)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"a3305ac101b4e9d212b59e7d55d37ae15947573d","unresolved":true,"context_lines":[{"line_number":4,"context_line":"Commit:     Roman Krček \u003croman.krcek@tietoevry.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2024-07-23 07:32:27 +0200"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Fix: Don\u0027t notify handlers during copy-cert"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This is a prerequisite for future work on patchset"},{"line_number":10,"context_line":"https://review.opendev.org/c/openstack/kolla-ansible/+/745164"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"c043810b_f698ae52","line":7,"range":{"start_line":7,"start_character":0,"end_line":7,"end_character":2},"updated":"2024-08-06 16:26:41.000000000","message":"if it\u0027s a fix it should link to some bugreport which it closes, no? :)\n\nSo I\u0027m currently not sure if it\u0027s only part of the greater patchset or if it could be backported independently?","commit_id":"f92d6dd56cc07b1fcc6ca7c6706f062d059edd1e"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"7e8393ddda312e40d098367a19c898975469391c","unresolved":false,"context_lines":[{"line_number":4,"context_line":"Commit:     Roman Krček \u003croman.krcek@tietoevry.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2024-07-23 07:32:27 +0200"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Fix: Don\u0027t notify handlers during copy-cert"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This is a prerequisite for future work on patchset"},{"line_number":10,"context_line":"https://review.opendev.org/c/openstack/kolla-ansible/+/745164"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"bbc16185_034c20f2","line":7,"range":{"start_line":7,"start_character":0,"end_line":7,"end_character":2},"in_reply_to":"75eea912_0be7377b","updated":"2024-09-23 16:56:05.000000000","message":"Done","commit_id":"f92d6dd56cc07b1fcc6ca7c6706f062d059edd1e"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"a2a063f0c98ab0dec262a3e27a4c28cfe56e7e84","unresolved":true,"context_lines":[{"line_number":4,"context_line":"Commit:     Roman Krček \u003croman.krcek@tietoevry.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2024-07-23 07:32:27 +0200"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Fix: Don\u0027t notify handlers during copy-cert"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This is a prerequisite for future work on patchset"},{"line_number":10,"context_line":"https://review.opendev.org/c/openstack/kolla-ansible/+/745164"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"75eea912_0be7377b","line":7,"range":{"start_line":7,"start_character":0,"end_line":7,"end_character":2},"in_reply_to":"c043810b_f698ae52","updated":"2024-08-07 07:08:51.000000000","message":"This bug has not been reported. I found it when I was reviewing Zuuls tests. It was created with introduction of https://review.opendev.org/c/openstack/kolla-ansible/+/745164/12 so I did not think to report it. The test : https://zuul.opendev.org/t/openstack/build/efa7e9526dee4d94b10dc1e023b5d914\n\nThe patschet is a prerequisite for the patchset chain and shouldn\u0027t be backported on it\u0027s own. I will edit the commit message of the of the dependent patchesets to make it more clean.\n\nPlease see the first open comment as at this point, the patchset introduces some new problems that need to be solved :)","commit_id":"f92d6dd56cc07b1fcc6ca7c6706f062d059edd1e"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"bbb74c4a7920262d69477900238af879937082b5","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"0d3f71c1_564a6f0a","updated":"2024-07-22 15:20:44.000000000","message":"There is a problem with the role service-cert-copy. When kolla_copy_ca_into_containers: is enabled, it copies files into the container to install in a trust store. However, since these files are not present inside ´config.json´ of a service, check-containers won\u0027t be able to detect this change and won\u0027t restart the container when CA files are updated. The script to install these files is ran when container is started, so without restart, the trust store won\u0027t be updated.