)]}'
{"ansible/group_vars/all.yml":[{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"051d7d802b411e0fe78cc4a44be00ca7beca955b","unresolved":true,"context_lines":[{"line_number":504,"context_line":""},{"line_number":505,"context_line":"letsencrypt_webserver_port: \"8081\""},{"line_number":506,"context_line":"letsencrypt_managed_certs: \"{{ \u0027\u0027 if not enable_letsencrypt | bool else (\u0027internal\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 and kolla_same_external_internal_vip | bool else (\u0027internal,external\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 and letsencrypt_external_cert_server !\u003d \u0027\u0027 else (\u0027internal\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 else (\u0027external\u0027 if letsencrypt_external_cert_server !\u003d \u0027\u0027 and not kolla_same_external_internal_vip | bool else \u0027\u0027)))) }}\""},{"line_number":507,"context_line":"letsencrypt_external_cert_server: \"https://acme-v02.api.letsencrypt.org/directory\""},{"line_number":508,"context_line":"letsencrypt_internal_cert_server: \"\""},{"line_number":509,"context_line":""},{"line_number":510,"context_line":"magnum_internal_fqdn: \"{{ kolla_internal_fqdn }}\""},{"line_number":511,"context_line":"magnum_external_fqdn: \"{{ kolla_external_fqdn }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"a5bfc906_f2d03fc0","line":508,"range":{"start_line":507,"start_character":0,"end_line":508,"end_character":36},"updated":"2025-08-12 14:06:23.000000000","message":"can we move it to role defaults?","commit_id":"8ff846e77458f5477e8ee11e28fe939baa389976"},{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"f61c3751eb63a56a06df8d61123f3fae63ba8bc1","unresolved":false,"context_lines":[{"line_number":504,"context_line":""},{"line_number":505,"context_line":"letsencrypt_webserver_port: \"8081\""},{"line_number":506,"context_line":"letsencrypt_managed_certs: \"{{ \u0027\u0027 if not enable_letsencrypt | bool else (\u0027internal\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 and kolla_same_external_internal_vip | bool else (\u0027internal,external\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 and letsencrypt_external_cert_server !\u003d \u0027\u0027 else (\u0027internal\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 else (\u0027external\u0027 if letsencrypt_external_cert_server !\u003d \u0027\u0027 and not kolla_same_external_internal_vip | bool else \u0027\u0027)))) }}\""},{"line_number":507,"context_line":"letsencrypt_external_cert_server: \"https://acme-v02.api.letsencrypt.org/directory\""},{"line_number":508,"context_line":"letsencrypt_internal_cert_server: \"\""},{"line_number":509,"context_line":""},{"line_number":510,"context_line":"magnum_internal_fqdn: \"{{ kolla_internal_fqdn }}\""},{"line_number":511,"context_line":"magnum_external_fqdn: \"{{ kolla_external_fqdn }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"88640ef7_ad4efe2b","line":508,"range":{"start_line":507,"start_character":0,"end_line":508,"end_character":36},"in_reply_to":"72365dd9_80289f35","updated":"2025-08-13 10:14:44.000000000","message":"we didn\u0027t have that in previous patch that introduced that. and this is bug fix. we need a major refactor of this role anyway","commit_id":"8ff846e77458f5477e8ee11e28fe939baa389976"},{"author":{"_account_id":36765,"name":"Seunghun Lee","display_name":"Seunghun Lee","email":"seunghun@stackhpc.com","username":"seunghun1ee","status":"Cloud Engineer at StackHPC"},"change_message_id":"7d7f7fedf9a7d8546823760095f03d6f0e189127","unresolved":true,"context_lines":[{"line_number":504,"context_line":""},{"line_number":505,"context_line":"letsencrypt_webserver_port: \"8081\""},{"line_number":506,"context_line":"letsencrypt_managed_certs: \"{{ \u0027\u0027 if not enable_letsencrypt | bool else (\u0027internal\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 and kolla_same_external_internal_vip | bool else (\u0027internal,external\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 and letsencrypt_external_cert_server !\u003d \u0027\u0027 else (\u0027internal\u0027 if letsencrypt_internal_cert_server !\u003d \u0027\u0027 else (\u0027external\u0027 if letsencrypt_external_cert_server !\u003d \u0027\u0027 and not kolla_same_external_internal_vip | bool else \u0027\u0027)))) }}\""},{"line_number":507,"context_line":"letsencrypt_external_cert_server: \"https://acme-v02.api.letsencrypt.org/directory\""},{"line_number":508,"context_line":"letsencrypt_internal_cert_server: \"\""},{"line_number":509,"context_line":""},{"line_number":510,"context_line":"magnum_internal_fqdn: \"{{ kolla_internal_fqdn }}\""},{"line_number":511,"context_line":"magnum_external_fqdn: \"{{ kolla_external_fqdn }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"72365dd9_80289f35","line":508,"range":{"start_line":507,"start_character":0,"end_line":508,"end_character":36},"in_reply_to":"a5bfc906_f2d03fc0","updated":"2025-08-13 08:37:01.000000000","message":"Maybe we need core\u0027s decisions for that","commit_id":"8ff846e77458f5477e8ee11e28fe939baa389976"}],"doc/source/admin/tls.rst":[{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"6f30a614fe375ce8051786d61c3a86ee3f9f6815","unresolved":true,"context_lines":[{"line_number":325,"context_line":""},{"line_number":326,"context_line":".. note::"},{"line_number":327,"context_line":""},{"line_number":328,"context_line":"  The ``letsencrypt_external_cert_server`` has a default value of"},{"line_number":329,"context_line":"  ``https://acme-v02.api.letsencrypt.org/directory`` but"},{"line_number":330,"context_line":"  ``letsencrypt_internal_cert_server`` does not."