)]}'
{"doc/user-guides/source/adminuser/dashboard_manage_volumes.rst":[{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#. Create a volume type using the steps above for"},{"line_number":39,"context_line":"   **Create a volume type**."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"#. Click \"Create Encryption\" in the Actions column of the newly created volume"},{"line_number":42,"context_line":"   type."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. The following options are available for encrypted volumes:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_9584535e","line":41,"updated":"2015-05-05 08:08:13.000000000","message":"please use the :guilabel: markup for interactive user interface labels","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#. Create a volume type using the steps above for"},{"line_number":39,"context_line":"   **Create a volume type**."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"#. Click \"Create Encryption\" in the Actions column of the newly created volume"},{"line_number":42,"context_line":"   type."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. The following options are available for encrypted volumes:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_0bd2555c","line":41,"in_reply_to":"3acd31a7_9584535e","updated":"2015-05-05 16:43:15.000000000","message":"Done","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":41,"context_line":"#. Click \"Create Encryption\" in the Actions column of the newly created volume"},{"line_number":42,"context_line":"   type."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. The following options are available for encrypted volumes:"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"   * Provider: Nova.volume.encryptors.luks.LuksEncryptor (recommended)"},{"line_number":47,"context_line":"     - Provider specifies the class responsible for configuring the encryption"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_5556bbce","line":44,"updated":"2015-05-05 08:08:13.000000000","message":"I suggest the following rewording to keep the style --\u003e Configure the encrypted volume by setting the available options:","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":41,"context_line":"#. Click \"Create Encryption\" in the Actions column of the newly created volume"},{"line_number":42,"context_line":"   type."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. The following options are available for encrypted volumes:"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"   * Provider: Nova.volume.encryptors.luks.LuksEncryptor (recommended)"},{"line_number":47,"context_line":"     - Provider specifies the class responsible for configuring the encryption"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_8bc66598","line":44,"in_reply_to":"3acd31a7_5556bbce","updated":"2015-05-05 16:43:15.000000000","message":"Done","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. The following options are available for encrypted volumes:"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"   * Provider: Nova.volume.encryptors.luks.LuksEncryptor (recommended)"},{"line_number":47,"context_line":"     - Provider specifies the class responsible for configuring the encryption"},{"line_number":48,"context_line":"   * Control Location: front-end"},{"line_number":49,"context_line":"     - Back-end could be selected instead, if a Cinder plug-in supporting"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_d5e52b38","line":46,"updated":"2015-05-05 08:08:13.000000000","message":"I would rather use the definition list markuping here. Please see http://docutils.sourceforge.net/docs/user/rst/quickref.html#definition-lists for the details","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. The following options are available for encrypted volumes:"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"   * Provider: Nova.volume.encryptors.luks.LuksEncryptor (recommended)"},{"line_number":47,"context_line":"     - Provider specifies the class responsible for configuring the encryption"},{"line_number":48,"context_line":"   * Control Location: front-end"},{"line_number":49,"context_line":"     - Back-end could be selected instead, if a Cinder plug-in supporting"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_0b3935a4","line":46,"in_reply_to":"3acd31a7_d5e52b38","updated":"2015-05-05 16:43:15.000000000","message":"Done","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":50,"context_line":"     an encrypted back-end block storage device is available"},{"line_number":51,"context_line":"   * Cipher: aes-xts-plain64"},{"line_number":52,"context_line":"   * Key Size: 512"},{"line_number":53,"context_line":"     - **Note**: 256-bit keys could also be used, but the underlying"},{"line_number":54,"context_line":"     encryption would only be effectively 128-bit XTS encryption. Source:"},{"line_number":55,"context_line":"     http://csrc.nist.gov/publicaitons/nistpubs/800-38E/nist-sp-800-38E.pdf"},{"line_number":56,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_15fcc3b6","line":53,"updated":"2015-05-05 08:08:13.000000000","message":"please use .. note:: for notes. For details