)]}'
{"calico/values.yaml":[{"author":{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},"change_message_id":"3e9754630c78b4a36dca76b528d6701da40fad8d","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    disruption_budget:"},{"line_number":101,"context_line":"      controllers:"},{"line_number":102,"context_line":"        min_available: 0"},{"line_number":103,"context_line":"  apparmor:"},{"line_number":104,"context_line":"    calico-node:"},{"line_number":105,"context_line":"      calico-node: localhost/docker-default"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"dependencies:"},{"line_number":108,"context_line":"  dynamic:"}],"source_content_type":"text/x-yaml","patch_set":16,"id":"3f79a3b5_9473474f","line":105,"range":{"start_line":103,"start_character":0,"end_line":105,"end_character":43},"updated":"2018-11-27 16:16:23.000000000","message":"I\u0027d much rather this be based on the work Cliff is doing to make access control more generic.","commit_id":"df9d42ee4ba96118b1f4cadf0faee631d6bbb9a3"},{"author":{"_account_id":28235,"name":"Aaron Sheffield","email":"ajs@sheffieldfamily.net","username":"aaronsheffield"},"change_message_id":"a72786a1c45f475c98d5a86bf293fa654638de5a","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    disruption_budget:"},{"line_number":101,"context_line":"      controllers:"},{"line_number":102,"context_line":"        min_available: 0"},{"line_number":103,"context_line":"  apparmor:"},{"line_number":104,"context_line":"    calico-node:"},{"line_number":105,"context_line":"      calico-node: localhost/docker-default"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"dependencies:"},{"line_number":108,"context_line":"  dynamic:"}],"source_content_type":"text/x-yaml","patch_set":16,"id":"3f79a3b5_efb668fc","line":105,"range":{"start_line":103,"start_character":0,"end_line":105,"end_character":43},"in_reply_to":"3f79a3b5_9473474f","updated":"2018-11-27 17:07:08.000000000","message":"Is Cliff\u0027s work going to be merged anything soon?  Looks like it has been sitting for a month?","commit_id":"df9d42ee4ba96118b1f4cadf0faee631d6bbb9a3"},{"author":{"_account_id":28235,"name":"Aaron Sheffield","email":"ajs@sheffieldfamily.net","username":"aaronsheffield"},"change_message_id":"eda9c4de85fd66b4cddb5732d6b74b1936eb718b","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    disruption_budget:"},{"line_number":101,"context_line":"      controllers:"},{"line_number":102,"context_line":"        min_available: 0"},{"line_number":103,"context_line":"  apparmor:"},{"line_number":104,"context_line":"    calico-node:"},{"line_number":105,"context_line":"      calico-node: localhost/docker-default"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"dependencies:"},{"line_number":108,"context_line":"  dynamic:"}],"source_content_type":"text/x-yaml","patch_set":16,"id":"3f79a3b5_a849358d","line":105,"range":{"start_line":103,"start_character":0,"end_line":105,"end_character":43},"in_reply_to":"3f79a3b5_efb668fc","updated":"2018-11-28 13:12:00.000000000","message":"Done","commit_id":"df9d42ee4ba96118b1f4cadf0faee631d6bbb9a3"}],"playbooks/osh-infra-upgrade-host.yaml":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"a138f2c2f45c3af1e8cb9257f40da9693c11dd5b","unresolved":false,"context_lines":[{"line_number":49,"context_line":"    - name: Setup Mandatory Access Control"},{"line_number":50,"context_line":"      shell: |-"},{"line_number":51,"context_line":"        set -xe"},{"line_number":52,"context_line":"        if lsb_release -i | grep \"Ubuntu\"; then"},{"line_number":53,"context_line":"          sudo -H -E apt-get install -y apparmor"},{"line_number":54,"context_line":"          sudo systemctl enable apparmor \u0026\u0026 sudo systemctl start apparmor"},{"line_number":55,"context_line":"          sudo systemctl status apparmor.service"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"3f79a3b5_4a0f4a2b","line":52,"range":{"start_line":52,"start_character":8,"end_line":52,"end_character":47},"updated":"2018-11-09 