)]}'
{"doc/arch-design/ch_legal-security-requirements.xml":[{"author":{"_account_id":4656,"name":"Sean M. Collins","email":"sean@coreitpro.com","username":"scollins"},"change_message_id":"880e6c107454ca4d3fee8309b381f0d5b403dc4a","unresolved":false,"context_lines":[{"line_number":48,"context_line":"     \u003ctitle\u003eSecurity\u003c/title\u003e"},{"line_number":49,"context_line":"     \u003cpara\u003eWhen deploying OpenStack in an enterprise as a private"},{"line_number":50,"context_line":"        cloud, you can generally assume it is behind a firewall"},{"line_number":51,"context_line":"        and within the trusted network alongside existing systems."},{"line_number":52,"context_line":"        Users of the cloud are typically employees or trusted"},{"line_number":53,"context_line":"        individuals that are bound by"},{"line_number":54,"context_line":"        the security requirements set forth by the company. This tends"}],"source_content_type":"application/xml","patch_set":1,"id":"1a4dcd0f_c732d15e","line":51,"updated":"2015-08-13 19:17:16.000000000","message":"I...... don\u0027t think this is a good assumption to go on. Have you ever heard of the term \"crunchy on the outside, soft and gooey on the inside\" ? If someone breaks through the firewall or other \"trusted network systems\" then there\u0027s no internal barriers to prevent attacks deeper in. Most of the security industry is pushing people to think about this, so I don\u0027t think we should be encouraging the \"oh it\u0027s behind the corporate firewall so it\u0027s safe\" mentality.","commit_id":"02d756ce85883c5e0507f2a094b76f4874b4f51d"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"8e929ec07ee34a08a1c7de9d93b3f656cf53b0a2","unresolved":false,"context_lines":[{"line_number":85,"context_line":"           specific OpenStack topologies needs. The domains and their trust requirements"},{"line_number":86,"context_line":"           depend on whether the cloud instance is public, private, or"},{"line_number":87,"context_line":"           hybrid.\u003c/para\u003e"},{"line_number":88,"context_line":"   \u003csimplsect\u003e"},{"line_number":89,"context_line":"     \u003ctitle\u003ePublic Security Domains\u003c/title\u003e"},{"line_number":90,"context_line":"     \u003cpara\u003eThe public security domain is an untrusted area of"},{"line_number":91,"context_line":"           the cloud infrastructure. It can refer to the Internet as a"}],"source_content_type":"application/xml","patch_set":1,"id":"1a4dcd0f_6d43b342","line":88,"updated":"2015-08-13 12:39:23.000000000","message":"\u003csimplsect\u003e  this should read \u003csimplesect\u003e. Please check throughout the file.","commit_id":"02d756ce85883c5e0507f2a094b76f4874b4f51d"},{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"cbc30d025e132a3b10a930eb7b82eb1a47daa6fa","unresolved":false,"context_lines":[{"line_number":85,"context_line":"           specific OpenStack topologies needs. The domains and their trust requirements"},{"line_number":86,"context_line":"           depend on whether the cloud instance is public, private, or"},{"line_number":87,"context_line":"           hybrid.\u003c/para\u003e"},{"line_number":88,"context_line":"   \u003csimplsect\u003e"},{"line_number":89,"context_line":"     \u003ctitle\u003ePublic Security Domains\u003c/title\u003e"},{"line_number":90,"context_line":"     \u003cpara\u003eThe public security domain is an untrusted area of"},{"line_number":91,"context_line":"           the cloud infrastructure. It can refer to the Internet as a"}],"source_content_type":"application/xml","patch_set":1,"id":"1a4dcd0f_bc46ab1f","line":88,"in_reply_to":"1a4dcd0f_6d43b342","updated":"2015-08-14 00:24:36.000000000","message":"Done","commit_id":"02d756ce85883c5e0507f2a094b76f4874b4f51d"},{"author":{"_account_id":8103,"name":"Deepti Navale","email":"dnavale@redhat.com","username":"dnavale"},"change_message_id":"2408ed7c45fc701d23ef21ea52956ab03a7b4620","unresolved":false,"context_lines":[{"line_number":147,"context_line":"            installation operates; it suggests avoiding situations in which"},{"line_number":148,"context_line":"            sharing hardware with others occurs.