)]}'
{"id":"openstack%2Fopenstack-helm~775539","triplet_id":"openstack%2Fopenstack-helm~master~Ib572e09151414355eb781ffda6e0fe38431fb274","project":"openstack/openstack-helm","branch":"master","topic":"postgresql-tls","hashtags":[],"change_id":"Ib572e09151414355eb781ffda6e0fe38431fb274","subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement","status":"ABANDONED","created":"2021-02-14 22:29:08.000000000","updated":"2022-01-21 21:06:54.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"f9f6c42abd3d229fc812b0b50d71bfe948ca8840","_number":775539,"virtual_id_number":775539,"owner":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2021-05-02 16:17:59.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-02-14 23:20:25.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-02-24 08:01:05.000000000","updated_by":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"reviewer":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"state":"REVIEWER"}],"messages":[{"id":"c2f879409479e707e8ea49ce2149b8a62da4b195","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"date":"2021-02-14 22:29:08.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"174bf075daae08c5085f7615eaac5fc931cfd5e5","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"date":"2021-02-14 22:40:21.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"c9094c3b2c367cbd71fcf3e84d19b1ab6501f911","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-14 23:20:25.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/90230677504248b5878506f137270006 : SUCCESS in 4m 13s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/51f8bb1f01b0409e956203b472905288 : SUCCESS in 3m 50s\n- openstack-helm-cinder-stein-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/de005e07c94f4772b2423db55fa67069 : SUCCESS in 38m 55s\n- openstack-helm-cinder-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/98eea6a8b1a545179957f49478035673 : SUCCESS in 38m 39s\n- openstack-helm-cinder-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/90c2128ce9614544983c9ed213c29641 : SUCCESS in 37m 49s\n- openstack-helm-compute-kit-stein-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/c6e6ee9640ce49c9b6ec949b275f095b : SUCCESS in 37m 06s\n- openstack-helm-compute-kit-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/fe3da2de91024ff7b3fa20ded6d3cc39 : SUCCESS in 37m 03s\n- openstack-helm-compute-kit-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/c4b82480a090416aa2169e35c87a8328 : SUCCESS in 37m 08s","accounts_in_message":[],"_revision_number":2},{"id":"9678802f410d8d7cf79629e8d3b08220037ae1ca","author":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"date":"2021-02-24 08:01:05.000000000","message":"Patch Set 2: Code-Review-1\n\nupdate reno","accounts_in_message":[],"_revision_number":2},{"id":"9d1f7c55b108549aab95f2bf52f9f79fb804d6f4","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"date":"2021-02-24 08:54:33.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"8e67c80b6e1a63cb6bee0fb333cf7570a0689ba8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-24 10:01:37.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/adf6b737125149c495c0114d2b959ad6 : SUCCESS in 5m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e528dbf311c7430585bbcb2cd81f8021 : SUCCESS in 4m 15s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/c7119da9c4314f4ead57389ddb5f473b : SUCCESS in 5m 29s\n- openstack-helm-cinder-stein-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/072f56bd0f5f4e418bfe8136f839240c : SUCCESS in 48m 20s\n- openstack-helm-cinder-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/cc7bc723bb114fe2ab47d7d9497cd62a : SUCCESS in 49m 13s\n- openstack-helm-cinder-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/b4c2f75ee5f346bebca4c3323956537a : SUCCESS in 45m 25s\n- openstack-helm-compute-kit-stein-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/72d2e2263d0444c8892e8c7f03a727cd : SUCCESS in 48m 08s\n- openstack-helm-compute-kit-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/c06ca6b45396423caa025abbc98d7a01 : SUCCESS in 46m 47s\n- openstack-helm-compute-kit-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/84ac2fcbdecd40ea9a83a7581096d781 : SUCCESS in 49m 15s","accounts_in_message":[],"_revision_number":3},{"id":"5efb0194a8a701d7b87e0f3322e0a5af2d6e8a96","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"date":"2021-02-26 19:54:58.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"4968cf6222d0396ee0aa6f6c376b1e40018cde0e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-26 20:55:08.