https://wiki.openstack.org/wiki/Documentation/Markup_conventions#Notes","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":50,"context_line":"     an encrypted back-end block storage device is available"},{"line_number":51,"context_line":"   * Cipher: aes-xts-plain64"},{"line_number":52,"context_line":"   * Key Size: 512"},{"line_number":53,"context_line":"     - **Note**: 256-bit keys could also be used, but the underlying"},{"line_number":54,"context_line":"     encryption would only be effectively 128-bit XTS encryption. Source:"},{"line_number":55,"context_line":"     http://csrc.nist.gov/publicaitons/nistpubs/800-38E/nist-sp-800-38E.pdf"},{"line_number":56,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_0b07f5ca","line":53,"in_reply_to":"3acd31a7_15fcc3b6","updated":"2015-05-05 16:43:15.000000000","message":"This section was removed (since it\u0027s in the table), but I\u0027ve used the ..note:: format elsewhere as requested","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":52,"context_line":"   * Key Size: 512"},{"line_number":53,"context_line":"     - **Note**: 256-bit keys could also be used, but the underlying"},{"line_number":54,"context_line":"     encryption would only be effectively 128-bit XTS encryption. Source:"},{"line_number":55,"context_line":"     http://csrc.nist.gov/publicaitons/nistpubs/800-38E/nist-sp-800-38E.pdf"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"#. Click \"Create Volume Type Encryption\""},{"line_number":58,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_75a8978d","line":55,"updated":"2015-05-05 08:08:13.000000000","message":"This link is unavailable. \n\nWhat\u0027s more for the links, I would prefer using some labels for references as follows --\u003e  `Link-name \u003chttp://link\u003e`_","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":54,"context_line":"     encryption would only be effectively 128-bit XTS encryption. Source:"},{"line_number":55,"context_line":"     http://csrc.nist.gov/publicaitons/nistpubs/800-38E/nist-sp-800-38E.pdf"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"#. Click \"Create Volume Type Encryption\""},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"   * **Note**: Once a volume type is updated by the Create Encryption"},{"line_number":60,"context_line":"     option, it cannot be deleted."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_55a91b8f","line":57,"updated":"2015-05-05 08:08:13.000000000","message":"the same with :guilabel:, please consider","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":54,"context_line":"     encryption would only be effectively 128-bit XTS encryption. Source:"},{"line_number":55,"context_line":"     http://csrc.nist.gov/publicaitons/nistpubs/800-38E/nist-sp-800-38E.pdf"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"#. Click \"Create Volume Type Encryption\""},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"   * **Note**: Once a volume type is updated by the Create Encryption"},{"line_number":60,"context_line":"     option, it cannot be deleted."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_ab280134","line":57,"in_reply_to":"3acd31a7_55a91b8f","updated":"2015-05-05 16:43:15.000000000","message":"Done","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"#. Click \"Create Volume Type Encryption\""},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"   * **Note**: Once a volume type is updated by the Create Encryption"},{"line_number":60,"context_line":"     option, it cannot be deleted."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"**Encryption Options**"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_15984377","line":59,"updated":"2015-05-05 08:08:13.000000000","message":"the same with .. note:: and :gillabel: for Create Encryption","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"#. Click \"Create Volume Type Encryption\""},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"   * **Note**: Once a volume type is updated by the Create Encryption"},{"line_number":60,"context_line":"     option, it cannot be deleted."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"**Encryption Options**"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_ebd95958","line":59,"in_reply_to":"3acd31a7_15984377","updated":"2015-05-05 16:43:15.000000000","message":"Done","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":59,"context_line":"   * **Note**: Once a volume type is updated by the Create Encryption"},{"line_number":60,"context_line":"     option, it cannot be deleted."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"**Encryption Options**"},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"The table below provides a few alternatives available for creating encrypted"},{"line_number":65,"context_line":"volumes."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_3501ff6a","line":62,"updated":"2015-05-05 08:08:13.000000000","message":"the table gives almost the same information as the definition list above, I do not think this is the best practice. I suggest removing the alternatives from the above list leaving a single variant for the user + add the note with the reference to this table for the available alternatives if needed.