\u003c/para\u003e"},{"line_number":149,"context_line":"  \u003c/section\u003e"},{"line_number":150,"context_line":"  \u003csection xml:id\u003d\"security-baremetal\"\u003e"},{"line_number":151,"context_line":"      \u003cpara\u003eThere are other services worth considering that provide a"},{"line_number":152,"context_line":"            bare metal instance instead of a cloud. In other cases, it is"},{"line_number":153,"context_line":"            possible to replicate a second private cloud by integrating"}],"source_content_type":"application/xml","patch_set":1,"id":"1a4dcd0f_a18768b5","line":150,"updated":"2015-08-13 23:51:56.000000000","message":"Missing title?","commit_id":"02d756ce85883c5e0507f2a094b76f4874b4f51d"},{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"cbc30d025e132a3b10a930eb7b82eb1a47daa6fa","unresolved":false,"context_lines":[{"line_number":147,"context_line":"            installation operates; it suggests avoiding situations in which"},{"line_number":148,"context_line":"            sharing hardware with others occurs.\u003c/para\u003e"},{"line_number":149,"context_line":"  \u003c/section\u003e"},{"line_number":150,"context_line":"  \u003csection xml:id\u003d\"security-baremetal\"\u003e"},{"line_number":151,"context_line":"      \u003cpara\u003eThere are other services worth considering that provide a"},{"line_number":152,"context_line":"            bare metal instance instead of a cloud. In other cases, it is"},{"line_number":153,"context_line":"            possible to replicate a second private cloud by integrating"}],"source_content_type":"application/xml","patch_set":1,"id":"1a4dcd0f_5c53e7e2","line":150,"in_reply_to":"1a4dcd0f_a18768b5","updated":"2015-08-14 00:24:36.000000000","message":"Done","commit_id":"02d756ce85883c5e0507f2a094b76f4874b4f51d"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":47,"context_line":"  \u003csection xml:id\u003d\"security-overview\"\u003e"},{"line_number":48,"context_line":"     \u003ctitle\u003eSecurity\u003c/title\u003e"},{"line_number":49,"context_line":"     \u003cpara\u003eWhen deploying OpenStack in an enterprise as a private"},{"line_number":50,"context_line":"        cloud, despite activating a firewall, and binding"},{"line_number":51,"context_line":"        employees with security agreements, cloud architecture"},{"line_number":52,"context_line":"        should not make assumptions about safety and protection."},{"line_number":53,"context_line":"        In addition to considering the users, operators, or administrators"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_222916f3","line":50,"updated":"2015-08-14 01:52:47.000000000","message":"remove comma: \u0027firewall and binding\u0027","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":65,"context_line":"        requests encase sensitive information such as user names,"},{"line_number":66,"context_line":"        passwords, and authentication tokens. For this reason, placing"},{"line_number":67,"context_line":"        the API services behind hardware that performs SSL termination"},{"line_number":68,"context_line":"        is strongly recommended.\u003c/para\u003e"},{"line_number":69,"context_line":"          \u003cwarning\u003e"},{"line_number":70,"context_line":"            \u003cpara\u003eBe mindful of consistency when utilizing third party"},{"line_number":71,"context_line":"            clouds to explore authentication options.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_c23ab234","line":68,"updated":"2015-08-14 01:52:47.000000000","message":"passive voice","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":72,"context_line":"          \u003c/warning\u003e"},{"line_number":73,"context_line":"  \u003c/section\u003e"},{"line_number":74,"context_line":"  \u003csection xml:id\u003d\"security-domains\"\u003e"},{"line_number":75,"context_line":"     \u003ctitle\u003eSecurity Domains\u003c/title\u003e"},{"line_number":76,"context_line":"     \u003cpara\u003eA security domain comprises users, applications, servers or"},{"line_number":77,"context_line":"           networks that share common trust requirements and expectations"},{"line_number":78,"context_line":"           within a system. Typically, security domains have the same"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_42e0e2cc","line":75,"updated":"2015-08-14 01:52:47.000000000","message":"use sentence case for all titles","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":92,"context_line":"           whole or simply to networks over which the user has no"},{"line_number":93,"context_line":"           authority. Always consider this domain untrusted. For example,"},{"line_number":94,"context_line":"           in a hybrid cloud deployment, any information traversing"},{"line_number":95,"context_line":"           between and beyond the clouds is of the public domain and"},{"line_number":96,"context_line":"           untrustworthy.