a4daba07f718","unresolved":false,"context_lines":[{"line_number":69,"context_line":"    OIDCScope \"{{ keystone_federation_oidc_scopes }}\""},{"line_number":70,"context_line":"    OIDCMetadataDir {{ keystone_container_federation_oidc_metadata_folder }}"},{"line_number":71,"context_line":"{% if keystone_federation_oidc_jwks_uri %}"},{"line_number":72,"context_line":"    {# Note(darmach): OIDCOAuthVerifyJwksUri can be used with auth-openidc -#}"},{"line_number":73,"context_line":"    {# endpoint for openstack-cli on Azure -#}"},{"line_number":74,"context_line":"    OIDCOAuthVerifyJwksUri {{ keystone_federation_oidc_jwks_uri }}"},{"line_number":75,"context_line":"{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":1,"id":"315c3c70_03a933a2","line":72,"range":{"start_line":72,"start_character":7,"end_line":72,"end_character":11},"in_reply_to":"3c45d318_42325157","updated":"2022-09-23 13:37:11.000000000","message":"Done","commit_id":"4c0204ae13faf79a7dbf2ffe502ff29d8ecb1243"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"c5c00a00296b323c8923d7241fae79ab32f286ae","unresolved":true,"context_lines":[{"line_number":66,"context_line":"    OIDCResponseType \"{{ keystone_federation_oidc_response_type }}\""},{"line_number":67,"context_line":"    OIDCScope \"{{ keystone_federation_oidc_scopes }}\""},{"line_number":68,"context_line":"    OIDCMetadataDir {{ keystone_container_federation_oidc_metadata_folder }}"},{"line_number":69,"context_line":"{% if keystone_federation_oidc_jwks_uri %}"},{"line_number":70,"context_line":"    OIDCOAuthVerifyJwksUri {{ keystone_federation_oidc_jwks_uri }}"},{"line_number":71,"context_line":"{% endif %}"},{"line_number":72,"context_line":"{% if keystone_federation_openid_certificate_key_ids | length \u003e 0 %}"}],"source_content_type":"text/x-jinja2","patch_set":2,"id":"59f1d51f_279c65d0","line":69,"range":{"start_line":69,"start_character":6,"end_line":69,"end_character":39},"updated":"2022-09-21 13:54:07.000000000","message":"add that variable to role defaults (defaults/main.yml) - it will fail if missing.","commit_id":"c8f539f5def5fad4c9f7c786f11579ecb2840983"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"e037057b05b1fdd82abd48fda79182b1b3fc4d59","unresolved":false,"context_lines":[{"line_number":66,"context_line":"    OIDCResponseType \"{{ keystone_federation_oidc_response_type }}\""},{"line_number":67,"context_line":"    OIDCScope \"{{ keystone_federation_oidc_scopes }}\""},{"line_number":68,"context_line":"    OIDCMetadataDir {{ keystone_container_federation_oidc_metadata_folder }}"},{"line_number":69,"context_line":"{% if keystone_federation_oidc_jwks_uri %}"},{"line_number":70,"context_line":"    OIDCOAuthVerifyJwksUri {{ keystone_federation_oidc_jwks_uri }}"},{"line_number":71,"context_line":"{% endif %}"},{"line_number":72,"context_line":"{% if keystone_federation_openid_certificate_key_ids | length \u003e 0 %}"}],"source_content_type":"text/x-jinja2","patch_set":2,"id":"2cae1350_fcb5c2a9","line":69,"range":{"start_line":69,"start_character":6,"end_line":69,"end_character":39},"in_reply_to":"59f1d51f_279c65d0","updated":"2022-09-23 07:49:07.000000000","message":"Done","commit_id":"c8f539f5def5fad4c9f7c786f11579ecb2840983"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"ff8c1f3dd1f6148179408d460ecdbeb8e2329807","unresolved":true,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":5,"id":"6e55cdcc_34eb50b6","line":43,"updated":"2022-09-27 10:01:56.000000000","message":"I think you meant keystone_external_fqdn, no?","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"944363bff121666d7ed9c1d32506c8cae25e5f1b","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":5,"id":"da927d4c_f4da64fa","line":43,"in_reply_to":"2015b865_df18c721","updated":"2022-09-28 15:50:22.000000000","message":"Ack","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"b70ac1e5ddcfc89566935d3fa49b52057803fc13","unresolved":true,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":5,"id":"2015b865_df18c721","line":43,"in_reply_to":"5951ac27_bb5451ae","updated":"2022-09-28 14:28:54.000000000","message":"https://httpd.apache.org/docs/2.4/mod/core.html#ServerName says that ServerName can indeed include a scheme. The only issue that can happen is that could include a /path component, which I think would break this. Like people using proper URLs like https://mycloud/keystone instead of port 5000. Not sure whether and how Apache would handle that, since cutting off the path part would likely also produce wrong redirects? But looking at the VirtualHost definition