)]}'
{"releasenotes/notes/workarounds-enable-consoleauth-71d68c3879dc2c8a.yaml":[{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"e259a6077edf1548130648491290a54cc9996178","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    The ``nova-consoleauth`` service has been deprecated and new consoles will"},{"line_number":5,"context_line":"    have their token authorizations stored in cell databases. With this,"},{"line_number":6,"context_line":"    console proxies are required to be deployed per cell. All existing consoles"},{"line_number":7,"context_line":"    will be reset. For most operators, this should be a minimal disruption as"},{"line_number":8,"context_line":"    the default TTL of a console token is 10 minutes."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_31a34cb2","line":6,"range":{"start_line":6,"start_character":5,"end_line":6,"end_character":56},"updated":"2018-10-29 21:32:32.000000000","message":"Do you want to add this to the list in \"Operators may unset the configuration option when:\" ?","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"0adfd2b30d5bb621aeeac37e4b99e554d133d4f9","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    The ``nova-consoleauth`` service has been deprecated and new consoles will"},{"line_number":5,"context_line":"    have their token authorizations stored in cell databases. With this,"},{"line_number":6,"context_line":"    console proxies are required to be deployed per cell. All existing consoles"},{"line_number":7,"context_line":"    will be reset. For most operators, this should be a minimal disruption as"},{"line_number":8,"context_line":"    the default TTL of a console token is 10 minutes."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_f179542f","line":6,"range":{"start_line":6,"start_character":5,"end_line":6,"end_character":56},"in_reply_to":"3f79a3b5_31a34cb2","updated":"2018-10-29 21:35:43.000000000","message":"Is this something we can check in the nova-status check? What does a console proxy service show up as in the services table? Does it at all show up in the services table via the nova-console service?","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"69689db1220b9c5cf9c7d2b51c91bc6dda2bdf14","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    The ``nova-consoleauth`` service has been deprecated and new consoles will"},{"line_number":5,"context_line":"    have their token authorizations stored in cell databases. With this,"},{"line_number":6,"context_line":"    console proxies are required to be deployed per cell. All existing consoles"},{"line_number":7,"context_line":"    will be reset. For most operators, this should be a minimal disruption as"},{"line_number":8,"context_line":"    the default TTL of a console token is 10 minutes."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_77ce94b7","line":6,"range":{"start_line":6,"start_character":5,"end_line":6,"end_character":56},"in_reply_to":"3f79a3b5_3cdfa30b","updated":"2018-10-29 23:54:05.000000000","message":"\u003e vThe nova-console service is a xenapi-specific service that is old and no longer used:\n\nOh yeah, I always forget that because of how generically named it is.","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"},{"author":{"_account_id":4690,"name":"melanie witt","display_name":"melwitt","email":"melwittt@gmail.com","username":"melwitt"},"change_message_id":"c7391ff20dcd8e183f1f3a8d2f7fa5334bcc4461","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    The ``nova-consoleauth`` service has been deprecated and new consoles will"},{"line_number":5,"context_line":"    have their token authorizations stored in cell databases. With this,"},{"line_number":6,"context_line":"    console proxies are required to be deployed per cell. All existing consoles"},{"line_number":7,"context_line":"    will be reset. For most operators, this should be a minimal disruption as"},{"line_number":8,"context_line":"    the default TTL of a console token is 10 minutes."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_3cdfa30b","line":6,"range":{"start_line":6,"start_character":5,"end_line":6,"end_character":56},"in_reply_to":"3f79a3b5_f179542f","updated":"2018-10-29 23:03:57.000000000","message":"The only way I can think to check for this in nova-status is if an operator ran nova-status on each console proxy host in the deployment, where the status check looks for whether [database]connection is set in the nova.conf on the host, implying access to a cell database.