\n\nMy idea would be to add that folder into config.json.j2 and that would make the container setup copy all of these files into some intermediary location. Like this:\n\n    {% if kolla_copy_ca_into_containers | bool %},\n    {\n        \"source\": \"{{ container_config_directory }}/ca-certificates\",\n        \"dest\": \"/some/location\",\n        \"owner\": \"some_owner\",\n        \"perm\": \"0600\"\n    }{% endif %}\n\nFrom that /some/location, this original script ,that handles the certificates and trust store, could work it\u0027s magic.\n\nhttps://github.com/openstack/kolla/blob/f63594bdc1dc429c4601bfe818ad5c7893a93f3e/docker/base/copy_cacerts.sh#L15\n\nWhat do you think about this approach? Or perhaps would could replace the script and integrate this functionality into the kolla_set_configs script directly? :)","commit_id":"12879e94a1e7daec44332d090b64950f7b85ee07"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"7e8393ddda312e40d098367a19c898975469391c","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"528bb840_d0831eaa","in_reply_to":"0d3f71c1_564a6f0a","updated":"2024-09-23 16:56:05.000000000","message":"Done","commit_id":"12879e94a1e7daec44332d090b64950f7b85ee07"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"a3305ac101b4e9d212b59e7d55d37ae15947573d","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"fb38b3b8_baaf3e63","updated":"2024-08-06 16:26:41.000000000","message":"code lgtm (cross checked manually with other services and the service-cert-copy role).\n\nit might be worth it to investigate some of the non voting build failures.","commit_id":"f92d6dd56cc07b1fcc6ca7c6706f062d059edd1e"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"a2a063f0c98ab0dec262a3e27a4c28cfe56e7e84","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"416503d5_ff5a1f38","updated":"2024-08-07 07:08:51.000000000","message":"first comment needs to be resolved before proceeding","commit_id":"f92d6dd56cc07b1fcc6ca7c6706f062d059edd1e"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"a7630eca173561c51938ea4de43db233dbc4af54","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"50fb92b0_3cb34535","updated":"2024-08-22 08:41:16.000000000","message":"This is just POC for horizon role. I tested deploying the modified horizon container built using kolla#926882 and it seems to be working nicely. However, I am still unsure about the /tmp location.","commit_id":"7757d5705387ae9dbb08d3c41d79e11d2e448236"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"421c947a464017b2fc30683344c6fd4784f4fbb6","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"07479045_03fee55f","updated":"2024-08-26 09:05:30.000000000","message":"this currently fails in CI with:\n\n```\n self._sslobj.do_handshake()\\nssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate \n```\n\nin task `TASK [service-ks-register : keystone | Creating services]`\n\nduring `Failed to discover available identity versions when contacting https://192.0.2.10:5000` in the deployment phase in job: `kolla-ansible-debian`\n\nhttps://zuul.opendev.org/t/openstack/build/c3c80ea4711843b0900d1c822a968886/log/primary/logs/ansible/deploy","commit_id":"9cd2eb2fd645eb3cb8d5dfffbffc06f52049fba7"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"4115d52913601f2fde4d96687867c1d281f4eab5","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":6,"id":"cd564f42_87d04d94","in_reply_to":"07479045_03fee55f","updated":"2024-08-26 09:06:15.000000000","message":"unresolved.","commit_id":"9cd2eb2fd645eb3cb8d5dfffbffc06f52049fba7"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"ace8e5c014d9e6555e064c15c20402c3e5ab74fd","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"03708b44_847bcd70","in_reply_to":"2ae26ce6_b7293930","updated":"2024-10-16 07:06:45.000000000","message":"Thanks for the help, the CI is now passing.","commit_id":"9cd2eb2fd645eb3cb8d5dfffbffc06f52049fba7"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"bc888538bf58c0b20ad12473d13cc2dbc005e12d","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":6,"id":"2ae26ce6_b7293930","in_reply_to":"954884de_9ba132eb","updated":"2024-09-03 