)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"1a6811fa8f7d8f0a44ea382c4bb6f1df4b7ec433","unresolved":false,"context_lines":[{"line_number":4,"context_line":"Commit:     bk160f \u003cbk160f@att.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2018-08-27 12:25:26 -0500"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"[US486586]:Neutron PodSecurityContext"},{"line_number":8,"context_line":"securityContext with non-rrot user is implemented"},{"line_number":9,"context_line":"at Pod level and leveraged the helm-toolkit snippet"},{"line_number":10,"context_line":"Depends-On: Id0fe9b75432076d0b87e89dcaa5a4b88487972aa"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_e71d9661","line":7,"range":{"start_line":7,"start_character":0,"end_line":7,"end_character":11},"updated":"2018-11-20 20:19:47.000000000","message":"We should move these tracking number into a separate line like:\n\n   External-Tracking: USXXXXX\n\ninstead of jamming it in the git short log summary","commit_id":"88cf2bc4d42821bb6bacba724255372e7ed83b4b"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"1a6811fa8f7d8f0a44ea382c4bb6f1df4b7ec433","unresolved":false,"context_lines":[{"line_number":5,"context_line":"CommitDate: 2018-08-27 12:25:26 -0500"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"[US486586]:Neutron PodSecurityContext"},{"line_number":8,"context_line":"securityContext with non-rrot user is implemented"},{"line_number":9,"context_line":"at Pod level and leveraged the helm-toolkit snippet"},{"line_number":10,"context_line":"Depends-On: Id0fe9b75432076d0b87e89dcaa5a4b88487972aa"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_a72f9e88","line":8,"range":{"start_line":8,"start_character":24,"end_line":8,"end_character":29},"updated":"2018-11-20 20:19:47.000000000","message":"root","commit_id":"88cf2bc4d42821bb6bacba724255372e7ed83b4b"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"1a6811fa8f7d8f0a44ea382c4bb6f1df4b7ec433","unresolved":false,"context_lines":[{"line_number":5,"context_line":"CommitDate: 2018-08-27 12:25:26 -0500"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"[US486586]:Neutron PodSecurityContext"},{"line_number":8,"context_line":"securityContext with non-rrot user is implemented"},{"line_number":9,"context_line":"at Pod level and leveraged the helm-toolkit snippet"},{"line_number":10,"context_line":"Depends-On: Id0fe9b75432076d0b87e89dcaa5a4b88487972aa"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_8734e2e1","line":8,"range":{"start_line":8,"start_character":0,"end_line":8,"end_character":15},"updated":"2018-11-20 20:19:47.000000000","message":"this should be on new line","commit_id":"88cf2bc4d42821bb6bacba724255372e7ed83b4b"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"1a6811fa8f7d8f0a44ea382c4bb6f1df4b7ec433","unresolved":false,"context_lines":[{"line_number":7,"context_line":"[US486586]:Neutron PodSecurityContext"},{"line_number":8,"context_line":"securityContext with non-rrot user is implemented"},{"line_number":9,"context_line":"at Pod level and leveraged the helm-toolkit snippet"},{"line_number":10,"context_line":"Depends-On: Id0fe9b75432076d0b87e89dcaa5a4b88487972aa"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Change-Id: Id93b56d2e3886b9dd9115e79c28f661930146b00"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"3f79a3b5_07469257","line":10,"range":{"start_line":10,"start_character":0,"end_line":10,"end_character":5},"updated":"2018-11-20 20:19:47.000000000","message":"new line","commit_id":"88cf2bc4d42821bb6bacba724255372e7ed83b4b"},{"author":{"_account_id":28701,"name":"Dustin Specker","email":"v-dspecker@microsoft.com","username":"dustinspecker"},"change_message_id":"cca6f0b53a7cbb7bbc9e9ba388f15f112261b007","unresolved":false,"context_lines":[{"line_number":9,"context_line":"securityContext with non-root user is implemented"},{"line_number":10,"context_line":"at Pod level and leveraged the helm-toolkit snippet"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"External-tracking: US486586"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Depends-On: Id0fe9b75432076d0b87e89dcaa5a4b88487972aa"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"3f79a3b5_b3e4b2a8","line":12,"range":{"start_line":12,"start_character":0,"end_line":12,"end_character":27},"updated":"2018-11-21 