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d549f152ce46464395ed650822b939b0 : SUCCESS in 5m 39s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b3cf66f6dbab420a89e2e8267f1c08eb : SUCCESS in 4m 39s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/67e876990b8b4348b310b07551337753 : SUCCESS in 5m 39s\n- openstack-helm-cinder-stein-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/d7cd101d1f9a4fdab7ff6297eb3fe34d : SUCCESS in 52m 37s\n- openstack-helm-cinder-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/755bd8f22f5a4244a19a7444c6fe6327 : SUCCESS in 47m 46s\n- openstack-helm-cinder-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/43989d63c4a34fe78f08c4fc7647d427 : SUCCESS in 49m 46s\n- openstack-helm-compute-kit-stein-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/1c6b926a346943418eec1808c7f055f1 : SUCCESS in 48m 16s\n- openstack-helm-compute-kit-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/32a5496e9b6d4e3980b10da4baeabfaa : SUCCESS in 51m 37s\n- openstack-helm-compute-kit-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/1d47785a06bf40098bcaade908253fc6 : SUCCESS in 54m 12s","accounts_in_message":[],"_revision_number":4},{"id":"8b7d342d837f656d57bf1ed300d814dfc3fe1e42","author":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"date":"2021-03-10 06:48:27.000000000","message":"Patch Set 4: Code-Review+1","accounts_in_message":[],"_revision_number":4},{"id":"794c0fd6e03b58aadad83baeab26d1ed755b4b79","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"date":"2021-05-02 15:29:09.000000000","message":"Uploaded patch set 5.","accounts_in_message":[],"_revision_number":5},{"id":"1423439e592bd6521fdf548f26d410b1bbe4f8c8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-05-02 16:17:59.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/47734d7597294d05b60bf114cb143da8 : SUCCESS in 4m 56s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/298810f5834044fba863cd3f9fbe52c2 : SUCCESS in 4m 07s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/18a5f5145bc244cdb3aef3fe8c172649 : SUCCESS in 6m 05s\n- openstack-helm-cinder-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/4ed06563a44849af982b8ec6ec44d1be : SUCCESS in 45m 12s\n- openstack-helm-cinder-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/cac17fda9d284080b130e6f8b7652e24 : SUCCESS in 43m 57s\n- openstack-helm-compute-kit-train-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/fdfc8420b3544814aad316e47d6962c1 : SUCCESS in 46m 15s\n- openstack-helm-compute-kit-ussuri-ubuntu_bionic https://zuul.opendev.org/t/openstack/build/f12340abc2b1432c88f67ec9c9cad51f : SUCCESS in 48m 26s","accounts_in_message":[],"_revision_number":5},{"id":"f9f6c42abd3d229fc812b0b50d71bfe948ca8840","tag":"autogenerated:gerrit:abandon","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2022-01-21 21:06:54.000000000","message":"Abandoned\n\nAbandoning since there hasn\u0027t been any recent activity, if anyone wants to continue this work, please feel free to restore this or create a new change.","accounts_in_message":[],"_revision_number":5}],"current_revision_number":5,"current_revision":"34cf5928b708e7580ce1e54d24374a3db841b6a4","revisions":{"ed124b5d5685b934bd32802381494300815fb678":{"kind":"REWORK","_number":1,"created":"2021-02-14 22:29:08.000000000","uploader":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"ref":"refs/changes/39/775539/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/39/775539/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/1"}}},"commit":{"parents":[{"commit":"1e138919e35fbfc5e5290deb93904661a3445c43","subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Nova","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/1e138919e35fbfc5e5290deb93904661a3445c43"}]}],"author":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:25:47.000000000","tz":60},"committer":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:28:35.000000000","tz":60},"subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement","message":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement\n\nDue to psycopg2 enforcing file permissions and ownership on TLS\ncertificates during connections to PostgreSQL, this approach uses init\ncontainers, because:\n- 0600-or-less permissions are expected of TLS private keys, just\n  mouting the subpath or specifying per-item permissions achieves this,\n  however…\n- certificates need to be owned by the in-container system user\n  connecting to the database, which rarely ends up being the case\n\nChange-Id: Ib572e09151414355eb781ffda6e0fe38431fb274\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ed124b5d5685b934bd32802381494300815fb678"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ed124b5d5685b934bd32802381494300815fb678"}]},"branch":"refs/heads/master"},"f6fef173c783e9ad2fb76730ad8ff7b0495caf25":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2021-02-14 22:40:21.000000000","uploader":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"ref":"refs/changes/39/775539/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/39/775539/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/2"}}},"commit":{"parents":[{"commit":"2ffb35a47fbcaebf30f9bcb9bb094d476f7410d3","subject":"Merge \"Update typo in subPath for volume mount\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/2ffb35a47fbcaebf30f9bcb9bb094d476f7410d3"}]}],"author":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:25:47.000000000","tz":60},"committer":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:40:04.000000000","tz":60},"subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement","message":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement\n\nDue to psycopg2 enforcing file permissions and ownership on TLS\ncertificates during connections to PostgreSQL, this approach uses init\ncontainers, because:\n- 0600-or-less permissions are expected of TLS private keys, just\n  mouting the subpath or specifying per-item permissions achieves this,\n  however…\n- certificates need to be owned by the in-container system user\n  connecting to the