I\u0027m not sure if that would be possible without overriding the complete template, so maybe a non-issue.","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"d72866fc5be393ec9751a016adf490ffc1547d6a","unresolved":true,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":5,"id":"af264e9a_5ec0dc83","line":43,"in_reply_to":"6e55cdcc_34eb50b6","updated":"2022-09-27 15:13:39.000000000","message":"I did actually mean keystone_public_url as in lines 76 or 96 - as it solves intermittent issue I encountered which caused redirection to go to:\n\nhttp://{{ keystone_external_fqdn }}\n\nMeanwhile, keystone_public_url contains both protocol and port number, effectively fixing the problem I had. According to Apache docs ServerName directive syntax can contain both scheme and port, that\u0027s why I went along using keystone_public_url which follows scheme below:\n\nhttps://{{ fqdn }}:port\n\nI have to admit I have troubles replicating this now, and it might turn out to be an edge case. Can using keystone_public_url in here cause problems?","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"6dfac17651e11dbf0bee237b1a0abbd81c0ca9f8","unresolved":true,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":5,"id":"5951ac27_bb5451ae","line":43,"in_reply_to":"af264e9a_5ec0dc83","updated":"2022-09-27 15:35:39.000000000","message":"I had exactly the same issue in some SAML integrations - basically if an Apache module does a redirect on it\u0027s own - it will use ServerName as a portion of the url (and if it\u0027s not aware it\u0027s https - then it will be http).","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"b70ac1e5ddcfc89566935d3fa49b52057803fc13","unresolved":true,"context_lines":[{"line_number":58,"context_line":"    SSLEngine on"},{"line_number":59,"context_line":"    SSLCertificateFile /etc/keystone/certs/keystone-cert.pem"},{"line_number":60,"context_line":"    SSLCertificateKeyFile /etc/keystone/certs/keystone-key.pem"},{"line_number":61,"context_line":"{% endif -%}"},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"{% if keystone_enable_federation_openid %}"},{"line_number":64,"context_line":"    OIDCClaimPrefix \"OIDC-\""}],"source_content_type":"text/x-jinja2","patch_set":6,"id":"f412c61d_031c2e95","line":61,"updated":"2022-09-28 14:28:54.000000000","message":"This looks unrelated, can you clean up?","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"2c800466b00e9f776e09039123c5c8dc7f8e6fc7","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    SSLEngine on"},{"line_number":59,"context_line":"    SSLCertificateFile /etc/keystone/certs/keystone-cert.pem"},{"line_number":60,"context_line":"    SSLCertificateKeyFile /etc/keystone/certs/keystone-key.pem"},{"line_number":61,"context_line":"{% endif -%}"},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"{% if keystone_enable_federation_openid %}"},{"line_number":64,"context_line":"    OIDCClaimPrefix \"OIDC-\""}],"source_content_type":"text/x-jinja2","patch_set":6,"id":"02f3df50_f525f025","line":61,"in_reply_to":"f412c61d_031c2e95","updated":"2022-09-28 18:04:25.000000000","message":"I put it there on purpose - wanted to add some jinja whitespace control. Before, the conditional block added unnecessary empty newline, hence the jinja trim character. I added one in line 105 as in there whitespace leftovers from jinja conditional added unwanted spaces in front of \u003cLocation\u003e block header.","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"ec4c5e1056c253f889c12ade02bcea6f49a428d0","unresolved":true,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":8,"id":"49115406_5f6b73bb","line":43,"updated":"2022-09-29 08:12:42.000000000","message":"Since it is quite far from obvious why we need this exactly like it is, I suggest you add a NOTE.","commit_id":"cea5e80227c3a742437fe16451e6f355fda76599"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"b8bc9c0054a7c046e4662475e361cc17c8ca6c5c","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":43,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":44,"context_line":"{% endif %}"},{"line_number":45,"context_line":"    WSGIDaemonProcess keystone-public processes\u003d{{ keystone_api_workers }} threads\u003d1 user\u003dkeystone group\u003dkeystone display-name\u003dkeystone-public"},{"line_number":46,"context_line":"    WSGIProcessGroup keystone-public"}],"source_content_type":"text/x-jinja2","patch_set":8,"id":"e4f15d46_5974aafa","line":43,"in_reply_to":"49115406_5f6b73bb","updated":"2022-09-30 