14:10:37.000000000","message":"I don\u0027t think this kind of stuff belongs in upstream commits.","commit_id":"e7538991723834e47b891a7334c1ddcf2eed2d9b"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"77ae0e332e1db904dc4389a57bd4776b11974150","unresolved":false,"context_lines":[{"line_number":9,"context_line":"securityContext with non-root user is implemented"},{"line_number":10,"context_line":"at Pod level and leveraged the helm-toolkit snippet"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"External-tracking: US486586"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Depends-On: Id0fe9b75432076d0b87e89dcaa5a4b88487972aa"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"3f79a3b5_fefd1107","line":12,"range":{"start_line":12,"start_character":0,"end_line":12,"end_character":27},"in_reply_to":"3f79a3b5_b3e4b2a8","updated":"2018-11-21 17:32:43.000000000","message":"Done","commit_id":"e7538991723834e47b891a7334c1ddcf2eed2d9b"}],"neutron/templates/daemonset-lb-agent.yaml":[{"author":{"_account_id":20889,"name":"Niketu Parekh","email":"niketu.parekh@ericsson.com","username":"niketukparekh"},"change_message_id":"8028f46428dcee353ebd77664291c04e212acdf7","unresolved":false,"context_lines":[{"line_number":65,"context_line":"            capabilities:"},{"line_number":66,"context_line":"              add:"},{"line_number":67,"context_line":"                - SYS_MODULE"},{"line_number":68,"context_line":"            runAsUser: 0"},{"line_number":69,"context_line":"          command:"},{"line_number":70,"context_line":"            - /tmp/neutron-linuxbridge-agent-init-modules.sh"},{"line_number":71,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_69dd8a6c","line":68,"updated":"2018-11-26 21:48:35.000000000","message":"use \"privilege: true\" instead of \"runAsUser: 0\" for consistent implementation for all neutron charts","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"ae1007208ee8f1af592ebd699c8a46a577c91ab2","unresolved":false,"context_lines":[{"line_number":65,"context_line":"            capabilities:"},{"line_number":66,"context_line":"              add:"},{"line_number":67,"context_line":"                - SYS_MODULE"},{"line_number":68,"context_line":"            runAsUser: 0"},{"line_number":69,"context_line":"          command:"},{"line_number":70,"context_line":"            - /tmp/neutron-linuxbridge-agent-init-modules.sh"},{"line_number":71,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_d92b332f","line":68,"in_reply_to":"3f79a3b5_69dd8a6c","updated":"2018-11-27 20:06:08.000000000","message":"N/A...This doesn\u0027t fall under this PS related to US486586. Privileged and allowPrivilegeEscalation will be covered under the PS for US454657","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"4629783ac88ad753882afe8f90945b25fbd3e4b6","unresolved":false,"context_lines":[{"line_number":65,"context_line":"            capabilities:"},{"line_number":66,"context_line":"              add:"},{"line_number":67,"context_line":"                - SYS_MODULE"},{"line_number":68,"context_line":"            runAsUser: 0"},{"line_number":69,"context_line":"          command:"},{"line_number":70,"context_line":"            - /tmp/neutron-linuxbridge-agent-init-modules.sh"},{"line_number":71,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_5a05a3bf","line":68,"in_reply_to":"3f79a3b5_d92b332f","updated":"2018-11-29 20:07:49.000000000","message":"After discussing with the SE this PS will accomodate hte changes for both moving the securityCOntext:runAsUser to Pod leval and adding the allowPrivilegeEscalation flag in the container securityContext whereever necessary in the neutron charts. Because runAsUser:0 and privileged: true are disjoint this comment is not considered.","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":20889,"name":"Niketu Parekh","email":"niketu.parekh@ericsson.com","username":"niketukparekh"},"change_message_id":"8028f46428dcee353ebd77664291c04e212acdf7","unresolved":false,"context_lines":[{"line_number":81,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.lb | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":82,"context_line":"          securityContext:"},{"line_number":83,"context_line":"            privileged: true"},{"line_number":84,"context_line":"            runAsUser: 