)]}'
{"tasks/keystone_ssl_key_create.yml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"653994f0f7c5fb6ed5b1238eaa92d82cc5f126e5","unresolved":false,"context_lines":[{"line_number":35,"context_line":"    - keystone-configs"},{"line_number":36,"context_line":"    - keystone-ssl"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"- name: Ensure keystone user owns the self-signed key and certificate"},{"line_number":39,"context_line":"  file:"},{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a061dce_522a712d","line":38,"updated":"2016-04-08 19:28:55.000000000","message":"I noticed that this isn\u0027t *required* for this change, but the rabbitmq role had this and I figured I\u0027d add it here.\n\nI can make this a separate change if needed.","commit_id":"f59e2bd93275a4760b1842f9663a74b97a73e3d0"},{"author":{"_account_id":19814,"name":"Travis Truman (automagically)","email":"travis_truman@cable.comcast.com","username":"trumant"},"change_message_id":"2f7c9e5562d5d939a092eff91b1c3f518a7e85bd","unresolved":false,"context_lines":[{"line_number":35,"context_line":"    - keystone-configs"},{"line_number":36,"context_line":"    - keystone-ssl"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"- name: Ensure keystone user owns the self-signed key and certificate"},{"line_number":39,"context_line":"  file:"},{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a061dce_f2fbc545","line":38,"in_reply_to":"9a061dce_522a712d","updated":"2016-04-08 19:42:30.000000000","message":"So, this should either notify: Restart Apache, or you could change the task above that creates them to run as the keystone user. I tend to prefer the former as I find it more clear/explicit","commit_id":"f59e2bd93275a4760b1842f9663a74b97a73e3d0"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2114fd19ca13c4838b5e203353ff67c2c89a2114","unresolved":false,"context_lines":[{"line_number":35,"context_line":"    - keystone-configs"},{"line_number":36,"context_line":"    - keystone-ssl"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"- name: Ensure keystone user owns the self-signed key and certificate"},{"line_number":39,"context_line":"  file:"},{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a061dce_95ab53d6","line":38,"in_reply_to":"9a061dce_f2fbc545","updated":"2016-04-08 19:46:52.000000000","message":"Done","commit_id":"f59e2bd93275a4760b1842f9663a74b97a73e3d0"},{"author":{"_account_id":17068,"name":"Jean-Philippe Evrard","email":"openstack@a.spamming.party","username":"evrardjp"},"change_message_id":"41e317df3dabd391e39bf39e12e848810be20d55","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"9a061dce_523f11d6","line":46,"updated":"2016-04-08 19:45:29.000000000","message":"The task is lacking tags and notify","commit_id":"f59e2bd93275a4760b1842f9663a74b97a73e3d0"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"f93ca49891a0bf653bf7371325129e94548a849d","unresolved":false,"context_lines":[{"line_number":39,"context_line":"  file:"},{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":42,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":43,"context_line":"  with_items:"},{"line_number":44,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":45,"context_line":"    - \"{{ keystone_ssl_cert }}\""}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_4030e656","line":42,"updated":"2016-04-11 14:16:24.000000000","message":"I think that the mode may need to be added here to ensure the correct permissions on the first node.","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"ecde33dbde314a19a5894ddc6f24801d846a715d","unresolved":false,"context_lines":[{"line_number":39,"context_line":"  file:"},{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":42,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":43,"context_line":"  with_items:"},{"line_number":44,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":45,"context_line":"    - \"{{ keystone_ssl_cert }}\""}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_e3413c3b","line":42,"in_reply_to":"7a1b2928_4030e656","updated":"2016-04-11 14:21:23.000000000","message":"Done","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2cd21458858372922e6836af563f6eeee2016050","unresolved":false,"context_lines":[{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":42,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":43,"context_line":"    mode: 0640"},{"line_number":44,"context_line":"  with_items:"},{"line_number":45,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":46,"context_line":"    - \"{{ keystone_ssl_cert }}\""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"7a1b2928_959fd702","line":43,"updated":"2016-04-11 