)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Closes-Bug: #1793323"},{"line_number":10,"context_line":"Depends-On: I91671dda2242255e789b521d19348b0cccec266f"},{"line_number":11,"context_line":"Depends-On: Ic64eb51325b3503a14ebab9b9ff2f4d9caec734a"},{"line_number":12,"context_line":"Change-Id: Ibebd6e04de215e1a1aaff52c55d28c4741af98f2"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"7e3b3a7f_1c0803ba","line":11,"updated":"2023-12-22 13:15:59.000000000","message":"It is better to use the actual gerrit URLs for dependencies, now this is blocked by all the backports.","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Closes-Bug: #1793323"},{"line_number":10,"context_line":"Depends-On: I91671dda2242255e789b521d19348b0cccec266f"},{"line_number":11,"context_line":"Depends-On: Ic64eb51325b3503a14ebab9b9ff2f4d9caec734a"},{"line_number":12,"context_line":"Change-Id: Ibebd6e04de215e1a1aaff52c55d28c4741af98f2"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"835507da_336743c5","line":11,"in_reply_to":"7e3b3a7f_1c0803ba","updated":"2023-12-22 16:35:47.000000000","message":"Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"c6b03d6936175004db4b756298ccbbc56979041a","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":5,"id":"d911095f_82665d08","line":13,"updated":"2024-01-03 16:50:38.000000000","message":"Depends-On: https://review.opendev.org/c/openstack/nova/+/903140 as Alex Welsh said ?","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"cd2a2bf607a07fd90ede6376e1cbbb3dd555dbb8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"fd97b4f2_e718df10","line":13,"in_reply_to":"d911095f_82665d08","updated":"2024-01-03 17:34:05.000000000","message":"These docs do not depend on that change.\n\nIf that change goes through, then we would be able to remove the manual Nova Database Password rotation section from these docs.\n\nI think we should get the docs through as is for now, then remove the workaround at a later date. It doesn\u0027t seem like the nova team are in any rush to review that patch.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"e8f213d21554fe16afb4c5039f3bc120208c7024","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"bbaec172_715cdfe3","line":13,"in_reply_to":"fd97b4f2_e718df10","updated":"2024-01-03 18:01:11.000000000","message":"ok","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"a6c593389dc334cbb47e6085338d2e0c0937ab53","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"1a702c51_fc332cfb","updated":"2023-12-21 16:37:47.000000000","message":"Thanks for providing these docs! I made some comments.","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"95753613dfbed28483b46eed4fee5c9cf331cf60","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"8e883597_cd3d1186","in_reply_to":"1a702c51_fc332cfb","updated":"2023-12-21 16:49:54.000000000","message":"Much appreciated Sven. They\u0027re a long way from perfect but it\u0027s a lot better than nothing and we can build on it from here.","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"c82cdc77bf26c2416fa2fd0d3603d057fab6bd55","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"b1d1a2bd_3a724fd8","updated":"2023-12-21 17:08:46.000000000","message":"We should really investigate on how to improve the rabbitmq password rotation mechanism documented here.\nIt seems excessive to need to redeploy the whole rmq cluster for that.\n\nBut I think this is a separate task, so +1 for now.","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":290,"name":"Antony Messerli","email":"antony@mes.ser.li","username":"antonym"},"change_message_id":"478850d9d9e7f5d9c113ed89129baa95920dedbf","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"a87857f7_30e2c943","updated":"2024-01-24 15:56:07.000000000","message":"LGTM, and its definitely something that can be iterated on.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"01e28bb5_4bb0ea93","updated":"2024-01-29 21:14:13.000000000","message":"Nice work! I have a few minor comments which could be fixed in this change or in a follow-up.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"cd4e44cb5c68dd6451bd5348ff9dfa0688b0fdb5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"ae28bc8e_c8505fdd","updated":"2024-01-25 15:58:22.000000000","message":"there are still some unresolved comments but I guess this is a case of \"anything is better than nothing\". at least I think I see no factual wrong things in here which could cause harm, only discussion about which terminology is the more correct one.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"6f3f0af4e79daeb18e32a2ac7ace97c5b286804d","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"58d299bd_533f1ba6","updated":"2024-02-09 09:13:01.000000000","message":"still lgtm, thx","commit_id":"3d5850664c840257b63b404c84f40708a0a25385"}],"doc/source/admin/password-rotation.rst":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"a6c593389dc334cbb47e6085338d2e0c0937ab53","unresolved":true,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"   This guide relies on recent changes to Kolla and Kolla-Ansible. You may"},{"line_number":17,"context_line":"   encounter errors if applying this guide to older deployments. It is"},{"line_number":18,"context_line":"   recommended that you update the latest available versions before"},{"line_number":19,"context_line":"   proceeding."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Regenerating secrets"}],"source_content_type":"text/x-rst","patch_set":2,"id":"31b67119_4054d2c3","line":18,"range":{"start_line":18,"start_character":20,"end_line":18,"end_character":41},"updated":"2023-12-21 16:37:47.000000000","message":"\"you update to the latest\"?","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"6465e4fefc445de18b7f2071b2bb36998520603d","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"   This guide relies on recent changes to Kolla and Kolla-Ansible. You may"},{"line_number":17,"context_line":"   encounter errors if applying this guide to older deployments. It is"},{"line_number":18,"context_line":"   recommended that you update the latest available versions before"},{"line_number":19,"context_line":"   proceeding."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Regenerating secrets"}],"source_content_type":"text/x-rst","patch_set":2,"id":"8af72e1b_487720f2","line":18,"range":{"start_line":18,"start_character":20,"end_line":18,"end_character":41},"in_reply_to":"31b67119_4054d2c3","updated":"2023-12-21 16:48:28.000000000","message":"Good catch, fixed.","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"a6c593389dc334cbb47e6085338d2e0c0937ab53","unresolved":true,"context_lines":[{"line_number":219,"context_line":"communication and reconfiguring them with the new credentials can take some"},{"line_number":220,"context_line":"time, resulting in a relatively long API outage."