)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Adding data processing chapter"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This change introduces the data processing service chapter as chapter 13"},{"line_number":10,"context_line":"in the securit guide."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Changes"},{"line_number":13,"context_line":"* adding data processing chapter to index"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"da86d52c_5200d801","line":10,"updated":"2015-02-11 21:40:40.000000000","message":"security","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"}],"security-guide/bk-openstack-security-guide.xml":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":36,"context_line":"        \u003crevhistory\u003e"},{"line_number":37,"context_line":"            \u003c!-- ... continue adding more revisions here as you change this document using the markup shown below... --\u003e"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"            \u003crevision\u003e"},{"line_number":40,"context_line":"                \u003cdate\u003e2014-10-16\u003c/date\u003e"},{"line_number":41,"context_line":"                \u003crevdescription\u003e"},{"line_number":42,"context_line":"                    \u003citemizedlist\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_0f840eb0","line":39,"updated":"2015-02-13 20:33:38.000000000","message":"This new chapter could be mentioned here - could you add a new entry?","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":36,"context_line":"        \u003crevhistory\u003e"},{"line_number":37,"context_line":"            \u003c!-- ... continue adding more revisions here as you change this document using the markup shown below... --\u003e"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"            \u003crevision\u003e"},{"line_number":40,"context_line":"                \u003cdate\u003e2014-10-16\u003c/date\u003e"},{"line_number":41,"context_line":"                \u003crevdescription\u003e"},{"line_number":42,"context_line":"                    \u003citemizedlist\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_e8023971","line":39,"in_reply_to":"da86d52c_0f840eb0","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"}],"security-guide/section_data-processing-case-studies.xml":[{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"1b6b047b6a96656e9442383fedced06a6e3387a4","unresolved":false,"context_lines":[{"line_number":13,"context_line":"    users."},{"line_number":14,"context_line":"  \u003c/para\u003e"},{"line_number":15,"context_line":"  \u003csection xml:id\u003d\"data-processing-case-studies-alice\"\u003e"},{"line_number":16,"context_line":"    \u003ctitle\u003eAlice\u0027s private cloud\u003c/title\u003e "},{"line_number":17,"context_line":"    \u003cpara\u003e"},{"line_number":18,"context_line":"      Alice is deploying the Data processing service for a group users that"},{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a "}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_fdd19dfb","line":16,"updated":"2015-02-11 21:13:48.000000000","message":"bah!  space!","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":13,"context_line":"    users."},{"line_number":14,"context_line":"  \u003c/para\u003e"},{"line_number":15,"context_line":"  \u003csection xml:id\u003d\"data-processing-case-studies-alice\"\u003e"},{"line_number":16,"context_line":"    \u003ctitle\u003eAlice\u0027s private cloud\u003c/title\u003e "},{"line_number":17,"context_line":"    \u003cpara\u003e"},{"line_number":18,"context_line":"      Alice is deploying the Data processing service for a group users that"},{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a "}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_ecf80c7e","line":16,"in_reply_to":"da86d52c_fdd19dfb","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"66c500dada9ad5abd991dfbff094e76568c3a7b1","unresolved":false,"context_lines":[{"line_number":22,"context_line":"      self-signed root certificate. She configures the controller to provide"},{"line_number":23,"context_line":"      floating IP addresses to the cluster nodes allowing for users to"},{"line_number":24,"context_line":"      gain access to the nodes in the event of errors. She enables the use"},{"line_number":25,"context_line":"      of proxy domains to prevent the users from entering their credentials"},{"line_number":26,"context_line":"      into the Data processing service."},{"line_number":27,"context_line":"    \u003c/para\u003e"},{"line_number":28,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_fd77ddd1","line":25,"updated":"2015-02-11 21:23:27.000000000","message":"maybe slightly better wording (feel free to ignore)\n...to prevent the users from needing to enter their credentials....","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"be31537c058237139ab31d6fa29feb59918f3309","unresolved":false,"context_lines":[{"line_number":22,"context_line":"      self-signed root certificate. She configures the controller to provide"},{"line_number":23,"context_line":"      floating IP addresses to the cluster nodes allowing for users to"},{"line_number":24,"context_line":"      gain access to the nodes in the event of errors. She enables the use"},{"line_number":25,"context_line":"      of proxy domains to prevent the users from entering their credentials"},{"line_number":26,"context_line":"      into the Data processing service."},{"line_number":27,"context_line":"    \u003c/para\u003e"},{"line_number":28,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_f8ca8b4d","line":25,"in_reply_to":"da86d52c_fd77ddd1","updated":"2015-02-11 21:39:22.000000000","message":"good suggestion","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using the organization\u0027s self-signed root certificate. He configures"},{"line_number":37,"context_line":"      a custom topology to ensure that access to the cluster nodes"},{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway.He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from entering their credentials into the Data"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_1d3831d2","line":38,"updated":"2015-02-11 21:40:40.000000000","message":"Space after period.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using the organization\u0027s self-signed root certificate. He configures"},{"line_number":37,"context_line":"      a custom topology to ensure that access to the cluster nodes"},{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway.He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from entering their credentials into the Data"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_2cef84b2","line":38,"in_reply_to":"da86d52c_1d3831d2","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"66c500dada9ad5abd991dfbff094e76568c3a7b1","unresolved":false,"context_lines":[{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway.He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from entering their credentials into the Data"},{"line_number":42,"context_line":"      processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_9d37c1fe","line":41,"updated":"2015-02-11 21:23:27.000000000","message":"same wording tweak","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway.He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from entering their credentials into the Data"},{"line_number":42,"context_line":"      processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_8c31505c","line":41,"in_reply_to":"da86d52c_9d37c1fe","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":15,"context_line":"  \u003csection xml:id\u003d\"data-processing-case-studies-alice\"\u003e"},{"line_number":16,"context_line":"    \u003ctitle\u003eAlice\u0027s private cloud\u003c/title\u003e"},{"line_number":17,"context_line":"    \u003cpara\u003e"},{"line_number":18,"context_line":"      Alice is deploying the Data processing service for a group users that"},{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a"},{"line_number":20,"context_line":"      single project and share the clusters, jobs, and data within. She"},{"line_number":21,"context_line":"      deploys the controller with TLS enabled, using the organization\u0027s"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_c6a93c91","line":18,"updated":"2015-02-12 19:21:07.000000000","message":"This should this be: \"Data Processing\" or \"data processing\"\n\"a group of users\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"0b01fca1e6f6fdc5b46201e87115f2f697879546","unresolved":false,"context_lines":[{"line_number":15,"context_line":"  \u003csection xml:id\u003d\"data-processing-case-studies-alice\"\u003e"},{"line_number":16,"context_line":"    \u003ctitle\u003eAlice\u0027s private cloud\u003c/title\u003e"},{"line_number":17,"context_line":"    \u003cpara\u003e"},{"line_number":18,"context_line":"      Alice is deploying the Data processing service for a group users that"},{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a"},{"line_number":20,"context_line":"      single project and share the clusters, jobs, and data within. She"},{"line_number":21,"context_line":"      