15:55:56.000000000","message":"we should handle this via ansible.","commit_id":"c177543feca25a332caeb8efad6a2876a95c0e73"},{"author":{"_account_id":28235,"name":"Aaron Sheffield","email":"ajs@sheffieldfamily.net","username":"aaronsheffield"},"change_message_id":"f463c4bd1c59c942410c07c521a620ae1c03a0b9","unresolved":false,"context_lines":[{"line_number":49,"context_line":"    - name: Setup Mandatory Access Control"},{"line_number":50,"context_line":"      shell: |-"},{"line_number":51,"context_line":"        set -xe"},{"line_number":52,"context_line":"        if lsb_release -i | grep \"Ubuntu\"; then"},{"line_number":53,"context_line":"          sudo -H -E apt-get install -y apparmor"},{"line_number":54,"context_line":"          sudo systemctl enable apparmor \u0026\u0026 sudo systemctl start apparmor"},{"line_number":55,"context_line":"          sudo systemctl status apparmor.service"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"3f79a3b5_99c61b9b","line":52,"range":{"start_line":52,"start_character":8,"end_line":52,"end_character":47},"in_reply_to":"3f79a3b5_4a0f4a2b","updated":"2018-11-09 19:55:31.000000000","message":"Done","commit_id":"c177543feca25a332caeb8efad6a2876a95c0e73"},{"author":{"_account_id":24816,"name":"Anthony Bellino","email":"ab2434@att.com","username":"anthony.bellino"},"change_message_id":"2d7eac18e5c000b31a6cadc719f0bbe0f5e9ff71","unresolved":false,"context_lines":[{"line_number":48,"context_line":"  tasks:"},{"line_number":49,"context_line":"    - name: Setup Mandatory Access Control"},{"line_number":50,"context_line":"      shell: |-"},{"line_number":51,"context_line":"        set -xe"},{"line_number":52,"context_line":"        if lsb_release -i | grep \"Ubuntu\"; then"},{"line_number":53,"context_line":"          sudo -H -E apt-get install -y apparmor"},{"line_number":54,"context_line":"          sudo systemctl enable apparmor \u0026\u0026 sudo systemctl start apparmor"},{"line_number":55,"context_line":"          sudo systemctl status apparmor.service"},{"line_number":56,"context_line":"        fi"},{"line_number":57,"context_line":"      args:"},{"line_number":58,"context_line":"        chdir: \"{{ zuul_osh_relative_path | default(zuul.project.src_dir) }}\""}],"source_content_type":"text/x-yaml","patch_set":14,"id":"3f79a3b5_a214179a","line":56,"range":{"start_line":51,"start_character":0,"end_line":56,"end_character":10},"updated":"2018-11-08 19:56:09.000000000","message":"Can this be referenced from a bash script?","commit_id":"c177543feca25a332caeb8efad6a2876a95c0e73"},{"author":{"_account_id":28235,"name":"Aaron Sheffield","email":"ajs@sheffieldfamily.net","username":"aaronsheffield"},"change_message_id":"dbb5b072a944ee6addf3cf719db88831ab6e9986","unresolved":false,"context_lines":[{"line_number":48,"context_line":"  tasks:"},{"line_number":49,"context_line":"    - name: Setup Mandatory Access Control"},{"line_number":50,"context_line":"      shell: |-"},{"line_number":51,"context_line":"        set -xe"},{"line_number":52,"context_line":"        if lsb_release -i | grep \"Ubuntu\"; then"},{"line_number":53,"context_line":"          sudo -H -E apt-get install -y apparmor"},{"line_number":54,"context_line":"          sudo systemctl enable apparmor \u0026\u0026 sudo systemctl start apparmor"},{"line_number":55,"context_line":"          sudo systemctl status apparmor.service"},{"line_number":56,"context_line":"        fi"},{"line_number":57,"context_line":"      args:"},{"line_number":58,"context_line":"        chdir: \"{{ zuul_osh_relative_path | default(zuul.project.src_dir) }}\""}],"source_content_type":"text/x-yaml","patch_set":14,"id":"3f79a3b5_cf0e0c3b","line":56,"range":{"start_line":51,"start_character":0,"end_line":56,"end_character":10},"in_reply_to":"3f79a3b5_a214179a","updated":"2018-11-09 15:52:35.000000000","message":"I tried with patch set 10, I\u0027m guessing I missed some symlinks.  However, this seemed easier to get it to work.  