)]}'
{"doc/source/artifacts/designate/newton/designate_newton_architecture-page_draft.rst":[{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d0f60d3e4241071e13ae3f74d6de44b678a9ddfe","unresolved":false,"context_lines":[{"line_number":14,"context_line":"**Contacts**:"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"- PTL: Graham Hayes - irc handle"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"- Architect: Graham Hayes - irc handle"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"- Security Reviewer: Doug Chivers - irc handle"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3ac371cc_eb21beb5","line":17,"updated":"2016-08-16 15:56:05.000000000","message":"It would be useful to have those handles in the document","commit_id":"b9473d6eca650050eac73e2fe2865f52fa5af868"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d0f60d3e4241071e13ae3f74d6de44b678a9ddfe","unresolved":false,"context_lines":[{"line_number":20,"context_line":"- Security Reviewer: Doug Chivers - irc handle"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"- Findings from security review: \u003clink\u003e"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"Project description and purpose"},{"line_number":26,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3ac371cc_4b31f204","line":23,"updated":"2016-08-16 15:56:05.000000000","message":"Link required","commit_id":"b9473d6eca650050eac73e2fe2865f52fa5af868"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"1e115cc753a7dbe5ef3e3cdd91b611f00e7782dd","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Designate (DNSaaS) architecture - Newton"},{"line_number":6,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"**Status**: Draft"},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ac371cc_4938d0a0","line":6,"range":{"start_line":6,"start_character":0,"end_line":6,"end_character":40},"updated":"2016-08-16 19:50:19.000000000","message":"Why the double header?","commit_id":"6e56f74cc39faec94aebe4391d96ddc659c8ee39"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"397adaf73fdae5be0d96269c94b91b0310dd2f15","unresolved":false,"context_lines":[{"line_number":85,"context_line":"  They are cached for the life of the token. Designate Pool Manager also caches"},{"line_number":86,"context_line":"  short term information in this service. This is the shared Memcached in use"},{"line_number":87,"context_line":"  by other HOS components in the same cluster."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Interfaces"},{"line_number":91,"context_line":"~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_fd07b219","line":88,"updated":"2016-08-16 21:29:22.000000000","message":"were these all meant to have a tag from: I-C, U-C, O-C?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":11397,"name":"Doug Chivers","email":"dougchivers@gmail.com","username":"dg"},"change_message_id":"613dc654bb28638fbc374cdfba92ce4de2d2fa6e","unresolved":false,"context_lines":[{"line_number":85,"context_line":"  They are cached for the life of the token. Designate Pool Manager also caches"},{"line_number":86,"context_line":"  short term information in this service. This is the shared Memcached in use"},{"line_number":87,"context_line":"  by other HOS components in the same cluster."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Interfaces"},{"line_number":91,"context_line":"~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_ad4dd73f","line":88,"in_reply_to":"3ac371cc_fd07b219","updated":"2016-08-17 19:53:33.000000000","message":"The expectation is that when we are writing architecture pages, we will include tags on all lines, but I am prepared to accept a slightly lower quality submission for third party reviews at this point. Happy to bounce this if you disagree?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"}],"doc/source/artifacts/designate/newton/designate_newton_review-findings.rst":[{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d0f60d3e4241071e13ae3f74d6de44b678a9ddfe","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Designate Security Review Findings - Newton"},{"line_number":6,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"**Status**: Completed"},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3ac371cc_e63613e6","line":6,"updated":"2016-08-16 15:56:05.000000000","message":"repetition?","commit_id":"b9473d6eca650050eac73e2fe2865f52fa5af868"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"d0f60d3e4241071e13ae3f74d6de44b678a9ddfe","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"**Contacts**:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"- PTL: Graham Hayes  - irc