\n\nFor cross-referencing arbitrary locations, you can use the :ref: markup. For details, search for \":ref:\" here http://sphinx-doc.org/markup/inline.html","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":59,"context_line":"   * **Note**: Once a volume type is updated by the Create Encryption"},{"line_number":60,"context_line":"     option, it cannot be deleted."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"**Encryption Options**"},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"The table below provides a few alternatives available for creating encrypted"},{"line_number":65,"context_line":"volumes."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_8be9c5e8","line":62,"in_reply_to":"3acd31a7_3501ff6a","updated":"2015-05-05 16:43:15.000000000","message":"Done, but I\u0027m not sure what you want with the cross referencing.  The table is directly below the list.","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"9082362952fc4eed4ba66c6ebfd7e21826ce5df2","unresolved":false,"context_lines":[{"line_number":66,"context_line":""},{"line_number":67,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":68,"context_line":"|      Encryption    |      Parameter        |   Comments                 |"},{"line_number":69,"context_line":"|      Parameters    |      Options          |                            |"},{"line_number":70,"context_line":"+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+"},{"line_number":71,"context_line":"|   Provider (Class  |nova.volume.encryptors.|Allows easier import and    |"},{"line_number":72,"context_line":"|   for configuring  |luks.LuksEncryptor     |migration of imported       |"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_758097c0","line":69,"updated":"2015-05-05 08:08:13.000000000","message":"Encryption parameters and and Parameter options (correct the capitalization here, thanks \u003d)","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"24938baff2ababc3b260ad2ea9aa8d291ff5a456","unresolved":false,"context_lines":[{"line_number":66,"context_line":""},{"line_number":67,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":68,"context_line":"|      Encryption    |      Parameter        |   Comments                 |"},{"line_number":69,"context_line":"|      Parameters    |      Options          |                            |"},{"line_number":70,"context_line":"+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+"},{"line_number":71,"context_line":"|   Provider (Class  |nova.volume.encryptors.|Allows easier import and    |"},{"line_number":72,"context_line":"|   for configuring  |luks.LuksEncryptor     |migration of imported       |"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3acd31a7_8bd0a520","line":69,"in_reply_to":"3acd31a7_758097c0","updated":"2015-05-05 16:43:15.000000000","message":"Done","commit_id":"2cc378bdca7e8f6235ea8c57f354630aa8202879"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"f9666ea5fedae1e51806e320e00edbbe012f82e6","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#. Create a volume type using the steps above for"},{"line_number":39,"context_line":"   **Create a volume type**."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"#. Click :guilabel: \u0027Create Encryption\u0027 in the Actions column of the newly"},{"line_number":42,"context_line":"   created volume type."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"#. Configure the encrypted volume by setting the available options:"}],"source_content_type":"text/x-rst","patch_set":4,"id":"1aca2d91_c2e73cab","line":41,"updated":"2015-05-06 05:49:55.000000000","message":"Compare the markup with line 31 above and fix everywhere.","commit_id":"c210d50f443dd72de2f0d77fd604ecf5b66f1e4d"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":45,"context_line":"   Provider"},{"line_number":46,"context_line":"     Specifies the class responsible for configuring the encryption"},{"line_number":47,"context_line":"   Control Location"},{"line_number":48,"context_line":"     Specifies whether the encryption is from the front or back end"},{"line_number":49,"context_line":"   Cipher"},{"line_number":50,"context_line":"     Specifies encryption algorithm"},{"line_number":51,"context_line":"   Key Size"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_383cc692","line":48,"updated":"2015-05-06 15:37:12.000000000","message":"Suggest mentioning that the front-end is nova and back-end is cinder. (I know that it also appears below, but the information is necessary to understand what control location means.)","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":45,"context_line":"   Provider"},{"line_number":46,"context_line":"     Specifies the class responsible for configuring the encryption"},{"line_number":47,"context_line":"   Control Location"},{"line_number":48,"context_line":"     Specifies whether the encryption is from the front or back end"},{"line_number":49,"context_line":"   Cipher"},{"line_number":50,"context_line":"     Specifies encryption algorithm"},{"line_number":51,"context_line":"   Key Size"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_b9032eb8","line":48,"in_reply_to":"1aca2d91_383cc692","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":70,"context_line":"|   for configuring  |luks.LuksEncryptor     |migration of imported       |"},{"line_number":71,"context_line":"|   encryption)      |(Recommended)          |encrypted volumes, and      |"},{"line_number":72,"context_line":"|                    |                       |allows access key to be     |"},{"line_number":73,"context_line":"|                    |                       |changed without re-         |"},{"line_number":74,"context_line":"|                    |                       |encrypting the volume.      |"},{"line_number":75,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":76,"context_line":"|                    |nova.volume.encryptors.|Less disk overhead than     |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_38528614","line":73,"updated":"2015-05-06 15:37:12.000000000","message":"nit: splitting re-encrypting creates blank space when rendered (i.e., \"re- encrypting\"). Perhaps the \"re-\" should be moved to the next line?","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":70,"context_line":"|   for configuring  |luks.LuksEncryptor     |migration of imported       |"},{"line_number":71,"context_line":"|   encryption)      |(Recommended)          |encrypted volumes, and      |"},{"line_number":72,"context_line":"|                    |                       |allows access key to be     |"},{"line_number":73,"context_line":"|                    |                       |changed without re-         |"},{"line_number":74,"context_line":"|                    |                       |encrypting the volume.      |"},{"line_number":75,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":76,"context_line":"|                    |nova.volume.encryptors.|Less disk overhead than     |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_990072ac","line":73,"in_reply_to":"1aca2d91_38528614","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":78,"context_line":"|                    |CryptsetupEncryptor    |                            |"},{"line_number":79,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":80,"context_line":"| Control Location   | front-end             |The encryption occurs within|"},{"line_number":81,"context_line":"|                    | (Recommended)         |nova, and the data is       |"},{"line_number":82,"context_line":"|                    |                       |encrypted over the network  |"},{"line_number":83,"context_line":"|                    |                       |without any additional      |"},{"line_number":84,"context_line":"|                    |                       |encryption.                 |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_b8f696d5","line":81,"updated":"2015-05-06 15:37:12.000000000","message":"Suggestion: nova so that the data transmitted over the network is encrypted.","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":78,"context_line":"|                    |CryptsetupEncryptor    |                            |"},{"line_number":79,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":80,"context_line":"| Control Location   | front-end             |The encryption occurs within|"},{"line_number":81,"context_line":"|                    | (Recommended)         |nova, and the data is       |"},{"line_number":82,"context_line":"|                    |                       |encrypted over the network  |"},{"line_number":83,"context_line":"|                    |                       |without any additional      |"},{"line_number":84,"context_line":"|                    |                       |encryption.                 |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_59bbfac4","line":81,"in_reply_to":"1aca2d91_b8f696d5","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":86,"context_line":"|                    | back-end              |This could be selected if a |"},{"line_number":87,"context_line":"|                    |                       |cinder plug-in supporting   |"},{"line_number":88,"context_line":"|                    |                       |an encrypted back-end block |"},{"line_number":89,"context_line":"|                    |                       |storage device is available.|"},{"line_number":90,"context_line":"|                    |                       |TLS or other network        |"},{"line_number":91,"context_line":"|                    |                       |encryption would also be    |"},{"line_number":92,"context_line":"|                    |                       |needed.                     |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_d872727c","line":89,"updated":"2015-05-06 15:37:12.000000000","message":"is available -\u003e becomes available in the future\n\nTo the best of my knowledge, there are no back-end implementations of this feature at present.","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":86,"context_line":"|                    | back-end              |This could be selected if a |"},{"line_number":87,"context_line":"|                    |                       |cinder plug-in supporting   |"},{"line_number":88,"context_line":"|                    |                       |an encrypted back-end block |"},{"line_number":89,"context_line":"|                    |                       |storage device is available.