deploys the controller with TLS enabled, using the organization\u0027s"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_714e8c39","line":18,"updated":"2015-02-12 19:53:36.000000000","message":"group _of_ users","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":15,"context_line":"  \u003csection xml:id\u003d\"data-processing-case-studies-alice\"\u003e"},{"line_number":16,"context_line":"    \u003ctitle\u003eAlice\u0027s private cloud\u003c/title\u003e"},{"line_number":17,"context_line":"    \u003cpara\u003e"},{"line_number":18,"context_line":"      Alice is deploying the Data processing service for a group users that"},{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a"},{"line_number":20,"context_line":"      single project and share the clusters, jobs, and data within. She"},{"line_number":21,"context_line":"      deploys the controller with TLS enabled, using the organization\u0027s"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_dfcf3a7d","line":18,"in_reply_to":"da86d52c_714e8c39","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"0b01fca1e6f6fdc5b46201e87115f2f697879546","unresolved":false,"context_lines":[{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a"},{"line_number":20,"context_line":"      single project and share the clusters, jobs, and data within. She"},{"line_number":21,"context_line":"      deploys the controller with TLS enabled, using the organization\u0027s"},{"line_number":22,"context_line":"      self-signed root certificate. She configures the controller to provide"},{"line_number":23,"context_line":"      floating IP addresses to the cluster nodes allowing for users to"},{"line_number":24,"context_line":"      gain access to the nodes in the event of errors. She enables the use"},{"line_number":25,"context_line":"      of proxy domains to prevent the users from needing to entering their"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_12562e5c","line":22,"updated":"2015-02-12 19:53:36.000000000","message":"More correct here would be using a cert that is signed by the organization\u0027s root cert.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":19,"context_line":"      are trusted members of a collaboration. They are all placed in a"},{"line_number":20,"context_line":"      single project and share the clusters, jobs, and data within. She"},{"line_number":21,"context_line":"      deploys the controller with TLS enabled, using the organization\u0027s"},{"line_number":22,"context_line":"      self-signed root certificate. She configures the controller to provide"},{"line_number":23,"context_line":"      floating IP addresses to the cluster nodes allowing for users to"},{"line_number":24,"context_line":"      gain access to the nodes in the event of errors. She enables the use"},{"line_number":25,"context_line":"      of proxy domains to prevent the users from needing to entering their"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_ffca3e6c","line":22,"in_reply_to":"da86d52c_12562e5c","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":22,"context_line":"      self-signed root certificate. She configures the controller to provide"},{"line_number":23,"context_line":"      floating IP addresses to the cluster nodes allowing for users to"},{"line_number":24,"context_line":"      gain access to the nodes in the event of errors. She enables the use"},{"line_number":25,"context_line":"      of proxy domains to prevent the users from needing to entering their"},{"line_number":26,"context_line":"      credentials into the Data processing service."},{"line_number":27,"context_line":"    \u003c/para\u003e"},{"line_number":28,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_26cbf872","line":25,"updated":"2015-02-12 19:21:07.000000000","message":"\"needing to enter\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":22,"context_line":"      self-signed root certificate. She configures the controller to provide"},{"line_number":23,"context_line":"      floating IP addresses to the cluster nodes allowing for users to"},{"line_number":24,"context_line":"      gain access to the nodes in the event of errors. She enables the use"},{"line_number":25,"context_line":"      of proxy domains to prevent the users from needing to entering their"},{"line_number":26,"context_line":"      credentials into the Data processing service."},{"line_number":27,"context_line":"    \u003c/para\u003e"},{"line_number":28,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_5fa34ab1","line":25,"in_reply_to":"da86d52c_26cbf872","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"0b01fca1e6f6fdc5b46201e87115f2f697879546","unresolved":false,"context_lines":[{"line_number":30,"context_line":"    \u003ctitle\u003eBob\u0027s public cloud\u003c/title\u003e"},{"line_number":31,"context_line":"    \u003cpara\u003e"},{"line_number":32,"context_line":"      Bob\u0027s public cloud contains users that will not necessarily"},{"line_number":33,"context_line":"      know or trust each other. He puts all users into separate projects,"},{"line_number":34,"context_line":"      each user has their own clusters, jobs, and data which cannot be"},{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using the organization\u0027s self-signed root certificate. He configures"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_d29d760b","line":33,"updated":"2015-02-12 19:53:36.000000000","message":"I suggest a period after projects, instead of a comma.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":30,"context_line":"    \u003ctitle\u003eBob\u0027s public cloud\u003c/title\u003e"},{"line_number":31,"context_line":"    \u003cpara\u003e"},{"line_number":32,"context_line":"      Bob\u0027s public cloud contains users that will not necessarily"},{"line_number":33,"context_line":"      know or trust each other. He puts all users into separate projects,"},{"line_number":34,"context_line":"      each user has their own clusters, jobs, and data which cannot be"},{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using the organization\u0027s self-signed root certificate. He configures"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_1fc2b233","line":33,"in_reply_to":"da86d52c_d29d760b","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":34,"context_line":"      each user has their own clusters, jobs, and data which cannot be"},{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using the organization\u0027s self-signed root certificate. He configures"},{"line_number":37,"context_line":"      a custom topology to ensure that access to the cluster nodes"},{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway. He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_a630c856","line":37,"updated":"2015-02-12 19:21:07.000000000","message":"\"access to the provisioned cluster nodes will flow\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":34,"context_line":"      each user has their own clusters, jobs, and data which cannot be"},{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using the organization\u0027s self-signed root certificate. He configures"},{"line_number":37,"context_line":"      a custom topology to ensure that access to the cluster nodes"},{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway. He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_bf36064f","line":37,"in_reply_to":"da86d52c_a630c856","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway. He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from needing to entering their credentials into the"},{"line_number":42,"context_line":"      Data processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_664250ac","line":41,"updated":"2015-02-12 19:21:07.000000000","message":"\"needing to enter their\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":38,"context_line":"      provisioned will flow through a controlled gateway. He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from needing to entering their credentials into the"},{"line_number":42,"context_line":"      Data processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_5f7b4af4","line":41,"in_reply_to":"da86d52c_664250ac","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from needing to entering their credentials into the"},{"line_number":42,"context_line":"      Data processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."},{"line_number":45,"context_line":"    \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_26513862","line":42,"updated":"2015-02-12 19:21:07.000000000","message":"Should this be: \"Data Processing\" or \"data processing\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"},{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from needing to entering their credentials into the"},{"line_number":42,"context_line":"      Data processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."},{"line_number":45,"context_line":"    \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_ffd79ebc","line":42,"in_reply_to":"da86d52c_26513862","updated":"2015-02-12 21:57:02.000000000","message":"i think for consistency\u0027s sake i\u0027m going to make all these references lower case with the exception of when using the phrase \"OpenStack Data processing service\". also, the P in processing is lowercase according to the official naming convention.