database, which rarely ends up being the case\n\nChange-Id: Ib572e09151414355eb781ffda6e0fe38431fb274\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f6fef173c783e9ad2fb76730ad8ff7b0495caf25"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f6fef173c783e9ad2fb76730ad8ff7b0495caf25"}]},"branch":"refs/heads/master"},"c3fc645c589c4dd07798a9e8762011d1cd7a9305":{"kind":"REWORK","_number":3,"created":"2021-02-24 08:54:33.000000000","uploader":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"ref":"refs/changes/39/775539/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/39/775539/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/3"}}},"commit":{"parents":[{"commit":"05d989cc9b3f48c02e02e569261a18f2e463473f","subject":"Merge \"[ceph] OSH:Make sure loopback devices persistent across reboots\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/05d989cc9b3f48c02e02e569261a18f2e463473f"}]}],"author":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:25:47.000000000","tz":60},"committer":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-24 08:54:12.000000000","tz":60},"subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement","message":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement\n\nDue to psycopg2 enforcing file permissions and ownership on TLS\ncertificates during connections to PostgreSQL, this approach uses init\ncontainers, because:\n- 0600-or-less permissions are expected of TLS private keys, just\n  mouting the subpath or specifying per-item permissions achieves this,\n  however…\n- certificates need to be owned by the in-container system user\n  connecting to the database, which rarely ends up being the case\n\nChange-Id: Ib572e09151414355eb781ffda6e0fe38431fb274\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c3fc645c589c4dd07798a9e8762011d1cd7a9305"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c3fc645c589c4dd07798a9e8762011d1cd7a9305"}]},"branch":"refs/heads/master"},"1c0e9877aea7620402ef4f350804131c600aa0c5":{"kind":"REWORK","_number":4,"created":"2021-02-26 19:54:58.000000000","uploader":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"ref":"refs/changes/39/775539/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/39/775539/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/4"}}},"commit":{"parents":[{"commit":"ca47e3c97481c8c2bdf1f3b69cabcf8bef867871","subject":"Re-enable \"feat(tls): Change Issuer to ClusterIssuer\"\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ca47e3c97481c8c2bdf1f3b69cabcf8bef867871"}]}],"author":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:25:47.000000000","tz":60},"committer":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-26 19:54:43.000000000","tz":60},"subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement","message":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement\n\nDue to psycopg2 enforcing file permissions and ownership on TLS\ncertificates during connections to PostgreSQL, this approach uses init\ncontainers, because:\n- 0600-or-less permissions are expected of TLS private keys, just\n  mouting the subpath or specifying per-item permissions achieves this,\n  however…\n- certificates need to be owned by the in-container system user\n  connecting to the database, which rarely ends up being the case\n\nChange-Id: Ib572e09151414355eb781ffda6e0fe38431fb274\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/1c0e9877aea7620402ef4f350804131c600aa0c5"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/1c0e9877aea7620402ef4f350804131c600aa0c5"}]},"branch":"refs/heads/master"},"34cf5928b708e7580ce1e54d24374a3db841b6a4":{"kind":"REWORK","_number":5,"created":"2021-05-02 15:29:09.000000000","uploader":{"_account_id":32871,"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","username":"ksdziekonski"},"ref":"refs/changes/39/775539/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/39/775539/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/39/775539/5"}}},"commit":{"parents":[{"commit":"5233582991889bef3d65ecd452519c3ee9195f9e","subject":"Remove support for openstack releases older than T","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/5233582991889bef3d65ecd452519c3ee9195f9e"}]}],"author":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-02-14 22:25:47.000000000","tz":60},"committer":{"name":"Ksawery Dziekoński","email":"ksdziekonski@gmail.com","date":"2021-05-02 15:28:56.000000000","tz":120},"subject":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement","message":"Added PostgreSQL TLS support and snippets fixing cert permissions for Placement\n\nDue to psycopg2 enforcing file permissions and ownership on TLS\ncertificates during connections to PostgreSQL, this approach uses init\ncontainers, because:\n- 0600-or-less permissions are expected of TLS private keys, just\n  mouting the subpath or specifying per-item permissions achieves this,\n  however…\n- certificates need to be owned by the in-container system user\n  connecting to the database, which rarely ends up being the case\n\nChange-Id: Ib572e09151414355eb781ffda6e0fe38431fb274\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/34cf5928b708e7580ce1e54d24374a3db841b6a4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/34cf5928b708e7580ce1e54d24374a3db841b6a4"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}