)]}'
{"specs/liberty/approved/consoleauth-ha.rst":[{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":5,"context_line":" http://creativecommons.org/licenses/by/3.0/legalcode"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":8,"context_line":"Support consoleauth service HA"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/support-console-auth-ha"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3acd31a7_9b776cd4","line":8,"updated":"2015-05-11 09:34:30.000000000","message":"Can we rename this to store-console-tokens-in-db or something like that?","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":5,"context_line":" http://creativecommons.org/licenses/by/3.0/legalcode"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":8,"context_line":"Support consoleauth service HA"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/support-console-auth-ha"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_ac82e7c6","line":8,"in_reply_to":"3acd31a7_9b776cd4","updated":"2015-05-14 01:54:11.000000000","message":"Done","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/support-console-auth-ha"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The consoleauth service doesn\u0027t support HA if without external memcache."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Problem description"},{"line_number":16,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3acd31a7_fb4e6095","line":13,"updated":"2015-05-11 09:34:30.000000000","message":"I think you need to mention this is about storing the tokens in a DB instead of in memcache.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/support-console-auth-ha"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The consoleauth service doesn\u0027t support HA if without external memcache."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Problem description"},{"line_number":16,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_cc7d23e9","line":13,"in_reply_to":"3acd31a7_fb4e6095","updated":"2015-05-14 01:54:11.000000000","message":"sure, but it\u0027s little different, we still will save a copy of tokens in memcache,","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Use Cases"},{"line_number":24,"context_line":"----------"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Admin want to deploy mutiple console auth service for HA."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Project Priority"},{"line_number":29,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9af37de9_0782dc00","line":26,"updated":"2015-05-11 09:34:30.000000000","message":"but also doesn\u0027t want to deploy external memcache I guess?","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Use Cases"},{"line_number":24,"context_line":"----------"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Admin want to deploy mutiple console auth service for HA."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Project Priority"},{"line_number":29,"context_line":"-----------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_0c1d7bbd","line":26,"in_reply_to":"9af37de9_0782dc00","updated":"2015-05-14 01:54:11.000000000","message":"yes","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":79,"context_line":""},{"line_number":80,"context_line":"    }"},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"* New conductor api/rpcapi will be added for DB access:"},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"  * console_token_authorize"},{"line_number":85,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"9af37de9_6773e84e","line":82,"updated":"2015-05-11 09:34:30.000000000","message":"-1 the objects work means you don\u0027t need these now.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":79,"context_line":""},{"line_number":80,"context_line":"    }"},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"* New conductor api/rpcapi will be added for DB access:"},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"  * console_token_authorize"},{"line_number":85,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_2c2037f7","line":82,"in_reply_to":"9af37de9_6773e84e","updated":"2015-05-14 01:54:11.000000000","message":"sure, thanks john, good to know it. will remove these.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":90,"context_line":"  * console_token_delete_expired"},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"* Add new periodic to delete expired tokens from DB: The periodic task will be"},{"line_number":93,"context_line":"  help to delete expired auth tokens from DB every console_token_ttl."},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"Alternatives"},{"line_number":96,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3acd31a7_bb3fc8d5","line":93,"updated":"2015-05-11 09:34:30.000000000","message":"Is this totally separate form the nova db?\n\nIf so, I guess this will need new config params, and new migration scripts and nova-manage commands, etc?\n\nThat might make sense here, but it would be good to make this clear.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":90,"context_line":"  * console_token_delete_expired"},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"* Add new periodic to delete expired tokens from DB: The periodic task will be"},{"line_number":93,"context_line":"  help to delete expired auth tokens from DB every console_token_ttl."},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"Alternatives"},{"line_number":96,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_2c9397fc","line":93,"in_reply_to":"3acd31a7_bb3fc8d5","updated":"2015-05-14 01:54:11.000000000","message":"yes, it\u0027s a new table of nova db.\nwe need migration scripts and new config params I mentioned in line 38,\n\nbut for nova-manage commands, do we need a new command, I am not very clear for nova-manage command ?\n\nEli.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":133,"context_line":"Security impact"},{"line_number":134,"context_line":"---------------"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"This change saved the console auth token in local database, so we need to take"},{"line_number":137,"context_line":"care about the security of database, and make sure this table will be not seen"},{"line_number":138,"context_line":"by other service."