},{"line_number":331,"context_line":"  Due to this, only external certificate will be managed by Let\u0027s"},{"line_number":332,"context_line":"  Encrypt by default."},{"line_number":333,"context_line":"  If you want internal certificate is also managed, Set"},{"line_number":334,"context_line":"  ``letsencrypt_internal_cert_server`` and ensure that it is reachable"},{"line_number":335,"context_line":"  from the controller."},{"line_number":336,"context_line":"  If you want internal certificate is managed but not external"},{"line_number":337,"context_line":"  certificate, set ``letsencrypt_external_cert_server`` to empty string"},{"line_number":338,"context_line":"  ``\"\"`` and set ``letsencrypt_internal_cert_server``."},{"line_number":339,"context_line":""},{"line_number":340,"context_line":""},{"line_number":341,"context_line":".. _admin-tls-generating-a-private-ca:"},{"line_number":342,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"b0b10c50_b5e0c9ca","line":339,"range":{"start_line":328,"start_character":0,"end_line":339,"end_character":0},"updated":"2025-08-13 11:49:17.000000000","message":"```suggestion\n  The ``letsencrypt_external_cert_server`` has a default value of\n  ``https://acme-v02.api.letsencrypt.org/directory``.\n  ``letsencrypt_internal_cert_server`` has no default.\n  When Let\u0027s Encrypt is enabled, the external certificate is managed by\n  default.\n  To also manage the internal certificate, set\n  ``letsencrypt_internal_cert_server`` and ensure it is reachable from\n  the controller.\n  To manage only the internal certificate (not external), set\n  ``letsencrypt_external_cert_server`` to an empty string (``\"\"``) and\n  set ``letsencrypt_internal_cert_server``.\n\n```","commit_id":"49de5ac9211f7e3f53ecc143102c003668ca82ce"},{"author":{"_account_id":36765,"name":"Seunghun Lee","display_name":"Seunghun Lee","email":"seunghun@stackhpc.com","username":"seunghun1ee","status":"Cloud Engineer at StackHPC"},"change_message_id":"177a87198586a7f1fbfd13b5377e6ed95d3df838","unresolved":false,"context_lines":[{"line_number":325,"context_line":""},{"line_number":326,"context_line":".. note::"},{"line_number":327,"context_line":""},{"line_number":328,"context_line":"  The ``letsencrypt_external_cert_server`` has a default value of"},{"line_number":329,"context_line":"  ``https://acme-v02.api.letsencrypt.org/directory`` but"},{"line_number":330,"context_line":"  ``letsencrypt_internal_cert_server`` does not."},{"line_number":331,"context_line":"  Due to this, only external certificate will be managed by Let\u0027s"},{"line_number":332,"context_line":"  Encrypt by default."},{"line_number":333,"context_line":"  If you want internal certificate is also managed, Set"},{"line_number":334,"context_line":"  ``letsencrypt_internal_cert_server`` and ensure that it is reachable"},{"line_number":335,"context_line":"  from the controller."},{"line_number":336,"context_line":"  If you want internal certificate is managed but not external"},{"line_number":337,"context_line":"  certificate, set ``letsencrypt_external_cert_server`` to empty string"},{"line_number":338,"context_line":"  ``\"\"`` and set ``letsencrypt_internal_cert_server``."},{"line_number":339,"context_line":""},{"line_number":340,"context_line":""},{"line_number":341,"context_line":".. _admin-tls-generating-a-private-ca:"},{"line_number":342,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"5f344604_eba39266","line":339,"range":{"start_line":328,"start_character":0,"end_line":339,"end_character":0},"in_reply_to":"b0b10c50_b5e0c9ca","updated":"2025-08-13 12:14:23.000000000","message":"Fix applied.","commit_id":"49de5ac9211f7e3f53ecc143102c003668ca82ce"}],"releasenotes/notes/set-default-letsencrypt-external-cert-server-d34f9d783082d7d7.yaml":[{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"f61c3751eb63a56a06df8d61123f3fae63ba8bc1","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"e7648c87_65aaa26c","line":10,"updated":"2025-08-13 10:14:44.000000000","message":"please mention behavior change in upgrade note - for following scenario:\n\nfile-based external certificate and Let\u0027s Encrypt for the internal certificate\n\nas it will break it","commit_id":"8ff846e77458f5477e8ee11e28fe939baa389976"},{"author":{"_account_id":36765,"name":"Seunghun Lee","display_name":"Seunghun Lee","email":"seunghun@stackhpc.com","username":"seunghun1ee","status":"Cloud Engineer at StackHPC"},"change_message_id":"177a87198586a7f1fbfd13b5377e6ed95d3df838","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"d6c2cfd5_f2dc6075","line":10,"in_reply_to":"d0cb19b5_1ebc525b","updated":"2025-08-13 12:14:23.000000000","message":"Done","commit_id":"8ff846e77458f5477e8ee11e28fe939baa389976"},{"author":{"_account_id":36765,"name":"Seunghun Lee","display_name":"Seunghun Lee","email":"seunghun@stackhpc.com","username":"seunghun1ee","status":"Cloud Engineer at StackHPC"},"change_message_id":"1c03542ed9412cbc041532af9ef4d216862b44f3","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"d0cb19b5_1ebc525b","line":10,"in_reply_to":"e7648c87_65aaa26c","updated":"2025-08-13 10:52:12.000000000","message":"Okay, and I think we\u0027ll also need some doc change. I\u0027ll bring that too","commit_id":"8ff846e77458f5477e8ee11e28fe939baa389976"}]}