16:36:03.000000000","message":"For some reason, the test seems shows this as being 0644 instead of 0640.","commit_id":"b8fa5da31529b446c243522e1589e5fb266cfb89"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"bfd9685a7ebc212dae21a02b607d1179dbed699b","unresolved":false,"context_lines":[{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":42,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":43,"context_line":"    mode: 0640"},{"line_number":44,"context_line":"  with_items:"},{"line_number":45,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":46,"context_line":"    - \"{{ keystone_ssl_cert }}\""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"7a1b2928_f0aa996f","line":43,"in_reply_to":"7a1b2928_3087f162","updated":"2016-04-11 16:47:03.000000000","message":"That\u0027s probably a bug. The key should definitely be locked down, whereas the cert should probably be more broadly readable.","commit_id":"b8fa5da31529b446c243522e1589e5fb266cfb89"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"7a4bad3d233ea500e0b1e52e12df1b07960cbe7f","unresolved":false,"context_lines":[{"line_number":40,"context_line":"    path: \"{{ item }}\""},{"line_number":41,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":42,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":43,"context_line":"    mode: 0640"},{"line_number":44,"context_line":"  with_items:"},{"line_number":45,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":46,"context_line":"    - \"{{ keystone_ssl_cert }}\""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"7a1b2928_3087f162","line":43,"in_reply_to":"7a1b2928_959fd702","updated":"2016-04-11 16:44:50.000000000","message":"Interesting - the rabbit role doesn\u0027t specify the mode: https://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/tasks/rabbitmq_ssl_key_create.yml#L39-L48","commit_id":"b8fa5da31529b446c243522e1589e5fb266cfb89"}],"tasks/keystone_ssl_key_distribute.yml":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"f93ca49891a0bf653bf7371325129e94548a849d","unresolved":false,"context_lines":[{"line_number":33,"context_line":"  tags:"},{"line_number":34,"context_line":"    - keystone-ssl"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"- name: Ensure keystone user owns the self-signed key and certificate"},{"line_number":37,"context_line":"  file:"},{"line_number":38,"context_line":"    path: \"{{ item }}\""},{"line_number":39,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":40,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":41,"context_line":"  with_items:"},{"line_number":42,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":43,"context_line":"    - \"{{ keystone_ssl_cert }}\""},{"line_number":44,"context_line":"  tags:"},{"line_number":45,"context_line":"    - keystone-ssl"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_e06db233","line":45,"range":{"start_line":36,"start_character":0,"end_line":45,"end_character":18},"updated":"2016-04-11 14:16:24.000000000","message":"The owner and group are already set above. Is this necessary?","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"c4f81567a03ce2faef92582927aba1b8501b9cad","unresolved":false,"context_lines":[{"line_number":33,"context_line":"  tags:"},{"line_number":34,"context_line":"    - keystone-ssl"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"- name: Ensure keystone user owns the self-signed key and certificate"},{"line_number":37,"context_line":"  file:"},{"line_number":38,"context_line":"    path: \"{{ item }}\""},{"line_number":39,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":40,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":41,"context_line":"  with_items:"},{"line_number":42,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":43,"context_line":"    - \"{{ keystone_ssl_cert }}\""},{"line_number":44,"context_line":"  tags:"},{"line_number":45,"context_line":"    - keystone-ssl"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_03bc3804","line":45,"range":{"start_line":36,"start_character":0,"end_line":45,"end_character":18},"in_reply_to":"7a1b2928_639b6cca","updated":"2016-04-11 14:23:51.000000000","message":"I think this makes sense to do when a command/script module is used to generate files, but in this case Ansible should already be handling these checks in the above tasks. I guess the gate will tell us more. :)","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a4d1f074857c2488f178722e1c03ec2e951ea291","unresolved":false,"context_lines":[{"line_number":42,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":43,"context_line":"    - \"{{ keystone_ssl_cert }}\""},{"line_number":44,"context_line":"  tags:"},{"line_number":45,"context_line":"    - keystone-ssl"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_43ee3023","line":45,"in_reply_to":"7a1b2928_639b6cca","updated":"2016-04-11 14:23:13.000000000","message":"This is where I shamelessly stole from: \n\nhttps://github.com/openstack/openstack-ansible-rabbitmq_server/blob/master/tasks/rabbitmq_ssl_key_distribute.yml#L36-L45","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"ecde33dbde314a19a5894ddc6f24801d846a715d","unresolved":false,"context_lines":[{"line_number":42,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":43,"context_line":"    - \"{{ keystone_ssl_cert }}\""},{"line_number":44,"context_line":"  tags:"},{"line_number":45,"context_line":"    - keystone-ssl"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_404f4692","line":45,"in_reply_to":"7a1b2928_e06db233","updated":"2016-04-11 14:21:23.000000000","message":"This was something that I saw done in the rabbit role. I carried the convention over but I\u0027m happy to remove it if needed.","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"},{"author":{"_account_id":7353,"name":"Kevin Carter","email":"kevin@cloudnull.com","username":"cloudnull"},"change_message_id":"50d17ca45e012e972913337d8acc62c7e17a2d2b","unresolved":false,"context_lines":[{"line_number":33,"context_line":"  tags:"},{"line_number":34,"context_line":"    - keystone-ssl"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"- name: Ensure keystone user owns the self-signed key and certificate"},{"line_number":37,"context_line":"  file:"},{"line_number":38,"context_line":"    path: \"{{ item }}\""},{"line_number":39,"context_line":"    owner: \"{{ keystone_system_user_name }}\""},{"line_number":40,"context_line":"    group: \"{{ keystone_system_group_name }}\""},{"line_number":41,"context_line":"  with_items:"},{"line_number":42,"context_line":"    - \"{{ keystone_ssl_key }}\""},{"line_number":43,"context_line":"    - \"{{ keystone_ssl_cert }}\""},{"line_number":44,"context_line":"  tags:"},{"line_number":45,"context_line":"    - keystone-ssl"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"7a1b2928_639b6cca","line":45,"range":{"start_line":36,"start_character":0,"end_line":45,"end_character":18},"in_reply_to":"7a1b2928_e06db233","updated":"2016-04-11 14:21:47.000000000","message":"it may not be needed, however it cant hurt.","commit_id":"01e9ea756cb2f688f1e2842d14a9f167ef86ff4b"}],"tests/test-keystone-functional.yml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"65a9d0308109f799c9fd60905d31da37815115d2","unresolved":false,"context_lines":[{"line_number":52,"context_line":"        - \"admin\""},{"line_number":53,"context_line":"        - \"service\""},{"line_number":54,"context_line":"    - name: Get SSL cert location and permissions"},{"line_number":55,"context_line":"      stat:"},{"line_number":56,"context_line":"        path: \"/etc/ssl/certs/keystone.pem\""},{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"9a061dce_2b866865","line":55,"updated":"2016-04-08 20:45:36.000000000","message":"I\u0027m open to making this better (more DRY) if anyone has suggestions.","commit_id":"bcd1d23fa1d2bf0cd8cd9eb32a3c253cb04ea63a"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        - \"service\""},{"line_number":54,"context_line":"    - name: Get SSL cert location and permissions"},{"line_number":55,"context_line":"      stat:"},{"line_number":56,"context_line":"        path: \"{{ keystone_ssl_cert_location }}\""},{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"},{"line_number":59,"context_line":"      fail:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_50e71be4","line":56,"range":{"start_line":56,"start_character":18,"end_line":56,"end_character":44},"updated":"2016-04-11 13:38:33.000000000","message":"This value seems to match keystone_ssl_cert - no need to introduce a new var for this.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        - \"service\""},{"line_number":54,"context_line":"    - name: Get SSL cert location and permissions"},{"line_number":55,"context_line":"      stat:"},{"line_number":56,"context_line":"        path: \"{{ keystone_ssl_cert_location }}\""},{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"},{"line_number":59,"context_line":"      fail:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_7a5dd5e8","line":56,"in_reply_to":"7a1b2928_50e71be4","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":54,"context_line":"    - name: Get SSL cert location and permissions"},{"line_number":55,"context_line":"      stat:"},{"line_number":56,"context_line":"        path: \"{{ keystone_ssl_cert_location }}\""},{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"},{"line_number":59,"context_line":"      fail:"},{"line_number":60,"context_line":"        msg: \"Keystone SSL cert permissions don\u0027t match {{ keystone_ssl_cert_permissions }}\""}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_303a5f37","line":57,"range":{"start_line":57,"start_character":16,"end_line":57,"end_character":33},"updated":"2016-04-11 13:38:33.000000000","message":"This overwrites an existing var name which holds the location.