)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"1dfaa7373140fec6ceb0d231fc21a88fcf5c525b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"bc5faaa4_0a8391f2","updated":"2024-11-20 10:53:57.000000000","message":"recheck Dockerhub ratelimit hit","commit_id":"1398cb83307858421cb686ed6a7616cafaab14d8"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"e4e8774921f490264b3a467265459f55130f28f8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"ce34cf97_54674ecc","updated":"2024-12-06 21:34:15.000000000","message":"I needed this as prerequisity ... i\u0027ve amended, hope that\u0027s ok.","commit_id":"b6017910952024878d43b13571fdaeb7a4826e55"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"65d49dcbced77a8e19c2b2627e1f93387273bfc3","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"584fc334_86813089","updated":"2024-12-08 19:59:00.000000000","message":"recheck after make pebble image public","commit_id":"42428234f6450badb7223d4f89514abbda08c6cd"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"49694fe96e637ac6ab807fed3511ca1b55c2c9e5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"47e6e667_c1dde12f","updated":"2024-12-09 06:00:45.000000000","message":"recheck pebble quay made public","commit_id":"42428234f6450badb7223d4f89514abbda08c6cd"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"4a0ab9d881a1045cba2694004a9a62b98b4d7580","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":13,"id":"bcf3203d_9a1cd1ed","updated":"2024-12-18 10:54:33.000000000","message":"Agreed to rework to multiline in a followup","commit_id":"a349ca19a297d4cccd78b2cd04b5e52cfa0792ef"}],"ansible/roles/letsencrypt/defaults/main.yml":[{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"2d069176a059181161c6d4a30ae4a07c96166dd4","unresolved":true,"context_lines":[{"line_number":58,"context_line":"letsencrypt_internal_fqdns:"},{"line_number":59,"context_line":"  - \"{{ kolla_internal_fqdn }}\""},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"letsencrypt_external_account_binding: false"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"5780f16a_2a4c8c62","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":43},"updated":"2024-12-05 17:10:42.000000000","message":"letsencrypt_external_account_binding: \"no\"\n\nAs we are using everywhere ... check comment below.","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"5a843f71502a5ffbf530cd4b026b654120c7f008","unresolved":true,"context_lines":[{"line_number":58,"context_line":"letsencrypt_internal_fqdns:"},{"line_number":59,"context_line":"  - \"{{ kolla_internal_fqdn }}\""},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"letsencrypt_external_account_binding: false"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"87c14a7c_0c8b7e5a","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":43},"in_reply_to":"5780f16a_2a4c8c62","updated":"2024-12-06 13:19:11.000000000","message":"Acknowledged","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"31e7fe5de1c885ba0c07a0f08ef248b6d348cc86","unresolved":false,"context_lines":[{"line_number":58,"context_line":"letsencrypt_internal_fqdns:"},{"line_number":59,"context_line":"  - \"{{ kolla_internal_fqdn }}\""},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"letsencrypt_external_account_binding: false"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"2e871cbf_6798277b","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":43},"in_reply_to":"87c14a7c_0c8b7e5a","updated":"2024-12-06 21:34:26.000000000","message":"Done","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"}],"ansible/roles/letsencrypt/templates/letsencrypt-lego-run.sh.j2":[{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"2d069176a059181161c6d4a30ae4a07c96166dd4","unresolved":true,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"{% if \u0027external\u0027 in letsencrypt_managed_certs and kolla_external_fqdn !\u003d kolla_external_vip_address %}"},{"line_number":6,"context_line":"# External Certificates"},{"line_number":7,"context_line":"/usr/bin/letsencrypt-certificates --external --fqdns {% for fqdn in letsencrypt_external_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_external_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"}],"source_content_type":"text/x-jinja2","patch_set":4,"id":"1e36d19c_d69708d4","line":7,"range":{"start_line":7,"start_character":602,"end_line":7,"end_character":824},"updated":"2024-12-05 17:10:42.000000000","message":"I think it\u0027s better to go with letsencrypt_external_account_binding | bool and also for render -\u003e {{ letsencrypt_eab_hmac | bool }}\n\nSo it will be also true/false ...and also user can set yes/no/true/false/True/False","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"5a843f71502a5ffbf530cd4b026b654120c7f008","unresolved":true,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"{% if \u0027external\u0027 in letsencrypt_managed_certs and kolla_external_fqdn !