)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"86ebcb8289e3f21f655eba185aebc99c68438413","unresolved":false,"context_lines":[{"line_number":11,"context_line":"current problems that we have with VNC consoles with respect to deployment,"},{"line_number":12,"context_line":"scalability and security. The existing support for VNC consoles will remain but"},{"line_number":13,"context_line":"users will be encouraged to use WebMKS when possible."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Change-Id: Ie8e4d6f1091e2e48848952d6e0018e20990188aa"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":5,"id":"baa201ad_859d7b68","line":14,"updated":"2014-10-17 15:36:32.000000000","message":"please link to the blueprint here, if possible","commit_id":"42496273257bc7f04a0c1d87c6df82e361c5fbab"},{"author":{"_account_id":12898,"name":"Tony Breeds","email":"tony@bakeyournoodle.com","username":"tonyb"},"change_message_id":"2ffa86ba59906deb55be6ba8bab3dbd4c7e59365","unresolved":false,"context_lines":[{"line_number":13,"context_line":"users will be encouraged to use WebMKS when possible."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"blueprint vmware-webmks-console"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Change-Id: Ie8e4d6f1091e2e48848952d6e0018e20990188aa"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":7,"id":"3a961159_9c541c00","line":16,"updated":"2014-12-12 08:48:06.000000000","message":"You need APIImpact here","commit_id":"444e94db612b96cdb64f205a4999cef212e9d61e"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"bece7aafe899c3378c2da594b1a732d2b1f5cc4c","unresolved":false,"context_lines":[{"line_number":13,"context_line":"users will be encouraged to use WebMKS when possible."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"blueprint vmware-webmks-console"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Change-Id: Ie8e4d6f1091e2e48848952d6e0018e20990188aa"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":7,"id":"3a961159_0f3e3028","line":16,"in_reply_to":"3a961159_9c541c00","updated":"2014-12-12 09:43:03.000000000","message":"I am using the newly added API for getting console access defined in the dependent spec. I am not introducing any new API here (unless adding a new console protocol is considered an API change?)","commit_id":"444e94db612b96cdb64f205a4999cef212e9d61e"}],"specs/kilo/approved/vmware-webmks-console.rst":[{"author":{"_account_id":9555,"name":"Matthew Booth","email":"mbooth@redhat.com","username":"MatthewBooth"},"change_message_id":"1f7ea193003b7deac9aec3b12b12c8f68b9831f7","unresolved":false,"context_lines":[{"line_number":19,"context_line":"Problem description"},{"line_number":20,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"There is a number of problems with the current approach which provides VNC"},{"line_number":23,"context_line":"consoles to instances running on VMware hypervisors:"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"* Deployment - cloud operators need to open a huge range of ports (5900-6105)"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_701f455c","line":22,"updated":"2014-10-09 16:34:35.000000000","message":"nit: There are","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"ebf906ce51a4854da5dd4341e2b3e28dfb5a7bd1","unresolved":false,"context_lines":[{"line_number":19,"context_line":"Problem description"},{"line_number":20,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"There is a number of problems with the current approach which provides VNC"},{"line_number":23,"context_line":"consoles to instances running on VMware hypervisors:"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"* Deployment - cloud operators need to open a huge range of ports (5900-6105)"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_a216b5a5","line":22,"in_reply_to":"baa201ad_701f455c","updated":"2014-10-10 09:09:42.000000000","message":"Done","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9555,"name":"Matthew Booth","email":"mbooth@redhat.com","username":"MatthewBooth"},"change_message_id":"1f7ea193003b7deac9aec3b12b12c8f68b9831f7","unresolved":false,"context_lines":[{"line_number":44,"context_line":"Use Cases"},{"line_number":45,"context_line":"----------"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Deployers will be able to deploy OpenStack on top of vSphere much easier"},{"line_number":48,"context_line":"because they won\u0027t need to modify firewall configurations on the ESXi hosts."