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":54,"context_line":"    - name: Get SSL cert location and permissions"},{"line_number":55,"context_line":"      stat:"},{"line_number":56,"context_line":"        path: \"{{ keystone_ssl_cert_location }}\""},{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"},{"line_number":59,"context_line":"      fail:"},{"line_number":60,"context_line":"        msg: \"Keystone SSL cert permissions don\u0027t match {{ keystone_ssl_cert_permissions }}\""}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_da72297c","line":57,"in_reply_to":"7a1b2928_303a5f37","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"},{"line_number":59,"context_line":"      fail:"},{"line_number":60,"context_line":"        msg: \"Keystone SSL cert permissions don\u0027t match {{ keystone_ssl_cert_permissions }}\""},{"line_number":61,"context_line":"      when: keystone_ssl_cert.stat.mode !\u003d \"{{ keystone_ssl_cert_permissions }}\""},{"line_number":62,"context_line":"    - name: Get SSL key location and permissions"},{"line_number":63,"context_line":"      stat:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_10600335","line":60,"range":{"start_line":60,"start_character":59,"end_line":60,"end_character":88},"updated":"2016-04-11 13:38:33.000000000","message":"The perms are statically set in the distribution tasks, so it seems odd to use a var for this here and not there. I\u0027d suggest simply just using the known value.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":57,"context_line":"      register: keystone_ssl_cert"},{"line_number":58,"context_line":"    - name: Check SSL cert location and permissions"},{"line_number":59,"context_line":"      fail:"},{"line_number":60,"context_line":"        msg: \"Keystone SSL cert permissions don\u0027t match {{ keystone_ssl_cert_permissions }}\""},{"line_number":61,"context_line":"      when: keystone_ssl_cert.stat.mode !\u003d \"{{ keystone_ssl_cert_permissions }}\""},{"line_number":62,"context_line":"    - name: Get SSL key location and permissions"},{"line_number":63,"context_line":"      stat:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_3a0a3dd3","line":60,"in_reply_to":"7a1b2928_10600335","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":61,"context_line":"      when: keystone_ssl_cert.stat.mode !\u003d \"{{ keystone_ssl_cert_permissions }}\""},{"line_number":62,"context_line":"    - name: Get SSL key location and permissions"},{"line_number":63,"context_line":"      stat:"},{"line_number":64,"context_line":"        path: \"{{ keystone_ssl_key_location }}\""},{"line_number":65,"context_line":"      register: keystone_ssl_key"},{"line_number":66,"context_line":"    - name: Check SSL key location and permissions"},{"line_number":67,"context_line":"      fail:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_f0cbc71c","line":64,"range":{"start_line":64,"start_character":18,"end_line":64,"end_character":43},"updated":"2016-04-11 13:38:33.000000000","message":"Same problem as above for the cert.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":61,"context_line":"      when: keystone_ssl_cert.stat.mode !\u003d \"{{ keystone_ssl_cert_permissions }}\""},{"line_number":62,"context_line":"    - name: Get SSL key location and permissions"},{"line_number":63,"context_line":"      stat:"},{"line_number":64,"context_line":"        path: \"{{ keystone_ssl_key_location }}\""},{"line_number":65,"context_line":"      register: keystone_ssl_key"},{"line_number":66,"context_line":"    - name: Check SSL key location and permissions"},{"line_number":67,"context_line":"      fail:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_7a14b5f4","line":64,"in_reply_to":"7a1b2928_f0cbc71c","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":62,"context_line":"    - name: Get SSL key location and permissions"},{"line_number":63,"context_line":"      stat:"},{"line_number":64,"context_line":"        path: \"{{ keystone_ssl_key_location }}\""},{"line_number":65,"context_line":"      register: keystone_ssl_key"},{"line_number":66,"context_line":"    - name: Check SSL key location and permissions"},{"line_number":67,"context_line":"      fail:"},{"line_number":68,"context_line":"        msg: \"Keystone SSL key permissions don\u0027t match {{ keystone_ssl_key_permissions }}\""}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_70ffb734","line":65,"range":{"start_line":65,"start_character":16,"end_line":65,"end_character":32},"updated":"2016-04-11 13:38:33.000000000","message":"Same problem as a bove for the cert.