\u003d kolla_external_vip_address %}"},{"line_number":6,"context_line":"# External Certificates"},{"line_number":7,"context_line":"/usr/bin/letsencrypt-certificates --external --fqdns {% for fqdn in letsencrypt_external_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_external_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"}],"source_content_type":"text/x-jinja2","patch_set":4,"id":"961fd900_48c34fbd","line":7,"range":{"start_line":7,"start_character":602,"end_line":7,"end_character":824},"in_reply_to":"1e36d19c_d69708d4","updated":"2024-12-06 13:19:11.000000000","message":"Acknowledged","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"31e7fe5de1c885ba0c07a0f08ef248b6d348cc86","unresolved":false,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"{% if \u0027external\u0027 in letsencrypt_managed_certs and kolla_external_fqdn !\u003d kolla_external_vip_address %}"},{"line_number":6,"context_line":"# External Certificates"},{"line_number":7,"context_line":"/usr/bin/letsencrypt-certificates --external --fqdns {% for fqdn in letsencrypt_external_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_external_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"}],"source_content_type":"text/x-jinja2","patch_set":4,"id":"06f2ab16_2fad324a","line":7,"range":{"start_line":7,"start_character":602,"end_line":7,"end_character":824},"in_reply_to":"961fd900_48c34fbd","updated":"2024-12-06 21:34:26.000000000","message":"Done","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"2d069176a059181161c6d4a30ae4a07c96166dd4","unresolved":true,"context_lines":[{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"},{"line_number":11,"context_line":"/usr/bin/letsencrypt-certificates --internal --fqdns {% for fqdn in letsencrypt_internal_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_internal_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":12,"context_line":"{% endif %}"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"{{ cron_cmd }}"}],"source_content_type":"text/x-jinja2","patch_set":4,"id":"1fab800f_8aa8a351","line":11,"range":{"start_line":11,"start_character":601,"end_line":11,"end_character":824},"updated":"2024-12-05 17:10:42.000000000","message":"ditto","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"31e7fe5de1c885ba0c07a0f08ef248b6d348cc86","unresolved":false,"context_lines":[{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"},{"line_number":11,"context_line":"/usr/bin/letsencrypt-certificates --internal --fqdns {% for fqdn in letsencrypt_internal_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_internal_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":12,"context_line":"{% endif %}"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"{{ cron_cmd }}"}],"source_content_type":"text/x-jinja2","patch_set":4,"id":"afaa89c9_d9bed5af","line":11,"range":{"start_line":11,"start_character":601,"end_line":11,"end_character":824},"in_reply_to":"1fab800f_8aa8a351","updated":"2024-12-06 21:34:26.000000000","message":"Done","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"3fa5b911cc0de6f269dcedfc937260c5d8eb8e5d","unresolved":true,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"{% if \u0027external\u0027 in letsencrypt_managed_certs and kolla_external_fqdn !\u003d kolla_external_vip_address %}"},{"line_number":6,"context_line":"# External Certificates"},{"line_number":7,"context_line":"/usr/bin/letsencrypt-certificates --external --fqdns {% for fqdn in letsencrypt_external_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_external_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding | bool %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"}],"source_content_type":"text/x-jinja2","patch_set":13,"id":"efc6c486_7fec245c","line":7,"updated":"2024-12-16 10:16:10.000000000","message":"can we make it multiline? reviewing long one line change is a drama","commit_id":"a349ca19a297d4cccd78b2cd04b5e52cfa0792ef"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"2227d12fb8f1e531f97902ea653932f4e5d99f65","unresolved":false,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"{% if \u0027external\u0027 in letsencrypt_managed_certs and kolla_external_fqdn !\u003d kolla_external_vip_address %}"},{"line_number":6,"context_line":"# External Certificates"},{"line_number":7,"context_line":"/usr/bin/letsencrypt-certificates --external --fqdns {% for fqdn in letsencrypt_external_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_external_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding | bool %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"}],"source_content_type":"text/x-jinja2","patch_set":13,"id":"4bfc5ecd_32595a71","line":7,"in_reply_to":"8f6e5750_c2cb4695","updated":"2024-12-18 11:00:54.000000000","message":"Done","commit_id":"a349ca19a297d4cccd78b2cd04b5e52cfa0792ef"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"09f7b684d14cd78d4238b9d1d2a0051db5331462","unresolved":true,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"{% if \u0027external\u0027 in letsencrypt_managed_certs and kolla_external_fqdn !