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Spawning many instances at the same time will be faster for End Users because"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_3073fdb5","line":47,"updated":"2014-10-09 16:34:35.000000000","message":"nit: much more easily","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"ebf906ce51a4854da5dd4341e2b3e28dfb5a7bd1","unresolved":false,"context_lines":[{"line_number":44,"context_line":"Use Cases"},{"line_number":45,"context_line":"----------"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Deployers will be able to deploy OpenStack on top of vSphere much easier"},{"line_number":48,"context_line":"because they won\u0027t need to modify firewall configurations on the ESXi hosts."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Spawning many instances at the same time will be faster for End Users because"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_e210bdaa","line":47,"in_reply_to":"baa201ad_3073fdb5","updated":"2014-10-10 09:09:42.000000000","message":"Done","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9555,"name":"Matthew Booth","email":"mbooth@redhat.com","username":"MatthewBooth"},"change_message_id":"1f7ea193003b7deac9aec3b12b12c8f68b9831f7","unresolved":false,"context_lines":[{"line_number":48,"context_line":"because they won\u0027t need to modify firewall configurations on the ESXi hosts."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Spawning many instances at the same time will be faster for End Users because"},{"line_number":51,"context_line":"no ports will be allocated in the driver and thus no locks will be held."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Project Priority"},{"line_number":54,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_90a909e2","line":51,"updated":"2014-10-09 16:34:35.000000000","message":"Aside: we currently allocate VNC ports during spawn. We (c|sh)ould probably do this lazily in get_vnc_console().","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"ebf906ce51a4854da5dd4341e2b3e28dfb5a7bd1","unresolved":false,"context_lines":[{"line_number":48,"context_line":"because they won\u0027t need to modify firewall configurations on the ESXi hosts."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Spawning many instances at the same time will be faster for End Users because"},{"line_number":51,"context_line":"no ports will be allocated in the driver and thus no locks will be held."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Project Priority"},{"line_number":54,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_e2d51dba","line":51,"in_reply_to":"baa201ad_90a909e2","updated":"2014-10-10 09:09:42.000000000","message":"I like this. It will allow to have both VNC and WebMKS enabled without affecting the performance of spawn.","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9555,"name":"Matthew Booth","email":"mbooth@redhat.com","username":"MatthewBooth"},"change_message_id":"1f7ea193003b7deac9aec3b12b12c8f68b9831f7","unresolved":false,"context_lines":[{"line_number":88,"context_line":"information."},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Sample request:"},{"line_number":91,"context_line":"{ \"os-getWebMKSConsole\": { \"type\": \"webmks\" } }"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Sample response:"},{"line_number":94,"context_line":"{ \"console\": { \"type\": \"webmks\", \"url\": \"http://example.com:6090/?token\u003dc88be357-0992-40e8-8dd7-afc918ad34d5\" } }"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_b011ad55","line":91,"updated":"2014-10-09 16:34:35.000000000","message":"We already have os-getVNCConsole. Leaving aside the ugly fact that we wouldn\u0027t actually be returning a VNC console, is there any reason not to add this as an additional type which can be returned by the existing api, rather than adding a new one?","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"ebf906ce51a4854da5dd4341e2b3e28dfb5a7bd1","unresolved":false,"context_lines":[{"line_number":88,"context_line":"information."},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Sample request:"},{"line_number":91,"context_line":"{ \"os-getWebMKSConsole\": { \"type\": \"webmks\" } }"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Sample response:"},{"line_number":94,"context_line":"{ \"console\": { \"type\": \"webmks\", \"url\": \"http://example.com:6090/?token\u003dc88be357-0992-40e8-8dd7-afc918ad34d5\" } }"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_c243b96a","line":91,"in_reply_to":"baa201ad_b011ad55","updated":"2014-10-10 09:09:42.000000000","message":"There is no such reason. If people agree that we can implement this with the existing API for VNC and simply add a new console type \"webmks\", that would be great.","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9555,"name":"Matthew Booth","email":"mbooth@redhat.com","username":"MatthewBooth"},"change_message_id":"1f7ea193003b7deac9aec3b12b12c8f68b9831f7","unresolved":false,"context_lines":[{"line_number":121,"context_line":"---------------------"},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"There will be a new configuration option that will specify the base URL for the"},{"line_number":124,"context_line":"WebMKS proxy (e.g. webmks_proxy_base_url)."