10:39:14.000000000","message":"Done","commit_id":"cea5e80227c3a742437fe16451e6f355fda76599"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"2a7d6a7b00d42ab3dd992869010b61afcda2b6a3","unresolved":true,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{# Note(darmach): with external tls enabled OIDC redirection fails, as TLS terminated on haproxy keystone is not aware that redirection should use https. -#}"},{"line_number":43,"context_line":"{# Witm missing ServerName Keystone Apache uses fqdn, with http. Adding ServerName pointing to keystone_public_url corrects this. -#}"},{"line_number":44,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":45,"context_line":"    ServerName {{ keystone_public_url }}"}],"source_content_type":"text/x-jinja2","patch_set":9,"id":"7748d187_94a7a5c1","line":42,"range":{"start_line":42,"start_character":3,"end_line":42,"end_character":7},"updated":"2022-09-30 11:11:44.000000000","message":"nit: NOTE","commit_id":"ee2bb48968261e9d5f6aef227373b97382f1849b"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"8667efb823fb573b137afd69a9f1546eb55174ab","unresolved":false,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{# Note(darmach): with external tls enabled OIDC redirection fails, as TLS terminated on haproxy keystone is not aware that redirection should use https. -#}"},{"line_number":43,"context_line":"{# Witm missing ServerName Keystone Apache uses fqdn, with http. Adding ServerName pointing to keystone_public_url corrects this. -#}"},{"line_number":44,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":45,"context_line":"    ServerName {{ keystone_public_url }}"}],"source_content_type":"text/x-jinja2","patch_set":9,"id":"ad403623_fce244e2","line":42,"range":{"start_line":42,"start_character":3,"end_line":42,"end_character":7},"in_reply_to":"7748d187_94a7a5c1","updated":"2022-09-30 11:49:23.000000000","message":"Done","commit_id":"ee2bb48968261e9d5f6aef227373b97382f1849b"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"2a7d6a7b00d42ab3dd992869010b61afcda2b6a3","unresolved":true,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{# Note(darmach): with external tls enabled OIDC redirection fails, as TLS terminated on haproxy keystone is not aware that redirection should use https. -#}"},{"line_number":43,"context_line":"{# Witm missing ServerName Keystone Apache uses fqdn, with http. Adding ServerName pointing to keystone_public_url corrects this. -#}"},{"line_number":44,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":45,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":46,"context_line":"{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":9,"id":"b7a663ee_da41a3ea","line":43,"range":{"start_line":43,"start_character":3,"end_line":43,"end_character":8},"updated":"2022-09-30 11:11:44.000000000","message":"nit: With","commit_id":"ee2bb48968261e9d5f6aef227373b97382f1849b"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"8667efb823fb573b137afd69a9f1546eb55174ab","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"\u003cVirtualHost *:{{ keystone_public_listen_port }}\u003e"},{"line_number":42,"context_line":"{# Note(darmach): with external tls enabled OIDC redirection fails, as TLS terminated on haproxy keystone is not aware that redirection should use https. -#}"},{"line_number":43,"context_line":"{# Witm missing ServerName Keystone Apache uses fqdn, with http. Adding ServerName pointing to keystone_public_url corrects this. -#}"},{"line_number":44,"context_line":"{% if kolla_enable_tls_external | bool %}"},{"line_number":45,"context_line":"    ServerName {{ keystone_public_url }}"},{"line_number":46,"context_line":"{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":9,"id":"967f2064_5183fab7","line":43,"range":{"start_line":43,"start_character":3,"end_line":43,"end_character":8},"in_reply_to":"b7a663ee_da41a3ea","updated":"2022-09-30 11:49:23.000000000","message":"Done","commit_id":"ee2bb48968261e9d5f6aef227373b97382f1849b"}],"doc/source/reference/shared-services/keystone-guide.rst":[{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"ff8c1f3dd1f6148179408d460ecdbeb8e2329807","unresolved":true,"context_lines":[{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Token Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by Openstack command line client:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"}],"source_content_type":"text/x-rst","patch_set":5,"id":"b658d904_7a4c0697","line":92,"range":{"start_line":92,"start_character":10,"end_line":92,"end_character":16},"updated":"2022-09-27 