)]}'
{"barbican/values.yaml":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"202e931f77e70584ca80a9173d027237b26a673a","unresolved":false,"context_lines":[{"line_number":189,"context_line":"              application: ingress"},{"line_number":190,"context_line":"        - podSelector:"},{"line_number":191,"context_line":"            matchLabels:"},{"line_number":192,"context_line":"              application: horizon"},{"line_number":193,"context_line":"        ports:"},{"line_number":194,"context_line":"        - protocol: TCP"},{"line_number":195,"context_line":"          port: 80"}],"source_content_type":"text/x-yaml","patch_set":47,"id":"3f79a3b5_1e16d4f3","line":192,"updated":"2018-10-23 15:04:56.000000000","message":"These seem like good defaults.  Just note to selves, when we override barbican ingress in an airship context, we\u0027ll want the source applications to be {barbican, ingress, deckhand}.","commit_id":"e312eea8b15bd0d8f61b24aa224f9fcb8e5ca1b3"}],"ceilometer/values.yaml":[{"author":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"change_message_id":"7439887b24ff2fa0b453970ecbb32c67f80fc1cf","unresolved":false,"context_lines":[{"line_number":2087,"context_line":"  job_rabbit_init: true"},{"line_number":2088,"context_line":"  pdb_api: true"},{"line_number":2089,"context_line":"  pod_rally_test: true"},{"line_number":2090,"context_line":"  network_policy: true"},{"line_number":2091,"context_line":"  secret_db: true"},{"line_number":2092,"context_line":"  secret_keystone: true"},{"line_number":2093,"context_line":"  secret_mongodb: true"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_d0188484","line":2090,"range":{"start_line":2090,"start_character":1,"end_line":2090,"end_character":22},"updated":"2018-10-08 20:29:52.000000000","message":"if we default this to true, does it make it harder for developers to debug things?","commit_id":"05f340585f0c8c1154c4d035f8a35172edf76337"}],"cinder/values.yaml":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"202e931f77e70584ca80a9173d027237b26a673a","unresolved":false,"context_lines":[{"line_number":1246,"context_line":"network_policy:"},{"line_number":1247,"context_line":"  cinder:"},{"line_number":1248,"context_line":"    ingress:"},{"line_number":1249,"context_line":"      - {}"},{"line_number":1250,"context_line":""},{"line_number":1251,"context_line":"manifests:"},{"line_number":1252,"context_line":"  configmap_bin: true"}],"source_content_type":"text/x-yaml","patch_set":47,"id":"3f79a3b5_fedaf819","line":1249,"updated":"2018-10-23 15:04:56.000000000","message":"Why is cinder being left open by default? Is it intentional, or does it need one of those \"TODO tighten security later\" comments that some of the other charts have?","commit_id":"e312eea8b15bd0d8f61b24aa224f9fcb8e5ca1b3"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"fd659518ace6728b1764d18ccc16c3cdced9cc5a","unresolved":false,"context_lines":[{"line_number":1246,"context_line":"network_policy:"},{"line_number":1247,"context_line":"  cinder:"},{"line_number":1248,"context_line":"    ingress:"},{"line_number":1249,"context_line":"      - {}"},{"line_number":1250,"context_line":""},{"line_number":1251,"context_line":"manifests:"},{"line_number":1252,"context_line":"  configmap_bin: true"}],"source_content_type":"text/x-yaml","patch_set":47,"id":"3f79a3b5_842cd600","line":1249,"in_reply_to":"3f79a3b5_fedaf819","updated":"2018-10-23 15:52:02.000000000","message":"There is another US for Cloud_Core to tighten up this Cinder and other service, we had a generic framework which implemented the E-W K8s network policy.","commit_id":"e312eea8b15bd0d8f61b24aa224f9fcb8e5ca1b3"}],"horizon/values.yaml":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"202e931f77e70584ca80a9173d027237b26a673a","unresolved":false,"context_lines":[{"line_number":2073,"context_line":"              application: ingress"},{"line_number":2074,"context_line":"        - namespaceSelector:"},{"line_number":2075,"context_line":"            matchLabels:"},{"line_number":2076,"context_line":"              name: kube-system"},{"line_number":2077,"context_line":""},{"line_number":2078,"context_line":"manifests:"},{"line_number":2079,"context_line":"  configmap_bin: true"}],"source_content_type":"text/x-yaml","patch_set":47,"id":"3f79a3b5_5ef44c88","line":2076,"updated":"2018-10-23 15:04:56.000000000","message":"Curious, why is this one needed?","commit_id":"e312eea8b15bd0d8f61b24aa224f9fcb8e5ca1b3"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"fd659518ace6728b1764d18ccc16c3cdced9cc5a","unresolved":false,"context_lines":[{"line_number":2073,"context_line":"              