15:12:48.000000000","message":"yes, that usually does the trick. this informs gerrit about cross repository dependencies, see these docs:\n\nhttps://docs.openstack.org/contributors/common/git.html#footers\n\nmore explanation can be found here:\n\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#cross-repository-dependencies\n\nHTH!","commit_id":"9cd2eb2fd645eb3cb8d5dfffbffc06f52049fba7"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"45fe76733724e425e4f36496870dd2520c3fbf21","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":6,"id":"f5fa321b_b93ea970","in_reply_to":"cd564f42_87d04d94","updated":"2024-08-27 05:27:53.000000000","message":"My hunch is that I need to adjust config.json for all services like proposed for horizon. I will try that in local environment and see if that helps.","commit_id":"9cd2eb2fd645eb3cb8d5dfffbffc06f52049fba7"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"8fcf6bd28ff7a8c1c8352489b7b77bcc58dffaf2","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":6,"id":"954884de_9ba132eb","in_reply_to":"f5fa321b_b93ea970","updated":"2024-09-03 08:02:29.000000000","message":"In local environment, `deploy` finished successfully. I used config from https://docs.openstack.org/kolla-ansible/latest/admin/tls.html. However, I had to build my own images from the dependent kolla patchset  #926882. Does Zuul use images built by the kolla patchset if the patchset is specified in `Depends-on:` ? Without it the CI jobs will still fail.","commit_id":"9cd2eb2fd645eb3cb8d5dfffbffc06f52049fba7"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"c113b4140bb7efc0f7c2baba573e678b2a36d310","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"f089b0b8_75f0ef90","updated":"2024-09-10 07:45:27.000000000","message":"recheck \"connection reset by peer, download.docker.com\"","commit_id":"10106fd62c5a7fcd53b1934f753435dfc5b61f82"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"848e3c22f7dfda0f53572c0aec97fcb665df2df8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"15894548_683dc426","updated":"2024-09-06 09:01:08.000000000","message":"this should fix the upgrade tests in Zuul. Still working on the new location.","commit_id":"10106fd62c5a7fcd53b1934f753435dfc5b61f82"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"766d65d08f8ce74acf592e94ab9c736e2884eeae","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"dbaca76d_859c2db0","in_reply_to":"00d7ea6a_1dba7838","updated":"2024-09-10 08:16:07.000000000","message":"Should be ok now. Thank you, but no help required. :)","commit_id":"10106fd62c5a7fcd53b1934f753435dfc5b61f82"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"bc69e27afecda84aedd1250080a94b1437e6ea3d","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":8,"id":"00d7ea6a_1dba7838","in_reply_to":"f089b0b8_75f0ef90","updated":"2024-09-10 08:07:57.000000000","message":"you must first address the merge conflict gerrit is complaining about.\n\nIf you need help with that, please reach out.","commit_id":"10106fd62c5a7fcd53b1934f753435dfc5b61f82"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"bbd29b1027967415775919bb3d3de683318ddd13","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"cab98d4e_458e172f","updated":"2024-09-13 08:12:18.000000000","message":"So I reviewed the whole thing and I really like it in spirit and would like to merge it soon.\n\nAs I already said though, that /tmp/ path usage is really not good, -1 for that and imho the \"upgrade\" section in the reno is not really actionable, so imho move that information to the \"fixes\" section.","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"2ee49c5fc2b20184e24fd57e969d0fc46afcb292","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":9,"id":"c5964a09_42ddd68a","updated":"2024-09-16 16:49:23.000000000","message":"This can\u0027t be merged as it\u0027s dangerous and firstly need to check the kolla part as already mentioned in last patches in this relation chain.","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"8eab53e67c2375e66516c4b6741c9fa5323ced7d","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"3fc098cb_ff542034","in_reply_to":"3f6fabe2_3c415711","updated":"2024-09-23 