0"},{"line_number":85,"context_line":"          command:"},{"line_number":86,"context_line":"            - /tmp/neutron-linuxbridge-agent-init.sh"},{"line_number":87,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_29cd52b9","line":84,"updated":"2018-11-26 21:48:35.000000000","message":"please remove \"runAsUser: 0\" as it is redundant to \"privileged: true\"","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"ae1007208ee8f1af592ebd699c8a46a577c91ab2","unresolved":false,"context_lines":[{"line_number":81,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.lb | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":82,"context_line":"          securityContext:"},{"line_number":83,"context_line":"            privileged: true"},{"line_number":84,"context_line":"            runAsUser: 0"},{"line_number":85,"context_line":"          command:"},{"line_number":86,"context_line":"            - /tmp/neutron-linuxbridge-agent-init.sh"},{"line_number":87,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_b9cd1793","line":84,"in_reply_to":"3f79a3b5_29cd52b9","updated":"2018-11-27 20:06:08.000000000","message":"N/A....Comment same as above","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"}],"neutron/templates/daemonset-metadata-agent.yaml":[{"author":{"_account_id":20889,"name":"Niketu Parekh","email":"niketu.parekh@ericsson.com","username":"niketukparekh"},"change_message_id":"8028f46428dcee353ebd77664291c04e212acdf7","unresolved":false,"context_lines":[{"line_number":63,"context_line":"{{ tuple $envAll \"neutron_metadata\" | include \"helm-toolkit.snippets.image\" | indent 10 }}"},{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.metadata | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            runAsUser: 0"},{"line_number":67,"context_line":"          env:"},{"line_number":68,"context_line":"            - name: NEUTRON_USER_UID"},{"line_number":69,"context_line":"              value: \"{{ .Values.pod.user.neutron.uid }}\""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_a9d72250","line":66,"updated":"2018-11-26 21:48:35.000000000","message":"use \"privilege: true\" instead of \"runAsUser: 0\" for consistent implementation for all neutron charts","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"ae1007208ee8f1af592ebd699c8a46a577c91ab2","unresolved":false,"context_lines":[{"line_number":63,"context_line":"{{ tuple $envAll \"neutron_metadata\" | include \"helm-toolkit.snippets.image\" | indent 10 }}"},{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.metadata | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            runAsUser: 0"},{"line_number":67,"context_line":"          env:"},{"line_number":68,"context_line":"            - name: NEUTRON_USER_UID"},{"line_number":69,"context_line":"              value: \"{{ .Values.pod.user.neutron.uid }}\""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_f9114ffa","line":66,"in_reply_to":"3f79a3b5_a9d72250","updated":"2018-11-27 20:06:08.000000000","message":"N/A..This doesn\u0027t fall under this PS related to US486586. Privileged and allowPrivilegeEscalation will be covered under the PS for US454657","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"4629783ac88ad753882afe8f90945b25fbd3e4b6","unresolved":false,"context_lines":[{"line_number":63,"context_line":"{{ tuple $envAll \"neutron_metadata\" | include \"helm-toolkit.snippets.image\" | indent 10 }}"},{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.metadata | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            runAsUser: 0"},{"line_number":67,"context_line":"          env:"},{"line_number":68,"context_line":"            - name: NEUTRON_USER_UID"},{"line_number":69,"context_line":"              value: \"{{ .Values.pod.user.neutron.uid }}\""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_daf8d3c3","line":66,"in_reply_to":"3f79a3b5_f9114ffa","updated":"2018-11-29 20:07:49.000000000","message":"After discussing with the SE this PS will accomodate code changes for both moving the securityCOntext:runAsUser to Pod leval and adding the allowPrivilegeEscalation flag in the container securityContext whereever necessary in the neutron charts. Because runAsUser:0 and privileged: true are disjoint this comment is not considered.","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"}],"neutron/templates/daemonset-ovs-agent.yaml":[{"author":{"_account_id":20889,"name":"Niketu