\u003d kolla_external_vip_address %}"},{"line_number":6,"context_line":"# External Certificates"},{"line_number":7,"context_line":"/usr/bin/letsencrypt-certificates --external --fqdns {% for fqdn in letsencrypt_external_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_external_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding | bool %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"}],"source_content_type":"text/x-jinja2","patch_set":13,"id":"8f6e5750_c2cb4695","line":7,"in_reply_to":"efc6c486_7fec245c","updated":"2024-12-18 10:41:04.000000000","message":"Done","commit_id":"a349ca19a297d4cccd78b2cd04b5e52cfa0792ef"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"3fa5b911cc0de6f269dcedfc937260c5d8eb8e5d","unresolved":true,"context_lines":[{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"},{"line_number":11,"context_line":"/usr/bin/letsencrypt-certificates --internal --fqdns {% for fqdn in letsencrypt_internal_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_internal_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding | bool %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":12,"context_line":"{% endif %}"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"{{ cron_cmd }}"}],"source_content_type":"text/x-jinja2","patch_set":13,"id":"cbb06595_ccf4188e","line":11,"updated":"2024-12-16 10:16:10.000000000","message":"ditto","commit_id":"a349ca19a297d4cccd78b2cd04b5e52cfa0792ef"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"2227d12fb8f1e531f97902ea653932f4e5d99f65","unresolved":false,"context_lines":[{"line_number":8,"context_line":"{% endif %}"},{"line_number":9,"context_line":"{% if \u0027internal\u0027 in letsencrypt_managed_certs and kolla_internal_fqdn !\u003d kolla_internal_vip_address %}"},{"line_number":10,"context_line":"# Internal Certificates"},{"line_number":11,"context_line":"/usr/bin/letsencrypt-certificates --internal --fqdns {% for fqdn in letsencrypt_internal_fqdns %}{{ fqdn }}{% if not loop.last %},{% endif %}{% endfor %} --days {{ letsencrypt_cert_valid_days }} --port {{ letsencrypt_webserver_port }} --mail {{ letsencrypt_email }} --acme {{ letsencrypt_internal_cert_server }} --vips {% if not kolla_same_external_internal_vip %}{{ kolla_external_vip_address }},{% endif %}{{ kolla_internal_vip_address }} --haproxies-ssh {% for host in groups[\u0027loadbalancer\u0027] %}{{ \u0027api\u0027 | kolla_address(host) | put_address_in_context(\u0027url\u0027) }}:{{ haproxy_ssh_port }}{% if not loop.last %},{% endif %}{% endfor %}{% if letsencrypt_external_account_binding | bool %} --eab --hmac {{ letsencrypt_eab_hmac }} --kid {{ letsencrypt_eab_key_id }}{% endif %} 2\u003e\u00261 | tee -a /var/log/kolla/letsencrypt/letsencrypt-lego.log"},{"line_number":12,"context_line":"{% endif %}"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"{{ cron_cmd }}"}],"source_content_type":"text/x-jinja2","patch_set":13,"id":"092760d3_ced01e3e","line":11,"in_reply_to":"cbb06595_ccf4188e","updated":"2024-12-18 11:00:54.000000000","message":"Done","commit_id":"a349ca19a297d4cccd78b2cd04b5e52cfa0792ef"}],"etc/kolla/globals.yml":[{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"fbb10c4f511232d338a088db816a2f7d1ca93a71","unresolved":true,"context_lines":[{"line_number":284,"context_line":"####################"},{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: true"},{"line_number":288,"context_line":"#letsencrypt_eab_hmac:"},{"line_number":289,"context_line":"#letsencrypt_eab_key_id:"},{"line_number":290,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"740ad636_9efb84e1","line":287,"updated":"2024-12-05 12:08:42.000000000","message":"default is false, right?","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"5a843f71502a5ffbf530cd4b026b654120c7f008","unresolved":false,"context_lines":[{"line_number":284,"context_line":"####################"},{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: true"},{"line_number":288,"context_line":"#letsencrypt_eab_hmac:"},{"line_number":289,"context_line":"#letsencrypt_eab_key_id:"},{"line_number":290,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3130b4d1_9152837e","line":287,"in_reply_to":"5816b29a_4652c288","updated":"2024-12-06 13:19:11.000000000","message":"Done","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"2ec68791af21e458f1b0e9645d24ee897172373a","unresolved":true,"context_lines":[{"line_number":284,"context_line":"####################"},{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: true"},{"line_number":288,"context_line":"#letsencrypt_eab_hmac:"},{"line_number":289,"context_line":"#letsencrypt_eab_key_id:"},{"line_number":290,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5816b29a_4652c288","line":287,"in_reply_to":"740ad636_9efb84e1","updated":"2024-12-05 12:57:57.000000000","message":"Saves editing when somebody uncomments?","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"fbb10c4f511232d338a088db816a2f7d1ca93a71","unresolved":true,"context_lines":[{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: true"},{"line_number":288,"context_line":"#letsencrypt_eab_hmac:"},{"line_number":289,"context_line":"#letsencrypt_eab_key_id:"},{"line_number":290,"context_line":""},{"line_number":291,"context_line":"################"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"e9e20cca_e8849e0c","line":288,"updated":"2024-12-05 12:08:42.000000000","message":"empty quotes as in other examples?","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"2ec68791af21e458f1b0e9645d24ee897172373a","unresolved":false,"context_lines":[{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: true"},{"line_number":288,"context_line":"#letsencrypt_eab_hmac:"},{"line_number":289,"context_line":"#letsencrypt_eab_key_id:"},{"line_number":290,"context_line":""},{"line_number":291,"context_line":"################"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"8ad2f2c4_c21246cd","line":288,"in_reply_to":"e9e20cca_e8849e0c","updated":"2024-12-05 12:57:57.000000000","message":"Acknowledged","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"2d069176a059181161c6d4a30ae4a07c96166dd4","unresolved":true,"context_lines":[{"line_number":284,"context_line":"####################"},{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: \"false\""},{"line_number":288,"context_line":"#letsencrypt_eab_hmac: \"\""},{"line_number":289,"context_line":"#letsencrypt_eab_key_id: \"\""},{"line_number":290,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"f82b75f9_80b21dda","line":287,"range":{"start_line":287,"start_character":40,"end_line":287,"end_character":45},"updated":"2024-12-05 17:10:42.000000000","message":"no","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":27339,"name":"Michal Arbet","email":"michal.arbet@ultimum.io","username":"michalarbet"},"change_message_id":"31e7fe5de1c885ba0c07a0f08ef248b6d348cc86","unresolved":false,"context_lines":[{"line_number":284,"context_line":"####################"},{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: \"false\""},{"line_number":288,"context_line":"#letsencrypt_eab_hmac: \"\""},{"line_number":289,"context_line":"#letsencrypt_eab_key_id: \"\""},{"line_number":290,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"f0cd8c01_bb86427c","line":287,"range":{"start_line":287,"start_character":40,"end_line":287,"end_character":45},"in_reply_to":"0fbb7ef2_ac0bd3d8","updated":"2024-12-06 21:34:26.000000000","message":"Done","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"5a843f71502a5ffbf530cd4b026b654120c7f008","unresolved":true,"context_lines":[{"line_number":284,"context_line":"####################"},{"line_number":285,"context_line":"# LetsEncrypt external account binding options"},{"line_number":286,"context_line":"####################"},{"line_number":287,"context_line":"#letsencrypt_external_account_binding: \"false\""},{"line_number":288,"context_line":"#letsencrypt_eab_hmac: \"\""},{"line_number":289,"context_line":"#letsencrypt_eab_key_id: \"\""},{"line_number":290,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"0fbb7ef2_ac0bd3d8","line":287,"range":{"start_line":287,"start_character":40,"end_line":287,"end_character":45},"in_reply_to":"f82b75f9_80b21dda","updated":"2024-12-06 13:19:11.000000000","message":"Acknowledged","commit_id":"6cd354ed88c09a9b0b6766edc2b4a4dcce75ac58"}],"releasenotes/notes/add-letsencrypt-eab-support-7951e7a572718ce9.yaml":[{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"fbb10c4f511232d338a088db816a2f7d1ca93a71","unresolved":true,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Adds a support for external account binding (EAB) in Let\u0027s Encrypt."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"be67552a_01bfce37","line":4,"updated":"2024-12-05 12:08:42.000000000","message":"nit: remove the a","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"},{"author":{"_account_id":32657,"name":"Piotr Parczewski","email":"piotr@stackhpc.com","username":"piotrp"},"change_message_id":"2ec68791af21e458f1b0e9645d24ee897172373a","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Adds a support for external account binding (EAB) in Let\u0027s Encrypt."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"8539b5bf_d2cf285d","line":4,"in_reply_to":"be67552a_01bfce37","updated":"2024-12-05 12:57:57.000000000","message":"Acknowledged","commit_id":"793aa49e07905cb473efd2334fa0abfcdd6d64ff"}]}