)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"fc4b540f65b98007249c7f712c7b05a9c8c7782b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"bdb31793_0682dd8e","updated":"2026-10-16 17:25:44.000000000","message":"overall lgtm, just a one comment on coinverting note-\u003ewarning","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"4e5f3479f5144b70520eea12b7879860329fc440","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"d6c0473b_9cea1654","updated":"2026-10-19 17:46:52.000000000","message":"thanks, lgtm","commit_id":"12b231120f140bbfd27187ff8de1f47ab0748e4b"}],"doc/source/user/certificate-validation.rst":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"fc4b540f65b98007249c7f712c7b05a9c8c7782b","unresolved":true,"context_lines":[{"line_number":5,"context_line":"trusted by the user. This feature is called certificate validation and can be"},{"line_number":6,"context_line":"applied to the creation or rebuild of an instance."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":".. note::"},{"line_number":9,"context_line":"    This feature does not always verify the image signature. There are multiple"},{"line_number":10,"context_line":"    issues:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"85c912bc_9e82a689","line":8,"range":{"start_line":8,"start_character":0,"end_line":8,"end_character":9},"updated":"2026-10-16 17:25:44.000000000","message":"can we make it a \u0027warning\u0027 to make it more visible and a kind of signal of not to reply on this always.","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"6aba8772d516d992d2485d4e3fd6e5c1dbf0c04e","unresolved":false,"context_lines":[{"line_number":5,"context_line":"trusted by the user. This feature is called certificate validation and can be"},{"line_number":6,"context_line":"applied to the creation or rebuild of an instance."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":".. note::"},{"line_number":9,"context_line":"    This feature does not always verify the image signature. There are multiple"},{"line_number":10,"context_line":"    issues:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"39004ed3_d996ad9b","line":8,"range":{"start_line":8,"start_character":0,"end_line":8,"end_character":9},"in_reply_to":"85c912bc_9e82a689","updated":"2026-10-19 14:10:10.000000000","message":"Done","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"7a9fecb2aabead85134d4d15385f7f0a88596af1","unresolved":true,"context_lines":[{"line_number":9,"context_line":"    This feature does not always verify the image signature. There are multiple"},{"line_number":10,"context_line":"    issues:"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"    The signature verification only happens when the image is downloaded from"},{"line_number":13,"context_line":"    Glance. If the image is already in the compute node\u0027s image cache when a"},{"line_number":14,"context_line":"    new VM or an incoming cold migration requests the feature the image"},{"line_number":15,"context_line":"    download code is skipped and therefore the image signature is not verified"}],"source_content_type":"text/x-rst","patch_set":5,"id":"bd3dd35b_f51ab679","line":12,"updated":"2026-10-16 16:42:16.000000000","message":"but not even always... It *can* only happen then, but doesn\u0027t even always happen. If they read the below then they\u0027ll get it but maybe worth a reword here.","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"6aba8772d516d992d2485d4e3fd6e5c1dbf0c04e","unresolved":false,"context_lines":[{"line_number":9,"context_line":"    This feature does not always verify the image signature. There are multiple"},{"line_number":10,"context_line":"    issues:"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"    The signature verification only happens when the image is downloaded from"},{"line_number":13,"context_line":"    Glance. If the image is already in the compute node\u0027s image cache when a"},{"line_number":14,"context_line":"    new VM or an incoming cold migration requests the feature the image"},{"line_number":15,"context_line":"    download code is skipped and therefore the image signature is not verified"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7b4211e6_b582d93f","line":12,"in_reply_to":"bd3dd35b_f51ab679","updated":"2026-10-19 14:10:10.000000000","message":"Done","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"}],"nova/tests/functional/regressions/test_bug_2169692.py":[{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"7a9fecb2aabead85134d4d15385f7f0a88596af1","unresolved":true,"context_lines":[{"line_number":1,"context_line":"# Licensed under the Apache License, Version 2.0 (the \"License\"); you may"},{"line_number":2,"context_line":"# not use this file except in compliance with the License. You may obtain"},{"line_number":3,"context_line":"# a copy of the License at"},{"line_number":4,"context_line":"#"}],"source_content_type":"text/x-python","patch_set":5,"id":"ad39afcf_a283e562","line":1,"updated":"2026-10-16 16:42:16.000000000","message":"I know this is not the only case of this, but I feel like we\u0027re really obscuring the original purpose of the tests in this directory. This is not testing a regression, and just because there was a bug about it doesn\u0027t necessarily mean we need to have a bug-based test.\n\nI\u0027m not saying you shouldn\u0027t, but as someone who has been trawling through the (actual) regressions here for things like live migration, evolving things that changes the way these work pulls them even further away from the intent.","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"6aba8772d516d992d2485d4e3fd6e5c1dbf0c04e","unresolved":true,"context_lines":[{"line_number":1,"context_line":"# Licensed under the Apache License, Version 2.0 (the \"License\"); you may"},{"line_number":2,"context_line":"# not use this file except in compliance with the License. You may obtain"},{"line_number":3,"context_line":"# a copy of the License at"},{"line_number":4,"context_line":"#"}],"source_content_type":"text/x-python","patch_set":5,"id":"9ad7b8ca_9f7879b7","line":1,"in_reply_to":"ad39afcf_a283e562","updated":"2026-10-19 14:10:10.000000000","message":"I can move this to the rest of functional tests. But what you are raising here is a generic problem. We need a clear guidance when to use the regressions directory for a reproducer and when not to. I don\u0027t have a clear picture of how we want to do it.","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"}],"releasenotes/notes/bug-2169692-trusted-certs-not-verified-cf2bbc33c9fdf818.yaml":[{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"7a9fecb2aabead85134d4d15385f7f0a88596af1","unresolved":true,"context_lines":[{"line_number":2,"context_line":"issues:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    The image signature verification against user provided trusted certificates"},{"line_number":5,"context_line":"    feature does not always verify the image signature. There are multiple "},{"line_number":6,"context_line":"    issues."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"    The signature verification only happens when the image is downloaded from"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"ddd3d9c1_df09cdfd","line":5,"updated":"2026-10-16 16:42:16.000000000","message":"Trailing whitespace here","commit_id":"7f5481e62d5c5418370ed85c85b1044fd403c923"}]}