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from needing to entering their credentials into the"},{"line_number":42,"context_line":"      Data processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."},{"line_number":45,"context_line":"    \u003c/para\u003e"},{"line_number":46,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_d1c818aa","line":43,"updated":"2015-02-12 19:21:07.000000000","message":"Maybe if it doesn\u0027t change the meaning: \"He configures the rootwrap command to allow the data processing controller user to run the proxy commands.\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":40,"context_line":"      access the frameworks deployed. He enables the use of proxy domains to"},{"line_number":41,"context_line":"      prevent the users from needing to entering their credentials into the"},{"line_number":42,"context_line":"      Data processing service. He configures the rootwrap command to allow the"},{"line_number":43,"context_line":"      non-root user that the controller runs under to run the proxy commands"},{"line_number":44,"context_line":"      for the custom network topology."},{"line_number":45,"context_line":"    \u003c/para\u003e"},{"line_number":46,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_7f680ef5","line":43,"in_reply_to":"da86d52c_d1c818aa","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":33,"context_line":"      know or trust each other. He puts all users into separate projects."},{"line_number":34,"context_line":"      Each user has their own clusters, jobs, and data which cannot be"},{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using a certificate signed by the organization\u0027s root certificate. He"},{"line_number":37,"context_line":"      configures a custom topology to ensure that access to the provisioned"},{"line_number":38,"context_line":"      cluster nodes will flow through a controlled gateway. He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_e67c7b22","line":36,"updated":"2015-02-19 20:15:22.000000000","message":"Which organization?  I\u0027m thinking that for this use case the cert should be signed for a well known CA.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":33,"context_line":"      know or trust each other. He puts all users into separate projects."},{"line_number":34,"context_line":"      Each user has their own clusters, jobs, and data which cannot be"},{"line_number":35,"context_line":"      accessed by other users. He deploys the controller with TLS enabled,"},{"line_number":36,"context_line":"      using a certificate signed by the organization\u0027s root certificate. He"},{"line_number":37,"context_line":"      configures a custom topology to ensure that access to the provisioned"},{"line_number":38,"context_line":"      cluster nodes will flow through a controlled gateway. He creates a"},{"line_number":39,"context_line":"      security group that opens only the ports needed for the controller to"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_298d847c","line":36,"in_reply_to":"da86d52c_e67c7b22","updated":"2015-02-19 21:58:59.000000000","message":"i was referring to the installing organization, but i agree it makes more sense to reference a well know CA. i will change this.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"}],"security-guide/section_data-processing-configuration-and-hardening.xml":[{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":54,"context_line":"      The reasons for doing this will change depending on the organizational"},{"line_number":55,"context_line":"      requirements of the installation. In general though, these fine"},{"line_number":56,"context_line":"      grained controls are used in situations where an operator needs to"},{"line_number":57,"context_line":"      restrict the creation, deletion, and access to the data processing"},{"line_number":58,"context_line":"      resources. Operators who need to restrict access within a project"},{"line_number":59,"context_line":"      should be fully aware that there will need to be alternative means for"},{"line_number":60,"context_line":"      users to gain access to the core functionality of the service (for"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_3d8df57c","line":57,"updated":"2015-02-11 21:40:40.000000000","message":"Change \"to\" to \"of\": it works for all verbs. Consider \"retrieval\" instead of \"access\"; works better with of.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":54,"context_line":"      The reasons for doing this will change depending on the organizational"},{"line_number":55,"context_line":"      requirements of the installation. In general though, these fine"},{"line_number":56,"context_line":"      grained controls are used in situations where an operator needs to"},{"line_number":57,"context_line":"      restrict the creation, deletion, and access to the data processing"},{"line_number":58,"context_line":"      resources. Operators who need to restrict access within a project"},{"line_number":59,"context_line":"      should be fully aware that there will need to be alternative means for"},{"line_number":60,"context_line":"      users to gain access to the core functionality of the service (for"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_4c14b8e8","line":57,"in_reply_to":"da86d52c_3d8df57c","updated":"2015-02-11 22:18:34.000000000","message":"sounds good to me","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":105,"context_line":"  \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-proxy-domains\"\u003e"},{"line_number":106,"context_line":"    \u003ctitle\u003eProxy domains\u003c/title\u003e"},{"line_number":107,"context_line":"    \u003cpara\u003e"},{"line_number":108,"context_line":"      When using the Object Store service in conjunction with data"},{"line_number":109,"context_line":"      processing it is necessary to add credentials for the store access."},{"line_number":110,"context_line":"      With proxy domains the data processing service can instead use a"},{"line_number":111,"context_line":"      delegated trust from the Identity service to allow store access via a"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_dd113905","line":108,"updated":"2015-02-11 21:40:40.000000000","message":"Inconsistent capitalization of Data Processing throughout this paragraph?","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":119,"context_line":"      credentials provided for object store access. When using proxy domains"},{"line_number":120,"context_line":"      the credentials that will be stored are random, and the access of the"},{"line_number":121,"context_line":"      proxy user is limited to that of the identity trust. We recommend"},{"line_number":122,"context_line":"      using proxy domains in any installation where the controller or it’s"},{"line_number":123,"context_line":"      database have routes to or from public networks."},{"line_number":124,"context_line":"    \u003c/para\u003e"},{"line_number":125,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_1d1e710c","line":122,"updated":"2015-02-11 21:40:40.000000000","message":"its.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":119,"context_line":"      credentials provided for object store access. When using proxy domains"},{"line_number":120,"context_line":"      the credentials that will be stored are random, and the access of the"},{"line_number":121,"context_line":"      proxy user is limited to that of the identity trust. We recommend"},{"line_number":122,"context_line":"      using proxy domains in any installation where the controller or it’s"},{"line_number":123,"context_line":"      database have routes to or from public networks."},{"line_number":124,"context_line":"    \u003c/para\u003e"},{"line_number":125,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_0c3d602b","line":122,"in_reply_to":"da86d52c_1d1e710c","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":136,"context_line":"    \u003ctitle\u003eCustom network topologies\u003c/title\u003e"},{"line_number":137,"context_line":"    \u003cpara\u003e"},{"line_number":138,"context_line":"      The data processing controller can be configured to use proxy commands"},{"line_number":139,"context_line":"      for accessing it’s cluster nodes. In this manner custom network"},{"line_number":140,"context_line":"      topologies can be created for installations which will not use the"},{"line_number":141,"context_line":"      networks provided directly by the Networking service. We recommend"},{"line_number":142,"context_line":"      using this option for installations which require limiting access"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_bddac548","line":139,"updated":"2015-02-11 21:40:40.000000000","message":"its.