)]}'
{"ansible/roles/certificates/tasks/generate-backend.yml":[{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"ad1e7cbfc63949ffcf6df4b510df73f01afd640b","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    locality_name: \"RTP\""},{"line_number":20,"context_line":"    organizational_unit_name: \"kolla\""},{"line_number":21,"context_line":"    privatekey_path: \"{{ certificates_backend_dir }}/backend.key\""},{"line_number":22,"context_line":"    subject_alt_name:"},{"line_number":23,"context_line":"      \"{% set _san \u003d [] %}\\"},{"line_number":24,"context_line":"       {% for host in groups[\u0027tls-backend\u0027] %}\\"},{"line_number":25,"context_line":"       {{ _san.append(\u0027IP:\u0027 ~ (\u0027api\u0027 | kolla_address(host))) }}\\"},{"line_number":26,"context_line":"       {% endfor %}\\"},{"line_number":27,"context_line":"       {{ _san }}\""},{"line_number":28,"context_line":"    digest: \"sha256\""},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"- name: Creating backend Server Certificate from CSR"}],"source_content_type":"text/x-yaml","patch_set":53,"id":"17e40bb3_692f7b1b","line":27,"range":{"start_line":22,"start_character":0,"end_line":27,"end_character":18},"updated":"2025-12-18 16:12:07.000000000","message":"nitpick but yaml scalar blocks would be more \"flexible\" like \n\n```yaml\nsubject_alt_name: \u003e-\n  {% some jinja stuff %} \n```\nrather than backslashes","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"}],"ansible/roles/certificates/tasks/generate-libvirt.yml":[{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"ad1e7cbfc63949ffcf6df4b510df73f01afd640b","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    locality_name: \"RTP\""},{"line_number":20,"context_line":"    organizational_unit_name: \"kolla\""},{"line_number":21,"context_line":"    privatekey_path: \"{{ certificates_libvirt_dir }}/libvirt.key\""},{"line_number":22,"context_line":"    subject_alt_name:"},{"line_number":23,"context_line":"      \"{% set _san \u003d [] %}\\"},{"line_number":24,"context_line":"       {% for host in groups[\u0027tls-backend\u0027] %}\\"},{"line_number":25,"context_line":"       {{ _san.append(\u0027DNS:\u0027 ~ (hostvars[host].migration_hostname | default(hostvars[host].ansible_facts.nodename))) }}\\"},{"line_number":26,"context_line":"       {% endfor %}\\"},{"line_number":27,"context_line":"       {{ _san }}\""},{"line_number":28,"context_line":"    digest: \"sha256\""},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"- name: Creating libvirt certificate from CSR"}],"source_content_type":"text/x-yaml","patch_set":53,"id":"b5203e8c_74c3d8fa","line":27,"range":{"start_line":22,"start_character":4,"end_line":27,"end_character":18},"updated":"2025-12-18 16:12:07.000000000","message":"same nitpick","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"7a28ad375d571ee816b8604c8332e5a876a4ba4a","unresolved":true,"context_lines":[{"line_number":23,"context_line":"    state_or_province_name: \"NC\""},{"line_number":24,"context_line":"    subject_alt_name: \u003e-"},{"line_number":25,"context_line":"      {%- set _san \u003d [] -%}"},{"line_number":26,"context_line":"      {%- for host in groups[\u0027tls-backend\u0027] -%}"},{"line_number":27,"context_line":"      {{ _san.append(\u0027DNS:\u0027 ~ (hostvars[host].migration_hostname | default(hostvars[host].ansible_facts.nodename))) }}"},{"line_number":28,"context_line":"      {%- endfor -%}"},{"line_number":29,"context_line":"      {{ _san }}"}],"source_content_type":"text/x-yaml","patch_set":57,"id":"1cdc24df_32d32e22","line":26,"updated":"2025-12-19 08:56:27.000000000","message":"are you sure tls-backend group is ok here?","commit_id":"250c625f0f7cfceddefe87739d6d75bf68181b14"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"95867dc57781e104e430482abb4695fc29648ec6","unresolved":false,"context_lines":[{"line_number":23,"context_line":"    