\u003c/para\u003e"},{"line_number":97,"context_line":"   \u003c/simplesect\u003e"},{"line_number":98,"context_line":"   \u003csimplesect\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_c2687224","line":95,"updated":"2015-08-14 01:52:47.000000000","message":"s/of/in","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":110,"context_line":"           their tenants.\u003c/para\u003e"},{"line_number":111,"context_line":"   \u003c/simplesect\u003e"},{"line_number":112,"context_line":"   \u003csimplesect\u003e"},{"line_number":113,"context_line":"     \u003ctitle\u003eGuest Security Domains\u003c/title\u003e"},{"line_number":114,"context_line":"     \u003cpara\u003eThe management security domain is where services interact."},{"line_number":115,"context_line":"           The networks in this domain transport confidential data such as configuration"},{"line_number":116,"context_line":"           parameters, user names, and passwords. Trust this domain when it is"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_c2c5d23d","line":113,"updated":"2015-08-14 01:52:47.000000000","message":"Change title to \u0027Management security domains\u0027","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":134,"context_line":"            over the choice of hypervisor. For example, Amazon uses"},{"line_number":135,"context_line":"            its own particular version of Xen. Properly securing your"},{"line_number":136,"context_line":"            hypervisor is important. Attacks made upon the"},{"line_number":137,"context_line":"            unsecured hypervisor are called a \"hypervisor breakout\"."},{"line_number":138,"context_line":"            Hypervisor breakout describes the event of a"},{"line_number":139,"context_line":"            compromised or malicious instance breaking out of the resource"},{"line_number":140,"context_line":"            controls of the hypervisor and gaining access to the bare"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_c284f2b2","line":137,"updated":"2015-08-14 01:52:47.000000000","message":"use tags instead of quotes. e.g. \u003cfirstterm\u003e","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":193,"context_line":"   \u003c/section\u003e"},{"line_number":194,"context_line":"   \u003csection xml:id\u003d\"security-multi-site\"\u003e"},{"line_number":195,"context_line":"       \u003ctitle\u003eMulti-site security\u003c/title\u003e"},{"line_number":196,"context_line":"       \u003cpara\u003eSecuring a multi-site OpenStack installation also brings"},{"line_number":197,"context_line":"             extra challenges. Tenants may expect a tenant-created network"},{"line_number":198,"context_line":"             to be secure. In a multi-site installation the use of a"},{"line_number":199,"context_line":"             non-private connection between sites may be required. This may"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_22611612","line":196,"updated":"2015-08-14 01:52:47.000000000","message":"del \u0027also\u0027","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":200,"context_line":"             mean that traffic would be visible to third parties and, in"},{"line_number":201,"context_line":"             cases where an application requires security, this issue"},{"line_number":202,"context_line":"             requires mitigation. Installing a VPN or encrypted connection"},{"line_number":203,"context_line":"             between sites is recommended in such instances.\u003c/para\u003e"},{"line_number":204,"context_line":"       \u003cpara\u003eAnother security consideration with regard to multi-site"},{"line_number":205,"context_line":"             deployments is Identity. Centralize authentication within a"},{"line_number":206,"context_line":"             multi-site deployment. Centralization provides a"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_c272b2e3","line":203,"updated":"2015-08-14 01:52:47.000000000","message":"passive \u0027is recommended\u0027","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":206,"context_line":"             multi-site deployment. Centralization provides a"},{"line_number":207,"context_line":"             single authentication point for users across the deployment,"},{"line_number":208,"context_line":"             as well as a single point of administration for traditional"},{"line_number":209,"context_line":"             create, read, update and delete operations. Centralized"},{"line_number":210,"context_line":"             authentication is also useful for auditing purposes because"},{"line_number":211,"context_line":"             all authentication tokens originate from the same"},{"line_number":212,"context_line":"             source.