16:48:35.000000000","message":"Done","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"0a84ecbef5628fceb5cbc74e68194dde850d0355","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":9,"id":"38db4647_8e9f62de","in_reply_to":"3fc098cb_ff542034","updated":"2024-11-01 12:43:45.000000000","message":"Done","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"616c27ad8bfd3f096dfbda99476d7f0f0541f714","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"3f6fabe2_3c415711","in_reply_to":"901c6e6b_82addb31","updated":"2024-09-20 08:59:04.000000000","message":"I think we have /var/lib/kolla for that - let\u0027s stick to one location instead of spreading that throughout the filesystem...","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"662f3d3a803e9d0c3a1406e07e9098a23b955985","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"d75beae8_3de4e10e","in_reply_to":"cab98d4e_458e172f","updated":"2024-09-13 13:37:22.000000000","message":"I was experimenting with the storage locations of the CA certificates and if we could maybe get rid of copying the certificates using `kolla_copy_cacerts` [1]\n\nDebian based containers can load CA certs from subfolder like `/usr/local/share/ca-certificates/kolla` where we could directly copy the files using `config.json` and then we could simply run `update-ca-certificates` on container start. Simple - no extra copying needed. However, rocky based containers need to have all files in the root of `/etc/pki/ca-trust/source/anchors` This means, that the copying and renaming script [1] needs to stay.\n\nSo my solution needs intermediary folder. My suggestion would to either have them in `/ca-certs` like we have files from dev mode or `/usr/share/kolla/` as Sven suggested in previous comment.\n\nPlease let me know what storage location sounds best for you and I\u0027ll get to work ASAP. :)\n\n[1] - https://github.com/openstack/kolla/blob/master/docker/base/copy_cacerts.sh","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"43ed9de89d0776be183c7aac72e55b4169628dc4","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":9,"id":"901c6e6b_82addb31","in_reply_to":"d75beae8_3de4e10e","updated":"2024-09-13 15:38:25.000000000","message":"I personally like `/usr/share/kolla/` most. I don\u0027t like putting everything into the root folder, even if it has it\u0027s own folder.\n\nHTH","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"e4e22b1d20c3d765c5ad59aa6b18861d860623fd","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":10,"id":"8b4aa942_a4c478e9","updated":"2024-09-17 20:42:43.000000000","message":"recheck \"dependent patchset should be good now\"","commit_id":"1c2e77274b190706a9179bf9c33bfb2f0af29588"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"641647b866347b6e885590197954f67ffefcb553","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"6742c329_ca2fb8d0","updated":"2024-10-08 11:03:56.000000000","message":"rabbitmq broken by this change \n\nhttps://fc891d7e1f0b0d1ecc9c-5406e7d03d51190d7ee83b25b2acffe7.ssl.cf2.rackcdn.com/931761/1/check/kolla-ansible-ubuntu-lets-encrypt/3d00aae/primary/logs/ansible/deploy\n\nReview https://review.opendev.org/c/openstack/kolla-ansible/+/931761\n\nProbably because ansible/roles/rabbitmq/tasks/copy-certs.yml was changed to \n\n```\n+- name: \"Copy certificates and keys for {{ project_name }}\"\n+  import_role:\n+    role: service-cert-copy\n```","commit_id":"1841f75fd19e4820ac12c1872e07bf7a48fcac7a"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"607e85abf888f1c94543d377110cd61460d90590","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"18dbc0cc_4595c35d","in_reply_to":"57e5d58f_b4868632","updated":"2024-11-28 08:53:02.000000000","message":"I belive it was fixed. The \"DNM\" patchset #931761 has all tests passing. In some patchsets in this chain, the kolla-ansible-ubuntu-lets-encrypt test fails, but it looks like it does due to instability issues. Looks like the only obstacle now is Docker Hub.","commit_id":"1841f75fd19e4820ac12c1872e07bf7a48fcac7a"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"4d506bfba318b09b5a2d6d2801f1bc2ad033430f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"90d1fb0f_4b71bdb2","in_reply_to":"6742c329_ca2fb8d0","updated":"2024-10-16 07:04:19.000000000","message":"That is an interesting issue. It looks like it is a kolla-ansible-ubuntu-lets-encrypt test, but that test seems to be passing in Zuul. Are you using modified Zuul tests?