)]}'
{"REVIEWING.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"0dc8aa385c6bc5aad1ba96388654d8d9f6ddc061","unresolved":false,"context_lines":[{"line_number":48,"context_line":"governance repository). Similary, translation workflow is also only"},{"line_number":49,"context_line":"enabled for Big Tent projects."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"Proposal jobs"},{"line_number":52,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"Proposal jobs run on the long running proposal slave that has access"},{"line_number":55,"context_line":"to the credentials that the jobs need to access Zanata and gerrit."},{"line_number":56,"context_line":"Jobs running there are the exception and need to be carefully reviewed"},{"line_number":57,"context_line":"before approving them."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Here are some points to look at:"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"* First response should be: How else can we achieve this?"},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"* Jobs can publish artifacts also to specific places, like"},{"line_number":64,"context_line":"  static.openstack.org or tarballs.openstack.org, and use these from"},{"line_number":65,"context_line":"  other jobs."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"* Proposal jobs should not run arbitrary scripts from other"},{"line_number":68,"context_line":"  repositories or install untrusted packages."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"Removing check-requirements job"},{"line_number":71,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"df87a7cf_d00b388b","side":"PARENT","line":68,"range":{"start_line":51,"start_character":0,"end_line":68,"end_character":45},"updated":"2017-12-20 05:25:11.000000000","message":"Let\u0027s rewrite the section, we still have proposal jobs...\n\nSince they access secrets, do we want to keep the policy above?","commit_id":"3d8979b6bea49d6c7668b2fb6cf0a008f6ed53ce"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1e807586aba6379e058f44c933342f9ede33679e","unresolved":false,"context_lines":[{"line_number":48,"context_line":"governance repository). Similary, translation workflow is also only"},{"line_number":49,"context_line":"enabled for Big Tent projects."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"Proposal jobs"},{"line_number":52,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"Proposal jobs run on the long running proposal slave that has access"},{"line_number":55,"context_line":"to the credentials that the jobs need to access Zanata and gerrit."},{"line_number":56,"context_line":"Jobs running there are the exception and need to be carefully reviewed"},{"line_number":57,"context_line":"before approving them."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Here are some points to look at:"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"* First response should be: How else can we achieve this?"},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"* Jobs can publish artifacts also to specific places, like"},{"line_number":64,"context_line":"  static.openstack.org or tarballs.openstack.org, and use these from"},{"line_number":65,"context_line":"  other jobs."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"* Proposal jobs should not run arbitrary scripts from other"},{"line_number":68,"context_line":"  repositories or install untrusted packages."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"Removing check-requirements job"},{"line_number":71,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1f9dbf25_b8508034","side":"PARENT","line":68,"range":{"start_line":51,"start_character":0,"end_line":68,"end_character":45},"in_reply_to":"df87a7cf_d00b388b","updated":"2018-02-27 20:28:56.000000000","message":"since those are handled differently, we can remove this...","commit_id":"3d8979b6bea49d6c7668b2fb6cf0a008f6ed53ce"}],"nodepool/elements/jenkins-slave/install.d/20-jenkins-slave":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"0dc8aa385c6bc5aad1ba96388654d8d9f6ddc061","unresolved":false,"context_lines":[{"line_number":22,"context_line":"if [ -d /opt/cache/files ] ; then"},{"line_number":23,"context_line":"    mkdir -p /home/jenkins/cache"},{"line_number":24,"context_line":"    ln -sf /opt/cache/files /home/jenkins/cache/files"},{"line_number":25,"context_line":"    chown -R jenkins:jenkins /opt/cache/files"},{"line_number":26,"context_line":"    # but make sure the cache is readable by everyone"},{"line_number":27,"context_line":"    chmod -R a+rX /opt/cache/files/*"},{"line_number":28,"context_line":"fi"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"# this was copied from outside the chroot by extras.d"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"df87a7cf_30faa474","side":"PARENT","line":27,"range":{"start_line":25,"start_character":0,"end_line":27,"end_character":35},"updated":"2017-12-20 05:25:11.000000000","message":"do we need parts of this with just different owners?","commit_id":"3d8979b6bea49d6c7668b2fb6cf0a008f6ed53ce"}]}