)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"df8e4a242cd61ee636e5d165ab4cd76435d26f35","unresolved":true,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"docs: Add information about possible password leaking"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Closes-Bug: #2120302"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Change-Id: Ideb7974796ba503a2ac979a321b9c6f27c7c22a1"},{"line_number":12,"context_line":"Signed-off-by: Michal Nasiadka \u003cmnasiadka@gmail.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"98dbfc3a_f89ffe09","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":20},"updated":"2025-09-02 18:10:54.000000000","message":"How does the mention in the documentation address the security issue?\nMaybe we should not close the issue until it is fixed?","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"c108a9d9a6ce19fbd60b660a18d7d010ad13b18e","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"docs: Add information about possible password leaking"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Closes-Bug: #2120302"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Change-Id: Ideb7974796ba503a2ac979a321b9c6f27c7c22a1"},{"line_number":12,"context_line":"Signed-off-by: Michal Nasiadka \u003cmnasiadka@gmail.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"f279ecbe_4939f267","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":20},"in_reply_to":"344823f1_beff8745","updated":"2025-09-03 07:30:18.000000000","message":"Acknowledged","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"e2acf0064638712d52197cbc1f39df7d04f60a16","unresolved":true,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"docs: Add information about possible password leaking"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Closes-Bug: #2120302"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Change-Id: Ideb7974796ba503a2ac979a321b9c6f27c7c22a1"},{"line_number":12,"context_line":"Signed-off-by: Michal Nasiadka \u003cmnasiadka@gmail.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"344823f1_beff8745","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":20},"in_reply_to":"4b5a30e9_b826049a","updated":"2025-09-02 21:10:43.000000000","message":"It\u0027s OK to describe how something was designed, but I think we should not close the issue. Maybe we need to postpone the solution if we cant fix it right now?","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"95e717213ffc3086d02051f6e266a1662d77cf35","unresolved":true,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"docs: Add information about possible password leaking"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Closes-Bug: #2120302"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Change-Id: Ideb7974796ba503a2ac979a321b9c6f27c7c22a1"},{"line_number":12,"context_line":"Signed-off-by: Michal Nasiadka \u003cmnasiadka@gmail.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"4b5a30e9_b826049a","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":20},"in_reply_to":"98dbfc3a_f89ffe09","updated":"2025-09-02 18:51:53.000000000","message":"well the resolution iiuc would be to say \"there is no issue, things are working as designed and documented\", right?","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":17669,"name":"Doug Szumski","email":"doug@stackhpc.com","username":"DougSzumski"},"change_message_id":"4bbc3aa36a0fe9eab329befa3ab76106325dd066","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"f826688c_7a76fece","updated":"2025-09-03 09:22:51.000000000","message":"I respectfully disagree that this closes the bug, but no objection to adding the warning.","commit_id":"20c1eb471fab74879b48c7fe520f0fc10ae4f9a1"}],"doc/source/admin/production-architecture-guide.rst":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"95e717213ffc3086d02051f6e266a1662d77cf35","unresolved":true,"context_lines":[{"line_number":14,"context_line":"A basic Kolla inventory consists of several types of nodes, known in Ansible as"},{"line_number":15,"context_line":"``groups``."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"* Deployer - Host from which you\u0027re running kolla-ansible CLI"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"* Control - Cloud controller nodes which host control services"},{"line_number":20,"context_line":"  like APIs and databases. This group should have odd number of nodes for"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7b3ee607_29061b9d","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":10},"updated":"2025-09-02 18:51:53.000000000","message":"in our downstream tooling we call the host `Manager`, because it not only does the Deployment tasks but also Maintainance tasks like upgrades etc., maybe we could use that term here, too? or is `Deployer` a term that is in common use for others?","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"b4c3eb7779446994024cca7454db4f53a1834834","unresolved":false,"context_lines":[{"line_number":14,"context_line":"A basic Kolla inventory consists of several types of nodes, known in Ansible as"},{"line_number":15,"context_line":"``groups``."