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"It is recommended that you stop all services, then stop and destroy the"},{"line_number":223,"context_line":"RabbitMQ containers and volumes. Because the RabbitMQ containers are destroyed,"},{"line_number":224,"context_line":"``kolla-ansible deploy`` should be used to restart services rather than"},{"line_number":225,"context_line":"``kolla-ansible reconfigure``. Detailed steps are listed below:"},{"line_number":226,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"b8fac2e9_740e419c","line":223,"range":{"start_line":222,"start_character":46,"end_line":223,"end_character":32},"updated":"2023-12-21 16:37:47.000000000","message":"why do I need to destroy containers and volumes just to change the password?\nuser passwords can be changed via `rabitmqctl change_password \u003cusername\u003e \u003cpassword\u003e`:\n\nhttps://rabbitmq.com/rabbitmqctl.8.html#change_password\n\nIt seems it should also be not that difficult to change a clusters erlang cookie, at least that is what the docs claim:\n\nhttps://www.rabbitmq.com/clustering.html#erlang-cookie","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"8c22be01d343c85a7ff7b72a90cf32e98a9d5f29","unresolved":true,"context_lines":[{"line_number":219,"context_line":"communication and reconfiguring them with the new credentials can take some"},{"line_number":220,"context_line":"time, resulting in a relatively long API outage."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"It is recommended that you stop all services, then stop and destroy the"},{"line_number":223,"context_line":"RabbitMQ containers and volumes. Because the RabbitMQ containers are destroyed,"},{"line_number":224,"context_line":"``kolla-ansible deploy`` should be used to restart services rather than"},{"line_number":225,"context_line":"``kolla-ansible reconfigure``. Detailed steps are listed below:"},{"line_number":226,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"8275fdec_8cb062dc","line":223,"range":{"start_line":222,"start_character":46,"end_line":223,"end_character":32},"in_reply_to":"2da3b29a_543d724a","updated":"2023-12-21 16:56:22.000000000","message":"... else finds a way then I\u0027d be very happy to edit this section.\n\n(not sure why it cut off half my comment there)","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"c82cdc77bf26c2416fa2fd0d3603d057fab6bd55","unresolved":false,"context_lines":[{"line_number":219,"context_line":"communication and reconfiguring them with the new credentials can take some"},{"line_number":220,"context_line":"time, resulting in a relatively long API outage."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"It is recommended that you stop all services, then stop and destroy the"},{"line_number":223,"context_line":"RabbitMQ containers and volumes. Because the RabbitMQ containers are destroyed,"},{"line_number":224,"context_line":"``kolla-ansible deploy`` should be used to restart services rather than"},{"line_number":225,"context_line":"``kolla-ansible reconfigure``. Detailed steps are listed below:"},{"line_number":226,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"368aafce_f805b963","line":223,"range":{"start_line":222,"start_character":46,"end_line":223,"end_character":32},"in_reply_to":"6f6ed388_e8850aa5","updated":"2023-12-21 17:08:46.000000000","message":"marking this as resolved for now, we can always improve docs I guess.","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"eb0b865455ea1637fc19ef07be1be71b28143593","unresolved":true,"context_lines":[{"line_number":219,"context_line":"communication and reconfiguring them with the new credentials can take some"},{"line_number":220,"context_line":"time, resulting in a relatively long API outage."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"It is recommended that you stop all services, then stop and destroy the"},{"line_number":223,"context_line":"RabbitMQ containers and volumes. Because the RabbitMQ containers are destroyed,"},{"line_number":224,"context_line":"``kolla-ansible deploy`` should be used to restart services rather than"},{"line_number":225,"context_line":"``kolla-ansible reconfigure``. Detailed steps are listed below:"},{"line_number":226,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"6f6ed388_e8850aa5","line":223,"range":{"start_line":222,"start_character":46,"end_line":223,"end_character":32},"in_reply_to":"8275fdec_8cb062dc","updated":"2023-12-21 17:06:22.000000000","message":"interesting. I didn\u0027t test this myself, so let\u0027s see what the new year brings.\n\nI also found that you can change passwords by loading them from a definitions file during cluster boot time:\n\nhttps://rabbitmq.com/definitions.html#import-on-boot-nuances\n\nI found this information linked here: https://github.com/rabbitmq/rabbitmq-server/discussions/9170#discussioncomment-6809301\n\nIt seems it\u0027s also possible to use the HTTP Api for that.\n\nSo maybe one of those options work instead. I like the file based method, from a theoretical standpoint at least. It needs no network access and seems more secure to me than passing things around via the CLI.","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"6465e4fefc445de18b7f2071b2bb36998520603d","unresolved":true,"context_lines":[{"line_number":219,"context_line":"communication and reconfiguring them with the new credentials can take some"},{"line_number":220,"context_line":"time, resulting in a relatively long API outage."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"It is recommended that you stop all services, then stop and destroy the"},{"line_number":223,"context_line":"RabbitMQ containers and volumes. Because the RabbitMQ containers are destroyed,"},{"line_number":224,"context_line":"``kolla-ansible deploy`` should be used to restart services rather than"},{"line_number":225,"context_line":"``kolla-ansible reconfigure``. Detailed steps are listed below:"},{"line_number":226,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"2da3b29a_543d724a","line":223,"range":{"start_line":222,"start_character":46,"end_line":223,"end_character":32},"in_reply_to":"b8fac2e9_740e419c","updated":"2023-12-21 16:48:28.000000000","message":"I thought so too but wasn\u0027t able to make it work in my test env. I may come back to that one in the new year if I have time. Otherwise if anyone","commit_id":"7d5d097d17d8c505476214a309c48a109a72ba0d"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":32,"context_line":"Edit the ``passwords.yml`` file to remove the password strings for any secrets"},{"line_number":33,"context_line":"that need to be regenerated i.e. change ``foo: \"bar\"`` to ``foo:``."},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"Regenerate the edited passwords:"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. code-block:: bash"},{"line_number":38,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"e076175b_63d80dbe","line":35,"range":{"start_line":35,"start_character":15,"end_line":35,"end_character":21},"updated":"2023-12-22 13:15:59.000000000","message":"removed?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":32,"context_line":"Edit the ``passwords.yml`` file to remove the password strings for any secrets"},{"line_number":33,"context_line":"that need to be regenerated i.e. change ``foo: \"bar\"`` to ``foo:``."