\n\nThe console proxies don\u0027t show up in the services table because they don\u0027t use the service API at all. Examples:\n\nhttps://github.com/openstack/nova/blob/a0eacbf7fff60282007ddca705ef7331e8a4a6f8/nova/cmd/xvpvncproxy.py\nhttps://github.com/openstack/nova/blob/a0eacbf7fff60282007ddca705ef7331e8a4a6f8/nova/cmd/spicehtml5proxy.py\nhttps://github.com/openstack/nova/blob/a0eacbf7fff60282007ddca705ef7331e8a4a6f8/nova/cmd/serialproxy.py\nhttps://github.com/openstack/nova/blob/a0eacbf7fff60282007ddca705ef7331e8a4a6f8/nova/cmd/novncproxy.py\nhttps://github.com/openstack/nova/blob/a0eacbf7fff60282007ddca705ef7331e8a4a6f8/nova/cmd/baseproxy.py\n\nThe nova-console service is a xenapi-specific service that is old and no longer used:\n\n\"Do not confuse the nova-consoleauth shared service with nova-console, which is a XenAPI-specific service that most recent VNC proxy architectures do not use.\" [1]\n\nAlso see recent thread and patch:\n\nhttp://lists.openstack.org/pipermail/openstack-dev/2018-October/135422.html\n\nhttps://review.openstack.org/610075\n\n[1] https://docs.openstack.org/nova/rocky/admin/remote-console-access.html","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"},{"author":{"_account_id":1004,"name":"Mohammed Naser","email":"mnaser@vexxhost.com","username":"mnaser"},"change_message_id":"5e1f814296633dfb10c676ad5d3a04b94a0e0ff1","unresolved":false,"context_lines":[{"line_number":10,"context_line":"    There is a new configuration option ``[workarounds]/enable_consoleauth``"},{"line_number":11,"context_line":"    for use by operators who:"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"    * Are performing a live, rolling upgrade"},{"line_number":14,"context_line":"    * Have configured a much longer token TTL"},{"line_number":15,"context_line":"    * Otherwise wish to avoid immediately resetting all existing consoles"},{"line_number":16,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_0f288482","line":13,"range":{"start_line":13,"start_character":4,"end_line":13,"end_character":44},"updated":"2018-10-27 11:28:49.000000000","message":"I would feel like it\u0027d be important to clarify \"All compute nodes are not currently on Rocky\" because reading through this, I didn\u0027t feel like it gave me all the answers I needed.","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"},{"author":{"_account_id":4690,"name":"melanie witt","display_name":"melwitt","email":"melwittt@gmail.com","username":"melwitt"},"change_message_id":"55a345e3bd35838b06aa1296df69b12198fc802e","unresolved":false,"context_lines":[{"line_number":10,"context_line":"    There is a new configuration option ``[workarounds]/enable_consoleauth``"},{"line_number":11,"context_line":"    for use by operators who:"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"    * Are performing a live, rolling upgrade"},{"line_number":14,"context_line":"    * Have configured a much longer token TTL"},{"line_number":15,"context_line":"    * Otherwise wish to avoid immediately resetting all existing consoles"},{"line_number":16,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_4a22eab8","line":13,"range":{"start_line":13,"start_character":4,"end_line":13,"end_character":44},"in_reply_to":"3f79a3b5_0f288482","updated":"2018-10-27 17:47:52.000000000","message":"OK, I\u0027ll add that.","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"e259a6077edf1548130648491290a54cc9996178","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"    Operators may unset the configuration option when:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"    * The live, rolling upgrade is complete"},{"line_number":24,"context_line":"    * All of the existing consoles have expired. For example, if a deployment"},{"line_number":25,"context_line":"      has configured a token TTL of one hour, the operator may disable the"},{"line_number":26,"context_line":"      ``[workarounds]/enable_consoleauth`` option, one hour after deploying the"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_11de503b","line":23,"range":{"start_line":23,"start_character":6,"end_line":23,"end_character":43},"updated":"2018-10-29 21:32:32.000000000","message":"so all compute services are running Rocky code","commit_id":"2d11480b6e974c9df9ab8abaa3caf58730ee0e08"}]}