|"},{"line_number":90,"context_line":"|                    |                       |TLS or other network        |"},{"line_number":91,"context_line":"|                    |                       |encryption would also be    |"},{"line_number":92,"context_line":"|                    |                       |needed.                     |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_ead8a6f1","line":89,"in_reply_to":"1aca2d91_d872727c","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":89,"context_line":"|                    |                       |storage device is available.|"},{"line_number":90,"context_line":"|                    |                       |TLS or other network        |"},{"line_number":91,"context_line":"|                    |                       |encryption would also be    |"},{"line_number":92,"context_line":"|                    |                       |needed.                     |"},{"line_number":93,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":94,"context_line":"|      Cipher        | aes-xts-plain64       |                            |"},{"line_number":95,"context_line":"|                    | (Recommended)         |                            |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_b81d7611","line":92,"updated":"2015-05-06 15:37:12.000000000","message":"Suggestion: needed. -\u003e needed to protect data as it traverses the network.","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":89,"context_line":"|                    |                       |storage device is available.|"},{"line_number":90,"context_line":"|                    |                       |TLS or other network        |"},{"line_number":91,"context_line":"|                    |                       |encryption would also be    |"},{"line_number":92,"context_line":"|                    |                       |needed.                     |"},{"line_number":93,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":94,"context_line":"|      Cipher        | aes-xts-plain64       |                            |"},{"line_number":95,"context_line":"|                    | (Recommended)         |                            |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_0ab1a28f","line":92,"in_reply_to":"1aca2d91_b81d7611","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":91,"context_line":"|                    |                       |encryption would also be    |"},{"line_number":92,"context_line":"|                    |                       |needed.                     |"},{"line_number":93,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":94,"context_line":"|      Cipher        | aes-xts-plain64       |                            |"},{"line_number":95,"context_line":"|                    | (Recommended)         |                            |"},{"line_number":96,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":97,"context_line":"|                    | aes-cbc-essiv         |                            |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_38a606c2","line":94,"updated":"2015-05-06 15:37:12.000000000","message":"cryptsetup supports a large number of ciphers and key sizes. Perhaps you could mention using\n\n  cryptsetup benchmark\n\nto determine what ciphers and key sizes are available.","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":91,"context_line":"|                    |                       |encryption would also be    |"},{"line_number":92,"context_line":"|                    |                       |needed.                     |"},{"line_number":93,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":94,"context_line":"|      Cipher        | aes-xts-plain64       |                            |"},{"line_number":95,"context_line":"|                    | (Recommended)         |                            |"},{"line_number":96,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":97,"context_line":"|                    | aes-cbc-essiv         |                            |"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_c96857f8","line":94,"in_reply_to":"1aca2d91_38a606c2","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":92,"context_line":"|                    |                       |needed.                     |"},{"line_number":93,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":94,"context_line":"|      Cipher        | aes-xts-plain64       |                            |"},{"line_number":95,"context_line":"|                    | (Recommended)         |                            |"},{"line_number":96,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":97,"context_line":"|                    | aes-cbc-essiv         |                            |"},{"line_number":98,"context_line":"+--------------------+-----------------------+----------------------------+"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_186d8a04","line":95,"updated":"2015-05-06 15:37:12.000000000","message":"Suggest referencing NIST 800-38E regarding why aes-xts-plain64 is recommended.","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":92,"context_line":"|                    |                       |needed.                     |"},{"line_number":93,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":94,"context_line":"|      Cipher        | aes-xts-plain64       |                            |"},{"line_number":95,"context_line":"|                    | (Recommended)         |                            |"},{"line_number":96,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":97,"context_line":"|                    | aes-cbc-essiv         |                            |"},{"line_number":98,"context_line":"+--------------------+-----------------------+----------------------------+"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_257371b3","line":95,"in_reply_to":"1aca2d91_186d8a04","updated":"2015-05-06 22:50:09.000000000","message":"Done","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"392fd3eab0290f7302e3dd029d41f0e41e2db840","unresolved":false,"context_lines":[{"line_number":96,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":97,"context_line":"|                    | aes-cbc-essiv         |                            |"},{"line_number":98,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":99,"context_line":"|     Key Size       | 512 (Recommended)     |The underlying encryption   |"},{"line_number":100,"context_line":"|                    |                       |for this key size is 256-bit|"},{"line_number":101,"context_line":"|                    |                       |AES-XTS*                    |"},{"line_number":102,"context_line":"+                    +-----------------------+----------------------------+"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_38c166e5","line":99,"updated":"2015-05-06 15:37:12.000000000","message":"If I recall correctly, a key size of 512 is only appropriate for AES-XTS because XTS mode reduces the actual key size to 256 bits. It looks like the max key size on my machine for aes-cbc-essiv is 256 bits -- not sure what happens when a larger key size is specified.\n\nAt the risk of forcing administrators to read the recommendation *and* comments, perhaps the key sizes should be 256 and 128 bits with the comment indicating that the key size should be doubled (to 512 and 256 bits) for AES-XTS?","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"22930679f8da9b3da400928f49f58de29925b237","unresolved":false,"context_lines":[{"line_number":96,"context_line":"+                    +-----------------------+----------------------------+"},{"line_number":97,"context_line":"|                    | aes-cbc-essiv         |                            |"},{"line_number":98,"context_line":"+--------------------+-----------------------+----------------------------+"},{"line_number":99,"context_line":"|     Key Size       | 512 (Recommended)     |The underlying encryption   |"},{"line_number":100,"context_line":"|                    |                       |for this key size is 256-bit|"},{"line_number":101,"context_line":"|                    |                       |AES-XTS*                    |"},{"line_number":102,"context_line":"+                    +-----------------------+----------------------------+"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1aca2d91_09c64f67","line":99,"in_reply_to":"1aca2d91_38c166e5","updated":"2015-05-06 22:50:09.000000000","message":"Done - addressed this concern but in a slightly different way","commit_id":"db6224f7b85157d02509b43b5b4996464504c915"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"c1aabf36a87fea6526d79b351d4d1075e0a423e4","unresolved":false,"context_lines":[{"line_number":35,"context_line":"Create an encrypted volume type"},{"line_number":36,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"#. Create a volume type using the steps above for **Create a volume type**."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"#. Click :guilabel:`Create Encryption` in the Actions column of the newly"},{"line_number":41,"context_line":"   created volume type."}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_1e6528e0","line":38,"updated":"2015-05-08 07:16:39.000000000","message":"`Create a volume type` could probably be made clickable.","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"c1aabf36a87fea6526d79b351d4d1075e0a423e4","unresolved":false,"context_lines":[{"line_number":37,"context_line":""},{"line_number":38,"context_line":"#. Create a volume type using the steps above for **Create a volume type**."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"#. Click :guilabel:`Create Encryption` in the Actions column of the newly"},{"line_number":41,"context_line":"   created volume type."