)]}'
{"neutron/values.yaml":[{"author":{"_account_id":18250,"name":"Roy Tang","email":"roy.s.tang@att.com","username":"rt7380"},"change_message_id":"070ecf0165b65faa879b965168a8371cbc2928fd","unresolved":false,"context_lines":[{"line_number":1860,"context_line":""},{"line_number":1861,"context_line":"network_policy:"},{"line_number":1862,"context_line":"  neutron:"},{"line_number":1863,"context_line":"    # TODO(lamt): Need to tighten this ingress for security."},{"line_number":1864,"context_line":"    ingress:"},{"line_number":1865,"context_line":"      - from:"},{"line_number":1866,"context_line":"        - podSelector:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_9969d4c0","line":1863,"range":{"start_line":1863,"start_character":0,"end_line":1863,"end_character":60},"updated":"2018-12-14 15:42:43.000000000","message":"remove comment","commit_id":"09a3c6445b4b0c77ee76db40a2b481d95f70cfb6"},{"author":{"_account_id":18250,"name":"Roy Tang","email":"roy.s.tang@att.com","username":"rt7380"},"change_message_id":"070ecf0165b65faa879b965168a8371cbc2928fd","unresolved":false,"context_lines":[{"line_number":1862,"context_line":"  neutron:"},{"line_number":1863,"context_line":"    # TODO(lamt): Need to tighten this ingress for security."},{"line_number":1864,"context_line":"    ingress:"},{"line_number":1865,"context_line":"      - from:"},{"line_number":1866,"context_line":"        - podSelector:"},{"line_number":1867,"context_line":"            matchLabels:"},{"line_number":1868,"context_line":"              application: neutron"},{"line_number":1869,"context_line":"        - podSelector:"},{"line_number":1870,"context_line":"            matchLabels:"},{"line_number":1871,"context_line":"              application: ingress"},{"line_number":1872,"context_line":"        - podSelector:"},{"line_number":1873,"context_line":"            matchLabels:"},{"line_number":1874,"context_line":"              application: nova"},{"line_number":1875,"context_line":"        - podSelector:"},{"line_number":1876,"context_line":"            matchLabels:"},{"line_number":1877,"context_line":"              application: heat"},{"line_number":1878,"context_line":"        - podSelector:"},{"line_number":1879,"context_line":"            matchLabels:"},{"line_number":1880,"context_line":"              application: horizon"},{"line_number":1881,"context_line":"        ports:"},{"line_number":1882,"context_line":"        - protocol: TCP"},{"line_number":1883,"context_line":"          port: 80"},{"line_number":1884,"context_line":"        - protocol: TCP"},{"line_number":1885,"context_line":"          port: 443"},{"line_number":1886,"context_line":"        - protocol: TCP"},{"line_number":1887,"context_line":"          port: 9696"},{"line_number":1888,"context_line":""},{"line_number":1889,"context_line":"manifests:"},{"line_number":1890,"context_line":"  configmap_bin: true"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_193ce4bb","line":1887,"range":{"start_line":1865,"start_character":13,"end_line":1887,"end_character":17},"updated":"2018-12-14 15:42:43.000000000","message":"Are these the only relevant ones?  and I am wondering if it makes sense to add a comment block to spell out the pods and ports mapping, make it easier to maintain going forward, particularly for pods that share same ports","commit_id":"09a3c6445b4b0c77ee76db40a2b481d95f70cfb6"}],"tools/deployment/common/test-networkpolicy.sh":[{"author":{"_account_id":18250,"name":"Roy Tang","email":"roy.s.tang@att.com","username":"rt7380"},"change_message_id":"070ecf0165b65faa879b965168a8371cbc2928fd","unresolved":false,"context_lines":[{"line_number":34,"context_line":"    sudo nsenter -t $PID -n wget --spider --timeout\u003d5 --tries\u003d1 $HOST"},{"line_number":35,"context_line":"  fi"},{"line_number":36,"context_line":"}"},{"line_number":37,"context_line":"# Doing negative tests"},{"line_number":38,"context_line":"test_netpol openstack keystone-api heat-api.openstack.svc.cluster.local fail"},{"line_number":39,"context_line":"test_netpol openstack keystone-api glance-api.openstack.svc.cluster.local fail"},{"line_number":40,"context_line":"test_netpol openstack mariadb-server rabbitmq.openstack.svc.cluster.local:5672 fail"},{"line_number":41,"context_line":"test_netpol openstack rabbitmq-rabbitmq memcached.openstack.svc.cluster.local:11211 fail"},{"line_number":42,"context_line":"test_netpol openstack memcached mariadb.openstack.svc.cluster.local:3306 fail"},{"line_number":43,"context_line":"test_netpol openstack glance-api neutron-server.openstack.svc.cluster.local:9696 fail"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"# Doing positive tests"},{"line_number":46,"context_line":"test_netpol openstack keystone-api mariadb.openstack.svc.cluster.local:3306 success"},{"line_number":47,"context_line":"test_netpol openstack keystone-api rabbitmq.openstack.svc.cluster.local:5672 success"},{"line_number":48,"context_line":"test_netpol openstack heat-api mariadb.openstack.svc.cluster.local:3306 success"},{"line_number":49,"context_line":"test_netpol openstack glance-api mariadb.openstack.svc.cluster.local:3306 success"},{"line_number":50,"context_line":"test_netpol openstack heat-api neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"echo Test successfully"}],"source_content_type":"text/x-sh","patch_set":1,"id":"3f79a3b5_a60d8f40","line":50,"range":{"start_line":37,"start_character":7,"end_line":50,"end_character":8},"updated":"2018-12-14 15:42:43.000000000","message":"should we add more positive and negative tests based on the ingress network policy that we are now adding for neutron?  I see you add glance and heat, but how about others like nova and such?","commit_id":"09a3c6445b4b0c77ee76db40a2b481d95f70cfb6"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"fa2e166ddbec2631d05d79cd1af3c1c1431ebcd0","unresolved":false,"context_lines":[{"line_number":51,"context_line":"test_netpol openstack heat-api neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":52,"context_line":"test_netpol openstack nova-api-osapi neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":53,"context_line":"test_netpol openstack neutron-server neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"echo Test successfully"}],"source_content_type":"text/x-sh","patch_set":8,"id":"5faad753_5331c2eb","line":54,"updated":"2019-09-11 20:26:27.000000000","message":"can we add a horizon -\u003e neutron test here as well?","commit_id":"b6f76ce161d8d398316755c14367452e2dca5a6b"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"c93d00886676e62c7ba93e78434b3283247ce69b","unresolved":false,"context_lines":[{"line_number":51,"context_line":"test_netpol openstack heat-api neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":52,"context_line":"test_netpol openstack nova-api-osapi neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":53,"context_line":"test_netpol openstack neutron-server neutron-server.openstack.svc.cluster.local:9696 success"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"echo Test successfully"}],"source_content_type":"text/x-sh","patch_set":8,"id":"5faad753_933c1ac0","line":54,"in_reply_to":"5faad753_5331c2eb","updated":"2019-09-11 20:27:20.000000000","message":"ingress -\u003e neutron too","commit_id":"b6f76ce161d8d398316755c14367452e2dca5a6b"}]}
