)]}'
{"specs/newton/approved/direct-upload-for-rbd.rst":[{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"5787fde9a40f603287011e17916f56b69a70c141","unresolved":false,"context_lines":[{"line_number":23,"context_line":"And this feature only can support just downloading for file not"},{"line_number":24,"context_line":"uploading for rbd."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"In current version of nova if you take snapshot of a running server,"},{"line_number":27,"context_line":"nova will upload the image to glance server."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"If it creates multiple snapshot at the same time,"},{"line_number":30,"context_line":"glance server will receive heavy load and traffic."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_6c023b74","line":27,"range":{"start_line":26,"start_character":0,"end_line":27,"end_character":44},"updated":"2016-05-02 20:51:35.000000000","message":"How is this spec different from what was added in Mitaka?\n\nhttp://specs.openstack.org/openstack/nova-specs/specs/mitaka/implemented/rbd-instance-snapshots.html","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":40,"context_line":"---------"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"No changes to the typical end-user\u0027s request for vm snapshot"},{"line_number":43,"context_line":"Nova service just uses rbd direct_url for uploading glance images."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"Proposed change"},{"line_number":46,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_4c15bf99","line":43,"range":{"start_line":43,"start_character":27,"end_line":43,"end_character":37},"updated":"2016-05-02 20:57:03.000000000","message":"Doesn\u0027t setting this and getting it from glance require configuration on the glance server, and is a security risk?","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":2537,"name":"Nikhil Komawar","email":"nik.komawar@gmail.com","username":"nikhil-komawar"},"change_message_id":"f79bbd5f7aa54b4aa76fa87bb3e07b21e90db10e","unresolved":false,"context_lines":[{"line_number":40,"context_line":"---------"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"No changes to the typical end-user\u0027s request for vm snapshot"},{"line_number":43,"context_line":"Nova service just uses rbd direct_url for uploading glance images."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"Proposed change"},{"line_number":46,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_36085f28","line":43,"range":{"start_line":43,"start_character":27,"end_line":43,"end_character":37},"in_reply_to":"1a122d0e_4c15bf99","updated":"2016-05-04 03:45:46.000000000","message":"yes, it\u0027s a big security risk.\n\nWe are reconsidering exposing locations but trying to come up with a better story around it. Not to scare people: locations aren\u0027t going away.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":76,"context_line":"Security impact"},{"line_number":77,"context_line":"---------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"None"},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"Notifications impact"},{"line_number":82,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_6c77db08","line":79,"updated":"2016-05-02 20:57:03.000000000","message":"Enabling and using direct_url in glance requires configuration and is a security exposure, at least per my understanding.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":2537,"name":"Nikhil Komawar","email":"nik.komawar@gmail.com","username":"nikhil-komawar"},"change_message_id":"f79bbd5f7aa54b4aa76fa87bb3e07b21e90db10e","unresolved":false,"context_lines":[{"line_number":76,"context_line":"Security impact"},{"line_number":77,"context_line":"---------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"None"},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"Notifications impact"},{"line_number":82,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_162283a3","line":79,"in_reply_to":"1a122d0e_6c77db08","updated":"2016-05-04 03:45:46.000000000","message":"ditto","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":86,"context_line":"Other end user impact"},{"line_number":87,"context_line":"---------------------"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"None"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Performance Impact"},{"line_number":92,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_ac81f3c5","line":89,"updated":"2016-05-02 20:57:03.000000000","message":"How does the end user ever see the snapshot image if it\u0027s not uploaded to glance?","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":2537,"name":"Nikhil Komawar","email":"nik.komawar@gmail.com","username":"nikhil-komawar"},"change_message_id":"f79bbd5f7aa54b4aa76fa87bb3e07b21e90db10e","unresolved":false,"context_lines":[{"line_number":86,"context_line":"Other end user impact"},{"line_number":87,"context_line":"---------------------"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"None"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Performance Impact"},{"line_number":92,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_f67267af","line":89,"in_reply_to":"1a122d0e_ac81f3c5","updated":"2016-05-04 03:45:46.000000000","message":"I think they are proposing setting the image-location on that image. So Glance should have the location associated with the image when user tries to download.\n\nBut I\u0027m trying to think how Glance can communicate to the user that the image data may not be secure.