)]}'
{"specs/newton/approved/convert-consoles-to-objects.rst":[{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":36,"context_line":"particular port from a number of perspectives: from the compute node, to"},{"line_number":37,"context_line":"return the next port defined and not connected; from the proxy to"},{"line_number":38,"context_line":"reject new connections on already connected port from the API to"},{"line_number":39,"context_line":"let user informed no more port are available."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"We will also enhance security by only storing a hash of tokens in the"},{"line_number":42,"context_line":"database after to have returned the clean one to the users. Then when"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_5500dcaa","line":39,"range":{"start_line":39,"start_character":4,"end_line":39,"end_character":17},"updated":"2016-05-27 07:24:14.000000000","message":"the user know there are","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":39,"context_line":"let user informed no more port are available."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"We will also enhance security by only storing a hash of tokens in the"},{"line_number":42,"context_line":"database after to have returned the clean one to the users. Then when"},{"line_number":43,"context_line":"users will request to connect a console the token passed will be"},{"line_number":44,"context_line":"hashed and compared to the one stored in the database for validation."},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_188689b9","line":42,"range":{"start_line":42,"start_character":9,"end_line":42,"end_character":45},"updated":"2016-05-27 07:24:14.000000000","message":"and return the actual token","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"We will also enhance security by only storing a hash of tokens in the"},{"line_number":42,"context_line":"database after to have returned the clean one to the users. Then when"},{"line_number":43,"context_line":"users will request to connect a console the token passed will be"},{"line_number":44,"context_line":"hashed and compared to the one stored in the database for validation."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"A new option will be introduced \"console_tokens_backend\" which will"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_385eed45","line":43,"range":{"start_line":43,"start_character":6,"end_line":43,"end_character":44},"updated":"2016-05-27 07:24:14.000000000","message":"request to connect to a console the actual","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":41,"context_line":"We will also enhance security by only storing a hash of tokens in the"},{"line_number":42,"context_line":"database after to have returned the clean one to the users. Then when"},{"line_number":43,"context_line":"users will request to connect a console the token passed will be"},{"line_number":44,"context_line":"hashed and compared to the one stored in the database for validation."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"A new option will be introduced \"console_tokens_backend\" which will"},{"line_number":47,"context_line":"allow operator to switch between different backends. The scope of this"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_78587557","line":44,"range":{"start_line":44,"start_character":27,"end_line":44,"end_character":31},"updated":"2016-05-27 07:24:14.000000000","message":"value","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":47,"context_line":"allow operator to switch between different backends. The scope of this"},{"line_number":48,"context_line":"spec will allow 2 backends: consoleauth (using memcached) or database."},{"line_number":49,"context_line":"The consoleauth service will be retained for legacy compatibility but"},{"line_number":50,"context_line":"in a deprecated status, supported for one release. After the"},{"line_number":51,"context_line":"period the consoleauth service can be removed."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Because the new tokens will go in the database we need to consider"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_d5e16c00","line":50,"range":{"start_line":50,"start_character":57,"end_line":50,"end_character":60},"updated":"2016-05-27 07:24:14.000000000","message":"that","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":5441,"name":"Andrew Laski","email":"andrew@lascii.com","username":"alaski"},"change_message_id":"c57231cd73020f8d9d36a08d6874271bb4995d1c","unresolved":false,"context_lines":[{"line_number":57,"context_line":"This is not sufficient to determine which cell holds the console"},{"line_number":58,"context_line":"connection. This can be resolved by adding the instance uuid to"},{"line_number":59,"context_line":"the query string in the URL. This approach is backward compatible"},{"line_number":60,"context_line":"with the existing console proxies."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Use Cases"},{"line_number":63,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bab6814e_023788ff","line":60,"updated":"2016-05-26 16:39:58.000000000","message":"I\u0027m assuming there will be some verification used to ensure that the instance matches the token? Or will it be used purely for routing and any instance in the same cell would work? And presumably the instance which is ultimately connected to is still determined by the token.","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":7461,"name":"Paul Murray","email":"pmurray@hpe.com","username":"ptm"},"change_message_id":"1702804b9944239349b1504b6f576a8a977c8c4e","unresolved":false,"context_lines":[{"line_number":57,"context_line":"This is not sufficient to determine which cell holds the console"},{"line_number":58,"context_line":"connection. This can be resolved by adding the instance uuid to"},{"line_number":59,"context_line":"the query string in the URL. This approach is backward compatible"},{"line_number":60,"context_line":"with the existing console proxies."