},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"Regenerate the edited passwords:"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. code-block:: bash"},{"line_number":38,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"6bd22437_230cc466","line":35,"range":{"start_line":35,"start_character":15,"end_line":35,"end_character":21},"in_reply_to":"e076175b_63d80dbe","updated":"2023-12-22 16:35:47.000000000","message":"Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35263,"name":"Matt Crees","email":"mattc@stackhpc.com","username":"mattcrees"},"change_message_id":"0440887bcb4175706d69cc97df8a7d221102668c","unresolved":true,"context_lines":[{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"},{"line_number":70,"context_line":"with ``podman`` in relevant commands."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"Kolla SSH key"},{"line_number":73,"context_line":"^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":3,"id":"259ec96c_17979fd2","line":70,"range":{"start_line":70,"start_character":16,"end_line":70,"end_character":27},"updated":"2023-12-22 16:24:27.000000000","message":"nit: ``in relevant`` -\u003e ``in the relevant``","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"},{"line_number":70,"context_line":"with ``podman`` in relevant commands."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"Kolla SSH key"},{"line_number":73,"context_line":"^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":3,"id":"6fa9d0e4_1592b00f","line":70,"range":{"start_line":70,"start_character":16,"end_line":70,"end_character":27},"in_reply_to":"259ec96c_17979fd2","updated":"2023-12-22 16:35:47.000000000","message":"Acknowledged","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":86,"context_line":""},{"line_number":87,"context_line":"Take note of the old password, generate a new one, and take note of it as well."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the passwords in this exact format to the ``passwords.yml`` file:"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Add it to the ``passwords.yml`` file, along with the old secret, in this"},{"line_number":92,"context_line":"exact format (including quotes in the middle):"}],"source_content_type":"text/x-rst","patch_set":3,"id":"a12f8385_d8ad9c2f","line":89,"updated":"2023-12-22 13:15:59.000000000","message":"This seems to be superceded by the following sentence, just an editing artifact?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":86,"context_line":""},{"line_number":87,"context_line":"Take note of the old password, generate a new one, and take note of it as well."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the passwords in this exact format to the ``passwords.yml`` file:"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Add it to the ``passwords.yml`` file, along with the old secret, in this"},{"line_number":92,"context_line":"exact format (including quotes in the middle):"}],"source_content_type":"text/x-rst","patch_set":3,"id":"4291fde6_c6dade58","line":89,"in_reply_to":"a12f8385_d8ad9c2f","updated":"2023-12-22 16:35:47.000000000","message":"Yes, must\u0027ve accidentally duplicated the line. Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":95,"context_line":""},{"line_number":96,"context_line":"   horizon_secret_key: newsecret\u0027 \u0027oldsecret"},{"line_number":97,"context_line":""},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"It is important to remember to remove the old key and reconfigure services"},{"line_number":100,"context_line":"again, after all old artifacts have expired e.g. approximately one to two"},{"line_number":101,"context_line":"weeks."}],"source_content_type":"text/x-rst","patch_set":3,"id":"6ea0e17e_a67ed69a","line":98,"updated":"2023-12-22 13:15:59.000000000","message":"nit: One empty line is enough?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":95,"context_line":""},{"line_number":96,"context_line":"   horizon_secret_key: newsecret\u0027 \u0027oldsecret"},{"line_number":97,"context_line":""},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"It is important to remember to remove the old key and reconfigure services"},{"line_number":100,"context_line":"again, after all old artifacts have expired e.g. approximately one to two"},{"line_number":101,"context_line":"weeks."}],"source_content_type":"text/x-rst","patch_set":3,"id":"ab69819d_114cb2fa","line":98,"in_reply_to":"6ea0e17e_a67ed69a","updated":"2023-12-22 16:35:47.000000000","message":"Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":107,"context_line":""},{"line_number":108,"context_line":"#. Generate a new Grafana Admin password"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"#. Exec into any Grafana container"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"   .. code:: bash"},{"line_number":113,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"f5917a11_51635e9f","line":110,"updated":"2023-12-22 13:15:59.000000000","message":"be consistent and use a trailing \":\" for all sentences that are followed by code examples? (lots of these below, too)","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":107,"context_line":""},{"line_number":108,"context_line":"#. Generate a new Grafana Admin password"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"#. Exec into any Grafana container"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"   .. code:: bash"},{"line_number":113,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5371c5d7_96f7f92f","line":110,"in_reply_to":"f5917a11_51635e9f","updated":"2023-12-22 16:35:47.000000000","message":"Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":"Database Password"},{"line_number":123,"context_line":"^^^^^^^^^^^^^^^^^"},{"line_number":124,"context_line":"The overcloud database password (``database_password``) must be rotated"},{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a78806e_e4a48236","line":124,"range":{"start_line":124,"start_character":4,"end_line":124,"end_character":13},"updated":"2023-12-22 13:15:59.000000000","message":"What is \"overcloud\" in this context? I\u0027ve only heard that term with tripleo. Maybe \"global\"?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"cadc0e1521a50ae2e46ce0a2df5cac8e7c87c5b6","unresolved":true,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":"Database Password"},{"line_number":123,"context_line":"^^^^^^^^^^^^^^^^^"},{"line_number":124,"context_line":"The overcloud database password (``database_password``) must be rotated"},{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"}],"source_content_type":"text/x-rst","patch_set":3,"id":"626efbfc_0326fcb4","line":124,"range":{"start_line":124,"start_character":4,"end_line":124,"end_character":13},"in_reply_to":"3a78806e_e4a48236","updated":"2023-12-22 15:14:13.000000000","message":"It might be - I don\u0027t _know_ - that \"overcloud\" is a term originating in tripleo, I certainly used it myself to refer to the production cloud that runs on top of the undercloud when deplyoing with k-a in the past and I never used tripleo. where the undercloud is usually defined by the usage of ironic, keystone and nova/neutron to bootstrap a complete openstack environment.