},{"line_number":139,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"9af37de9_47dd8413","line":136,"updated":"2015-05-11 09:34:30.000000000","message":"local database? surely it has to be a shared external database?","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":133,"context_line":"Security impact"},{"line_number":134,"context_line":"---------------"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"This change saved the console auth token in local database, so we need to take"},{"line_number":137,"context_line":"care about the security of database, and make sure this table will be not seen"},{"line_number":138,"context_line":"by other service."},{"line_number":139,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_ccc083e3","line":136,"in_reply_to":"9af37de9_47dd8413","updated":"2015-05-14 01:54:11.000000000","message":"it\u0027s a shared external database. will fix it.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":169,"context_line":"----------------"},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"New sqlalchemy api and conductor api will be involved, it will bump up version"},{"line_number":172,"context_line":"of conductor api."},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"Implementation"},{"line_number":175,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9af37de9_c7d174fd","line":172,"updated":"2015-05-11 09:34:30.000000000","message":"How do you configure this?","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":169,"context_line":"----------------"},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"New sqlalchemy api and conductor api will be involved, it will bump up version"},{"line_number":172,"context_line":"of conductor api."},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"Implementation"},{"line_number":175,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_4cadb330","line":172,"in_reply_to":"9af37de9_c7d174fd","updated":"2015-05-14 01:54:11.000000000","message":"I will remove conductor api..","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":199,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":200,"context_line":""},{"line_number":201,"context_line":"Unit test case of conductor api and console auth service for multiple services"},{"line_number":202,"context_line":"will be added."},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"Documentation Impact"},{"line_number":205,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3acd31a7_1b18fc83","line":202,"updated":"2015-05-11 09:34:30.000000000","message":"Can we look at testing this in the new two VM gate test? I think that makes sense.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":199,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":200,"context_line":""},{"line_number":201,"context_line":"Unit test case of conductor api and console auth service for multiple services"},{"line_number":202,"context_line":"will be added."},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"Documentation Impact"},{"line_number":205,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_0ca7bb50","line":202,"in_reply_to":"3acd31a7_1b18fc83","updated":"2015-05-14 01:54:11.000000000","message":"yes, that\u0027s a good propose, I will update it here,\ndo you mean this gate check-tempest-dsvm-multinode-full ？","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"6025fa1f84eb9847973b06fe7f328e99380de73e","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Documentation Impact"},{"line_number":205,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"The operator can configure multiple console auth service for HA requirements."},{"line_number":208,"context_line":""},{"line_number":209,"context_line":"References"},{"line_number":210,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9af37de9_27096096","line":207,"updated":"2015-05-11 09:34:30.000000000","message":"You can do that already with memcache I believe, please be more specific here.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"},{"author":{"_account_id":12175,"name":"Eli Qiao","email":"qiaoliyong@gmail.com","username":"Eli"},"change_message_id":"6cb780fde8f42f020fba1f0a4be66da409988e37","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Documentation Impact"},{"line_number":205,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"The operator can configure multiple console auth service for HA requirements."},{"line_number":208,"context_line":""},{"line_number":209,"context_line":"References"},{"line_number":210,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a016987_ec621f16","line":207,"in_reply_to":"9af37de9_27096096","updated":"2015-05-14 01:54:11.000000000","message":"sure, will update it.","commit_id":"45f850da58ad8a764b3f34ec6a64aad46d592a52"}],"specs/liberty/approved/store-console-tokens-in-db.rst":[{"author":{"_account_id":7730,"name":"Sahid Orentino Ferdjaoui","email":"sahid.ferdjaoui@industrialdiscipline.com","username":"sahid"},"change_message_id":"ccc6e744f967b45a6e3bee60803c0f4dcf2e76fb","unresolved":false,"context_lines":[{"line_number":44,"context_line":"flexiable to operator and it\u0027s no effect of performence cost at all compared to"},{"line_number":45,"context_line":"currently implement."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"If have `auth_token_backend\u003ddb`, we save a copy of console auth token in DB."},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"By saving a copy of console auth token in data base, we can first check"},{"line_number":50,"context_line":"the token in local memcache, if don\u0027t find that token, then query it from"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_4679f5fb","line":47,"updated":"2015-06-02 09:06:37.000000000","message":"It\u0027s good idea to give the opportunity to set different backend by that should be done by the framework objects itself. Also memcached is an LRU cache it has not behind developed to store objects that is why i do not believe we have to maintain the memcached code. Only for the upgrade purpose.","commit_id":"c7a6f1d7799994b08358634ec03ad0cbeef45e3c"}]}