},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"#. Configure the encrypted volume by setting the parameters below from available options (see table):"}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_1e3e48b8","line":40,"updated":"2015-05-08 07:16:39.000000000","message":"You probably want :guilabel:`Actions`.","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"c1aabf36a87fea6526d79b351d4d1075e0a423e4","unresolved":false,"context_lines":[{"line_number":48,"context_line":"     Specifies whether the encryption is from the front end (nova) or the"},{"line_number":49,"context_line":"     back end (cinder)"},{"line_number":50,"context_line":"   Cipher"},{"line_number":51,"context_line":"     Specifies encryption algorithm"},{"line_number":52,"context_line":"   Key Size"},{"line_number":53,"context_line":"     Specifies encryption key size"},{"line_number":54,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_5ea960de","line":51,"updated":"2015-05-08 07:16:39.000000000","message":"Specifies the encryption algorithm (for consistency)","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"c1aabf36a87fea6526d79b351d4d1075e0a423e4","unresolved":false,"context_lines":[{"line_number":50,"context_line":"   Cipher"},{"line_number":51,"context_line":"     Specifies encryption algorithm"},{"line_number":52,"context_line":"   Key Size"},{"line_number":53,"context_line":"     Specifies encryption key size"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"#. Click :guilabel:`Create Volume Type Encryption`"},{"line_number":56,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_1eac08ec","line":53,"updated":"2015-05-08 07:16:39.000000000","message":"Specifies the encryption key size","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"c1aabf36a87fea6526d79b351d4d1075e0a423e4","unresolved":false,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"   .. note::"},{"line_number":58,"context_line":"      Once a volume type is updated by the :guilabel:`Create"},{"line_number":59,"context_line":"      Encryption` option, it cannot be deleted."},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"**Encryption Options**"},{"line_number":62,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_1e93e8a4","line":59,"updated":"2015-05-08 07:16:39.000000000","message":"What is \"it\" ? I understand it is the volume type that can\u0027t be deleted, but I don\u0027t think it\u0027s right.","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":6802,"name":"Joel Coffman","email":"jmc7tp@gmail.com","username":"joel-coffman"},"change_message_id":"60dcbd54c5c004243132094613320310a33dcc8e","unresolved":false,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"   .. note::"},{"line_number":58,"context_line":"      Once a volume type is updated by the :guilabel:`Create"},{"line_number":59,"context_line":"      Encryption` option, it cannot be deleted."},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"**Encryption Options**"},{"line_number":62,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_25fa0c76","line":59,"in_reply_to":"1aca2d91_1e93e8a4","updated":"2015-05-08 13:30:05.000000000","message":"This point could be clarified, but once an (encrypted) volume has been created from an encrypted volume type, that volume type cannot be deleted.\n\nThe reason is an existing implementation artifact: all the encryption metadata is associated with the volume type rather than the volume. So deleting the volume type could render any existing volumes with that volume type inaccessible (because they can no longer fetch the encryption metadata needed to decrypt the volume).\n\nThere\u0027s a proposed change to address this issue if you\u0027re interested: https://review.openstack.org/#/c/176050/","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"e758b182e96a933a2556db7c88809ebf0f85544d","unresolved":false,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"   .. note::"},{"line_number":58,"context_line":"      Once a volume type is updated by the :guilabel:`Create"},{"line_number":59,"context_line":"      Encryption` option, it cannot be deleted."},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"**Encryption Options**"},{"line_number":62,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_fb401a36","line":59,"in_reply_to":"1aca2d91_25fa0c76","updated":"2015-05-09 07:13:53.000000000","message":"Thank you for the explanation! It\u0027s a surprising behavior, so it might be worth adding a note if the patch doesn\u0027t make its way in kilo.","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"},{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"c1aabf36a87fea6526d79b351d4d1075e0a423e4","unresolved":false,"context_lines":[{"line_number":67,"context_line":"|      Encryption    |      Parameter        |   Comments                 |"},{"line_number":68,"context_line":"|      parameters    |      options          |                            |"},{"line_number":69,"context_line":"+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+"},{"line_number":70,"context_line":"|   Provider (Class  |nova.volume.encryptors.|Allows easier import and    |"},{"line_number":71,"context_line":"|   for configuring  |luks.LuksEncryptor     |migration of imported       |"},{"line_number":72,"context_line":"|   encryption)      |(Recommended)          |encrypted volumes, and      |"},{"line_number":73,"context_line":"|                    |                       |allows access key to be     |"}],"source_content_type":"text/x-rst","patch_set":8,"id":"1aca2d91_beeab40d","line":70,"updated":"2015-05-08 07:16:39.000000000","message":"No need to redefine the meaning of the parameter I think.","commit_id":"46d987f371cf33829794304a9f0f19991698b8ae"}]}