},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"Developer impact"},{"line_number":127,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_b0944d8d","line":124,"updated":"2014-10-09 16:34:35.000000000","message":"Isn\u0027t the deployment of the WebMKS proxy also a deployer impact? Will the proxy be part of OpenStack or part of vCenter? If vCenter, doesn\u0027t that commit us to still exposing vCenter to end users?","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"ebf906ce51a4854da5dd4341e2b3e28dfb5a7bd1","unresolved":false,"context_lines":[{"line_number":121,"context_line":"---------------------"},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"There will be a new configuration option that will specify the base URL for the"},{"line_number":124,"context_line":"WebMKS proxy (e.g. webmks_proxy_base_url)."},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"Developer impact"},{"line_number":127,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"baa201ad_3d6106d4","line":124,"in_reply_to":"baa201ad_b0944d8d","updated":"2014-10-10 09:09:42.000000000","message":"Good catch, I will update this section.\n\nThe websocket proxy will be a new component which is not part of the vCenter. I will try very hard to contribute this proxy to OpenStack (I may file a separate spec for it) but we may end up with shipping it separately similar to how FreeRDP proxy is distributed for the RDP consoles.","commit_id":"b4188134fdb81744f25cba08124f19071a8bd8e6"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"296bd9b017ef33d13bde59088c214b8250b84e00","unresolved":false,"context_lines":[{"line_number":68,"context_line":"* vmName - the name of the virtual machine"},{"line_number":69,"context_line":"* vcFQDN - the vCenter Server advanced setting \"VirtualCenter.FQDN\""},{"line_number":70,"context_line":"* sessionTicket - session ticket obtained with the AcquireCloneTicket API"},{"line_number":71,"context_line":"* thumbprint - the vCenter Server SHA1 SSL thumbprint"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"Alternatives"},{"line_number":74,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"baa201ad_633bbaeb","line":71,"updated":"2014-10-13 16:26:49.000000000","message":"This doesn\u0027t seem to match the API sample below?","commit_id":"f0f810f44be36ee551c9dc7e70e7fdcf3410058b"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"371cd06fdabb6850c0f68622a2e38e120dcc34e7","unresolved":false,"context_lines":[{"line_number":68,"context_line":"* vmName - the name of the virtual machine"},{"line_number":69,"context_line":"* vcFQDN - the vCenter Server advanced setting \"VirtualCenter.FQDN\""},{"line_number":70,"context_line":"* sessionTicket - session ticket obtained with the AcquireCloneTicket API"},{"line_number":71,"context_line":"* thumbprint - the vCenter Server SHA1 SSL thumbprint"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"Alternatives"},{"line_number":74,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"baa201ad_4bddda6f","line":71,"in_reply_to":"baa201ad_633bbaeb","updated":"2014-10-14 07:30:28.000000000","message":"Please see below.","commit_id":"f0f810f44be36ee551c9dc7e70e7fdcf3410058b"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"296bd9b017ef33d13bde59088c214b8250b84e00","unresolved":false,"context_lines":[{"line_number":88,"context_line":"information."},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Sample request:"},{"line_number":91,"context_line":"{ \"os-getWebMKSConsole\": { \"type\": \"webmks\" } }"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Sample response:"},{"line_number":94,"context_line":"{ \"console\": { \"type\": \"webmks\", \"url\": \"http://example.com:6090/?token\u003dc88be357-0992-40e8-8dd7-afc918ad34d5\" } }"}],"source_content_type":"text/x-rst","patch_set":3,"id":"baa201ad_63b65a8c","line":91,"updated":"2014-10-13 16:26:49.000000000","message":"Please be clear about how users will know if this kind of console is available or not.","commit_id":"f0f810f44be36ee551c9dc7e70e7fdcf3410058b"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"371cd06fdabb6850c0f68622a2e38e120dcc34e7","unresolved":false,"context_lines":[{"line_number":88,"context_line":"information."