application: ingress"},{"line_number":2074,"context_line":"        - namespaceSelector:"},{"line_number":2075,"context_line":"            matchLabels:"},{"line_number":2076,"context_line":"              name: kube-system"},{"line_number":2077,"context_line":""},{"line_number":2078,"context_line":"manifests:"},{"line_number":2079,"context_line":"  configmap_bin: true"}],"source_content_type":"text/x-yaml","patch_set":47,"id":"3f79a3b5_47aa40d3","line":2076,"in_reply_to":"3f79a3b5_5ef44c88","updated":"2018-10-23 15:52:02.000000000","message":"For some reasons, in order to Horizon pod is up and running, Kube_dns need to talk to horizon. We will tighten up this Egress policy.","commit_id":"e312eea8b15bd0d8f61b24aa224f9fcb8e5ca1b3"}],"tools/deployment/common/memcached.sh":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"b6cf89d41571d8cd088bd117241630cf3ca2db63","unresolved":false,"context_lines":[{"line_number":20,"context_line":": ${OSH_INFRA_PATH:\u003d\"../openstack-helm-infra\"}"},{"line_number":21,"context_line":"make -C ${OSH_INFRA_PATH} memcached"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"tee /tmp/memcached.yaml \u003c\u003cEOF"},{"line_number":24,"context_line":"manifests:"},{"line_number":25,"context_line":"  network_policy: true"},{"line_number":26,"context_line":"network_policy:"}],"source_content_type":"text/x-sh","patch_set":41,"id":"3f79a3b5_482576be","line":23,"updated":"2018-10-10 19:40:13.000000000","message":"When I see this \"all the charts talk to memcached\" pattern, it makes me wonder whether it\u0027s worth it to define an ingress policy for it.  It will be cumbersome to keep up to date as additional openstack services are added.  I don\u0027t know the right answer, but I\u0027m not convinced yet we should do this?","commit_id":"6e61ae54c074449ae51e75cd78fa93de37769334"}],"tools/deployment/developer/common/030-ingress.sh":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"b6cf89d41571d8cd088bd117241630cf3ca2db63","unresolved":false,"context_lines":[{"line_number":24,"context_line":"manifests:"},{"line_number":25,"context_line":"  network_policy: true"},{"line_number":26,"context_line":"network_policy:"},{"line_number":27,"context_line":"  ingress:"},{"line_number":28,"context_line":"    ingress:"},{"line_number":29,"context_line":"      - from:"},{"line_number":30,"context_line":"        - podSelector:"}],"source_content_type":"text/x-sh","patch_set":41,"id":"3f79a3b5_0830de05","line":27,"updated":"2018-10-10 19:40:13.000000000","message":"When I see this \"all the charts talk to ingress service\" pattern, it makes me wonder whether it\u0027s worth it to define an ingress policy for it.  It will be cumbersome to keep up to date as additional ingress rules are added.  I don\u0027t know the right answer, but I\u0027m not convinced yet we should do this?","commit_id":"6e61ae54c074449ae51e75cd78fa93de37769334"}],"tools/deployment/developer/common/050-mariadb.sh":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"b6cf89d41571d8cd088bd117241630cf3ca2db63","unresolved":false,"context_lines":[{"line_number":20,"context_line":": ${OSH_INFRA_PATH:\u003d\"../openstack-helm-infra\"}"},{"line_number":21,"context_line":"make -C ${OSH_INFRA_PATH} mariadb"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"tee /tmp/mariadb.yaml \u003c\u003cEOF"},{"line_number":24,"context_line":"manifests:"},{"line_number":25,"context_line":"  network_policy: true"},{"line_number":26,"context_line":"network_policy:"}],"source_content_type":"text/x-sh","patch_set":41,"id":"3f79a3b5_48fed606","line":23,"updated":"2018-10-10 19:40:13.000000000","message":"Ditto what I said before :)","commit_id":"6e61ae54c074449ae51e75cd78fa93de37769334"}],"tools/deployment/developer/common/060-rabbitmq.sh":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"b6cf89d41571d8cd088bd117241630cf3ca2db63","unresolved":false,"context_lines":[{"line_number":21,"context_line":"make -C ${OSH_INFRA_PATH} rabbitmq"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"tee /tmp/rabbitmq.yaml \u003c\u003cEOF"},{"line_number":25,"context_line":"manifests:"},{"line_number":26,"context_line":"  network_policy: true"},{"line_number":27,"context_line":"network_policy:"}],"source_content_type":"text/x-sh","patch_set":41,"id":"3f79a3b5_03fe7f03","line":24,"updated":"2018-10-10 19:40:13.000000000","message":"more ditto","commit_id":"6e61ae54c074449ae51e75cd78fa93de37769334"}]}