)]}'
{"doc/advanced-configuration.rst":[{"author":{"_account_id":1390,"name":"Paul Bourke","email":"pauldbourke@proton.me","username":"pauldbourke"},"change_message_id":"e8eb53b03ba6254c04405e3b3328ab70bbd1d04d","unresolved":false,"context_lines":[{"line_number":184,"context_line":"Kolla community, but included since sometimes a free IP is not available"},{"line_number":185,"context_line":"in a testing environment."},{"line_number":186,"context_line":""},{"line_number":187,"context_line":"Custom Config Directory"},{"line_number":188,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":189,"context_line":""},{"line_number":190,"context_line":"Kolla takes any config files from ``/etc/kolla/config`` and merges them with the"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bab6814e_f6b7b4d5","line":187,"updated":"2016-05-20 15:05:40.000000000","message":"I feel the info in this section would be better merged with the \"openstack service configuration in kolla\" section above at line 140","commit_id":"6080ef4089d9dd0341254ea9a3c0388c94e8c375"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"6f5119c9fbca286a53f73adeb3bd07fe90f1e555","unresolved":false,"context_lines":[{"line_number":154,"context_line":"   node_custom_config: \"/etc/kolla/config\""},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"For example to override scheduler_max_attempts in nova scheduler, the operator"},{"line_number":157,"context_line":"needs to create `/etc/kolla/config/nova/nova-scheduler.conf with content`:"},{"line_number":158,"context_line":""},{"line_number":159,"context_line":"::"},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"bab6814e_7122ae53","line":157,"range":{"start_line":157,"start_character":16,"end_line":157,"end_character":59},"updated":"2016-05-20 15:18:11.000000000","message":"s/`/etc/kolla/config/nova/nova-scheduler.conf with content`/ ``/etc/kolla/config/nova/nova-scheduler.conf`` with content :","commit_id":"49ce37775e6b2f56dc8a3259182d9824480f3f5d"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":8,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"When an OpenStack cloud is deployed, each services\u0027 REST API is presented"},{"line_number":11,"context_line":"as a series of endpoints.  These endpoints are the admin URL, the internal"},{"line_number":12,"context_line":"URL, and the external URL."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Kolla offers two options for assigning these endpoints to network addresses."}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_0855f0f8","line":11,"updated":"2016-05-20 18:01:45.000000000","message":"[1]remove this whitespace. Isn\u0027t needed.","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":12,"context_line":"URL, and the external URL."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Kolla offers two options for assigning these endpoints to network addresses."},{"line_number":15,"context_line":"These are combined and separate.  For the combined option, all three"},{"line_number":16,"context_line":"endpoints share the same IP address.  For the separate option, the external"},{"line_number":17,"context_line":"URL is assigned to an IP address that is different than the IP address"},{"line_number":18,"context_line":"shared by the internal and admin URLs."}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_68463c50","line":15,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Kolla offers two options for assigning these endpoints to network addresses."},{"line_number":15,"context_line":"These are combined and separate.  For the combined option, all three"},{"line_number":16,"context_line":"endpoints share the same IP address.  For the separate option, the external"},{"line_number":17,"context_line":"URL is assigned to an IP address that is different than the IP address"},{"line_number":18,"context_line":"shared by the internal and admin URLs."},{"line_number":19,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_c875a898","line":16,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":24,"context_line":"- kolla_external_vip_interface"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"For the combined option, set the two variables below, while allowing the"},{"line_number":27,"context_line":"other two to accept their default values.  In this configuration all REST"},{"line_number":28,"context_line":"API requests, internal and external, will flow over the same network."},{"line_number":29,"context_line":"::"},{"line_number":30,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_28dc3472","line":27,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":31,"context_line":"    kolla_internal_vip_address: \"10.10.10.254\""},{"line_number":32,"context_line":"    network_interface: \"eth0\""},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"For the separate option, set these four variables.  