10:01:56.000000000","message":"nope","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"d72866fc5be393ec9751a016adf490ffc1547d6a","unresolved":false,"context_lines":[{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Token Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by Openstack command line client:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3dced45b_7db17adb","line":92,"range":{"start_line":92,"start_character":10,"end_line":92,"end_character":16},"in_reply_to":"b658d904_7a4c0697","updated":"2022-09-27 15:13:39.000000000","message":"Done","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"ff8c1f3dd1f6148179408d460ecdbeb8e2329807","unresolved":true,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Token Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by Openstack command line client:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"71ddf31f_cb50c8b8","line":93,"range":{"start_line":93,"start_character":37,"end_line":93,"end_character":38},"updated":"2022-09-27 10:01:56.000000000","message":"The opening colon does not introduce the following content properly. Maybe add \"Here is an example config for Azure AD:\"","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"ff8c1f3dd1f6148179408d460ecdbeb8e2329807","unresolved":true,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Token Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by Openstack command line client:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"d6c24d40_204098d1","line":93,"range":{"start_line":93,"start_character":8,"end_line":93,"end_character":18},"updated":"2022-09-27 10:01:56.000000000","message":"nit: OpenStack","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"d72866fc5be393ec9751a016adf490ffc1547d6a","unresolved":false,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Token Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by Openstack command line client:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"aa2487c7_21eefd18","line":93,"range":{"start_line":93,"start_character":37,"end_line":93,"end_character":38},"in_reply_to":"71ddf31f_cb50c8b8","updated":"2022-09-27 15:13:39.000000000","message":"Done","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"d72866fc5be393ec9751a016adf490ffc1547d6a","unresolved":false,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Token Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by Openstack command line client:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"a4bd57ed_b51980e8","line":93,"range":{"start_line":93,"start_character":8,"end_line":93,"end_character":18},"in_reply_to":"d6c24d40_204098d1","updated":"2022-09-27 15:13:39.000000000","message":"Done","commit_id":"245804e132d75deba6a7cf343fd5df4204d23f01"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"b70ac1e5ddcfc89566935d3fa49b52057803fc13","unresolved":true,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"af0b6b10_33a51d25","line":91,"range":{"start_line":91,"start_character":19,"end_line":91,"end_character":22},"updated":"2022-09-28 14:28:54.000000000","message":"can you spell this out, please? Clarity trumps shortness in this case","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"2c800466b00e9f776e09039123c5c8dc7f8e6fc7","unresolved":false,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"f08322fa_c999b1b4","line":91,"range":{"start_line":91,"start_character":19,"end_line":91,"end_character":22},"in_reply_to":"af0b6b10_33a51d25","updated":"2022-09-28 18:04:25.000000000","message":"Done","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"b70ac1e5ddcfc89566935d3fa49b52057803fc13","unresolved":true,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ddfc7bd_f2d1acc8","line":93,"updated":"2022-09-28 14:28:54.000000000","message":"I\u0027m not convinced we want to promote a connection with Azure in any way. Is there some more generic example that we could use?","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"2c800466b00e9f776e09039123c5c8dc7f8e6fc7","unresolved":true,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"d5058742_3f3c5aef","line":93,"in_reply_to":"1ddfc7bd_f2d1acc8","updated":"2022-09-28 18:04:25.000000000","message":"I wouldn\u0027t say we promote anything in here. There are users who integrate with Azure, and I think that mentioning this explicitly will make it easier to find for them. Can we agree that it\u0027s not much harm in mentioning Azure in here?","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"b8bc9c0054a7c046e4662475e361cc17c8ca6c5c","unresolved":false,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"2724c271_a3649974","line":93,"in_reply_to":"2b5069cd_8b810e8c","updated":"2022-09-30 10:39:14.000000000","message":"I cleaned up a bit those Azure references.","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"322bbdf02ef9d1ca05e0e646efe6aafea2d51b08","unresolved":false,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"2b5069cd_8b810e8c","line":93,"in_reply_to":"5d538f94_deb48ec7","updated":"2022-09-30 06:39:18.000000000","message":"I don\u0027t completely agree, but I\u0027ll also not block this patch about it.","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"ec4c5e1056c253f889c12ade02bcea6f49a428d0","unresolved":true,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for ex. Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config for Azure AD shown below:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":".. code-block:: yaml"},{"line_number":96,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"5d538f94_deb48ec7","line":93,"in_reply_to":"d5058742_3f3c5aef","updated":"2022-09-29 08:12:42.000000000","message":"I think it\u0027s no harm, it\u0027s just an example.","commit_id":"72f2296745fed25802bff5acfb8aa2dca7cd005e"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"cdd91e0f9fd85ba31a2f6d9dc1ff840a39a1a3c7","unresolved":true,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for example Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9f605454_3e1ed318","line":91,"range":{"start_line":91,"start_character":33,"end_line":91,"end_character":35},"updated":"2022-09-30 13:15:57.000000000","message":"that\u0027s for OIDC, AD sounds like LDAP? Let\u0027s just skip the \"for example Azure AD integration\"?","commit_id":"86991c708fe8a93f0c879a28000dea02382b64fb"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"15fe5d2585db11de23ab10898ee3a517901a9a5d","unresolved":false,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for example Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"ee6885ef_f63cf3ed","line":91,"range":{"start_line":91,"start_character":33,"end_line":91,"end_character":35},"in_reply_to":"7208d622_5fcbef2f","updated":"2022-10-03 08:34:04.000000000","message":"Ah, that was because (afaik) we\u0027re integrating with OIDC with Azure AD, but I can remove that.","commit_id":"86991c708fe8a93f0c879a28000dea02382b64fb"},{"author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"change_message_id":"77b4f49ad94a61ad920e049919e557df1dfe02a9","unresolved":true,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases (for example Azure AD integration) it\u0027s necessary to add JWKS"},{"line_number":92,"context_line":"(JSON Web Key Set) uri. It\u0027s required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"7208d622_5fcbef2f","line":91,"range":{"start_line":91,"start_character":33,"end_line":91,"end_character":35},"in_reply_to":"9f605454_3e1ed318","updated":"2022-09-30 15:41:34.000000000","message":"Agreed, also from the commit message then.","commit_id":"86991c708fe8a93f0c879a28000dea02382b64fb"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"58b4fc48785191e3cbe26f6a8ed215b9df5f985c","unresolved":true,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases it\u0027s necessary to add JWKS (JSON Web Key Set) uri. "},{"line_number":92,"context_line":"It is required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":11,"id":"c0962fb7_ef0ae467","line":91,"range":{"start_line":91,"start_character":64,"end_line":91,"end_character":65},"updated":"2022-10-03 08:36:53.000000000","message":"whitespace","commit_id":"0e2a966b97be8725e9d3d0e5c65d2a1e38c9eb46"},{"author":{"_account_id":34076,"name":"Jakub Darmach","email":"jakub@stackhpc.com","username":"darmach"},"change_message_id":"827e59510e2d46462ee5750628f92aab4958dd1a","unresolved":false,"context_lines":[{"line_number":88,"context_line":"      - name: \"mappingId1\""},{"line_number":89,"context_line":"        file: \"/full/qualified/path/to/mapping/json/file/to/mappingId1\""},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"In some cases it\u0027s necessary to add JWKS (JSON Web Key Set) uri. "},{"line_number":92,"context_line":"It is required for auth-openidc endpoint - which is"},{"line_number":93,"context_line":"used by OpenStack command line client. Example config shown below:"},{"line_number":94,"context_line":""}],"source_content_type":"text/x-rst","patch_set":11,"id":"3c23c067_e3104d00","line":91,"range":{"start_line":91,"start_character":64,"end_line":91,"end_character":65},"in_reply_to":"c0962fb7_ef0ae467","updated":"2022-10-03 08:48:25.000000000","message":"Done","commit_id":"0e2a966b97be8725e9d3d0e5c65d2a1e38c9eb46"}]}