\n\nIt\u0027s also used in kayobe: https://docs.openstack.org/kayobe/latest/administration/overcloud.html\n\nregardless of the origin of the term - it might be helpful to write down a definition before using it - I still think the term is much more precise than \"global\", because \"global\" imho doesn\u0027t fit here.\n\ndepending on deployment model and method for many common cases there are different database passwords for over- and undercloud, making them rather not \"global\", no?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"80e4346f17a819eb4750cf3d9f030b2e0f5deb40","unresolved":true,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":"Database Password"},{"line_number":123,"context_line":"^^^^^^^^^^^^^^^^^"},{"line_number":124,"context_line":"The overcloud database password (``database_password``) must be rotated"},{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"}],"source_content_type":"text/x-rst","patch_set":3,"id":"8338ddc9_493ee7cf","line":124,"range":{"start_line":124,"start_character":4,"end_line":124,"end_character":13},"in_reply_to":"626efbfc_0326fcb4","updated":"2023-12-22 15:59:42.000000000","message":"It\u0027s I think I picked it up from kayobe. Most of this content is \"translated\" from a guide I wrote for kayobe internally at StackHPC. I\u0027m not very familiar with kolla-ansible on its own so just assumed it was a common term.\n\nMaybe \"database administrator password\" would work best?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"1f4d87dd1a376059a96ed797fb32c642492a8e81","unresolved":false,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":"Database Password"},{"line_number":123,"context_line":"^^^^^^^^^^^^^^^^^"},{"line_number":124,"context_line":"The overcloud database password (``database_password``) must be rotated"},{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"}],"source_content_type":"text/x-rst","patch_set":3,"id":"2846c586_54ac83d6","line":124,"range":{"start_line":124,"start_character":4,"end_line":124,"end_character":13},"in_reply_to":"8338ddc9_493ee7cf","updated":"2024-01-26 15:37:51.000000000","message":"Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"},{"line_number":128,"context_line":"   well."},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"#. SSH to a host running a MariaDB container."},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a37640a_638745a2","line":128,"updated":"2023-12-22 13:15:59.000000000","message":"Shouldn\u0027t it still be updated in passwords.yml, too? E.g. for the case of deploying an additional service that generates a new DB?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":true,"context_lines":[{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"},{"line_number":128,"context_line":"   well."},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"#. SSH to a host running a MariaDB container."},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9872d052_010c7a97","line":128,"in_reply_to":"3a37640a_638745a2","updated":"2023-12-22 16:35:47.000000000","message":"All of the manual steps assume that the the new secrets are added to the passwords.yml file when it is regenerated, since that would happen when regenerating passwords using the recommended method. Do you think it would help to mention it explicitly each time?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"},{"line_number":128,"context_line":"   well."},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"#. SSH to a host running a MariaDB container."},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9be69e25_bb1407d9","line":128,"in_reply_to":"62d24b6a_be46434f","updated":"2024-02-02 14:47:11.000000000","message":"I was making changes, so included this suggestion as well.","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"},{"line_number":128,"context_line":"   well."},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"#. SSH to a host running a MariaDB container."},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"b2eb7c15_02ea973a","line":128,"in_reply_to":"62d24b6a_be46434f","updated":"2024-02-02 14:47:11.000000000","message":"Since I was making changes anyway, I included this suggestion as well","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"1f4d87dd1a376059a96ed797fb32c642492a8e81","unresolved":false,"context_lines":[{"line_number":125,"context_line":"manually."},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"#. Take note of the old password, generate a new one, and take note of it as"},{"line_number":128,"context_line":"   well."},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"#. SSH to a host running a MariaDB container."},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"62d24b6a_be46434f","line":128,"in_reply_to":"9872d052_010c7a97","updated":"2024-01-26 15:37:51.000000000","message":"Yes, since I expect people may want to change only a single password and only look at that specific section. Fine to update in a followup, though.","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"8c22be01d343c85a7ff7b72a90cf32e98a9d5f29","unresolved":false,"context_lines":[{"line_number":163,"context_line":"#. If there are any remaining root users with the old password e.g."},{"line_number":164,"context_line":"   ``root@localhost``, change the password for them too"},{"line_number":165,"context_line":""},{"line_number":166,"context_line":"Nova Database Password"},{"line_number":167,"context_line":"^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":168,"context_line":"The nova database admin user password (``nova_database_password``) must be"},{"line_number":169,"context_line":"rotated manually."}],"source_content_type":"text/x-rst","patch_set":3,"id":"f48e46d8_b9484ec1","line":166,"updated":"2023-12-21 16:56:22.000000000","message":"I\u0027ve put a change up for review on Nova to fix this [1], but it needs to get through there and then needs another change in kolla-ansible to use the fix. I considered adding it as a dependency and rolling the changes into one but the list of dependencies here is long enough as it is.\n\n[1] https://review.opendev.org/c/openstack/nova/+/903140","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":198,"context_line":"   ``00000000-0000-0000-0000-000000000000``, change the above command"},{"line_number":199,"context_line":"   accordingly)"},{"line_number":200,"context_line":""},{"line_number":201,"context_line":"Nova Database Password"},{"line_number":202,"context_line":"^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":203,"context_line":"The keystone password for the heat domain admin service user"},{"line_number":204,"context_line":"(``heat_domain_admin_password``) must be rotated manually."}],"source_content_type":"text/x-rst","patch_set":3,"id":"460040d0_0cf03c9a","line":201,"updated":"2023-12-22 13:15:59.000000000","message":"heading mismatch","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"66fce7ad6d6b1aa022ecf7bd76442096e672bdd1","unresolved":false,"context_lines":[{"line_number":198,"context_line":"   ``00000000-0000-0000-0000-000000000000``, change the above command"},{"line_number":199,"context_line":"   accordingly)"},{"line_number":200,"context_line":""},{"line_number":201,"context_line":"Nova Database Password"},{"line_number":202,"context_line":"^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":203,"context_line":"The keystone password for the heat domain admin service user"},{"line_number":204,"context_line":"(``heat_domain_admin_password``) must be rotated manually."