state_or_province_name: \"NC\""},{"line_number":24,"context_line":"    subject_alt_name: \u003e-"},{"line_number":25,"context_line":"      {%- set _san \u003d [] -%}"},{"line_number":26,"context_line":"      {%- for host in groups[\u0027tls-backend\u0027] -%}"},{"line_number":27,"context_line":"      {{ _san.append(\u0027DNS:\u0027 ~ (hostvars[host].migration_hostname | default(hostvars[host].ansible_facts.nodename))) }}"},{"line_number":28,"context_line":"      {%- endfor -%}"},{"line_number":29,"context_line":"      {{ _san }}"}],"source_content_type":"text/x-yaml","patch_set":57,"id":"154b084f_b0f036c6","line":26,"in_reply_to":"1cdc24df_32d32e22","updated":"2025-12-19 08:57:28.000000000","message":"Good catch, done.","commit_id":"250c625f0f7cfceddefe87739d6d75bf68181b14"}],"ansible/roles/certificates/tasks/generate-root.yml":[{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"b0cadc60d25abc616a2b0b02fa1fff6699cc3728","unresolved":true,"context_lines":[{"line_number":26,"context_line":"    -new -nodes"},{"line_number":27,"context_line":"    -key \"{{ root_dir }}/root.key\""},{"line_number":28,"context_line":"    -sha256"},{"line_number":29,"context_line":"    -days 1024"},{"line_number":30,"context_line":"    -out \"{{ root_dir }}/root.crt\""},{"line_number":31,"context_line":"    -subj \"/CN\u003dKollaTestCA/\""},{"line_number":32,"context_line":"  args:"}],"source_content_type":"text/x-yaml","patch_set":58,"id":"eeab3753_fd5faa3c","side":"PARENT","line":29,"updated":"2025-12-19 10:37:08.000000000","message":"the time of cert got omitted in module version","commit_id":"2d7728ff321f9c9a6223f906d42288fd3668f9be"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"7ad20619be765292154864f17955bdb0b900a1ec","unresolved":false,"context_lines":[{"line_number":26,"context_line":"    -new -nodes"},{"line_number":27,"context_line":"    -key \"{{ root_dir }}/root.key\""},{"line_number":28,"context_line":"    -sha256"},{"line_number":29,"context_line":"    -days 1024"},{"line_number":30,"context_line":"    -out \"{{ root_dir }}/root.crt\""},{"line_number":31,"context_line":"    -subj \"/CN\u003dKollaTestCA/\""},{"line_number":32,"context_line":"  args:"}],"source_content_type":"text/x-yaml","patch_set":58,"id":"fb2bc76a_212a026a","side":"PARENT","line":29,"in_reply_to":"eeab3753_fd5faa3c","updated":"2025-12-19 11:30:03.000000000","message":"Done","commit_id":"2d7728ff321f9c9a6223f906d42288fd3668f9be"},{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"2bb08104cd28d808630bc3b12f59ce1a48f43d3e","unresolved":true,"context_lines":[{"line_number":15,"context_line":"  community.crypto.openssl_privatekey:"},{"line_number":16,"context_line":"    path: \"{{ certificates_root_dir }}/root.key\""},{"line_number":17,"context_line":"    mode: \"0660\""},{"line_number":18,"context_line":"    size: 2048"},{"line_number":19,"context_line":"    type: RSA"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"- name: Create certificate signing request (CSR) for new certificate"}],"source_content_type":"text/x-yaml","patch_set":59,"id":"e666b7d4_7b5a9f28","line":18,"updated":"2025-12-19 12:23:28.000000000","message":"downgrade from previous 4096","commit_id":"708e5d611275585ddb9f5c441648ff495c046c05"},{"author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"change_message_id":"d364a20c874e6d1b800d591fe4ffd394e9eaf963","unresolved":false,"context_lines":[{"line_number":15,"context_line":"  community.crypto.openssl_privatekey:"},{"line_number":16,"context_line":"    path: \"{{ certificates_root_dir }}/root.key\""},{"line_number":17,"context_line":"    mode: \"0660\""},{"line_number":18,"context_line":"    size: 2048"},{"line_number":19,"context_line":"    type: RSA"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"- name: Create certificate signing request (CSR) for new certificate"}],"source_content_type":"text/x-yaml","patch_set":59,"id":"c6b437ab_1ffa554d","line":18,"in_reply_to":"e666b7d4_7b5a9f28","updated":"2025-12-19 