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"* Deployer - Host from which you\u0027re running kolla-ansible CLI"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"* Control - Cloud controller nodes which host control services"},{"line_number":20,"context_line":"  like APIs and databases. This group should have odd number of nodes for"}],"source_content_type":"text/x-rst","patch_set":1,"id":"0b527897_261c831b","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":10},"in_reply_to":"51d99632_8038c454","updated":"2025-09-02 21:06:37.000000000","message":"Done","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"a5c5ef41b78a2ea3dc9c1bd71119bad6fdd7366e","unresolved":true,"context_lines":[{"line_number":14,"context_line":"A basic Kolla inventory consists of several types of nodes, known in Ansible as"},{"line_number":15,"context_line":"``groups``."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"* Deployer - Host from which you\u0027re running kolla-ansible CLI"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"* Control - Cloud controller nodes which host control services"},{"line_number":20,"context_line":"  like APIs and databases. This group should have odd number of nodes for"}],"source_content_type":"text/x-rst","patch_set":1,"id":"8df7dabf_a0964c98","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":10},"in_reply_to":"79d23955_7475cd05","updated":"2025-09-02 19:06:26.000000000","message":"```suggestion\n* Deployment - Host from which you\u0027re running kolla-ansible CLI\n```\nah, ok, then since the sentence above explicitly references Ansible groups, we should likely use the same name here to avoid confusion","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"853450c9d25b8abba725b8055b79748c9d972d03","unresolved":true,"context_lines":[{"line_number":14,"context_line":"A basic Kolla inventory consists of several types of nodes, known in Ansible as"},{"line_number":15,"context_line":"``groups``."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"* Deployer - Host from which you\u0027re running kolla-ansible CLI"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"* Control - Cloud controller nodes which host control services"},{"line_number":20,"context_line":"  like APIs and databases. This group should have odd number of nodes for"}],"source_content_type":"text/x-rst","patch_set":1,"id":"79d23955_7475cd05","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":10},"in_reply_to":"7b3ee607_29061b9d","updated":"2025-09-02 18:54:44.000000000","message":"Actually we have a group called deployment, see https://github.com/openstack/kolla-ansible/blob/a3f2741dec7955d22d8491cda2dd38a4c82df9f2/ansible/inventory/all-in-one#L18\nbut I’m also fine with anything we decide - I’ll wait for more comments tomorrow and amend.","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"4eb4382bb94d0d2960792f343bdd7125de6bc80a","unresolved":false,"context_lines":[{"line_number":14,"context_line":"A basic Kolla inventory consists of several types of nodes, known in Ansible as"},{"line_number":15,"context_line":"``groups``."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"* Deployer - Host from which you\u0027re running kolla-ansible CLI"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"* Control - Cloud controller nodes which host control services"},{"line_number":20,"context_line":"  like APIs and databases. This group should have odd number of nodes for"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bab13be7_b68a5b2c","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":10},"in_reply_to":"8df7dabf_a0964c98","updated":"2025-09-02 19:18:19.000000000","message":"Fix applied.","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"2ccc9d8df6e0977af78aac4f5312ca041d986e22","unresolved":true,"context_lines":[{"line_number":14,"context_line":"A basic Kolla inventory consists of several types of nodes, known in Ansible as"},{"line_number":15,"context_line":"``groups``."