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_a25c464d","line":209,"updated":"2015-08-14 01:52:47.000000000","message":"Oxford comma required: \u0027update,\u0027","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":225,"context_line":"   \u003csection xml:id\u003d\"openstack-components-multi-site\"\u003e"},{"line_number":226,"context_line":"      \u003ctitle\u003eOpenStack components\u003c/title\u003e"},{"line_number":227,"context_line":"       \u003cpara\u003eMost OpenStack installations require a bare minimum set of"},{"line_number":228,"context_line":"             pieces to function. These include the OpenStack Identity"},{"line_number":229,"context_line":"             (keystone) for authentication, OpenStack Compute"},{"line_number":230,"context_line":"             (nova) for compute, OpenStack Image service (glance) for image"},{"line_number":231,"context_line":"             storage, OpenStack Networking (neutron) for networking, and"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_423462fa","line":228,"updated":"2015-08-14 01:52:47.000000000","message":"s/include the OpenStack/include OpenStack","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":236,"context_line":"             point. Centralized dashboard is also recommended to provide a"},{"line_number":237,"context_line":"             single login point and a mapped experience to the API and CLI"},{"line_number":238,"context_line":"             options available. If necessary, a centralized Object Storage"},{"line_number":239,"context_line":"             service may be used and will require the installation of the"},{"line_number":240,"context_line":"             swift proxy service.\u003c/para\u003e"},{"line_number":241,"context_line":"       \u003cpara\u003eIt may also be helpful to install a few extra options in"},{"line_number":242,"context_line":"             order to facilitate certain use cases. For instance,"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_421b0281","line":239,"updated":"2015-08-14 01:52:47.000000000","message":"passive and future","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":240,"context_line":"             swift proxy service.\u003c/para\u003e"},{"line_number":241,"context_line":"       \u003cpara\u003eIt may also be helpful to install a few extra options in"},{"line_number":242,"context_line":"             order to facilitate certain use cases. For instance,"},{"line_number":243,"context_line":"             installing designate may assist in automatically generating"},{"line_number":244,"context_line":"             DNS domains for each region with an automatically-populated"},{"line_number":245,"context_line":"             zone full of resource records for each instance. This"},{"line_number":246,"context_line":"             facilitates using DNS as a mechanism for determining which"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_564bc35f","line":243,"updated":"2015-08-14 01:52:47.000000000","message":"the DNS service (designate)","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":246,"context_line":"             facilitates using DNS as a mechanism for determining which"},{"line_number":247,"context_line":"             region would be selected for certain applications.\u003c/para\u003e"},{"line_number":248,"context_line":"       \u003cpara\u003eAnother useful tool for managing a multi-site installation"},{"line_number":249,"context_line":"             is Orchestration (heat). The Orchestration module allows the"},{"line_number":250,"context_line":"             use of templates to define a set of instances to be launched"},{"line_number":251,"context_line":"             together or for scaling existing sets. It can also be used to"},{"line_number":252,"context_line":"             setup matching or differentiated groupings based on"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_f63c4fc1","line":249,"updated":"2015-08-14 01:52:47.000000000","message":"OpenStack Orchestration (heat)","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"14cee03d67afca333f279ed5f57879aa29db97ad","unresolved":false,"context_lines":[{"line_number":248,"context_line":"       \u003cpara\u003eAnother useful tool for managing a multi-site installation"},{"line_number":249,"context_line":"             is Orchestration (heat). The Orchestration module allows the"},{"line_number":250,"context_line":"             use of templates to define a set of instances to be launched"},{"line_number":251,"context_line":"             together or for scaling existing sets. It can also be used to"},{"line_number":252,"context_line":"             setup