}],"source_content_type":"text/x-rst","patch_set":3,"id":"699104fb_d305bfaa","line":201,"in_reply_to":"460040d0_0cf03c9a","updated":"2023-12-22 16:35:47.000000000","message":"Done","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"f1b826649a736091e173be3700c5b476dca39d4f","unresolved":true,"context_lines":[{"line_number":258,"context_line":""},{"line_number":259,"context_line":"   .. code-block:: bash"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"      apt/dnf install telnet"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"#. Check the config for the IP and port used by Memcached (on every host"},{"line_number":264,"context_line":"   running Memcached)."}],"source_content_type":"text/x-rst","patch_set":3,"id":"d20711ce_f73f9eb8","line":261,"updated":"2023-12-22 13:15:59.000000000","message":"Isn\u0027t netcat (nc) good enough for this?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"1f4d87dd1a376059a96ed797fb32c642492a8e81","unresolved":false,"context_lines":[{"line_number":258,"context_line":""},{"line_number":259,"context_line":"   .. code-block:: bash"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"      apt/dnf install telnet"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"#. Check the config for the IP and port used by Memcached (on every host"},{"line_number":264,"context_line":"   running Memcached)."}],"source_content_type":"text/x-rst","patch_set":3,"id":"870fa48e_bcffa430","line":261,"in_reply_to":"6db5b764_ec206835","updated":"2024-01-26 15:37:51.000000000","message":"I would prefer to introduce people to a useful, modern tool that has a steady location in the toolbox of a network engineer, rather than an old, deprecated legacy tool. But since this text was already in place, I agree we can update it independently.","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"cadc0e1521a50ae2e46ce0a2df5cac8e7c87c5b6","unresolved":true,"context_lines":[{"line_number":258,"context_line":""},{"line_number":259,"context_line":"   .. code-block:: bash"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"      apt/dnf install telnet"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"#. Check the config for the IP and port used by Memcached (on every host"},{"line_number":264,"context_line":"   running Memcached)."}],"source_content_type":"text/x-rst","patch_set":3,"id":"6db5b764_ec206835","line":261,"in_reply_to":"d20711ce_f73f9eb8","updated":"2023-12-22 15:14:13.000000000","message":"does it, in this context, matter if nc or telnet are used?\n\nboth are insecure tools - in general - that allow to send commands via arbitrary protocols. both need to be installed manually because none of them are part of a modern default install. arguably one could expect telnet to be preinstalled in more cases, because IIRC it was part of some old legacy systems in the default install (old linux distributions often included telnet in the base install).\n\nalso I think most people familiar with netcat are also familiar with telnet, which can\u0027t be said the other way around - telnet is often the first network debugging tool people learn, why netcat is more \"advanced\".\n\nIn general netcat is a \"better\" tool, because it has more usecases covered, but I think these don\u0027t matter here, do they?","commit_id":"f7889c742ade67771ceaa68e5a4fb16336c34b21"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":47,"context_line":""},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"* ``*_keystone_password``"},{"line_number":50,"context_line":"* ``*_database_password`` (excluding nova_database_password)"},{"line_number":51,"context_line":"* ``*_ssh_key`` (excluding kolla_ssh_key)"},{"line_number":52,"context_line":"* ``keystone_admin_password``"},{"line_number":53,"context_line":"* ``designate_rndc_key``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"a2d9de7c_7eb6e465","line":50,"range":{"start_line":50,"start_character":37,"end_line":50,"end_character":59},"updated":"2024-01-29 21:14:13.000000000","message":"You could wrap this in double backticks.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":47,"context_line":""},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"* ``*_keystone_password``"},{"line_number":50,"context_line":"* ``*_database_password`` (excluding nova_database_password)"},{"line_number":51,"context_line":"* ``*_ssh_key`` (excluding kolla_ssh_key)"},{"line_number":52,"context_line":"* ``keystone_admin_password``"},{"line_number":53,"context_line":"* ``designate_rndc_key``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"702cdcd9_63bc3b73","line":50,"range":{"start_line":50,"start_character":37,"end_line":50,"end_character":59},"in_reply_to":"a2d9de7c_7eb6e465","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":47,"context_line":""},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"* ``*_keystone_password``"},{"line_number":50,"context_line":"* ``*_database_password`` (excluding nova_database_password)"},{"line_number":51,"context_line":"* ``*_ssh_key`` (excluding kolla_ssh_key)"},{"line_number":52,"context_line":"* ``keystone_admin_password``"},{"line_number":53,"context_line":"* ``designate_rndc_key``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"92385a1e_fa355984","line":50,"range":{"start_line":50,"start_character":37,"end_line":50,"end_character":59},"in_reply_to":"a2d9de7c_7eb6e465","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"* ``*_keystone_password``"},{"line_number":50,"context_line":"* ``*_database_password`` (excluding nova_database_password)"},{"line_number":51,"context_line":"* ``*_ssh_key`` (excluding kolla_ssh_key)"},{"line_number":52,"context_line":"* ``keystone_admin_password``"},{"line_number":53,"context_line":"* ``designate_rndc_key``"},{"line_number":54,"context_line":"* ``keepalived_password``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"f05a9cd6_674f0b92","line":51,"range":{"start_line":51,"start_character":27,"end_line":51,"end_character":40},"updated":"2024-01-29 21:14:13.000000000","message":"You could wrap this in double backticks.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"* ``*_keystone_password``"},{"line_number":50,"context_line":"* ``*_database_password`` (excluding nova_database_password)"},{"line_number":51,"context_line":"* ``*_ssh_key`` (excluding kolla_ssh_key)"},{"line_number":52,"context_line":"* ``keystone_admin_password``"},{"line_number":53,"context_line":"* ``designate_rndc_key``"},{"line_number":54,"context_line":"* ``keepalived_password``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"08f7d860_6abac16c","line":51,"range":{"start_line":51,"start_character":27,"end_line":51,"end_character":40},"in_reply_to":"f05a9cd6_674f0b92","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"* ``*_keystone_password``"},{"line_number":50,"context_line":"* ``*_database_password`` (excluding nova_database_password)"},{"line_number":51,"context_line":"* ``*_ssh_key`` (excluding kolla_ssh_key)"},{"line_number":52,"context_line":"* ``keystone_admin_password``"},{"line_number":53,"context_line":"* ``designate_rndc_key``"},{"line_number":54,"context_line":"* ``keepalived_password``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"d843305d_78adf321","line":51,"range":{"start_line":51,"start_character":27,"end_line":51,"end_character":40},"in_reply_to":"f05a9cd6_674f0b92","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":63,"context_line":"It is possible to change more secrets however some require manual steps. The"},{"line_number":64,"context_line":"manual steps vary depending on the secret. They are listed below in the order"},{"line_number":65,"context_line":"they should be applied if they are to be changed at the same time. Once all"},{"line_number":66,"context_line":"manual steps are complete, reconfigure services(``kolla-ansible reconfigure``)."