12:33:11.000000000","message":"Done","commit_id":"708e5d611275585ddb9f5c441648ff495c046c05"}],"ansible/roles/certificates/tasks/generate.yml":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"c26bb458c655e8384f7a5ba2529f3e79852ce16f","unresolved":true,"context_lines":[{"line_number":20,"context_line":"      community.crypto.openssl_privatekey:"},{"line_number":21,"context_line":"        path: \"{{ certificates_external_dir }}/external.key\""},{"line_number":22,"context_line":"        mode: \"0660\""},{"line_number":23,"context_line":"        size: 2048"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"    - name: Creating external Server Certificate signing request"},{"line_number":26,"context_line":"      vars:"}],"source_content_type":"text/x-yaml","patch_set":53,"id":"529f128e_1de1a248","line":23,"updated":"2025-12-18 16:12:13.000000000","message":"maybe better be explicit with `type: RSA`, too? I wouldn\u0027t want to bet on the default staying unchanged","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"change_message_id":"8fe3a5b53752646d80d24ce2344281ae2d6b6044","unresolved":false,"context_lines":[{"line_number":20,"context_line":"      community.crypto.openssl_privatekey:"},{"line_number":21,"context_line":"        path: \"{{ certificates_external_dir }}/external.key\""},{"line_number":22,"context_line":"        mode: \"0660\""},{"line_number":23,"context_line":"        size: 2048"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"    - name: Creating external Server Certificate signing request"},{"line_number":26,"context_line":"      vars:"}],"source_content_type":"text/x-yaml","patch_set":53,"id":"23d3c838_cbf34c5f","line":23,"in_reply_to":"529f128e_1de1a248","updated":"2025-12-19 07:01:55.000000000","message":"Done","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"ad1e7cbfc63949ffcf6df4b510df73f01afd640b","unresolved":false,"context_lines":[{"line_number":25,"context_line":"    - name: Creating external Server Certificate signing request"},{"line_number":26,"context_line":"      vars:"},{"line_number":27,"context_line":"        _san:"},{"line_number":28,"context_line":"          - \"{{ \u0027DNS:\u0027 ~ kolla_external_fqdn if kolla_external_fqdn !\u003d kolla_external_vip_address }}\""},{"line_number":29,"context_line":"          - \"IP:{{ kolla_external_vip_address }}\""},{"line_number":30,"context_line":"      community.crypto.openssl_csr:"},{"line_number":31,"context_line":"        path: \"{{ certificates_external_dir }}/external.csr\""}],"source_content_type":"text/x-yaml","patch_set":53,"id":"cf24c57a_65c0311e","line":28,"updated":"2025-12-18 16:12:07.000000000","message":"this will always pass the `| select()` since there will always be a \u0027DNS:\u0027 string even if it\u0027s not needed I think. maybe `else omit` ?","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"2d15d7d4c5e60b2ace29101478147dc6059c21ff","unresolved":true,"context_lines":[{"line_number":25,"context_line":"    - name: Creating external Server Certificate signing request"},{"line_number":26,"context_line":"      vars:"},{"line_number":27,"context_line":"        _san:"},{"line_number":28,"context_line":"          - \"{{ \u0027DNS:\u0027 ~ kolla_external_fqdn if kolla_external_fqdn !\u003d kolla_external_vip_address }}\""},{"line_number":29,"context_line":"          - \"IP:{{ kolla_external_vip_address }}\""},{"line_number":30,"context_line":"      community.crypto.openssl_csr:"},{"line_number":31,"context_line":"        path: \"{{ certificates_external_dir }}/external.csr\""}],"source_content_type":"text/x-yaml","patch_set":53,"id":"e17a3a73_aec519d7","line":28,"in_reply_to":"cf24c57a_65c0311e","updated":"2025-12-18 16:14:19.000000000","message":"somehow clicked the resolved button","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"d714c0adb4fe9096f188c9e0dfddbdc305d6bdfb","unresolved":false,"context_lines":[{"line_number":25,"context_line":"    - name: Creating external Server Certificate signing request"},{"line_number":26,"context_line":"      vars:"},{"line_number":27,"context_line":"        _san:"},{"line_number":28,"context_line":"          - \"{{ \u0027DNS:\u0027 ~ kolla_external_fqdn if kolla_external_fqdn !