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":136,"context_line":"    \u003ctitle\u003eCustom network topologies\u003c/title\u003e"},{"line_number":137,"context_line":"    \u003cpara\u003e"},{"line_number":138,"context_line":"      The data processing controller can be configured to use proxy commands"},{"line_number":139,"context_line":"      for accessing it’s cluster nodes. In this manner custom network"},{"line_number":140,"context_line":"      topologies can be created for installations which will not use the"},{"line_number":141,"context_line":"      networks provided directly by the Networking service. We recommend"},{"line_number":142,"context_line":"      using this option for installations which require limiting access"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_ac09b485","line":139,"in_reply_to":"da86d52c_bddac548","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":154,"context_line":"    \u003c/para\u003e"},{"line_number":155,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":156,"context_line":"      [DEFAULT]"},{"line_number":157,"context_line":"      proxy_command\u003d\u0027ip netns exec ns_for_{network_id} nc {host} {port}\u0027"},{"line_number":158,"context_line":"    \u003c/programlisting\u003e"},{"line_number":159,"context_line":"  \u003c/section\u003e"},{"line_number":160,"context_line":"  \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-indirect-access\"\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_5d71c90a","line":157,"updated":"2015-02-11 21:40:40.000000000","message":"It might be worth noting (likely in the description above) that this will only function if Sahara is running on the control plane, not in a VM that consumes the controller\u0027s services.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":154,"context_line":"    \u003c/para\u003e"},{"line_number":155,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":156,"context_line":"      [DEFAULT]"},{"line_number":157,"context_line":"      proxy_command\u003d\u0027ip netns exec ns_for_{network_id} nc {host} {port}\u0027"},{"line_number":158,"context_line":"    \u003c/programlisting\u003e"},{"line_number":159,"context_line":"  \u003c/section\u003e"},{"line_number":160,"context_line":"  \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-indirect-access\"\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_ac80d4bf","line":157,"in_reply_to":"da86d52c_5d71c90a","updated":"2015-02-11 22:18:34.000000000","message":"i wonder if we should get into that discussion given that we are suggesting installing to an actual host on the control plane?","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc60350bb56ddb76d346b08615963a0cf0626748","unresolved":false,"context_lines":[{"line_number":115,"context_line":"      proxy users."},{"line_number":116,"context_line":"    \u003c/para\u003e"},{"line_number":117,"context_line":"    \u003cpara\u003e"},{"line_number":118,"context_line":"      The data processing controller retains temporary storage of the"},{"line_number":119,"context_line":"      credentials provided for object store access. When using proxy domains"},{"line_number":120,"context_line":"      the credentials that will be stored are random, and the access of the"},{"line_number":121,"context_line":"      proxy user is limited to that of the identity trust. We recommend"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_22eeaded","line":118,"updated":"2015-02-11 23:02:38.000000000","message":"What is the standard when it\u0027s \"data processing controller\"? Is that still a capital D?","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c7d0b061f3de0d0d41c6d8a566cb611409b89989","unresolved":false,"context_lines":[{"line_number":115,"context_line":"      proxy users."},{"line_number":116,"context_line":"    \u003c/para\u003e"},{"line_number":117,"context_line":"    \u003cpara\u003e"},{"line_number":118,"context_line":"      The data processing controller retains temporary storage of the"},{"line_number":119,"context_line":"      credentials provided for object store access. When using proxy domains"},{"line_number":120,"context_line":"      the credentials that will be stored are random, and the access of the"},{"line_number":121,"context_line":"      proxy user is limited to that of the identity trust. We recommend"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_853203a5","line":118,"in_reply_to":"da86d52c_22eeaded","updated":"2015-02-11 23:17:20.000000000","message":"that is a good question, i\u0027m not sure.","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"2545c5c57a575d7150f02291236cdc66c2ceaaed","unresolved":false,"context_lines":[{"line_number":8,"context_line":"  \u003ctitle\u003eConfiguration and hardening\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    There are several configuration options and deployment strategies that"},{"line_number":11,"context_line":"    can improve security in the Data processing service. The service"},{"line_number":12,"context_line":"    controller is configured through a main configuration file and one or"},{"line_number":13,"context_line":"    more policy files. Installations that are using the data-locality"},{"line_number":14,"context_line":"    features will also have two additional files to specify the physical"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_26e4d80b","line":11,"updated":"2015-02-12 17:45:33.000000000","message":"I\u0027d think either all should be capitalized or none in \"Data processing service\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":8,"context_line":"  \u003ctitle\u003eConfiguration and hardening\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    There are several configuration options and deployment strategies that"},{"line_number":11,"context_line":"    can improve security in the Data processing service. The service"},{"line_number":12,"context_line":"    controller is configured through a main configuration file and one or"},{"line_number":13,"context_line":"    more policy files. Installations that are using the data-locality"},{"line_number":14,"context_line":"    features will also have two additional files to specify the physical"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_7a01fc03","line":11,"in_reply_to":"da86d52c_11747066","updated":"2015-02-12 21:57:02.000000000","message":"i\u0027m going to start using all lower case with the exception of the phrase \"OpenStack Data processing service\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"e2b9b6f7250b82643d43466e794f9298ed919d6a","unresolved":false,"context_lines":[{"line_number":8,"context_line":"  \u003ctitle\u003eConfiguration and hardening\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    There are several configuration options and deployment strategies that"},{"line_number":11,"context_line":"    can improve security in the Data processing service. The service"},{"line_number":12,"context_line":"    controller is configured through a main configuration file and one or"},{"line_number":13,"context_line":"    more policy files. Installations that are using the data-locality"},{"line_number":14,"context_line":"    features will also have two additional files to specify the physical"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_11747066","line":11,"in_reply_to":"da86d52c_26e4d80b","updated":"2015-02-12 17:58:37.000000000","message":"Travis, the capitalization is correct - see https://wiki.openstack.org/wiki/Documentation/Conventions#Service_and_project_names","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":21,"context_line":"      controllers, can be configured to allow TLS connections."},{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b14f2491","line":24,"updated":"2015-02-12 19:21:07.000000000","message":"This might clear it up: \"Pre-Kilo releases will require a TLS proxy as the controller\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"2545c5c57a575d7150f02291236cdc66c2ceaaed","unresolved":false,"context_lines":[{"line_number":21,"context_line":"      controllers, can be configured to allow TLS connections."},{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_0697d448","line":24,"updated":"2015-02-12 17:45:33.000000000","message":"this sentence is confusing","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":21,"context_line":"      controllers, can be configured to allow TLS connections."},{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_1af640d7","line":24,"in_reply_to":"da86d52c_b14f2491","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"},{"line_number":28,"context_line":"      installation."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_5156e82a","line":25,"updated":"2015-02-12 19:21:07.000000000","message":"\"Configuring TLS proxies is covered\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"},{"line_number":28,"context_line":"      installation."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_7ad57c1a","line":25,"in_reply_to":"da86d52c_5156e82a","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"},{"line_number":28,"context_line":"      installation."