)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"77bd75bde1bec11562729a61bad154ffd18030fd","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"b1e99c53_d361f46c","updated":"2024-06-06 16:03:14.000000000","message":"-1 until the massive extension in fluentd file read rights is justified and properly documented.\nWithout explanation this just looks like a security issue.","commit_id":"87f63c569603d1cd198d348e51cf49a96b073420"},{"author":{"_account_id":28048,"name":"Will Szumski","email":"will@stackhpc.com","username":"jovial"},"change_message_id":"465d4696ac3a195c2fa15316bac90f8ad7fc9ca9","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"004c2f82_a62cc054","updated":"2024-06-03 14:06:48.000000000","message":"recheck: logs missing","commit_id":"87f63c569603d1cd198d348e51cf49a96b073420"}],"ansible/roles/common/defaults/main.yml":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"77bd75bde1bec11562729a61bad154ffd18030fd","unresolved":true,"context_lines":[{"line_number":6,"context_line":"    enabled: \"{{ enable_fluentd | bool }}\""},{"line_number":7,"context_line":"    image: \"{{ fluentd_image_full }}\""},{"line_number":8,"context_line":"    cap_add:"},{"line_number":9,"context_line":"      - DAC_READ_SEARCH"},{"line_number":10,"context_line":"    environment:"},{"line_number":11,"context_line":"      KOLLA_CONFIG_STRATEGY: \"{{ config_strategy }}\""},{"line_number":12,"context_line":"    volumes: \"{{ fluentd_default_volumes + fluentd_extra_volumes }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"e451c983_dbfb7e82","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":2},"updated":"2024-06-06 16:03:14.000000000","message":"I would expect at least some reasoning in the commit message and/or a comment directly at this option why we are giving away effective root privileges on the complete host to a process that has to read and parse many different unstructed logfiles supplied from various other processes.","commit_id":"87f63c569603d1cd198d348e51cf49a96b073420"}]}