handle"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"- Architect: Graham Hayes - irc handle"},{"line_number":21,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3ac371cc_c62157a1","line":18,"updated":"2016-08-16 15:56:05.000000000","message":"Template question - do we need to have the contacts / header stuff repeated in each doc?","commit_id":"b9473d6eca650050eac73e2fe2865f52fa5af868"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"397adaf73fdae5be0d96269c94b91b0310dd2f15","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"**Contacts**:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"- PTL: Graham Hayes  - irc handle"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"- Architect: Graham Hayes - irc handle"},{"line_number":21,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_983decbd","line":18,"updated":"2016-08-16 21:29:22.000000000","message":"should we have the irc handle plugged in?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":11397,"name":"Doug Chivers","email":"dougchivers@gmail.com","username":"dg"},"change_message_id":"613dc654bb28638fbc374cdfba92ce4de2d2fa6e","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"**Contacts**:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"- PTL: Graham Hayes  - irc handle"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"- Architect: Graham Hayes - irc handle"},{"line_number":21,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_2d60c7a4","line":18,"in_reply_to":"3ac371cc_983decbd","updated":"2016-08-17 19:53:33.000000000","message":"Yes.","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"77320c11867f0d74215bf44c567e6920502d17ed","unresolved":false,"context_lines":[{"line_number":58,"context_line":"  binding to the Management network. (This applies unless the customer chooses"},{"line_number":59,"context_line":"  to place memcache on some other node or to bind to some other network). The"},{"line_number":60,"context_line":"  Configuration Processor provides the network and port number for memcache to"},{"line_number":61,"context_line":"  consuming services, and all other services are denied access via rules in"},{"line_number":62,"context_line":"  IPtables. There is no concept of “guest” account access to memcache; in fact"},{"line_number":63,"context_line":"  there is no “account” concept in memcache at all. Memcache stores key/value"},{"line_number":64,"context_line":"  pairs, so a service that uses memcache must know the key in order to retrieve"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_cc8155c5","line":61,"range":{"start_line":61,"start_character":2,"end_line":61,"end_character":11},"updated":"2016-08-17 09:03:34.000000000","message":"consume?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":11397,"name":"Doug Chivers","email":"dougchivers@gmail.com","username":"dg"},"change_message_id":"613dc654bb28638fbc374cdfba92ce4de2d2fa6e","unresolved":false,"context_lines":[{"line_number":58,"context_line":"  binding to the Management network. (This applies unless the customer chooses"},{"line_number":59,"context_line":"  to place memcache on some other node or to bind to some other network). The"},{"line_number":60,"context_line":"  Configuration Processor provides the network and port number for memcache to"},{"line_number":61,"context_line":"  consuming services, and all other services are denied access via rules in"},{"line_number":62,"context_line":"  IPtables. There is no concept of “guest” account access to memcache; in fact"},{"line_number":63,"context_line":"  there is no “account” concept in memcache at all. Memcache stores key/value"},{"line_number":64,"context_line":"  pairs, so a service that uses memcache must know the key in order to retrieve"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_6d811fc3","line":61,"range":{"start_line":61,"start_character":2,"end_line":61,"end_character":11},"in_reply_to":"3ac371cc_cc8155c5","updated":"2016-08-17 19:53:33.000000000","message":"Done","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"77320c11867f0d74215bf44c567e6920502d17ed","unresolved":false,"context_lines":[{"line_number":106,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"- **Risk**: Potential of unauthorized access to shared message queue service."},{"line_number":109,"context_line":"- **Impact**: If DNSaaS was compromised, message queues of multiple services"},{"line_number":110,"context_line":"  could"},{"line_number":111,"context_line":"  be exposed."},{"line_number":112,"context_line":"- **Likelihood**: Low"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_2ce1099b","line":109,"range":{"start_line":109,"start_character":24,"end_line":109,"end_character":27},"updated":"2016-08-17 09:03:34.000000000","message":"is?