},{"line_number":29,"context_line":"    \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b1cc8436","line":26,"updated":"2015-02-12 19:21:07.000000000","message":"\"and we\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a proxy as the controller does not"},{"line_number":25,"context_line":"      allow direct TLS connections. Configuring these types of proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"},{"line_number":28,"context_line":"      installation."},{"line_number":29,"context_line":"    \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_dade683d","line":26,"in_reply_to":"da86d52c_b1cc8436","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"2545c5c57a575d7150f02291236cdc66c2ceaaed","unresolved":false,"context_lines":[{"line_number":29,"context_line":"    \u003c/para\u003e"},{"line_number":30,"context_line":"    \u003cpara\u003e"},{"line_number":31,"context_line":"      From the Kilo release onward the data processing controller allows"},{"line_number":32,"context_line":"      direct TLS connections. To enable this behavior requires some small"},{"line_number":33,"context_line":"      adjustments to the controller configuration file."},{"line_number":34,"context_line":"    \u003c/para\u003e"},{"line_number":35,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_2679382f","line":32,"updated":"2015-02-12 17:45:33.000000000","message":"I\u0027d say \"Enabling this behavior requires some small adjustments\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":29,"context_line":"    \u003c/para\u003e"},{"line_number":30,"context_line":"    \u003cpara\u003e"},{"line_number":31,"context_line":"      From the Kilo release onward the data processing controller allows"},{"line_number":32,"context_line":"      direct TLS connections. To enable this behavior requires some small"},{"line_number":33,"context_line":"      adjustments to the controller configuration file."},{"line_number":34,"context_line":"    \u003c/para\u003e"},{"line_number":35,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_bab29403","line":32,"in_reply_to":"da86d52c_2679382f","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"0b01fca1e6f6fdc5b46201e87115f2f697879546","unresolved":false,"context_lines":[{"line_number":33,"context_line":"      adjustments to the controller configuration file."},{"line_number":34,"context_line":"    \u003c/para\u003e"},{"line_number":35,"context_line":"    \u003cpara\u003e"},{"line_number":36,"context_line":"      Example. Configuring TLS access to the controller"},{"line_number":37,"context_line":"    \u003c/para\u003e"},{"line_number":38,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":39,"context_line":"      [ssl]"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_f2135a62","line":36,"updated":"2015-02-12 19:53:36.000000000","message":"Perhaps put a colon or period after controller.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":33,"context_line":"      adjustments to the controller configuration file."},{"line_number":34,"context_line":"    \u003c/para\u003e"},{"line_number":35,"context_line":"    \u003cpara\u003e"},{"line_number":36,"context_line":"      Example. Configuring TLS access to the controller"},{"line_number":37,"context_line":"    \u003c/para\u003e"},{"line_number":38,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":39,"context_line":"      [ssl]"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_15da9377","line":36,"in_reply_to":"da86d52c_f2135a62","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":52,"context_line":"    \u003c/para\u003e"},{"line_number":53,"context_line":"    \u003cpara\u003e"},{"line_number":54,"context_line":"      The reasons for doing this will change depending on the organizational"},{"line_number":55,"context_line":"      requirements of the installation. In general though, these fine"},{"line_number":56,"context_line":"      grained controls are used in situations where an operator needs to"},{"line_number":57,"context_line":"      restrict the creation, deletion, and retrieval of the data processing"},{"line_number":58,"context_line":"      resources. Operators who need to restrict access within a project"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_6c5b0f22","line":55,"updated":"2015-02-12 19:21:07.000000000","message":"\"In general, these fine\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":52,"context_line":"    \u003c/para\u003e"},{"line_number":53,"context_line":"    \u003cpara\u003e"},{"line_number":54,"context_line":"      The reasons for doing this will change depending on the organizational"},{"line_number":55,"context_line":"      requirements of the installation. In general though, these fine"},{"line_number":56,"context_line":"      grained controls are used in situations where an operator needs to"},{"line_number":57,"context_line":"      restrict the creation, deletion, and retrieval of the data processing"},{"line_number":58,"context_line":"      resources. Operators who need to restrict access within a project"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_5a6fd85f","line":55,"in_reply_to":"da86d52c_6c5b0f22","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"02eac36f4b9af74d506128626d43a25360c5f2f1","unresolved":false,"context_lines":[{"line_number":61,"context_line":"      example, provisioning clusters)."},{"line_number":62,"context_line":"    \u003c/para\u003e"},{"line_number":63,"context_line":"    \u003cpara\u003e"},{"line_number":64,"context_line":"      Example 1. Allow all method to all users (default policy)."},{"line_number":65,"context_line":"    \u003c/para\u003e"},{"line_number":66,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":67,"context_line":"      {"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_4fb44635","line":64,"updated":"2015-02-13 20:17:02.000000000","message":"typo, \"methods\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"0b01fca1e6f6fdc5b46201e87115f2f697879546","unresolved":false,"context_lines":[{"line_number":78,"context_line":"          \"images:register\": \"role:admin\","},{"line_number":79,"context_line":"          \"images:unregister\": \"role:admin\","},{"line_number":80,"context_line":"          \"images:add_tags\": \"role:admin\","},{"line_number":81,"context_line":"          \"images:remove_tags\": \"role:admin\""},{"line_number":82,"context_line":"      }"},{"line_number":83,"context_line":"    \u003c/programlisting\u003e"},{"line_number":84,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_664fab6b","line":81,"updated":"2015-02-12 19:53:36.000000000","message":"It would be nice to have a reference to all of the options that are allowed here.  Hopefully that list is maintained elsewhere and we can link to it?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":78,"context_line":"          \"images:register\": \"role:admin\","},{"line_number":79,"context_line":"          \"images:unregister\": \"role:admin\","},{"line_number":80,"context_line":"          \"images:add_tags\": \"role:admin\","},{"line_number":81,"context_line":"          \"images:remove_tags\": \"role:admin\""},{"line_number":82,"context_line":"      }"},{"line_number":83,"context_line":"    \u003c/programlisting\u003e"},{"line_number":84,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_fa55ec4f","line":81,"in_reply_to":"da86d52c_664fab6b","updated":"2015-02-12 21:57:02.000000000","message":"i don\u0027t think the sahara team maintains a full version of policy.json in our docs, would it be acceptable to link to the github source version?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":86,"context_line":"    \u003ctitle\u003eSecurity groups\u003c/title\u003e"},{"line_number":87,"context_line":"    \u003cpara\u003e"},{"line_number":88,"context_line":"      The Data processing service allows for the association of security"},{"line_number":89,"context_line":"      groups with nodes provisioned for it’s clusters. With no additional"},{"line_number":90,"context_line":"      configuration the service will use the default security group for any"},{"line_number":91,"context_line":"      project that provisions clusters. A different security group may be"},{"line_number":92,"context_line":"      used if requested, or an automated option exists which instructs the"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_2c1d970f","line":89,"updated":"2015-02-12 19:21:07.000000000","message":"\"its\"  (no apostrophe in this case)","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":86,"context_line":"    \u003ctitle\u003eSecurity groups\u003c/title\u003e"},{"line_number":87,"context_line":"    \u003cpara\u003e"},{"line_number":88,"context_line":"      The Data processing service allows for the association of security"},{"line_number":89,"context_line":"      groups with nodes provisioned for it’s clusters. With no additional"},{"line_number":90,"context_line":"      configuration the service will use the default security group for any"},{"line_number":91,"context_line":"      project that provisions clusters. A different security group may be"},{"line_number":92,"context_line":"      used if requested, or an automated option exists which instructs the"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_9a9a3012","line":89,"in_reply_to":"da86d52c_2c1d970f","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":98,"context_line":"      groups manually and creating a set of group rules that are appropriate"},{"line_number":99,"context_line":"      for the installation. In this manner the operator can ensure that the"},{"line_number":100,"context_line":"      default security group will contain all the appropriate rules. For an"},{"line_number":101,"context_line":"      expanded discussion of security groups in general please see"},{"line_number":102,"context_line":"      \u003cxref linkend\u003d\"networking-services-security-best-practices-security-groups\"/\u003e."