\n\nLast successful run in Zuul: https://zuul.opendev.org/t/openstack/build/2db7abd845c343ae9be88f9e0ef27d5e/log/primary/logs/ansible/deploy","commit_id":"1841f75fd19e4820ac12c1872e07bf7a48fcac7a"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"5f0c917579ae6cb97d0ca577f369e2f15b9f4e8d","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":12,"id":"57e5d58f_b4868632","in_reply_to":"6efd6118_d0c01787","updated":"2024-11-25 13:23:26.000000000","message":"Is this issue resolved? afaik not?","commit_id":"1841f75fd19e4820ac12c1872e07bf7a48fcac7a"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"5adc4241fa5966e057accc048546c4697c0c075e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":12,"id":"6efd6118_d0c01787","in_reply_to":"90d1fb0f_4b71bdb2","updated":"2024-10-29 08:41:13.000000000","message":"It actually looks like it have gotten broken in #745164. Since in this patchset the tests succeed, but from #745164 they are failing.","commit_id":"1841f75fd19e4820ac12c1872e07bf7a48fcac7a"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"3e4e3f0ea0ecfaf677b83ce449585a03544d0fc3","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":22,"id":"426d631e_f6781d66","updated":"2024-11-08 10:36:25.000000000","message":"recheck temporary failure with logging at rackspace","commit_id":"eb481a45ba0bb8465cd98fdd6b7745715fd83a02"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"607e85abf888f1c94543d377110cd61460d90590","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":24,"id":"5f8157a1_8b588d19","updated":"2024-11-28 08:53:02.000000000","message":"recheck - kolla-ansible-debian - docker.errors.BuildError: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit","commit_id":"6e75763bcd550e66b96bb6d1d622b220e6ab2c2b"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"08482f41a9c6191d44222fd3ad95087993c6232d","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":27,"id":"93387d66_56178d7f","updated":"2024-12-01 07:54:21.000000000","message":"recheck non-related","commit_id":"69809906215b03ddc2ef5157e70763cac4c06e0d"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"7303fe2c508200fdf01a466ef0ce0a79a6597dce","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":27,"id":"c74cb761_6d3e1438","updated":"2024-11-30 17:56:23.000000000","message":"recheck retry limit","commit_id":"69809906215b03ddc2ef5157e70763cac4c06e0d"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"7d9b4fe6e3378ce7d2377476c756270bbe173bc1","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":27,"id":"d3d411ad_9d597492","updated":"2024-12-01 13:26:48.000000000","message":"recheck unrelated","commit_id":"69809906215b03ddc2ef5157e70763cac4c06e0d"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"88de6bc610c465898f95078a8a2dc46ef9b1a558","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":28,"id":"0d385701_aed12209","updated":"2024-12-02 18:46:24.000000000","message":"Cool, anybody for second +2 as https://review.opendev.org/c/openstack/kolla/+/926882 is now merged ?","commit_id":"006ff0718540fe790bfb257dbc8a87eacb96d1bf"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"74214cb8d4c9a1e8103b543474a0998b42cb20f3","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":28,"id":"e0bc1d01_a730af1c","updated":"2024-12-01 22:01:33.000000000","message":"recheck new image","commit_id":"006ff0718540fe790bfb257dbc8a87eacb96d1bf"}],"ansible/roles/aodh/templates/aodh-api.json.j2":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"182bc5ff0089754b9f0163d938599009039987e0","unresolved":true,"context_lines":[{"line_number":23,"context_line":"        }{% endif %}{% if kolla_copy_ca_into_containers | bool %},"},{"line_number":24,"context_line":"        {"},{"line_number":25,"context_line":"            \"source\": \"{{ container_config_directory }}/ca-certificates\","},{"line_number":26,"context_line":"            \"dest\": \"/tmp/ca-certificates\","},{"line_number":27,"context_line":"            \"owner\": \"root\","},{"line_number":28,"context_line":"            \"perm\": \"0600\""},{"line_number":29,"context_line":"        }{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":7,"id":"77d109b5_e3d28d74","line":26,"range":{"start_line":26,"start_character":0,"end_line":26,"end_character":2},"updated":"2024-09-03 07:46:58.000000000","message":"is this just for testing purposes or do we really want to store the certs in `/tmp/`?\nin general it\u0027s not a good location to store data.","commit_id":"124008615d2c92f26b44d4bee1e0c1059b940611"},{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"56a8f385490f2e663be4ac059aa40d9d1506dea1","unresolved":true,"context_lines":[{"line_number":23,"context_line":"        }{% endif %}{% if kolla_copy_ca_into_containers | bool %},"},{"line_number":24,"context_line":"        {"},{"line_number":25,"context_line":"            \"source\": \"{{ container_config_directory }}/ca-certificates\","},{"line_number":26,"context_line":"            \"dest\": \"/tmp/ca-certificates\","},{"line_number":27,"context_line":"            \"owner\": \"root\","},{"line_number":28,"context_line":"            \"perm\": \"0600\""},{"line_number":29,"context_line":"        }{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":7,"id":"b59447c2_845893ac","line":26,"range":{"start_line":26,"start_character":0,"end_line":26,"end_character":2},"in_reply_to":"0d664ef9_d59e516f","updated":"2024-09-03 15:16:39.000000000","message":"well the standardized paths for storing certs are usually one of these:\n\n`/etc/ssl/certs/`\n`/usr/share/$vendor` e.g. `/usr/share/mozilla/`","commit_id":"124008615d2c92f26b44d4bee1e0c1059b940611"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"8fcf6bd28ff7a8c1c8352489b7b77bcc58dffaf2","unresolved":true,"context_lines":[{"line_number":23,"context_line":"        }{% endif %}{% if kolla_copy_ca_into_containers | bool %},"},{"line_number":24,"context_line":"        {"},{"line_number":25,"context_line":"            \"source\": \"{{ container_config_directory }}/ca-certificates\","},{"line_number":26,"context_line":"            \"dest\": \"/tmp/ca-certificates\","},{"line_number":27,"context_line":"            \"owner\": \"root\","},{"line_number":28,"context_line":"            \"perm\": \"0600\""},{"line_number":29,"context_line":"        }{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":7,"id":"0d664ef9_d59e516f","line":26,"range":{"start_line":26,"start_character":0,"end_line":26,"end_character":2},"in_reply_to":"77d109b5_e3d28d74","updated":"2024-09-03 08:02:29.000000000","message":"So far, just for testing purposes. I agree, that `/tmp` is not ideal. I\u0027ll welcome any suggestions. :)","commit_id":"124008615d2c92f26b44d4bee1e0c1059b940611"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"518d11db2b5e2ed9de49f274d16c4bc0a5115024","unresolved":true,"context_lines":[{"line_number":23,"context_line":"        }{% endif %}{% if kolla_copy_ca_into_containers | bool %},"},{"line_number":24,"context_line":"        {"},{"line_number":25,"context_line":"            \"source\": \"{{ container_config_directory }}/ca-certificates\","},{"line_number":26,"context_line":"            \"dest\": \"/tmp/ca-certificates\","},{"line_number":27,"context_line":"            \"owner\": \"root\","},{"line_number":28,"context_line":"            \"perm\": \"0600\""},{"line_number":29,"context_line":"        }{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":7,"id":"f8043227_53d7bcb7","line":26,"range":{"start_line":26,"start_character":0,"end_line":26,"end_character":2},"in_reply_to":"b59447c2_845893ac","updated":"2024-09-17 22:17:58.000000000","message":"not sure that your propose is a standard. according the FHS: https://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s11.html this folder have other