\u003d kolla_external_vip_address }}\""},{"line_number":29,"context_line":"          - \"IP:{{ kolla_external_vip_address }}\""},{"line_number":30,"context_line":"      community.crypto.openssl_csr:"},{"line_number":31,"context_line":"        path: \"{{ certificates_external_dir }}/external.csr\""}],"source_content_type":"text/x-yaml","patch_set":53,"id":"3d2367dc_aab74aa1","line":28,"in_reply_to":"e17a3a73_aec519d7","updated":"2025-12-18 16:21:40.000000000","message":"erratum: this works actually","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"ad1e7cbfc63949ffcf6df4b510df73f01afd640b","unresolved":false,"context_lines":[{"line_number":102,"context_line":"    - name: Creating internal Server Certificate signing request"},{"line_number":103,"context_line":"      vars:"},{"line_number":104,"context_line":"        _san:"},{"line_number":105,"context_line":"          - \"{{ \u0027DNS:\u0027 ~ kolla_internal_fqdn if kolla_internal_fqdn !\u003d kolla_internal_vip_address }}\""},{"line_number":106,"context_line":"          - \"IP:{{ kolla_internal_vip_address }}\""},{"line_number":107,"context_line":"      community.crypto.openssl_csr:"},{"line_number":108,"context_line":"        path: \"{{ certificates_internal_dir }}/internal.csr\""}],"source_content_type":"text/x-yaml","patch_set":53,"id":"6fd5af58_4ee63a45","line":105,"updated":"2025-12-18 16:12:07.000000000","message":"same","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"d714c0adb4fe9096f188c9e0dfddbdc305d6bdfb","unresolved":false,"context_lines":[{"line_number":102,"context_line":"    - name: Creating internal Server Certificate signing request"},{"line_number":103,"context_line":"      vars:"},{"line_number":104,"context_line":"        _san:"},{"line_number":105,"context_line":"          - \"{{ \u0027DNS:\u0027 ~ kolla_internal_fqdn if kolla_internal_fqdn !\u003d kolla_internal_vip_address }}\""},{"line_number":106,"context_line":"          - \"IP:{{ kolla_internal_vip_address }}\""},{"line_number":107,"context_line":"      community.crypto.openssl_csr:"},{"line_number":108,"context_line":"        path: \"{{ certificates_internal_dir }}/internal.csr\""}],"source_content_type":"text/x-yaml","patch_set":53,"id":"2d3eb840_1d1cae99","line":105,"in_reply_to":"2323b434_82eeb59a","updated":"2025-12-18 16:21:40.000000000","message":"Done","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"},{"author":{"_account_id":37203,"name":"Bertrand Lanson","display_name":"Bertrand Lanson","email":"bertrand.lanson@infomaniak.com","username":"lanson","status":"Infomaniak Network SA"},"change_message_id":"2d15d7d4c5e60b2ace29101478147dc6059c21ff","unresolved":true,"context_lines":[{"line_number":102,"context_line":"    - name: Creating internal Server Certificate signing request"},{"line_number":103,"context_line":"      vars:"},{"line_number":104,"context_line":"        _san:"},{"line_number":105,"context_line":"          - \"{{ \u0027DNS:\u0027 ~ kolla_internal_fqdn if kolla_internal_fqdn !\u003d kolla_internal_vip_address }}\""},{"line_number":106,"context_line":"          - \"IP:{{ kolla_internal_vip_address }}\""},{"line_number":107,"context_line":"      community.crypto.openssl_csr:"},{"line_number":108,"context_line":"        path: \"{{ certificates_internal_dir }}/internal.csr\""}],"source_content_type":"text/x-yaml","patch_set":53,"id":"2323b434_82eeb59a","line":105,"in_reply_to":"6fd5af58_4ee63a45","updated":"2025-12-18 16:14:19.000000000","message":"clicked resolve by mistake..","commit_id":"671a0edb718f4d3d6ae5d3111af7d7033aee9d7c"}]}