Parekh","email":"niketu.parekh@ericsson.com","username":"niketukparekh"},"change_message_id":"8028f46428dcee353ebd77664291c04e212acdf7","unresolved":false,"context_lines":[{"line_number":81,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.ovs | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":82,"context_line":"          securityContext:"},{"line_number":83,"context_line":"            privileged: true"},{"line_number":84,"context_line":"            runAsUser: 0"},{"line_number":85,"context_line":"          command:"},{"line_number":86,"context_line":"            - /tmp/neutron-openvswitch-agent-init.sh"},{"line_number":87,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_e9743a8c","line":84,"updated":"2018-11-26 21:48:35.000000000","message":"please remove \"runAsUser: 0\" as it is redundant to \"privileged: true\"","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"4629783ac88ad753882afe8f90945b25fbd3e4b6","unresolved":false,"context_lines":[{"line_number":81,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.ovs | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":82,"context_line":"          securityContext:"},{"line_number":83,"context_line":"            privileged: true"},{"line_number":84,"context_line":"            runAsUser: 0"},{"line_number":85,"context_line":"          command:"},{"line_number":86,"context_line":"            - /tmp/neutron-openvswitch-agent-init.sh"},{"line_number":87,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_ba29573a","line":84,"in_reply_to":"3f79a3b5_79d3ff36","updated":"2018-11-29 20:07:49.000000000","message":"N/A..After discussing with the SE this PS will accomodate hte changes for both moving the securityCOntext:runAsUser to Pod leval and adding the allowPrivilegeEscalation flag in the container securityContext whereever necessary in the neutron charts. Because runAsUser:0 and privileged: true are disjoint this comment is not considered.","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"ae1007208ee8f1af592ebd699c8a46a577c91ab2","unresolved":false,"context_lines":[{"line_number":81,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.ovs | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":82,"context_line":"          securityContext:"},{"line_number":83,"context_line":"            privileged: true"},{"line_number":84,"context_line":"            runAsUser: 0"},{"line_number":85,"context_line":"          command:"},{"line_number":86,"context_line":"            - /tmp/neutron-openvswitch-agent-init.sh"},{"line_number":87,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_79d3ff36","line":84,"in_reply_to":"3f79a3b5_e9743a8c","updated":"2018-11-27 20:06:08.000000000","message":"N/A....Comments same as above","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"}],"neutron/templates/daemonset-sriov-agent.yaml":[{"author":{"_account_id":20889,"name":"Niketu Parekh","email":"niketu.parekh@ericsson.com","username":"niketukparekh"},"change_message_id":"8028f46428dcee353ebd77664291c04e212acdf7","unresolved":false,"context_lines":[{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.sriov | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            privileged: true"},{"line_number":67,"context_line":"            runAsUser: 0"},{"line_number":68,"context_line":"          command:"},{"line_number":69,"context_line":"            - /tmp/neutron-sriov-agent-init.sh"},{"line_number":70,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_69afcae0","line":67,"updated":"2018-11-26 21:48:35.000000000","message":"please remove \"runAsUser: 0\" as it is redundant to \"privileged: true\"","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"ae1007208ee8f1af592ebd699c8a46a577c91ab2","unresolved":false,"context_lines":[{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.sriov | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            privileged: true"},{"line_number":67,"context_line":"            runAsUser: 0"},{"line_number":68,"context_line":"          command:"},{"line_number":69,"context_line":"            - /tmp/neutron-sriov-agent-init.sh"},{"line_number":70,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_f9e62f14","line":67,"in_reply_to":"3f79a3b5_69afcae0","updated":"2018-11-27 