},{"line_number":103,"context_line":"    \u003c/para\u003e"},{"line_number":104,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_ece8dfb4","line":101,"updated":"2015-02-12 19:21:07.000000000","message":"Strike \"in general\". I get why it is there, but it makes the sentence less readable since it could be read as \"security groups in general\" or \"in general please see\". I think it will be ok without.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":98,"context_line":"      groups manually and creating a set of group rules that are appropriate"},{"line_number":99,"context_line":"      for the installation. In this manner the operator can ensure that the"},{"line_number":100,"context_line":"      default security group will contain all the appropriate rules. For an"},{"line_number":101,"context_line":"      expanded discussion of security groups in general please see"},{"line_number":102,"context_line":"      \u003cxref linkend\u003d\"networking-services-security-best-practices-security-groups\"/\u003e."},{"line_number":103,"context_line":"    \u003c/para\u003e"},{"line_number":104,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_5a8c38d7","line":101,"in_reply_to":"da86d52c_ece8dfb4","updated":"2015-02-12 21:57:02.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":117,"context_line":"    \u003cpara\u003e"},{"line_number":118,"context_line":"      The data processing controller retains temporary storage of the"},{"line_number":119,"context_line":"      credentials provided for object store access. When using proxy domains"},{"line_number":120,"context_line":"      the credentials that will be stored are random, and the access of the"},{"line_number":121,"context_line":"      proxy user is limited to that of the identity trust. We recommend"},{"line_number":122,"context_line":"      using proxy domains in any installation where the controller or its"},{"line_number":123,"context_line":"      database have routes to or from public networks."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_3710844d","line":120,"updated":"2015-02-12 19:21:07.000000000","message":"Are the credentials here Identity service tokens? I\u0027m not sure we need to mention random here since the tokens could be random uuid tokens or PKI tokens.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":117,"context_line":"    \u003cpara\u003e"},{"line_number":118,"context_line":"      The data processing controller retains temporary storage of the"},{"line_number":119,"context_line":"      credentials provided for object store access. When using proxy domains"},{"line_number":120,"context_line":"      the credentials that will be stored are random, and the access of the"},{"line_number":121,"context_line":"      proxy user is limited to that of the identity trust. We recommend"},{"line_number":122,"context_line":"      using proxy domains in any installation where the controller or its"},{"line_number":123,"context_line":"      database have routes to or from public networks."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_fab16c8f","line":120,"in_reply_to":"da86d52c_3710844d","updated":"2015-02-12 21:57:02.000000000","message":"the credentials are basically a username/password form that must be filled out for swift access. i\u0027ll adjust the sentence.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"4bb5a89f7280c56b2cf0362ca942cb4fcf13be53","unresolved":false,"context_lines":[{"line_number":125,"context_line":"    \u003cpara\u003e"},{"line_number":126,"context_line":"      Example. Configuring for a proxy domain named “dp_proxy”."},{"line_number":127,"context_line":"    \u003c/para\u003e"},{"line_number":128,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":129,"context_line":"      [DEFAULT]"},{"line_number":130,"context_line":"      use_domain_for_proxy_users \u003d true"},{"line_number":131,"context_line":"      proxy_user_domain_name \u003d dp_proxy"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_1b1e6b70","line":128,"updated":"2015-02-12 07:45:00.000000000","message":"See how the generated output looks, this adds extra whitespace on top/bottom and to the right.\n\nsee https://wiki.openstack.org/wiki/Documentation/Markup_conventions#Code_or_data_.28block_and_inline.29, especially \"Avoiding empty lines in screen and programlistings\"\n\nPlease change all your programlistings","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"b1b1ab14f6c40d284fc21a59acb0882c0be7f0a4","unresolved":false,"context_lines":[{"line_number":125,"context_line":"    \u003cpara\u003e"},{"line_number":126,"context_line":"      Example. Configuring for a proxy domain named “dp_proxy”."},{"line_number":127,"context_line":"    \u003c/para\u003e"},{"line_number":128,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":129,"context_line":"      [DEFAULT]"},{"line_number":130,"context_line":"      use_domain_for_proxy_users \u003d true"},{"line_number":131,"context_line":"      proxy_user_domain_name \u003d dp_proxy"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_5c1a787d","line":128,"in_reply_to":"da86d52c_1b1e6b70","updated":"2015-02-12 20:22:54.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"02eac36f4b9af74d506128626d43a25360c5f2f1","unresolved":false,"context_lines":[{"line_number":129,"context_line":"      [DEFAULT]"},{"line_number":130,"context_line":"      use_domain_for_proxy_users \u003d true"},{"line_number":131,"context_line":"      proxy_user_domain_name \u003d dp_proxy"},{"line_number":132,"context_line":"      proxy_user_role_names \u003d Member"},{"line_number":133,"context_line":"    \u003c/programlisting\u003e"},{"line_number":134,"context_line":"  \u003c/section\u003e"},{"line_number":135,"context_line":"  \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-custom-network-topologies\"\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_8fbd5eda","line":132,"updated":"2015-02-13 20:17:02.000000000","message":"guessing this can be a comma separated list, maybe we want to mention that","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"4bb5a89f7280c56b2cf0362ca942cb4fcf13be53","unresolved":false,"context_lines":[{"line_number":143,"context_line":"      between the controller and the nodes."},{"line_number":144,"context_line":"    \u003c/para\u003e"},{"line_number":145,"context_line":"    \u003cpara\u003e"},{"line_number":146,"context_line":"      Example 1. Access nodes through a specified relay machine."},{"line_number":147,"context_line":"    \u003c/para\u003e"},{"line_number":148,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":149,"context_line":"      [DEFAULT]"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_3608a627","line":146,"updated":"2015-02-12 07:45:00.000000000","message":"Use titles if you want titles but not a simple para - and let our tools number them.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":143,"context_line":"      between the controller and the nodes."},{"line_number":144,"context_line":"    \u003c/para\u003e"},{"line_number":145,"context_line":"    \u003cpara\u003e"},{"line_number":146,"context_line":"      Example 1. Access nodes through a specified relay machine."},{"line_number":147,"context_line":"    \u003c/para\u003e"},{"line_number":148,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":149,"context_line":"      [DEFAULT]"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_35b7973b","line":146,"in_reply_to":"da86d52c_3608a627","updated":"2015-02-12 21:57:02.000000000","message":"i am converting these to titles, do you have an example of how to use the numbering form the tools?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"02eac36f4b9af74d506128626d43a25360c5f2f1","unresolved":false,"context_lines":[{"line_number":147,"context_line":"    \u003c/para\u003e"},{"line_number":148,"context_line":"    \u003cprogramlisting\u003e"},{"line_number":149,"context_line":"      [DEFAULT]"},{"line_number":150,"context_line":"      proxy_command\u003d\u0027ssh relay-machine-{tenant_id} nc {host} {port}\u0027"},{"line_number":151,"context_line":"    \u003c/programlisting\u003e"},{"line_number":152,"context_line":"    \u003cpara\u003e"},{"line_number":153,"context_line":"      Example 2. Access nodes through a custom network namespace."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_6fb4aad4","line":150,"updated":"2015-02-13 20:17:02.000000000","message":"how are the bracketed items filled in?  