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"c6b61fdf_90a173e3","line":66,"range":{"start_line":66,"start_character":46,"end_line":66,"end_character":48},"updated":"2024-01-29 21:14:13.000000000","message":"Missing space here.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":63,"context_line":"It is possible to change more secrets however some require manual steps. The"},{"line_number":64,"context_line":"manual steps vary depending on the secret. They are listed below in the order"},{"line_number":65,"context_line":"they should be applied if they are to be changed at the same time. Once all"},{"line_number":66,"context_line":"manual steps are complete, reconfigure services(``kolla-ansible reconfigure``)."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"bfa6cc4f_41a8d035","line":66,"range":{"start_line":66,"start_character":46,"end_line":66,"end_character":48},"in_reply_to":"c6b61fdf_90a173e3","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":63,"context_line":"It is possible to change more secrets however some require manual steps. The"},{"line_number":64,"context_line":"manual steps vary depending on the secret. They are listed below in the order"},{"line_number":65,"context_line":"they should be applied if they are to be changed at the same time. Once all"},{"line_number":66,"context_line":"manual steps are complete, reconfigure services(``kolla-ansible reconfigure``)."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"}],"source_content_type":"text/x-rst","patch_set":5,"id":"f4e455a7_7e9def4c","line":66,"range":{"start_line":66,"start_character":46,"end_line":66,"end_character":48},"in_reply_to":"c6b61fdf_90a173e3","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":65,"context_line":"they should be applied if they are to be changed at the same time. Once all"},{"line_number":66,"context_line":"manual steps are complete, reconfigure services(``kolla-ansible reconfigure``)."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"},{"line_number":70,"context_line":"with ``podman`` in all relevant commands."},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"40a59a3c_4ecffa9b","line":68,"range":{"start_line":68,"start_character":27,"end_line":68,"end_character":38},"updated":"2024-01-29 21:14:13.000000000","message":"assumes","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":65,"context_line":"they should be applied if they are to be changed at the same time. Once all"},{"line_number":66,"context_line":"manual steps are complete, reconfigure services(``kolla-ansible reconfigure``)."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"},{"line_number":70,"context_line":"with ``podman`` in all relevant commands."},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"3c307761_f941c547","line":68,"range":{"start_line":68,"start_character":27,"end_line":68,"end_character":38},"in_reply_to":"40a59a3c_4ecffa9b","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":65,"context_line":"they should be applied if they are to be changed at the same time. Once all"},{"line_number":66,"context_line":"manual steps are complete, reconfigure services(``kolla-ansible reconfigure``)."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"For simplicity, this guide will assume Docker is being used. The same commands"},{"line_number":69,"context_line":"should also work for Podman deployments by replacing instances of ``docker``"},{"line_number":70,"context_line":"with ``podman`` in all relevant commands."},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"d14c97fa_8f5821da","line":68,"range":{"start_line":68,"start_character":27,"end_line":68,"end_character":38},"in_reply_to":"40a59a3c_4ecffa9b","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":"Kolla SSH key"},{"line_number":73,"context_line":"^^^^^^^^^^^^^"},{"line_number":74,"context_line":"There is currently no mechanism within Kolla-Ansible to rotate the"},{"line_number":75,"context_line":"``kolla_ssh_key``. It is however a relatively simple task to perform using a"},{"line_number":76,"context_line":"standard Ansible playbook, or can be performed by hand on smaller deployments."},{"line_number":77,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"66db4a3b_26dc7734","line":74,"range":{"start_line":74,"start_character":63,"end_line":74,"end_character":66},"updated":"2024-01-29 21:14:13.000000000","message":"You can remove \"the\".","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":"Kolla SSH key"},{"line_number":73,"context_line":"^^^^^^^^^^^^^"},{"line_number":74,"context_line":"There is currently no mechanism within Kolla-Ansible to rotate the"},{"line_number":75,"context_line":"``kolla_ssh_key``. It is however a relatively simple task to perform using a"},{"line_number":76,"context_line":"standard Ansible playbook, or can be performed by hand on smaller deployments."},{"line_number":77,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"01036328_442e6142","line":74,"range":{"start_line":74,"start_character":63,"end_line":74,"end_character":66},"in_reply_to":"66db4a3b_26dc7734","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":"Kolla SSH key"},{"line_number":73,"context_line":"^^^^^^^^^^^^^"},{"line_number":74,"context_line":"There is currently no mechanism within Kolla-Ansible to rotate the"},{"line_number":75,"context_line":"``kolla_ssh_key``. It is however a relatively simple task to perform using a"},{"line_number":76,"context_line":"standard Ansible playbook, or can be performed by hand on smaller deployments."},{"line_number":77,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"4d46e7f5_c64244a8","line":74,"range":{"start_line":74,"start_character":63,"end_line":74,"end_character":66},"in_reply_to":"66db4a3b_26dc7734","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":94,"context_line":"   horizon_secret_key: newsecret\u0027 \u0027oldsecret"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"It is important to remember to remove the old key and reconfigure services"},{"line_number":97,"context_line":"again, after all old artifacts have expired e.g. approximately one to two"},{"line_number":98,"context_line":"weeks."