In this configuration"},{"line_number":35,"context_line":"the internal and external REST API requests can flow over separate"},{"line_number":36,"context_line":"networks."},{"line_number":37,"context_line":"::"}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_e8f50ced","line":34,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":63,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"An additional endpoint configuration option is to enable or disable"},{"line_number":66,"context_line":"TLS protection for the external VIP.  TLS allows a client to authenticate"},{"line_number":67,"context_line":"the OpenStack service endpoint and allows for encryption of the requests"},{"line_number":68,"context_line":"and responses."},{"line_number":69,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_c89c88c2","line":66,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":82,"context_line":""},{"line_number":83,"context_line":""},{"line_number":84,"context_line":".. NOTE:: TLS authentication is based on certificates that have been"},{"line_number":85,"context_line":"   signed by trusted Certificate Authorities.  Examples of commercial"},{"line_number":86,"context_line":"   CAs are Comodo, Symantec, GoDaddy, and GlobalSign.  Letsencrypt.org"},{"line_number":87,"context_line":"   is a CA that will provide trusted certificates at no charge. Many"},{"line_number":88,"context_line":"   company\u0027s IT departments will provide certificates within that"}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_e87eac68","line":85,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":83,"context_line":""},{"line_number":84,"context_line":".. NOTE:: TLS authentication is based on certificates that have been"},{"line_number":85,"context_line":"   signed by trusted Certificate Authorities.  Examples of commercial"},{"line_number":86,"context_line":"   CAs are Comodo, Symantec, GoDaddy, and GlobalSign.  Letsencrypt.org"},{"line_number":87,"context_line":"   is a CA that will provide trusted certificates at no charge. Many"},{"line_number":88,"context_line":"   company\u0027s IT departments will provide certificates within that"},{"line_number":89,"context_line":"   company\u0027s domain.  If using a trusted CA is not possible for your"}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_a8882472","line":86,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":86,"context_line":"   CAs are Comodo, Symantec, GoDaddy, and GlobalSign.  Letsencrypt.org"},{"line_number":87,"context_line":"   is a CA that will provide trusted certificates at no charge. Many"},{"line_number":88,"context_line":"   company\u0027s IT departments will provide certificates within that"},{"line_number":89,"context_line":"   company\u0027s domain.  If using a trusted CA is not possible for your"},{"line_number":90,"context_line":"   situation, you can use OpenSSL to create your own or see the section"},{"line_number":91,"context_line":"   below about kolla generated self-signed certificates."},{"line_number":92,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_087a1077","line":89,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":91,"context_line":"   below about kolla generated self-signed certificates."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Two certificate files are required to use TLS securely with authentication."},{"line_number":94,"context_line":"These two files will be provided by your Certificate Authority.  These"},{"line_number":95,"context_line":"two files are the server certificate with private key and the CA certificate"},{"line_number":96,"context_line":"with any intermediate certificates.  The server certificate needs to be"},{"line_number":97,"context_line":"installed with the kolla deployment and is configured with the"}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_c883e854","line":94,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":93,"context_line":"Two certificate files are required to use TLS securely with authentication."},{"line_number":94,"context_line":"These two files will be provided by your Certificate Authority.  These"},{"line_number":95,"context_line":"two files are the server certificate with private key and the CA certificate"},{"line_number":96,"context_line":"with any intermediate certificates.  The server certificate needs to be"},{"line_number":97,"context_line":"installed with the kolla deployment and is configured with the"},{"line_number":98,"context_line":"kolla_external_fqdn_cert parameter.  If the server certificate provided"},{"line_number":99,"context_line":"is not already trusted by the client, then the CA certificate file will"}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_489898c0","line":96,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":95,"context_line":"two files are the server certificate with private key and the CA certificate"},{"line_number":96,"context_line":"with any intermediate certificates.  