},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Sample request:"},{"line_number":91,"context_line":"{ \"os-getWebMKSConsole\": { \"type\": \"webmks\" } }"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Sample response:"},{"line_number":94,"context_line":"{ \"console\": { \"type\": \"webmks\", \"url\": \"http://example.com:6090/?token\u003dc88be357-0992-40e8-8dd7-afc918ad34d5\" } }"}],"source_content_type":"text/x-rst","patch_set":3,"id":"baa201ad_6be29e02","line":91,"in_reply_to":"baa201ad_63b65a8c","updated":"2014-10-14 07:30:28.000000000","message":"So that is an interesting question. I am not aware of any existing API which returns what types of consoles are available. If there is an existing API for this, I will be happy to make the necessary changes to support this new console type. But if we want to add a new API for this, I believe it should be done with a separate spec.","commit_id":"f0f810f44be36ee551c9dc7e70e7fdcf3410058b"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"296bd9b017ef33d13bde59088c214b8250b84e00","unresolved":false,"context_lines":[{"line_number":91,"context_line":"{ \"os-getWebMKSConsole\": { \"type\": \"webmks\" } }"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Sample response:"},{"line_number":94,"context_line":"{ \"console\": { \"type\": \"webmks\", \"url\": \"http://example.com:6090/?token\u003dc88be357-0992-40e8-8dd7-afc918ad34d5\" } }"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Security impact"},{"line_number":97,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"baa201ad_a3da02e7","line":94,"updated":"2014-10-13 16:26:49.000000000","message":"This doesn\u0027t seem to include all the information that was mentioned above, or am I missing something?\n\nCan you be clear what this points to, I guess the vSphere server?","commit_id":"f0f810f44be36ee551c9dc7e70e7fdcf3410058b"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"371cd06fdabb6850c0f68622a2e38e120dcc34e7","unresolved":false,"context_lines":[{"line_number":91,"context_line":"{ \"os-getWebMKSConsole\": { \"type\": \"webmks\" } }"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Sample response:"},{"line_number":94,"context_line":"{ \"console\": { \"type\": \"webmks\", \"url\": \"http://example.com:6090/?token\u003dc88be357-0992-40e8-8dd7-afc918ad34d5\" } }"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Security impact"},{"line_number":97,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"baa201ad_0b7d926e","line":94,"in_reply_to":"baa201ad_a3da02e7","updated":"2014-10-14 07:30:28.000000000","message":"The API returns a URL to the WebMKS proxy with a token which corresponds to the connect information from the driver (host, port, vmId, etc. from above). When the client opens the URL, the WebMKS proxy will authorize the given token by calling nova-consoleauth and if the token is valid, it will receive the connect information which corresponds to it. Then it will start proxying between the client and vCenter. This is absolutely the same security and deployment model that we use for VNC with the only difference that we use WebMKS proxy instead of nova-novncproxy. The whole workflow is described here:\n\nhttp://docs.openstack.org/admin-guide-cloud/content/getting-started-with-vnc-proxy.html\n\nI will try to make this more clear in the spec.","commit_id":"f0f810f44be36ee551c9dc7e70e7fdcf3410058b"},{"author":{"_account_id":5511,"name":"Nikola Dipanov","email":"ndipanov@redhat.com","username":"ndipanov"},"change_message_id":"ca7ce5a46d7f24f570991065d818eac6aceab512","unresolved":false,"context_lines":[{"line_number":62,"context_line":"similar to how we return connect information for other types of consoles like"},{"line_number":63,"context_line":"VNC and RDP. The WebMKS connect information for a given instance is the"},{"line_number":64,"context_line":"following:"},{"line_number":65,"context_line":"* host - the hostname of the corresponding vCenter"},{"line_number":66,"context_line":"* port - 7331 or 7343 depending on the type of the web socket (ws or wss)"},{"line_number":67,"context_line":"* vmId - the Managed Object ID of the virtual machine"},{"line_number":68,"context_line":"* vmName - the name of the virtual machine"}],"source_content_type":"text/x-rst","patch_set":4,"id":"baa201ad_1c878fd8","line":65,"updated":"2014-10-14 13:10:28.000000000","message":"We can\u0027t really expect users to be able to access hosts - so you will need some kind of a proxy - like this it\u0027s not suitable for Nova seeing that we assume users never have access to the internal network in a lot of places.","commit_id":"cfa24957debec83723fc7044c5af04a714e6a341"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"26c86ad02ea667e345f6cc7e9a0cb67a61c5e858","unresolved":false,"context_lines":[{"line_number":62,"context_line":"similar to how we return connect information for other types of consoles like"},{"line_number":63,"context_line":"VNC and RDP. The WebMKS connect information for a given instance is the"},{"line_number":64,"context_line":"following:"},{"line_number":65,"context_line":"* host - the hostname of the corresponding vCenter"},{"line_number":66,"context_line":"* port - 7331 or 7343 depending on the type of the web socket (ws or wss)"},{"line_number":67,"context_line":"* vmId - the Managed Object ID of the virtual machine"},{"line_number":68,"context_line":"* vmName - the name of the virtual machine"}],"source_content_type":"text/x-rst","patch_set":4,"id":"baa201ad_60762940","line":65,"in_reply_to":"baa201ad_1c878fd8","updated":"2014-10-14 15:54:27.000000000","message":"We will use WebMKS proxy for this to work","commit_id":"cfa24957debec83723fc7044c5af04a714e6a341"},{"author":{"_account_id":5511,"name":"Nikola Dipanov","email":"ndipanov@redhat.com","username":"ndipanov"},"change_message_id":"7f4f87477cde6198a54d57fc3ed668b872009600","unresolved":false,"context_lines":[{"line_number":123,"context_line":"Other deployer impact"},{"line_number":124,"context_line":"---------------------"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"WebMKS consoles will require deploying WebMKS proxy (similar to"},{"line_number":127,"context_line":"nova-novncproxy) that will connect compute service users to the corresponsing"},{"line_number":128,"context_line":"vCenter which provides console access to the given virtual machine."},{"line_number":129,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"baa201ad_5c84b7b0","line":126,"updated":"2014-10-14 13:15:58.000000000","message":"Ugh missed this part - yeah this is fine - more or less same like vnc but vmware specific - will have it\u0027s own proxy and html5 client - I guess we could mention more about that as we need to ship additional static content with Nova for this to work I guess.","commit_id":"cfa24957debec83723fc7044c5af04a714e6a341"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"26c86ad02ea667e345f6cc7e9a0cb67a61c5e858","unresolved":false,"context_lines":[{"line_number":123,"context_line":"Other deployer impact"},{"line_number":124,"context_line":"---------------------"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"WebMKS consoles will require deploying WebMKS proxy (similar to"},{"line_number":127,"context_line":"nova-novncproxy) that will connect compute service users to the corresponsing"},{"line_number":128,"context_line":"vCenter which provides console access to the given virtual machine."},{"line_number":129,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"baa201ad_a0dd7116","line":126,"in_reply_to":"baa201ad_5c84b7b0","updated":"2014-10-14 15:54:27.000000000","message":"The HTML5 client will be served by the WebMKS proxy. I will update the spec to clarify this.","commit_id":"cfa24957debec83723fc7044c5af04a714e6a341"},{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"887fbfa98c239363d3b209b070e798c5f05ad0f3","unresolved":false,"context_lines":[{"line_number":47,"context_line":"Deployers will be able to deploy OpenStack on top of vSphere much more easily"},{"line_number":48,"context_line":"because they won\u0027t need to modify firewall configurations on the ESXi hosts."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Spawning many instances at the same time will be faster for End Users because"},{"line_number":51,"context_line":"no ports will be allocated in the driver and thus no locks will be held."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Project Priority"}],"source_content_type":"text/x-rst","patch_set":5,"id":"baa201ad_fc47fd49","line":50,"updated":"2014-10-15 17:04:34.000000000","message":"is this measurably faster? If we are saying it will be faster it should be something a user can notice if they look.","commit_id":"42496273257bc7f04a0c1d87c6df82e361c5fbab"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"9d44497d896891594b40e80f2b64894a3654c9bf","unresolved":false,"context_lines":[{"line_number":47,"context_line":"Deployers will be able to deploy OpenStack on top of vSphere much more easily"},{"line_number":48,"context_line":"because they won\u0027t need to modify firewall configurations on the ESXi hosts."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Spawning many instances at the same time will be faster for End Users because"},{"line_number":51,"context_line":"no ports will be allocated in the driver and thus no locks will be held."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Project Priority"}],"source_content_type":"text/x-rst","patch_set":5,"id":"baa201ad_7171640b","line":50,"in_reply_to":"baa201ad_fc47fd49","updated":"2014-10-16 08:43:59.000000000","message":"I don\u0027t have exact numbers but this will improve both response time and throughput because:\n\n1) we reduce the networks calls to vCenter\n\n2) we remove a lock","commit_id":"42496273257bc7f04a0c1d87c6df82e361c5fbab"},{"author":{"_account_id":12898,"name":"Tony Breeds","email":"tony@bakeyournoodle.com","username":"tonyb"},"change_message_id":"2ffa86ba59906deb55be6ba8bab3dbd4c7e59365","unresolved":false,"context_lines":[{"line_number":128,"context_line":""},{"line_number":129,"context_line":"There will be a new configuration option that will specify the base URL for the"},{"line_number":130,"context_line":"WebMKS proxy (e.g. webmks_proxy_base_url)."