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Grafana Admin Password"}],"source_content_type":"text/x-rst","patch_set":5,"id":"dbdd9db9_e500c3eb","line":97,"range":{"start_line":97,"start_character":49,"end_line":97,"end_character":62},"updated":"2024-01-29 21:14:13.000000000","message":"after approximately","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":94,"context_line":"   horizon_secret_key: newsecret\u0027 \u0027oldsecret"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"It is important to remember to remove the old key and reconfigure services"},{"line_number":97,"context_line":"again, after all old artifacts have expired e.g. approximately one to two"},{"line_number":98,"context_line":"weeks."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Grafana Admin Password"}],"source_content_type":"text/x-rst","patch_set":5,"id":"09c6bc1a_4d20ec21","line":97,"range":{"start_line":97,"start_character":49,"end_line":97,"end_character":62},"in_reply_to":"dbdd9db9_e500c3eb","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":94,"context_line":"   horizon_secret_key: newsecret\u0027 \u0027oldsecret"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"It is important to remember to remove the old key and reconfigure services"},{"line_number":97,"context_line":"again, after all old artifacts have expired e.g. approximately one to two"},{"line_number":98,"context_line":"weeks."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Grafana Admin Password"}],"source_content_type":"text/x-rst","patch_set":5,"id":"a84146f9_ba2f8956","line":97,"range":{"start_line":97,"start_character":49,"end_line":97,"end_character":62},"in_reply_to":"dbdd9db9_e500c3eb","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":149,"context_line":""},{"line_number":150,"context_line":"   .. code:: bash"},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      SET PASSWORD FOR \u0027root\u0027@\u0027%\u0027 \u003d PASSWORD(\u0027newpassword\u0027);"},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"#. Check that the password hash has changed in the user list:"},{"line_number":155,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"24cd24ca_fc6951e6","line":152,"range":{"start_line":152,"start_character":6,"end_line":152,"end_character":60},"updated":"2024-01-29 21:14:13.000000000","message":"I assume this going to be recorded in ~/.mysql_history in the container. Can we make it so it isn\u0027t persisted or is removed?","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":149,"context_line":""},{"line_number":150,"context_line":"   .. code:: bash"},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      SET PASSWORD FOR \u0027root\u0027@\u0027%\u0027 \u003d PASSWORD(\u0027newpassword\u0027);"},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"#. Check that the password hash has changed in the user list:"},{"line_number":155,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"73f16525_53abca77","line":152,"range":{"start_line":152,"start_character":6,"end_line":152,"end_character":60},"in_reply_to":"0a6af86b_1d9df19b","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":149,"context_line":""},{"line_number":150,"context_line":"   .. code:: bash"},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      SET PASSWORD FOR \u0027root\u0027@\u0027%\u0027 \u003d PASSWORD(\u0027newpassword\u0027);"},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"#. Check that the password hash has changed in the user list:"},{"line_number":155,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"90418e4c_56d71a30","line":152,"range":{"start_line":152,"start_character":6,"end_line":152,"end_character":60},"in_reply_to":"0a6af86b_1d9df19b","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"0167935e9c97de11cad0fb01f6ee2fcc299d1fbf","unresolved":true,"context_lines":[{"line_number":149,"context_line":""},{"line_number":150,"context_line":"   .. code:: bash"},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      SET PASSWORD FOR \u0027root\u0027@\u0027%\u0027 \u003d PASSWORD(\u0027newpassword\u0027);"},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"#. Check that the password hash has changed in the user list:"},{"line_number":155,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"0a6af86b_1d9df19b","line":152,"range":{"start_line":152,"start_character":6,"end_line":152,"end_character":60},"in_reply_to":"24cd24ca_fc6951e6","updated":"2024-01-30 09:16:54.000000000","message":"you can call the mysql client in `--batch` or `--execute` mode, both disable the history file, according to my local mysql man page. (I did not test this).","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":158,"context_line":"      SELECT Host,User,Password FROM mysql.user WHERE User\u003d\u0027root\u0027;"},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"#. If there are any remaining root users with the old password e.g."},{"line_number":161,"context_line":"   ``root@localhost``, change the password for them too"},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"Nova Database Password"},{"line_number":164,"context_line":"^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fc48b039_b688d96f","line":161,"updated":"2024-01-29 21:14:13.000000000","message":"Missing dot at the end of sentence.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":158,"context_line":"      SELECT Host,User,Password FROM mysql.user WHERE User\u003d\u0027root\u0027;"},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"#. If there are any remaining root users with the old password e.g."},{"line_number":161,"context_line":"   ``root@localhost``, change the password for them too"},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"Nova Database Password"},{"line_number":164,"context_line":"^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":5,"id":"01a8571f_31a89a96","line":161,"in_reply_to":"fc48b039_b688d96f","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":158,"context_line":"      SELECT Host,User,Password FROM mysql.user WHERE User\u003d\u0027root\u0027;"},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"#. If there are any remaining root users with the old password e.g."},{"line_number":161,"context_line":"   ``root@localhost``, change the password for them too"},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"Nova Database Password"},{"line_number":164,"context_line":"^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7e27f315_574390fc","line":161,"in_reply_to":"fc48b039_b688d96f","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":167,"context_line":""},{"line_number":168,"context_line":".. warning::"},{"line_number":169,"context_line":""},{"line_number":170,"context_line":"   From this point onward, API service may be disrupted"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"#. Generate a new ``nova_database_password``"},{"line_number":173,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7ec09a36_a0a88ed7","line":170,"updated":"2024-01-29 21:14:13.000000000","message":"Missing dot at the end of sentence.