Programmatically, or is this just notation? If there is substitution going on do we need to mention how it works?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"0b01fca1e6f6fdc5b46201e87115f2f697879546","unresolved":false,"context_lines":[{"line_number":181,"context_line":"      facility for non-root users to run privileged commands. This"},{"line_number":182,"context_line":"      configuration requires the user associated with the data processing"},{"line_number":183,"context_line":"      controller application to be in the sudoers list and for the option to"},{"line_number":184,"context_line":"      be enabled in the configuration file. Optionally, an alternative"},{"line_number":185,"context_line":"      rootwrap command can be provided."},{"line_number":186,"context_line":"    \u003c/para\u003e"},{"line_number":187,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_c9ff8864","line":184,"updated":"2015-02-12 19:53:36.000000000","message":"rootwrap is really tricky to configure properly.  Is that configuration left to the admin setting this up?  Or does this service provide some standard templates for that?  If the former, it would be good to provide some more complex examples here.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"35a41e3acc10842bf8fdd3f09866994e6da025bf","unresolved":false,"context_lines":[{"line_number":181,"context_line":"      facility for non-root users to run privileged commands. This"},{"line_number":182,"context_line":"      configuration requires the user associated with the data processing"},{"line_number":183,"context_line":"      controller application to be in the sudoers list and for the option to"},{"line_number":184,"context_line":"      be enabled in the configuration file. Optionally, an alternative"},{"line_number":185,"context_line":"      rootwrap command can be provided."},{"line_number":186,"context_line":"    \u003c/para\u003e"},{"line_number":187,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_f5d25ffe","line":184,"in_reply_to":"da86d52c_c9ff8864","updated":"2015-02-12 21:57:02.000000000","message":"yes, sahara does provide a set of default configurations for rootwrap and the sudoers update as well. this all assumes a default configuration. perhaps i should add something to mention this?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"8d3701ad8db02edd927c853ccd41b3b4e741c70a","unresolved":false,"context_lines":[{"line_number":209,"context_line":"      tool, as described more thoroughly in"},{"line_number":210,"context_line":"      \u003cxref linkend\u003d\"monitoring-logging\"/\u003e. The Data processing"},{"line_number":211,"context_line":"      service controller offers a few options for setting the location and"},{"line_number":212,"context_line":"      level of logging."},{"line_number":213,"context_line":"    \u003c/para\u003e"},{"line_number":214,"context_line":"    \u003cpara\u003e"},{"line_number":215,"context_line":"      Example. Setting the log level higher than warning and specifying an"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_a5e467e0","line":212,"updated":"2015-02-11 23:21:17.000000000","message":"I have two questions:\n\n1) is verbose\u003dtrue/false the only two logging levels?   and   \n2) are there any caveats with log levels (such as logging sensitive information, or estimated size per transaction, so that high transaction environments know hwo much to estimate) that may be good to include here?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d4abc45f80b41aaa63b506440c1c969d8b37a4c7","unresolved":false,"context_lines":[{"line_number":209,"context_line":"      tool, as described more thoroughly in"},{"line_number":210,"context_line":"      \u003cxref linkend\u003d\"monitoring-logging\"/\u003e. The Data processing"},{"line_number":211,"context_line":"      service controller offers a few options for setting the location and"},{"line_number":212,"context_line":"      level of logging."},{"line_number":213,"context_line":"    \u003c/para\u003e"},{"line_number":214,"context_line":"    \u003cpara\u003e"},{"line_number":215,"context_line":"      Example. Setting the log level higher than warning and specifying an"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_00ad21e9","line":212,"in_reply_to":"da86d52c_a5e467e0","updated":"2015-02-11 23:37:34.000000000","message":"1.\nfor verbose, yes. this toggles between the WARN and INFO levels.\n \nthere is also a debug option which turns on the standard developer debug output. i was going to mention this bug it creates an enormous amount of logging which may only be useful to developers. it is also covered in the sahara documentation, and i kinda considered this to be a power user type function.\n\nshould i include a sentence about the debug option?\n\nalso, we have some options that come from the standard olso_logging that allow for changing the message format. i thought a discussion of that might be a little out of the scope though.\n\n2.\ngood question, i think we have been diligent about scrubbing the log data of anything harmful. as for the estimated sizes, that is a really good suggestion. i will do a little investigation about the size and frequency of logging under different conditions. this may also be a place to talk about modifying the logging output.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":18,"context_line":"    \u003ctitle\u003eTLS\u003c/title\u003e"},{"line_number":19,"context_line":"    \u003cpara\u003e"},{"line_number":20,"context_line":"      The Data processing service controller, like many other OpenStack"},{"line_number":21,"context_line":"      controllers, can be configured to allow TLS connections."},{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a TLS proxy as the controller does not"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_2f91d2f1","line":21,"updated":"2015-02-13 20:33:38.000000000","message":"allow - or require?","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":18,"context_line":"    \u003ctitle\u003eTLS\u003c/title\u003e"},{"line_number":19,"context_line":"    \u003cpara\u003e"},{"line_number":20,"context_line":"      The Data processing service controller, like many other OpenStack"},{"line_number":21,"context_line":"      controllers, can be configured to allow TLS connections."},{"line_number":22,"context_line":"    \u003c/para\u003e"},{"line_number":23,"context_line":"    \u003cpara\u003e"},{"line_number":24,"context_line":"      Pre-Kilo releases will require a TLS proxy as the controller does not"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_88f37d9e","line":21,"in_reply_to":"da86d52c_2f91d2f1","updated":"2015-02-16 02:14:23.000000000","message":"this should be require","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":59,"context_line":"      example, provisioning clusters)."},{"line_number":60,"context_line":"    \u003c/para\u003e"},{"line_number":61,"context_line":"    \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-role-based-access-control-policies-example-1\"\u003e"},{"line_number":62,"context_line":"      \u003ctitle\u003eExample #1. Allow all method to all users (default policy)\u003c/title\u003e"},{"line_number":63,"context_line":"      \u003cprogramlisting\u003e{"},{"line_number":64,"context_line":"  \"default\": \"\""},{"line_number":65,"context_line":"}\u003c/programlisting\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_8fbf1e60","line":62,"updated":"2015-02-13 20:33:38.000000000","message":"Just say \"Example\" without the number, also below","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":59,"context_line":"      example, provisioning clusters)."},{"line_number":60,"context_line":"    \u003c/para\u003e"},{"line_number":61,"context_line":"    \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-role-based-access-control-policies-example-1\"\u003e"},{"line_number":62,"context_line":"      \u003ctitle\u003eExample #1. Allow all method to all users (default policy)\u003c/title\u003e"},{"line_number":63,"context_line":"      \u003cprogramlisting\u003e{"},{"line_number":64,"context_line":"  \"default\": \"\""},{"line_number":65,"context_line":"}\u003c/programlisting\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_c81bb5c8","line":62,"in_reply_to":"da86d52c_8fbf1e60","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":99,"context_line":"  \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-proxy-domains\"\u003e"},{"line_number":100,"context_line":"    \u003ctitle\u003eProxy domains\u003c/title\u003e"},{"line_number":101,"context_line":"    \u003cpara\u003e"},{"line_number":102,"context_line":"      When using the Object Store service in conjunction with data"},{"line_number":103,"context_line":"      processing it is necessary to add credentials for the store access."