The server certificate needs to be"},{"line_number":97,"context_line":"installed with the kolla deployment and is configured with the"},{"line_number":98,"context_line":"kolla_external_fqdn_cert parameter.  If the server certificate provided"},{"line_number":99,"context_line":"is not already trusted by the client, then the CA certificate file will"},{"line_number":100,"context_line":"need to be distributed to the client."},{"line_number":101,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_28955486","line":98,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":16233,"name":"Mauricio Lima","email":"mauriciolimab@gmail.com","username":"limamauricio"},"change_message_id":"65d45e5b74ebdf3795954691317f5d585e44234a","unresolved":false,"context_lines":[{"line_number":119,"context_line":".. NOTE:: Self-signed certificates should never be used in production."},{"line_number":120,"context_line":""},{"line_number":121,"context_line":"It is not always practical to get a certificate signed by a well-known"},{"line_number":122,"context_line":"trust CA, for example a development or internal test kolla deployment.  In"},{"line_number":123,"context_line":"these cases it can be useful to have a self-signed certificate to use."},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"For convenience, the kolla-ansible command will generate the necessary"}],"source_content_type":"text/x-rst","patch_set":4,"id":"bab6814e_688bdc68","line":122,"updated":"2016-05-20 18:01:45.000000000","message":"ditto [1]","commit_id":"a1644e8ba570e2fa5e01a0c5dd1a53a31278872f"},{"author":{"_account_id":1390,"name":"Paul Bourke","email":"pauldbourke@proton.me","username":"pauldbourke"},"change_message_id":"524c3859b9036db61dfab0016fd4366cd29b63d4","unresolved":false,"context_lines":[{"line_number":147,"context_line":"be done per-project, per-service or per-service-on-specified-host."},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"An operator can change the location where custom config files are read from by"},{"line_number":150,"context_line":"editing ``ansible/group_vars/all.yml``."},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"::"},{"line_number":153,"context_line":"   # The directory to merge custom config files the kolla\u0027s config files"}],"source_content_type":"text/x-rst","patch_set":5,"id":"bab6814e_2558af55","line":150,"updated":"2016-05-23 09:44:40.000000000","message":"Should this not be overridden in /etc/kolla/globals.yml ?","commit_id":"e224d2bde2c0667742f7ac445daf5fcf2cacfa5c"},{"author":{"_account_id":11105,"name":"Swapnil Kulkarni","email":"coolsvap@gmail.com","username":"coolsvap"},"change_message_id":"92233c541017a7f07deba2e995d5befbc296e218","unresolved":false,"context_lines":[{"line_number":147,"context_line":"be done per-project, per-service or per-service-on-specified-host."},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"An operator can change the location where custom config files are read from by"},{"line_number":150,"context_line":"editing ``ansible/group_vars/all.yml``."},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"::"},{"line_number":153,"context_line":"   # The directory to merge custom config files the kolla\u0027s config files"}],"source_content_type":"text/x-rst","patch_set":5,"id":"bab6814e_e044d54a","line":150,"in_reply_to":"bab6814e_2558af55","updated":"2016-05-23 09:47:29.000000000","message":"You need to move :: at the end of this statement. This is something we are trying to use in all kolla docs. [1]\n\n[1] http://docutils.sourceforge.net/docs/ref/rst/restructuredtext.html#literal-blocks","commit_id":"e224d2bde2c0667742f7ac445daf5fcf2cacfa5c"},{"author":{"_account_id":7488,"name":"Jeffrey Zhang","email":"zhang.lei.fly@gmail.com","username":"Jeffrey4l"},"change_message_id":"d91fca4f1f0e1e4e489f8ae762de473bf830fae0","unresolved":false,"context_lines":[{"line_number":150,"context_line":"for file in ``/etc/kolla/config/\u003c\u003c sevice name \u003e\u003e/\u003c\u003c config file \u003e\u003e``. This can"},{"line_number":151,"context_line":"be done per-project, per-service or per-service-on-specified-host."},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"An operator can change the location where custom config files are read from by"},{"line_number":154,"context_line":"editing ``/etc/kolla/globals.yml`` and adding the following line."},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"::"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bab6814e_b8c9125d","line":153,"updated":"2016-05-24 14:28:54.000000000","message":"could u move these added to the line #147?\n\nthe line #151 and line #161 is continuous.","commit_id":"d78cd647ce6a078a9411372587ce5312a5ce6ae5"}]}