purposes.","commit_id":"124008615d2c92f26b44d4bee1e0c1059b940611"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"ace8e5c014d9e6555e064c15c20402c3e5ab74fd","unresolved":false,"context_lines":[{"line_number":23,"context_line":"        }{% endif %}{% if kolla_copy_ca_into_containers | bool %},"},{"line_number":24,"context_line":"        {"},{"line_number":25,"context_line":"            \"source\": \"{{ container_config_directory }}/ca-certificates\","},{"line_number":26,"context_line":"            \"dest\": \"/tmp/ca-certificates\","},{"line_number":27,"context_line":"            \"owner\": \"root\","},{"line_number":28,"context_line":"            \"perm\": \"0600\""},{"line_number":29,"context_line":"        }{% endif %}"}],"source_content_type":"text/x-jinja2","patch_set":7,"id":"37448462_ccd5c800","line":26,"range":{"start_line":26,"start_character":0,"end_line":26,"end_character":2},"in_reply_to":"f8043227_53d7bcb7","updated":"2024-10-16 07:06:45.000000000","message":"In the end, we went with /var/lib/kolla/share","commit_id":"124008615d2c92f26b44d4bee1e0c1059b940611"}],"releasenotes/notes/copy-certs-02ff11e9041800eb.yaml":[{"author":{"_account_id":32553,"name":"Sven Kieske","email":"sven_oss@posteo.de","username":"skieske"},"change_message_id":"bbd29b1027967415775919bb3d3de683318ddd13","unresolved":true,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"upgrade:"},{"line_number":13,"context_line":"  - |"},{"line_number":14,"context_line":"    Adds certificate folder to config.json file for containers."},{"line_number":15,"context_line":"    Certificates are copied to intermediary location inside of the"},{"line_number":16,"context_line":"    container, from which the script kolla_copy_cacerts will install them"},{"line_number":17,"context_line":"    in the trust store."}],"source_content_type":"text/x-yaml","patch_set":9,"id":"fe578c90_83194ab9","line":17,"range":{"start_line":14,"start_character":4,"end_line":17,"end_character":23},"updated":"2024-09-13 08:12:18.000000000","message":"The upgrade section in the release notes is usually for stuff admins and operators care about during upgrades, so stuff where they need to take some action, e.g. rename a variable, reconfigure something etc.\n\nThis doesn\u0027t seem to belong in the upgrade section.","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"ace8e5c014d9e6555e064c15c20402c3e5ab74fd","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"upgrade:"},{"line_number":13,"context_line":"  - |"},{"line_number":14,"context_line":"    Adds certificate folder to config.json file for containers."},{"line_number":15,"context_line":"    Certificates are copied to intermediary location inside of the"},{"line_number":16,"context_line":"    container, from which the script kolla_copy_cacerts will install them"},{"line_number":17,"context_line":"    in the trust store."}],"source_content_type":"text/x-yaml","patch_set":9,"id":"a784a06a_9f5bf203","line":17,"range":{"start_line":14,"start_character":4,"end_line":17,"end_character":23},"in_reply_to":"7f262afe_b60677e8","updated":"2024-10-16 07:06:45.000000000","message":"Done","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"},{"author":{"_account_id":36702,"name":"Roman Krcek","display_name":"Roman Krček","email":"roman.krcek@tietoevry.com","username":"r-krcek"},"change_message_id":"7e8393ddda312e40d098367a19c898975469391c","unresolved":true,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"upgrade:"},{"line_number":13,"context_line":"  - |"},{"line_number":14,"context_line":"    Adds certificate folder to config.json file for containers."},{"line_number":15,"context_line":"    Certificates are copied to intermediary location inside of the"},{"line_number":16,"context_line":"    container, from which the script kolla_copy_cacerts will install them"},{"line_number":17,"context_line":"    in the trust store."}],"source_content_type":"text/x-yaml","patch_set":9,"id":"7f262afe_b60677e8","line":17,"range":{"start_line":14,"start_character":4,"end_line":17,"end_character":23},"in_reply_to":"fe578c90_83194ab9","updated":"2024-09-23 16:56:05.000000000","message":"Done","commit_id":"2dbc5e6e94d25cea7397b620fcf5c386188971d0"}]}