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":11397,"name":"Doug Chivers","email":"dougchivers@gmail.com","username":"dg"},"change_message_id":"613dc654bb28638fbc374cdfba92ce4de2d2fa6e","unresolved":false,"context_lines":[{"line_number":106,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"- **Risk**: Potential of unauthorized access to shared message queue service."},{"line_number":109,"context_line":"- **Impact**: If DNSaaS was compromised, message queues of multiple services"},{"line_number":110,"context_line":"  could"},{"line_number":111,"context_line":"  be exposed."},{"line_number":112,"context_line":"- **Likelihood**: Low"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_07f03f66","line":109,"range":{"start_line":109,"start_character":24,"end_line":109,"end_character":27},"in_reply_to":"3ac371cc_2ce1099b","updated":"2016-08-17 19:53:33.000000000","message":"Done","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"397adaf73fdae5be0d96269c94b91b0310dd2f15","unresolved":false,"context_lines":[{"line_number":112,"context_line":"- **Likelihood**: Low"},{"line_number":113,"context_line":"- **Impact**: High"},{"line_number":114,"context_line":"- **Overall Risk Rating**: Medium"},{"line_number":115,"context_line":"- **Bug**: \u003clink to launchpad bug for this finding\u003e"},{"line_number":116,"context_line":"- **Recommendation**: Verify that the message queue account for DNSaaS is"},{"line_number":117,"context_line":"  locked down so that the account is allowed to access only the DNSaaS"},{"line_number":118,"context_line":"  instances in the shared MQ service."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_b8fa68bb","line":115,"updated":"2016-08-16 21:29:22.000000000","message":"do we have this link?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":11397,"name":"Doug Chivers","email":"dougchivers@gmail.com","username":"dg"},"change_message_id":"613dc654bb28638fbc374cdfba92ce4de2d2fa6e","unresolved":false,"context_lines":[{"line_number":112,"context_line":"- **Likelihood**: Low"},{"line_number":113,"context_line":"- **Impact**: High"},{"line_number":114,"context_line":"- **Overall Risk Rating**: Medium"},{"line_number":115,"context_line":"- **Bug**: \u003clink to launchpad bug for this finding\u003e"},{"line_number":116,"context_line":"- **Recommendation**: Verify that the message queue account for DNSaaS is"},{"line_number":117,"context_line":"  locked down so that the account is allowed to access only the DNSaaS"},{"line_number":118,"context_line":"  instances in the shared MQ service."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_27ebbb79","line":115,"in_reply_to":"3ac371cc_b8fa68bb","updated":"2016-08-17 19:53:33.000000000","message":"I think this will be handled while we are validating the security review.","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"77320c11867f0d74215bf44c567e6920502d17ed","unresolved":false,"context_lines":[{"line_number":123,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"- **Risk**: Potential of unauthorized access to shared zookeeper service."},{"line_number":126,"context_line":"- **Impact**: If DNSaaS was compromised, zookeeper accounts of multiple"},{"line_number":127,"context_line":"  services could be exposed."},{"line_number":128,"context_line":"- **Likelihood**: Low"},{"line_number":129,"context_line":"- **Impact**: High"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_aceb3977","line":126,"range":{"start_line":126,"start_character":24,"end_line":126,"end_character":27},"updated":"2016-08-17 09:03:34.000000000","message":"is?","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"},{"author":{"_account_id":11397,"name":"Doug Chivers","email":"dougchivers@gmail.com","username":"dg"},"change_message_id":"613dc654bb28638fbc374cdfba92ce4de2d2fa6e","unresolved":false,"context_lines":[{"line_number":123,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"- **Risk**: Potential of unauthorized access to shared zookeeper service."},{"line_number":126,"context_line":"- **Impact**: If DNSaaS was compromised, zookeeper accounts of multiple"},{"line_number":127,"context_line":"  services could be exposed."},{"line_number":128,"context_line":"- **Likelihood**: Low"},{"line_number":129,"context_line":"- **Impact**: High"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ac371cc_c7e3c7a2","line":126,"range":{"start_line":126,"start_character":24,"end_line":126,"end_character":27},"in_reply_to":"3ac371cc_aceb3977","updated":"2016-08-17 19:53:33.000000000","message":"Done","commit_id":"f30ca312bc7092d5234e3b99e1270ed40fe7a137"}]}