},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Developer impact"},{"line_number":133,"context_line":"----------------"},{"line_number":134,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"3a961159_1cdcac72","line":131,"updated":"2014-12-12 08:48:06.000000000","message":"You probably also need an enabled config option similar to the serial console driver.","commit_id":"444e94db612b96cdb64f205a4999cef212e9d61e"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"bece7aafe899c3378c2da594b1a732d2b1f5cc4c","unresolved":false,"context_lines":[{"line_number":128,"context_line":""},{"line_number":129,"context_line":"There will be a new configuration option that will specify the base URL for the"},{"line_number":130,"context_line":"WebMKS proxy (e.g. webmks_proxy_base_url)."},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Developer impact"},{"line_number":133,"context_line":"----------------"},{"line_number":134,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"3a961159_afcfdc27","line":131,"in_reply_to":"3a961159_1cdcac72","updated":"2014-12-12 09:43:03.000000000","message":"The presence of wemmks_proxy_base_url means that webmks consoles are enabled. Do I miss something?","commit_id":"444e94db612b96cdb64f205a4999cef212e9d61e"},{"author":{"_account_id":12898,"name":"Tony Breeds","email":"tony@bakeyournoodle.com","username":"tonyb"},"change_message_id":"2ffa86ba59906deb55be6ba8bab3dbd4c7e59365","unresolved":false,"context_lines":[{"line_number":154,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"blueprint: consolidate-console-api"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"Testing"},{"line_number":159,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"3a961159_1cc3cc89","line":157,"updated":"2014-12-12 08:48:06.000000000","message":"I think you\u0027d also be dependant on the API Microversions blueprint","commit_id":"444e94db612b96cdb64f205a4999cef212e9d61e"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"bece7aafe899c3378c2da594b1a732d2b1f5cc4c","unresolved":false,"context_lines":[{"line_number":154,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"blueprint: consolidate-console-api"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"Testing"},{"line_number":159,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":160,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"3a961159_cf86e8da","line":157,"in_reply_to":"3a961159_1cc3cc89","updated":"2014-12-12 09:43:03.000000000","message":"it\u0027s a transitive dependency: this spec depends on consolidate-console-api which depends on api-microversions :)","commit_id":"444e94db612b96cdb64f205a4999cef212e9d61e"},{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"468807775871d5159bfa8e67381750d10b11b9ec","unresolved":false,"context_lines":[{"line_number":162,"context_line":"Dependencies"},{"line_number":163,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"blueprint: consolidate-console-api"},{"line_number":166,"context_line":""},{"line_number":167,"context_line":"Testing"},{"line_number":168,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":9,"id":"3a961159_92045519","line":165,"updated":"2015-01-13 22:48:56.000000000","message":"Link?\n\nWhat is the progress of this  blueprint? https://blueprints.launchpad.net/nova/+spec/consolidate-console-api","commit_id":"9e7f514fd91769fa0625dddef3d0572ba1794e89"}],"specs/liberty/approved/vmware-webmks-console.rst":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"231eb0b371340476fc4c8940ee5545447e9576d0","unresolved":false,"context_lines":[{"line_number":26,"context_line":"  in the firewall configuration on each ESXi host. Additionally, they need to"},{"line_number":27,"context_line":"  create and install a special VIB package for the firewall modifications to"},{"line_number":28,"context_line":"  persist after reboot. The whole thing creates a huge security risk because"},{"line_number":29,"context_line":"  we rely only on the fact that all ESXi hosts will run into a private network"},{"line_number":30,"context_line":"  that will be inaccessible to the cloud users."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"* Scalability - the Nova driver needs to allocate a unique VNC port for each"}],"source_content_type":"text/x-rst","patch_set":10,"id":"baa041b7_faca7b6d","line":29,"updated":"2015-04-05 21:41:15.000000000","message":"we rely on the fact that all ESXi hosts will run on a private....","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"478dce138b3f4b264b573004fbafed07e2017be1","unresolved":false,"context_lines":[{"line_number":26,"context_line":"  in the firewall configuration on each ESXi host. Additionally, they need to"},{"line_number":27,"context_line":"  create and install a special VIB package for the firewall modifications to"},{"line_number":28,"context_line":"  persist after reboot. The whole thing creates a huge security risk because"},{"line_number":29,"context_line":"  we rely only on the fact that all ESXi hosts will run into a private network"},{"line_number":30,"context_line":"  that will be inaccessible to the cloud users."