20:06:08.000000000","message":"N/A....Comments same as in other agents","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"bd378baaa4f2bf352bf8aeee4fec29a66582839d","unresolved":false,"context_lines":[{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.sriov | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            privileged: true"},{"line_number":67,"context_line":"            runAsUser: 0"},{"line_number":68,"context_line":"          command:"},{"line_number":69,"context_line":"            - /tmp/neutron-sriov-agent-init.sh"},{"line_number":70,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_7a1dff5f","line":67,"in_reply_to":"3f79a3b5_69afcae0","updated":"2018-11-29 19:46:12.000000000","message":"They are not exactly the same. runAsUser: 0 runs the container as root, privileged: true allows the containers to use privileged mode.","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":18204,"name":"bharani","email":"bk160f@att.com","username":"bharani"},"change_message_id":"4629783ac88ad753882afe8f90945b25fbd3e4b6","unresolved":false,"context_lines":[{"line_number":64,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.agent.sriov | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":65,"context_line":"          securityContext:"},{"line_number":66,"context_line":"            privileged: true"},{"line_number":67,"context_line":"            runAsUser: 0"},{"line_number":68,"context_line":"          command:"},{"line_number":69,"context_line":"            - /tmp/neutron-sriov-agent-init.sh"},{"line_number":70,"context_line":"          volumeMounts:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_1addeb3f","line":67,"in_reply_to":"3f79a3b5_7a1dff5f","updated":"2018-11-29 20:07:49.000000000","message":"Tin you are right...No need to make any changes here.","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"}],"neutron/templates/deployment-server.yaml":[{"author":{"_account_id":20889,"name":"Niketu Parekh","email":"niketu.parekh@ericsson.com","username":"niketukparekh"},"change_message_id":"1bcff72df7601ee92062bb999e718b708bee18ff","unresolved":false,"context_lines":[{"line_number":60,"context_line":"      containers:"},{"line_number":61,"context_line":"        - name: neutron-server"},{"line_number":62,"context_line":"{{ tuple $envAll \"neutron_server\" | include \"helm-toolkit.snippets.image\" | indent 10 }}"},{"line_number":63,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.server | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":64,"context_line":"          command:"},{"line_number":65,"context_line":"            - /tmp/neutron-server.sh"},{"line_number":66,"context_line":"            - start"},{"line_number":67,"context_line":"          lifecycle:"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"3f79a3b5_c9361ee0","line":64,"range":{"start_line":63,"start_character":0,"end_line":64,"end_character":2},"updated":"2018-11-26 21:39:52.000000000","message":"Since neturon-server container is running as non root user, pls add container level security context with \"allowPrivilegeEscalation: false\" as per recommendation (k8s documenation - https://kubernetes.io/docs/concepts/policy/pod-security-policy/#users-and-groups)","commit_id":"27e2482d8a8f8fdfb12dc13bff9b66a306144b44"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"91b485623aab51783da7d1ef3413fe4e38e6370c","unresolved":false,"context_lines":[{"line_number":61,"context_line":"        - name: neutron-server"},{"line_number":62,"context_line":"{{ tuple $envAll \"neutron_server\" | include \"helm-toolkit.snippets.image\" | indent 10 }}"},{"line_number":63,"context_line":"{{ tuple $envAll $envAll.Values.pod.resources.server | include \"helm-toolkit.snippets.kubernetes_resources\" | indent 10 }}"},{"line_number":64,"context_line":"          securityContest:"},{"line_number":65,"context_line":"            allowPrivilegeEscalation: false"},{"line_number":66,"context_line":"          command:"},{"line_number":67,"context_line":"            - /tmp/neutron-server.sh"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"3f79a3b5_5cd03857","line":64,"range":{"start_line":64,"start_character":18,"end_line":64,"end_character":25},"updated":"2018-11-30 06:42:50.000000000","message":"Context","commit_id":"6ab3f00aa80e690e362c76d6aef59fb17f6dc93d"}]}