)]}'
{"doc/source/install-guide/configure-keystone.rst":[{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"9eabb329c14c236dcb4d8cf67a9ab13ac832cefa","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    keystone_user_ssl_key:           # Path to private key"},{"line_number":22,"context_line":"    keystone_user_ssl_ca_cert:       # Path to CA certificate"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_111a836e","line":24,"updated":"2016-05-09 16:30:18.000000000","message":"\"is providing a certificate\"","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"6341d3141fab49b40d87286f25e27d1984fcd799","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    keystone_user_ssl_key:           # Path to private key"},{"line_number":22,"context_line":"    keystone_user_ssl_ca_cert:       # Path to CA certificate"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_c73dd9bc","line":24,"in_reply_to":"dab17558_111a836e","updated":"2016-05-09 17:17:16.000000000","message":"If the deployer provides a certificate, key, and CA file for a","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"9eabb329c14c236dcb4d8cf67a9ab13ac832cefa","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    keystone_user_ssl_ca_cert:       # Path to CA certificate"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."},{"line_number":28,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_9124b3af","line":25,"updated":"2016-05-09 16:30:18.000000000","message":"\"without a chain of trust\"","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"6341d3141fab49b40d87286f25e27d1984fcd799","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    keystone_user_ssl_ca_cert:       # Path to CA certificate"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."},{"line_number":28,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_c764b9e6","line":25,"in_reply_to":"dab17558_9124b3af","updated":"2016-05-09 17:17:16.000000000","message":"as Major said, and: (or an invalid or self-generated CA)","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"6341d3141fab49b40d87286f25e27d1984fcd799","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Refer to `Securing services with SSL certificates`_ for more information on"}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_a7a6d50d","line":26,"updated":"2016-05-09 17:17:16.000000000","message":"double back ticks for these","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"9eabb329c14c236dcb4d8cf67a9ab13ac832cefa","unresolved":false,"context_lines":[{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Refer to `Securing services with SSL certificates`_ for more information on"},{"line_number":30,"context_line":"these configuration options and how deployers can provide their own"}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_5151ab0d","line":27,"updated":"2016-05-09 16:30:18.000000000","message":"Could we use ``True`` here to set off the word \u0027true\u0027 a bit better?","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"},{"author":{"_account_id":15993,"name":"Amy Marrich","display_name":"Amy Marrich (spotz)","email":"amy@demarco.com","username":"amarrich"},"change_message_id":"4bac0770efb9c89f4f00d7a79d048dd132a05cb5","unresolved":false,"context_lines":[{"line_number":24,"context_line":".. note:: If the deployer is providing certificate, key, and ca file for a"},{"line_number":25,"context_line":"   CA without chain of trust (or an invalid/self-generated ca), the variables"},{"line_number":26,"context_line":"   `keystone_service_internaluri_insecure` and"},{"line_number":27,"context_line":"   `keystone_service_adminuri_insecure` should be set to True."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Refer to `Securing services with SSL certificates`_ for more information on"},{"line_number":30,"context_line":"these configuration options and how deployers can provide their own"}],"source_content_type":"text/x-rst","patch_set":3,"id":"dab17558_1d7452fb","line":27,"in_reply_to":"dab17558_5151ab0d","updated":"2016-05-09 18:32:13.000000000","message":"I would rather see it as ``true`` if it\u0027s case sensative in the code which I think it is.","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"}],"playbooks/inventory/group_vars/hosts.yml":[{"author":{"_account_id":17068,"name":"Jean-Philippe Evrard","email":"openstack@a.spamming.party","username":"evrardjp"},"change_message_id":"77cc007771074010270761abcbd12dfac697b543","unresolved":false,"context_lines":[{"line_number":198,"context_line":"keystone_rabbitmq_userid: keystone"},{"line_number":199,"context_line":"keystone_rabbitmq_vhost: /keystone"},{"line_number":200,"context_line":""},{"line_number":201,"context_line":"keystone_service_internaluri_insecure: \"{% if keystone_service_internaluri_proto \u003d\u003d \u0027https\u0027 and (keystone_ssl_cert is not defined or haproxy_ssl_cert is not defined) | bool %}true{% else %}false{% endif %}\""},{"line_number":202,"context_line":"keystone_service_adminuri_insecure: \"{% if keystone_service_adminuri_proto \u003d\u003d \u0027https\u0027 and (keystone_ssl_cert is not defined or haproxy_ssl_cert is not defined) | bool %}true{% else %}false{% endif %}\""},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"keystone_service_publicuri: \"{{ keystone_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ keystone_service_port }}\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1a122d0e_5a91ff51","line":201,"range":{"start_line":201,"start_character":97,"end_line":201,"end_character":164},"updated":"2016-04-21 18:39:09.000000000","message":"I dont\u0027t get the condition.\nkeystone_service_internaluri_proto \u003d\u003d \u0027https\u0027 seems fine for me.\n\nkeystone_ssl_cert is the path to the certificate used, so I guess it\u0027s always defined.\n\nIf it was the user certificate, it would mean that the user certificate always has to be valid. \n\nI\u0027d rather let the conditional to something like \nkeystone_service_internaluri_proto \u003d\u003d \u0027https\u0027 | ternary(True,False) \nand the user with a valid certificate can override it (that would require doc) to False to enable more security.","commit_id":"f5f7eb13db407019552cf9a25f5e990b0df88ab9"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"9eabb329c14c236dcb4d8cf67a9ab13ac832cefa","unresolved":false,"context_lines":[{"line_number":198,"context_line":"keystone_rabbitmq_userid: keystone"},{"line_number":199,"context_line":"keystone_rabbitmq_vhost: /keystone"},{"line_number":200,"context_line":""},{"line_number":201,"context_line":"keystone_service_internaluri_insecure: \"{% if keystone_service_internaluri_proto \u003d\u003d \u0027https\u0027 and (keystone_user_ssl_cert is not defined or haproxy_user_ssl_cert is not defined) | bool %}true{% else %}false{% endif %}\""},{"line_number":202,"context_line":"keystone_service_adminuri_insecure: \"{% if keystone_service_adminuri_proto \u003d\u003d \u0027https\u0027 and (keystone_user_ssl_cert is not defined or haproxy_user_ssl_cert is not defined) | bool %}true{% else %}false{% endif %}\""},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"keystone_service_publicuri: \"{{ keystone_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ keystone_service_port }}\""}],"source_content_type":"text/x-yaml","patch_set":3,"id":"dab17558_71830f57","line":201,"updated":"2016-05-09 16:30:18.000000000","message":"This might be a little easier to read with the ternary filter:\n\nhttp://docs.ansible.com/ansible/playbooks_filters.html#other-useful-filters","commit_id":"d908d93e21f209d3414d8898a3810c9a332d5716"}]}