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":96,"context_line":"Other deployer impact"},{"line_number":97,"context_line":"---------------------"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"None"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"Developer impact"},{"line_number":102,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_2c768306","line":99,"updated":"2016-05-02 20:57:03.000000000","message":"I\u0027m pretty sure there is deployer impact since you have to configure glance to use direct_url.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":2537,"name":"Nikhil Komawar","email":"nik.komawar@gmail.com","username":"nikhil-komawar"},"change_message_id":"f79bbd5f7aa54b4aa76fa87bb3e07b21e90db10e","unresolved":false,"context_lines":[{"line_number":96,"context_line":"Other deployer impact"},{"line_number":97,"context_line":"---------------------"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"None"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"Developer impact"},{"line_number":102,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_1670c3a3","line":99,"in_reply_to":"1a122d0e_2c768306","updated":"2016-05-04 03:45:46.000000000","message":"yes, this can\u0027t be a standard installation; at least I don\u0027t think it should be.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":118,"context_line":"Work Items"},{"line_number":119,"context_line":"----------"},{"line_number":120,"context_line":""},{"line_number":121,"context_line":"None"},{"line_number":122,"context_line":""},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Dependencies"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_0c4aa7ac","line":121,"updated":"2016-05-02 20:57:03.000000000","message":"There are no work items for this work? I\u0027m joking - obviously this section is wrong and needs to be filled out.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":124,"context_line":"Dependencies"},{"line_number":125,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"You need a newer version of glance as direct URL was added."},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"Testing"},{"line_number":130,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_6cc51b09","line":127,"updated":"2016-05-02 20:57:03.000000000","message":"Please be specific.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"The unit tests will of course cover the new code."},{"line_number":133,"context_line":"As direct upload is enabled automatically, there is no need to change the"},{"line_number":134,"context_line":"tempest tests."},{"line_number":135,"context_line":"And make sure that the direct url is used when configured conrrectly"},{"line_number":136,"context_line":""},{"line_number":137,"context_line":"Documentation Impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_8cd4f7bd","line":134,"updated":"2016-05-02 20:57:03.000000000","message":"The existing ceph job we use today doesn\u0027t use this, obviously. So would you change it to use the direct_url approach? If that\u0027s not the default implementation, i.e. because direct_url isn\u0027t enabled by default, then I\u0027m thinking we wouldn\u0027t want to change the ceph job to use this, at least not by default.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":2537,"name":"Nikhil Komawar","email":"nik.komawar@gmail.com","username":"nikhil-komawar"},"change_message_id":"f79bbd5f7aa54b4aa76fa87bb3e07b21e90db10e","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"The unit tests will of course cover the new code."},{"line_number":133,"context_line":"As direct upload is enabled automatically, there is no need to change the"},{"line_number":134,"context_line":"tempest tests."},{"line_number":135,"context_line":"And make sure that the direct url is used when configured conrrectly"},{"line_number":136,"context_line":""},{"line_number":137,"context_line":"Documentation Impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_96b3334d","line":134,"in_reply_to":"1a122d0e_8cd4f7bd","updated":"2016-05-04 03:45:46.000000000","message":"Is there a ceph job for v2? \n\nWhen the job for v2 is complete we want to avoid exposing locations.\n\nIf you enable some changes for image locations the job will need to test the image proxy API for not exposing sensitive information (both happy path and negative tests).","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":137,"context_line":"Documentation Impact"},{"line_number":138,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"None"},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"References"},{"line_number":143,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_ace613ae","line":140,"updated":"2016-05-02 20:57:03.000000000","message":"Clearly there should be documentation changes on configuration your deployment to use this feature.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"d756e51516bad80d4edf2711830c1445d759be52","unresolved":false,"context_lines":[{"line_number":148,"context_line":"History"},{"line_number":149,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"None"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_ac9d730c","line":151,"updated":"2016-05-02 20:57:03.000000000","message":"There is a template in the spec for this section. Use the table in there. This is being introduced for Newton, so that\u0027s the history.","commit_id":"bde3c64eda383402b549ee6bbd2f1f823bd355be"}]}