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"* Scalability - the Nova driver needs to allocate a unique VNC port for each"}],"source_content_type":"text/x-rst","patch_set":10,"id":"bab921fb_45cae9a2","line":29,"in_reply_to":"baa041b7_faca7b6d","updated":"2015-04-23 15:54:43.000000000","message":"+1 for fixing the slight typo here.","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"8249e9afea9818c78a97eb7d7f27df07e6ccf0dd","unresolved":false,"context_lines":[{"line_number":26,"context_line":"  in the firewall configuration on each ESXi host. Additionally, they need to"},{"line_number":27,"context_line":"  create and install a special VIB package for the firewall modifications to"},{"line_number":28,"context_line":"  persist after reboot. The whole thing creates a huge security risk because"},{"line_number":29,"context_line":"  we rely only on the fact that all ESXi hosts will run into a private network"},{"line_number":30,"context_line":"  that will be inaccessible to the cloud users."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"* Scalability - the Nova driver needs to allocate a unique VNC port for each"}],"source_content_type":"text/x-rst","patch_set":10,"id":"bab921fb_673dcaba","line":29,"in_reply_to":"bab921fb_45cae9a2","updated":"2015-04-24 08:20:13.000000000","message":"Done","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"478dce138b3f4b264b573004fbafed07e2017be1","unresolved":false,"context_lines":[{"line_number":84,"context_line":"REST API impact"},{"line_number":85,"context_line":"---------------"},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"We will leverage the new API for getting console access:"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Sample request::"},{"line_number":90,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"bab921fb_251495f3","line":87,"updated":"2015-04-23 15:54:43.000000000","message":"can we be clear this is only being added into v2.1 API please.","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"8249e9afea9818c78a97eb7d7f27df07e6ccf0dd","unresolved":false,"context_lines":[{"line_number":84,"context_line":"REST API impact"},{"line_number":85,"context_line":"---------------"},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"We will leverage the new API for getting console access:"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Sample request::"},{"line_number":90,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"bab921fb_474c0670","line":87,"in_reply_to":"bab921fb_251495f3","updated":"2015-04-24 08:20:13.000000000","message":"Done","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"478dce138b3f4b264b573004fbafed07e2017be1","unresolved":false,"context_lines":[{"line_number":103,"context_line":""},{"line_number":104,"context_line":"The URL in the response points to a WebMKS proxy which authorizes the given"},{"line_number":105,"context_line":"token by calling nova-consoleauth and then starts proxying between the client"},{"line_number":106,"context_line":"and the corresponding vCenter server where the instance runs."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"Security impact"},{"line_number":109,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":10,"id":"bab921fb_255db5e9","line":106,"updated":"2015-04-23 15:54:43.000000000","message":"Technically we need the updated json scheme here please, as requested by the template.","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"},{"author":{"_account_id":9172,"name":"Radoslav Gerganov","email":"rgerganov@vmware.com","username":"rgerganov"},"change_message_id":"8249e9afea9818c78a97eb7d7f27df07e6ccf0dd","unresolved":false,"context_lines":[{"line_number":103,"context_line":""},{"line_number":104,"context_line":"The URL in the response points to a WebMKS proxy which authorizes the given"},{"line_number":105,"context_line":"token by calling nova-consoleauth and then starts proxying between the client"},{"line_number":106,"context_line":"and the corresponding vCenter server where the instance runs."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"Security impact"},{"line_number":109,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":10,"id":"bab921fb_e7779a9d","line":106,"in_reply_to":"bab921fb_255db5e9","updated":"2015-04-24 08:20:13.000000000","message":"Done","commit_id":"7f53428407fd663facda84d1407b8c8a05cf03c5"}]}