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"* Deployer - Host from which you\u0027re running kolla-ansible CLI"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"* Control - Cloud controller nodes which host control services"},{"line_number":20,"context_line":"  like APIs and databases. This group should have odd number of nodes for"}],"source_content_type":"text/x-rst","patch_set":1,"id":"51d99632_8038c454","line":17,"range":{"start_line":17,"start_character":2,"end_line":17,"end_character":10},"in_reply_to":"bab13be7_b68a5b2c","updated":"2025-09-02 21:05:35.000000000","message":"`Deployer` ? or may be it should be `Deployment host` as in inventory?","commit_id":"6ed5e611fe6d38c9f4dda0bcfd0d68067386c900"},{"author":{"_account_id":14200,"name":"Maksim Malchuk","email":"maksim.malchuk@gmail.com","username":"mmalchuk"},"change_message_id":"f970700a401f5e2cf5073efc07ab7f8441a2da02","unresolved":true,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":".. warning::"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"   ``Deployer`` host should be hardened and access to it should be limited,"},{"line_number":37,"context_line":"   because Ansible can leak administrative passwords and other secrets to"},{"line_number":38,"context_line":"   system log."},{"line_number":39,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ad25a62_dba7c674","line":36,"range":{"start_line":36,"start_character":5,"end_line":36,"end_character":13},"updated":"2025-12-03 20:01:47.000000000","message":"``Deployment``\nas said on the line 17","commit_id":"20c1eb471fab74879b48c7fe520f0fc10ae4f9a1"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"cb010c4eae8d20eb4b1084e6370fba166f27c977","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":".. warning::"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"   ``Deployer`` host should be hardened and access to it should be limited,"},{"line_number":37,"context_line":"   because Ansible can leak administrative passwords and other secrets to"},{"line_number":38,"context_line":"   system log."},{"line_number":39,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fca4e6bb_9dd18be7","line":36,"range":{"start_line":36,"start_character":5,"end_line":36,"end_character":13},"in_reply_to":"3ad25a62_dba7c674","updated":"2026-01-14 09:24:08.000000000","message":"Done","commit_id":"20c1eb471fab74879b48c7fe520f0fc10ae4f9a1"},{"author":{"_account_id":37306,"name":"Piotr Milewski","display_name":"Piotr Milewski","email":"vurmil@gmail.com","username":"vurmil"},"change_message_id":"28119eb00d4e9b03041c2a09e88d204749151161","unresolved":true,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"   ``Deployer`` host should be hardened and access to it should be limited,"},{"line_number":37,"context_line":"   because Ansible can leak administrative passwords and other secrets to"},{"line_number":38,"context_line":"   system log."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Network configuration"}],"source_content_type":"text/x-rst","patch_set":2,"id":"32097009_090e604f","line":38,"range":{"start_line":38,"start_character":3,"end_line":38,"end_character":14},"updated":"2025-09-03 07:35:05.000000000","message":"the password is on every node in the syslog, not just on the deployment node","commit_id":"20c1eb471fab74879b48c7fe520f0fc10ae4f9a1"},{"author":{"_account_id":17669,"name":"Doug Szumski","email":"doug@stackhpc.com","username":"DougSzumski"},"change_message_id":"4bbc3aa36a0fe9eab329befa3ab76106325dd066","unresolved":true,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"   ``Deployer`` host should be hardened and access to it should be limited,"},{"line_number":37,"context_line":"   because Ansible can leak administrative passwords and other secrets to"},{"line_number":38,"context_line":"   system log."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Network configuration"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fbac3e5a_5aab9299","line":38,"range":{"start_line":38,"start_character":3,"end_line":38,"end_character":14},"in_reply_to":"32097009_090e604f","updated":"2025-09-03 09:22:51.000000000","message":"this also affects people forwarding the system log to OpenSearch","commit_id":"20c1eb471fab74879b48c7fe520f0fc10ae4f9a1"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"cb010c4eae8d20eb4b1084e6370fba166f27c977","unresolved":false,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"   ``Deployer`` host should be hardened and access to it should be limited,"},{"line_number":37,"context_line":"   because Ansible can leak administrative passwords and other secrets to"},{"line_number":38,"context_line":"   system log."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Network configuration"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5b356328_95d5c2c5","line":38,"range":{"start_line":38,"start_character":3,"end_line":38,"end_character":14},"in_reply_to":"fbac3e5a_5aab9299","updated":"2026-01-14 09:24:08.000000000","message":"Done","commit_id":"20c1eb471fab74879b48c7fe520f0fc10ae4f9a1"}]}