This is run at the base of all the gates, no need to deal with symlinks/permissions.  If there is a reason to move it to a bash file I can work on that.","commit_id":"c177543feca25a332caeb8efad6a2876a95c0e73"},{"author":{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},"change_message_id":"3e9754630c78b4a36dca76b528d6701da40fad8d","unresolved":false,"context_lines":[{"line_number":40,"context_line":"    - start-zuul-console"},{"line_number":41,"context_line":"    - disable-local-nameserver"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"- hosts: all"},{"line_number":44,"context_line":"  vars_files:"},{"line_number":45,"context_line":"    - vars.yaml"},{"line_number":46,"context_line":"  vars:"},{"line_number":47,"context_line":"    work_dir: \"{{ zuul.project.src_dir }}/{{ zuul_osh_infra_relative_path | default(\u0027\u0027) }}\""},{"line_number":48,"context_line":"  tasks:"},{"line_number":49,"context_line":"    - name: Setup Mandatory Access Control"},{"line_number":50,"context_line":"      when: ansible_distribution \u003d\u003d \u0027Ubuntu\u0027"},{"line_number":51,"context_line":"      shell: |-"},{"line_number":52,"context_line":"        set -xe"},{"line_number":53,"context_line":"        sudo -H -E apt-get install -y apparmor"},{"line_number":54,"context_line":"        sudo systemctl enable apparmor \u0026\u0026 sudo systemctl start apparmor"},{"line_number":55,"context_line":"        sudo systemctl status apparmor.service"},{"line_number":56,"context_line":"      args:"},{"line_number":57,"context_line":"        chdir: \"{{ zuul_osh_relative_path | default(zuul.project.src_dir) }}\""}],"source_content_type":"text/x-yaml","patch_set":16,"id":"3f79a3b5_9434a748","line":57,"range":{"start_line":43,"start_character":0,"end_line":57,"end_character":77},"updated":"2018-11-27 16:16:23.000000000","message":"I\u0027d prefer to see this have its own role, similar to how we install jq. We can use the deploy-package role to install apparmor, and we should also use the ansible systemd module to manipulate the apparmor service instead of just shoving everything into a shell block","commit_id":"df9d42ee4ba96118b1f4cadf0faee631d6bbb9a3"},{"author":{"_account_id":28235,"name":"Aaron Sheffield","email":"ajs@sheffieldfamily.net","username":"aaronsheffield"},"change_message_id":"a72786a1c45f475c98d5a86bf293fa654638de5a","unresolved":false,"context_lines":[{"line_number":40,"context_line":"    - start-zuul-console"},{"line_number":41,"context_line":"    - disable-local-nameserver"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"- hosts: all"},{"line_number":44,"context_line":"  vars_files:"},{"line_number":45,"context_line":"    - vars.yaml"},{"line_number":46,"context_line":"  vars:"},{"line_number":47,"context_line":"    work_dir: \"{{ zuul.project.src_dir }}/{{ zuul_osh_infra_relative_path | default(\u0027\u0027) }}\""},{"line_number":48,"context_line":"  tasks:"},{"line_number":49,"context_line":"    - name: Setup Mandatory Access Control"},{"line_number":50,"context_line":"      when: ansible_distribution \u003d\u003d \u0027Ubuntu\u0027"},{"line_number":51,"context_line":"      shell: |-"},{"line_number":52,"context_line":"        set -xe"},{"line_number":53,"context_line":"        sudo -H -E apt-get install -y apparmor"},{"line_number":54,"context_line":"        sudo systemctl enable apparmor \u0026\u0026 sudo systemctl start apparmor"},{"line_number":55,"context_line":"        sudo systemctl status apparmor.service"},{"line_number":56,"context_line":"      args:"},{"line_number":57,"context_line":"        chdir: \"{{ zuul_osh_relative_path | default(zuul.project.src_dir) }}\""}],"source_content_type":"text/x-yaml","patch_set":16,"id":"3f79a3b5_afe07094","line":57,"range":{"start_line":43,"start_character":0,"end_line":57,"end_character":77},"in_reply_to":"3f79a3b5_9434a748","updated":"2018-11-27 17:07:08.000000000","message":"Done (hopefully, need to let the gate run).","commit_id":"df9d42ee4ba96118b1f4cadf0faee631d6bbb9a3"}]}