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":167,"context_line":""},{"line_number":168,"context_line":".. warning::"},{"line_number":169,"context_line":""},{"line_number":170,"context_line":"   From this point onward, API service may be disrupted"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"#. Generate a new ``nova_database_password``"},{"line_number":173,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"1727fd75_efe0d72a","line":170,"in_reply_to":"7ec09a36_a0a88ed7","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":167,"context_line":""},{"line_number":168,"context_line":".. warning::"},{"line_number":169,"context_line":""},{"line_number":170,"context_line":"   From this point onward, API service may be disrupted"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"#. Generate a new ``nova_database_password``"},{"line_number":173,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"cb2a7a31_ed0a1b0c","line":170,"in_reply_to":"7ec09a36_a0a88ed7","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":169,"context_line":""},{"line_number":170,"context_line":"   From this point onward, API service may be disrupted"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"#. Generate a new ``nova_database_password``"},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"#. Exec into the ``nova_conductor`` container:"},{"line_number":175,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"e7c17bb0_f35b7a2c","line":172,"updated":"2024-01-29 21:14:13.000000000","message":"Missing dot at the end of sentence.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":169,"context_line":""},{"line_number":170,"context_line":"   From this point onward, API service may be disrupted"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"#. Generate a new ``nova_database_password``"},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"#. Exec into the ``nova_conductor`` container:"},{"line_number":175,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"754bcba7_458eaf15","line":172,"in_reply_to":"e7c17bb0_f35b7a2c","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":169,"context_line":""},{"line_number":170,"context_line":"   From this point onward, API service may be disrupted"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":"#. Generate a new ``nova_database_password``"},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"#. Exec into the ``nova_conductor`` container:"},{"line_number":175,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"925f2287_9f684332","line":172,"in_reply_to":"e7c17bb0_f35b7a2c","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":15197,"name":"Pierre Riteau","email":"pierre@stackhpc.com","username":"priteau","status":"StackHPC"},"change_message_id":"a6887b3cfa29118bbfff09adc5dbbc42b46022fc","unresolved":true,"context_lines":[{"line_number":283,"context_line":"guide."},{"line_number":284,"context_line":""},{"line_number":285,"context_line":"* ``docker_registry_password`` - kolla-ansible cannot manage docker registries."},{"line_number":286,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"1e2454e0_367331d9","line":286,"updated":"2024-01-29 21:14:13.000000000","message":"You can remove one extra line here.","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":283,"context_line":"guide."},{"line_number":284,"context_line":""},{"line_number":285,"context_line":"* ``docker_registry_password`` - kolla-ansible cannot manage docker registries."},{"line_number":286,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"64d9f48a_77c6f254","line":286,"in_reply_to":"1e2454e0_367331d9","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"dbf18855f075644686ce50783f293d653e98352f","unresolved":false,"context_lines":[{"line_number":283,"context_line":"guide."},{"line_number":284,"context_line":""},{"line_number":285,"context_line":"* ``docker_registry_password`` - kolla-ansible cannot manage docker registries."},{"line_number":286,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"a1a5ae23_9a6ba4f8","line":286,"in_reply_to":"1e2454e0_367331d9","updated":"2024-02-02 14:47:11.000000000","message":"Done","commit_id":"983a83eb687aa7cdeab39be1842555f9b75a0a6a"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"df03ff3fdbd8cd2315f205b35b0767981e7e554b","unresolved":true,"context_lines":[{"line_number":137,"context_line":""},{"line_number":138,"context_line":"      docker exec -it mariadb bash"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"#. Log in to the database.  You will be prompted for the password. Use the"},{"line_number":141,"context_line":"   old value of ``database_password``:"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"   .. code:: bash"}],"source_content_type":"text/x-rst","patch_set":6,"id":"86cd4ed2_aef5f1b8","line":140,"range":{"start_line":140,"start_character":26,"end_line":140,"end_character":28},"updated":"2024-02-05 10:28:27.000000000","message":"nit: two spaces","commit_id":"3d5850664c840257b63b404c84f40708a0a25385"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"12cda4a835645fa678a26f08d0cd75f1186c17eb","unresolved":false,"context_lines":[{"line_number":137,"context_line":""},{"line_number":138,"context_line":"      docker exec -it mariadb bash"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"#. Log in to the database.  You will be prompted for the password. Use the"},{"line_number":141,"context_line":"   old value of ``database_password``:"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"   .. code:: bash"}],"source_content_type":"text/x-rst","patch_set":6,"id":"662eba9c_be3b273d","line":140,"range":{"start_line":140,"start_character":26,"end_line":140,"end_character":28},"in_reply_to":"86cd4ed2_aef5f1b8","updated":"2024-02-21 12:02:50.000000000","message":"Done","commit_id":"3d5850664c840257b63b404c84f40708a0a25385"},{"author":{"_account_id":14826,"name":"Mark Goddard","email":"markgoddard86@gmail.com","username":"mgoddard"},"change_message_id":"40dff5c4e9af01d0064b8514b40c081e314e5c33","unresolved":true,"context_lines":[{"line_number":213,"context_line":""},{"line_number":214,"context_line":".. code-block:: bash"},{"line_number":215,"context_line":""},{"line_number":216,"context_line":"   openstack user set --password \u003cpassword\u003e heat_domain_admin"},{"line_number":217,"context_line":""},{"line_number":218,"context_line":"RabbitMQ Secrets"},{"line_number":219,"context_line":"^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":6,"id":"de36ae35_9dd498f2","line":216,"updated":"2024-02-20 10:44:50.000000000","message":"--domain heat_user_domain","commit_id":"3d5850664c840257b63b404c84f40708a0a25385"},{"author":{"_account_id":35264,"name":"Alex Welsh","email":"alex@stackhpc.com","username":"alex-welsh"},"change_message_id":"12cda4a835645fa678a26f08d0cd75f1186c17eb","unresolved":false,"context_lines":[{"line_number":213,"context_line":""},{"line_number":214,"context_line":".. code-block:: bash"},{"line_number":215,"context_line":""},{"line_number":216,"context_line":"   openstack user set --password \u003cpassword\u003e heat_domain_admin"},{"line_number":217,"context_line":""},{"line_number":218,"context_line":"RabbitMQ Secrets"},{"line_number":219,"context_line":"^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":6,"id":"ad4a5fb8_94f72d56","line":216,"in_reply_to":"de36ae35_9dd498f2","updated":"2024-02-21 12:02:50.000000000","message":"Done","commit_id":"3d5850664c840257b63b404c84f40708a0a25385"}]}