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Use Cases"},{"line_number":63,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_8c0076ac","line":60,"in_reply_to":"bab6814e_023788ff","updated":"2016-05-27 10:39:20.000000000","message":"Done","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":98,"context_line":""},{"line_number":99,"context_line":"A new ConsoleConnection model needs to be defined with attributes:"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"- instance: an instance which refer the console"},{"line_number":102,"context_line":"- host: a string field to handle hostname"},{"line_number":103,"context_line":"- port: an int field to handle service number"},{"line_number":104,"context_line":"- token_hash: a string field to handle a token or null"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_d5afac92","line":101,"range":{"start_line":101,"start_character":12,"end_line":101,"end_character":47},"updated":"2016-05-27 07:24:14.000000000","message":"the uuid of the instance the console relates to","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":141,"context_line":"Security impact"},{"line_number":142,"context_line":"---------------"},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"In the point of view of tokens we can expect a better security since"},{"line_number":145,"context_line":"currently tokens are stored in memcached which does not provide any"},{"line_number":146,"context_line":"security layer. Now only hash of tokens will be stored in the database"},{"line_number":147,"context_line":"also security policy will enhanced to be the same than other critical"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_d59dec5a","line":144,"range":{"start_line":144,"start_character":0,"end_line":144,"end_character":68},"updated":"2016-05-27 07:24:14.000000000","message":"delete this line","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":142,"context_line":"---------------"},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"In the point of view of tokens we can expect a better security since"},{"line_number":145,"context_line":"currently tokens are stored in memcached which does not provide any"},{"line_number":146,"context_line":"security layer. Now only hash of tokens will be stored in the database"},{"line_number":147,"context_line":"also security policy will enhanced to be the same than other critical"},{"line_number":148,"context_line":"components stored in database."}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_15ce545a","line":145,"updated":"2016-05-27 07:24:14.000000000","message":"Capital C","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":144,"context_line":"In the point of view of tokens we can expect a better security since"},{"line_number":145,"context_line":"currently tokens are stored in memcached which does not provide any"},{"line_number":146,"context_line":"security layer. Now only hash of tokens will be stored in the database"},{"line_number":147,"context_line":"also security policy will enhanced to be the same than other critical"},{"line_number":148,"context_line":"components stored in database."},{"line_number":149,"context_line":""},{"line_number":150,"context_line":"Notifications impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_75ad2088","line":147,"range":{"start_line":147,"start_character":0,"end_line":147,"end_character":5},"updated":"2016-05-27 07:24:14.000000000","message":"and the","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":155,"context_line":"Other end user impact"},{"line_number":156,"context_line":"---------------------"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"When proxyclient will be restartred users will be disconnected from"},{"line_number":159,"context_line":"our consoles but should reconnect to it with the same token if not"},{"line_number":160,"context_line":"already expired."},{"line_number":161,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_f5af507b","line":158,"range":{"start_line":158,"start_character":17,"end_line":158,"end_character":24},"updated":"2016-05-27 07:24:14.000000000","message":"is","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":156,"context_line":"---------------------"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"When proxyclient will be restartred users will be disconnected from"},{"line_number":159,"context_line":"our consoles but should reconnect to it with the same token if not"},{"line_number":160,"context_line":"already expired."},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"Performance Impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_35ca7850","line":159,"range":{"start_line":159,"start_character":0,"end_line":159,"end_character":4},"updated":"2016-05-27 07:24:14.000000000","message":"their","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":163,"context_line":"------------------"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"The database load will increase but we can expect that with a minimal"},{"line_number":166,"context_line":"impact for DBA."},{"line_number":167,"context_line":""},{"line_number":168,"context_line":"Other deployer impact"},{"line_number":169,"context_line":"---------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_b5dca819","line":166,"range":{"start_line":166,"start_character":6,"end_line":166,"end_character":14},"updated":"2016-05-27 07:24:14.000000000","message":"delete text","commit_id":"f0efa9697e598a914414088d9582f637405414a2"},{"author":{"_account_id":6608,"name":"Paul Carlton","email":"paul.carlton2@hpe.com","username":"paul-carlton2"},"change_message_id":"a8200ab884a4fd0fa579eda817d21b92c3b4064c","unresolved":false,"context_lines":[{"line_number":171,"context_line":"The consoleauth service must be restarted before proxy services. When"},{"line_number":172,"context_line":"proxy will be restarted clients will be disconnected from consoles."},{"line_number":173,"context_line":"consoleauth will continue to work as backend until a deprecated period"},{"line_number":174,"context_line":"of one release operator are encouraged to switch on the database"},{"line_number":175,"context_line":"backend (see option: console_tokens_backend)."},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"If the deployer choses to use the database to store console connection"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_f5fd906f","line":174,"range":{"start_line":174,"start_character":14,"end_line":174,"end_character":15},"updated":"2016-05-27 07:24:14.000000000","message":". Operators","commit_id":"f0efa9697e598a914414088d9582f637405414a2"}]}