matching or differentiated groupings based on"},{"line_number":253,"context_line":"             regions. For instance, if an application requires an equally"},{"line_number":254,"context_line":"             balanced number of nodes across sites, the same heat template"}],"source_content_type":"application/xml","patch_set":3,"id":"1a4dcd0f_569983cf","line":251,"updated":"2015-08-14 01:52:47.000000000","message":"s/It can also be used to setup/It can set up","commit_id":"9ac324ce614e68e0813e8c246fbaa4cc4af0af22"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0e4cbfeea76a7e59e2c36f92e2e6698593436550","unresolved":false,"context_lines":[{"line_number":85,"context_line":"           depend on whether the cloud instance is public, private, or"},{"line_number":86,"context_line":"           hybrid.\u003c/para\u003e"},{"line_number":87,"context_line":"   \u003csimplesect\u003e"},{"line_number":88,"context_line":"     \u003ctitle\u003ePublic Security Domains\u003c/title\u003e"},{"line_number":89,"context_line":"     \u003cpara\u003eThe public security domain is an untrusted area of"},{"line_number":90,"context_line":"           the cloud infrastructure. It can refer to the Internet as a"},{"line_number":91,"context_line":"           whole or simply to networks over which the user has no"}],"source_content_type":"application/xml","patch_set":4,"id":"1a4dcd0f_6f50620b","line":88,"updated":"2015-08-14 04:01:51.000000000","message":"sentence case","commit_id":"82ca2cbd2ad888a2bf8439c13ce1695cdae9270d"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0e4cbfeea76a7e59e2c36f92e2e6698593436550","unresolved":false,"context_lines":[{"line_number":95,"context_line":"           untrustworthy.\u003c/para\u003e"},{"line_number":96,"context_line":"   \u003c/simplesect\u003e"},{"line_number":97,"context_line":"   \u003csimplesect\u003e"},{"line_number":98,"context_line":"     \u003ctitle\u003eGuest Security Domains\u003c/title\u003e"},{"line_number":99,"context_line":"     \u003cpara\u003eTypically used for compute instance-to-instance traffic, the"},{"line_number":100,"context_line":"           guest security domain handles compute data generated by"},{"line_number":101,"context_line":"           instances on the cloud but not services that support the"}],"source_content_type":"application/xml","patch_set":4,"id":"1a4dcd0f_2f5a5a2b","line":98,"updated":"2015-08-14 04:01:51.000000000","message":"sentence case","commit_id":"82ca2cbd2ad888a2bf8439c13ce1695cdae9270d"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0e4cbfeea76a7e59e2c36f92e2e6698593436550","unresolved":false,"context_lines":[{"line_number":116,"context_line":"           behind an organization\u0027s firewall in deployments.\u003c/para\u003e"},{"line_number":117,"context_line":"   \u003c/simplesect\u003e"},{"line_number":118,"context_line":"   \u003csimplesect\u003e"},{"line_number":119,"context_line":"     \u003ctitle\u003eData Security Domains\u003c/title\u003e"},{"line_number":120,"context_line":"     \u003cpara\u003eThe data security domain is concerned primarily with"},{"line_number":121,"context_line":"           information pertaining to the storage services within"},{"line_number":122,"context_line":"           OpenStack. The data that crosses this network has integrity and"}],"source_content_type":"application/xml","patch_set":4,"id":"1a4dcd0f_cf3f36b4","line":119,"updated":"2015-08-14 04:01:51.000000000","message":"sentence case","commit_id":"82ca2cbd2ad888a2bf8439c13ce1695cdae9270d"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0e4cbfeea76a7e59e2c36f92e2e6698593436550","unresolved":false,"context_lines":[{"line_number":249,"context_line":"             is OpenStack Orchestration (heat). The Orchestration module"},{"line_number":250,"context_line":"             allows the use of templates to define a set of instances to"},{"line_number":251,"context_line":"             be launched together or for scaling existing sets. It can"},{"line_number":252,"context_line":"             setup matching or differentiated groupings based on"},{"line_number":253,"context_line":"             regions. For instance, if an application requires an equally"},{"line_number":254,"context_line":"             balanced number of nodes across sites, the same heat template"},{"line_number":255,"context_line":"             can be used to cover each site with small alterations to only"}],"source_content_type":"application/xml","patch_set":4,"id":"1a4dcd0f_2fa81adb","line":252,"updated":"2015-08-14 04:01:51.000000000","message":"s/setup/set up","commit_id":"82ca2cbd2ad888a2bf8439c13ce1695cdae9270d"}]}