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":62,"context_line":"    - name: Get SSL key location and permissions"},{"line_number":63,"context_line":"      stat:"},{"line_number":64,"context_line":"        path: \"{{ keystone_ssl_key_location }}\""},{"line_number":65,"context_line":"      register: keystone_ssl_key"},{"line_number":66,"context_line":"    - name: Check SSL key location and permissions"},{"line_number":67,"context_line":"      fail:"},{"line_number":68,"context_line":"        msg: \"Keystone SSL key permissions don\u0027t match {{ keystone_ssl_key_permissions }}\""}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_daf989ca","line":65,"in_reply_to":"7a1b2928_70ffb734","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":65,"context_line":"      register: keystone_ssl_key"},{"line_number":66,"context_line":"    - name: Check SSL key location and permissions"},{"line_number":67,"context_line":"      fail:"},{"line_number":68,"context_line":"        msg: \"Keystone SSL key permissions don\u0027t match {{ keystone_ssl_key_permissions }}\""},{"line_number":69,"context_line":"      when: keystone_ssl_key.stat.mode !\u003d \"{{ keystone_ssl_key_permissions }}\""},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"  vars_files:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_509f1b03","line":68,"range":{"start_line":68,"start_character":58,"end_line":68,"end_character":86},"updated":"2016-04-11 13:38:33.000000000","message":"Same problem as above for the cert.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":65,"context_line":"      register: keystone_ssl_key"},{"line_number":66,"context_line":"    - name: Check SSL key location and permissions"},{"line_number":67,"context_line":"      fail:"},{"line_number":68,"context_line":"        msg: \"Keystone SSL key permissions don\u0027t match {{ keystone_ssl_key_permissions }}\""},{"line_number":69,"context_line":"      when: keystone_ssl_key.stat.mode !\u003d \"{{ keystone_ssl_key_permissions }}\""},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"  vars_files:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_baf64dd5","line":68,"in_reply_to":"7a1b2928_509f1b03","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"}],"tests/test-vars.yml":[{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"e04cb8d86ccd095b5f2352199fd5fd75ba8046a4","unresolved":false,"context_lines":[{"line_number":28,"context_line":"keystone_rabbitmq_port: 5671"},{"line_number":29,"context_line":"keystone_rabbitmq_servers: 10.100.100.2"},{"line_number":30,"context_line":"keystone_rabbitmq_use_ssl: true"},{"line_number":31,"context_line":"keystone_ssl: true"},{"line_number":32,"context_line":"keystone_ssl_cert_location: \"/etc/ssl/certs/keystone.pem\""},{"line_number":33,"context_line":"keystone_ssl_key_location: \"/etc/ssl/private/keystone.key\""},{"line_number":34,"context_line":"keystone_ssl_cert_permissions: 0640"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_1063e31b","line":31,"range":{"start_line":31,"start_character":0,"end_line":31,"end_character":18},"updated":"2016-04-11 13:38:33.000000000","message":"This shouldn\u0027t have to be set for the cert/key to distribute, I don\u0027t think.","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a058057b4e2689ec544f7e0c7b994e61b1df631a","unresolved":false,"context_lines":[{"line_number":28,"context_line":"keystone_rabbitmq_port: 5671"},{"line_number":29,"context_line":"keystone_rabbitmq_servers: 10.100.100.2"},{"line_number":30,"context_line":"keystone_rabbitmq_use_ssl: true"},{"line_number":31,"context_line":"keystone_ssl: true"},{"line_number":32,"context_line":"keystone_ssl_cert_location: \"/etc/ssl/certs/keystone.pem\""},{"line_number":33,"context_line":"keystone_ssl_key_location: \"/etc/ssl/private/keystone.key\""},{"line_number":34,"context_line":"keystone_ssl_cert_permissions: 0640"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"7a1b2928_1a1b011d","line":31,"in_reply_to":"7a1b2928_1063e31b","updated":"2016-04-11 13:43:58.000000000","message":"Done","commit_id":"810336e4ad26a8ccb582a79565c9976cb10e08d7"}]}