},{"line_number":104,"context_line":"      With proxy domains the Data processing service can instead use a"},{"line_number":105,"context_line":"      delegated trust from the Identity service to allow store access via a"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_cf7036df","line":102,"updated":"2015-02-13 20:33:38.000000000","message":"the Object Store service  -\u003e Object Storage","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":99,"context_line":"  \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-proxy-domains\"\u003e"},{"line_number":100,"context_line":"    \u003ctitle\u003eProxy domains\u003c/title\u003e"},{"line_number":101,"context_line":"    \u003cpara\u003e"},{"line_number":102,"context_line":"      When using the Object Store service in conjunction with data"},{"line_number":103,"context_line":"      processing it is necessary to add credentials for the store access."},{"line_number":104,"context_line":"      With proxy domains the Data processing service can instead use a"},{"line_number":105,"context_line":"      delegated trust from the Identity service to allow store access via a"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_087dcde7","line":102,"in_reply_to":"da86d52c_cf7036df","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":117,"context_line":"      controller or its database have routes to or from public networks."},{"line_number":118,"context_line":"    \u003c/para\u003e"},{"line_number":119,"context_line":"    \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-proxy-domains-example-1\"\u003e"},{"line_number":120,"context_line":"      \u003ctitle\u003eExample #1. Configuring for a proxy domain named “dp_proxy”\u003c/title\u003e"},{"line_number":121,"context_line":"      \u003cprogramlisting\u003e[DEFAULT]"},{"line_number":122,"context_line":"use_domain_for_proxy_users \u003d true"},{"line_number":123,"context_line":"proxy_user_domain_name \u003d dp_proxy"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_cf475676","line":120,"updated":"2015-02-13 20:33:38.000000000","message":"leave out the \"#1\", also in the other examples below","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":117,"context_line":"      controller or its database have routes to or from public networks."},{"line_number":118,"context_line":"    \u003c/para\u003e"},{"line_number":119,"context_line":"    \u003csection xml:id\u003d\"data-processing-configuration-and-hardening-proxy-domains-example-1\"\u003e"},{"line_number":120,"context_line":"      \u003ctitle\u003eExample #1. Configuring for a proxy domain named “dp_proxy”\u003c/title\u003e"},{"line_number":121,"context_line":"      \u003cprogramlisting\u003e[DEFAULT]"},{"line_number":122,"context_line":"use_domain_for_proxy_users \u003d true"},{"line_number":123,"context_line":"proxy_user_domain_name \u003d dp_proxy"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_288291c8","line":120,"in_reply_to":"da86d52c_cf475676","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":25,"context_line":"      allow direct TLS connections. Configuring TLS proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, and we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"},{"line_number":28,"context_line":"      installation."},{"line_number":29,"context_line":"    \u003c/para\u003e"},{"line_number":30,"context_line":"    \u003cpara\u003e"},{"line_number":31,"context_line":"      From the Kilo release onward the data processing controller allows"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_4615473b","line":28,"updated":"2015-02-19 20:15:22.000000000","message":"We have a recommend wording here, but not below.  Are you implying that you suggesting using a proxy even for the post-Kilo setups?  Or should we add a more explicit wording below to describe that for kilo and beyond we recommend using the built-in one?\n\nNot knowing how the TLS termination is done in the newer versions, I\u0027m not sure how production ready that would be, so I\u0027m not sure what the right recommendation is here.  Either way we should be more explicit.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":25,"context_line":"      allow direct TLS connections. Configuring TLS proxies is"},{"line_number":26,"context_line":"      covered in \u003cxref linkend\u003d\"tls-proxies-and-http-services\"/\u003e, and we"},{"line_number":27,"context_line":"      recommend following the advice there to create this type of"},{"line_number":28,"context_line":"      installation."},{"line_number":29,"context_line":"    \u003c/para\u003e"},{"line_number":30,"context_line":"    \u003cpara\u003e"},{"line_number":31,"context_line":"      From the Kilo release onward the data processing controller allows"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_1c31e0ec","line":28,"in_reply_to":"da86d52c_4615473b","updated":"2015-02-19 21:58:59.000000000","message":"good questions, this is an oversight on my part. we should be recommending use of proxy only for pre-kilo. for kilo and beyond we are using the OpenStack common sslutils module, this should be stable enough for production.\n\ni will modify this to make it clear that we recommend using a proxy for pre-kilo deployments, and enabling the configuration option for kilo and beyond.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"}],"security-guide/section_data-processing-deployment.xml":[{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":11,"context_line":"    services, as an application running on a host connected to the stack."},{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"},{"line_number":14,"context_line":"    services it also requires a database to store information about it’s"},{"line_number":15,"context_line":"    resources, see \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"},{"line_number":16,"context_line":"    note that the Data processing service will need access to the control"},{"line_number":17,"context_line":"    plane and as such we recommend installing it alongside other service"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_9df4215c","line":14,"updated":"2015-02-11 21:40:40.000000000","message":"its again; also, you could probably use a comma to separate the \"Like other services\" clause.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":11,"context_line":"    services, as an application running on a host connected to the stack."},{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"},{"line_number":14,"context_line":"    services it also requires a database to store information about it’s"},{"line_number":15,"context_line":"    resources, see \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"},{"line_number":16,"context_line":"    note that the Data processing service will need access to the control"},{"line_number":17,"context_line":"    plane and as such we recommend installing it alongside other service"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_2c4b04b2","line":14,"in_reply_to":"da86d52c_9df4215c","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service should be noted as it is used by data"},{"line_number":62,"context_line":"    processing to store job binaries and data sources. Users wishing to"},{"line_number":63,"context_line":"    have access to all of the Data processing service functionality will"},{"line_number":64,"context_line":"    need an object store in the projects they are using."}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_7dbdad67","line":61,"updated":"2015-02-11 21:40:40.000000000","message":"\"should be noted as it\" can be safely removed; it\u0027s clearer without.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service should be noted as it is used by data"},{"line_number":62,"context_line":"    processing to store job binaries and data sources. Users wishing to"},{"line_number":63,"context_line":"    have access to all of the Data processing service functionality will"},{"line_number":64,"context_line":"    need an object store in the projects they are using."}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_acce142b","line":61,"in_reply_to":"da86d52c_7dbdad67","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":70,"context_line":"    networks is similar to the process of assigning networks when"},{"line_number":71,"context_line":"    launching instances through the Dashboard. These networks are used by"},{"line_number":72,"context_line":"    the controller for administrative access to the instances and"},{"line_number":73,"context_line":"    frameworks of it’s clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"},{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_7d64cd21","line":73,"updated":"2015-02-11 21:40:40.000000000","message":"Its.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":70,"context_line":"    networks is similar to the process of assigning networks when"},{"line_number":71,"context_line":"    launching instances through the Dashboard. These networks are used by"},{"line_number":72,"context_line":"    the controller for administrative access to the instances and"},{"line_number":73,"context_line":"    frameworks of it’s clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"},{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_ec02cc3c","line":73,"in_reply_to":"da86d52c_7d64cd21","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"},{"line_number":80,"context_line":"    configuration, see"},{"line_number":81,"context_line":"    \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-proxy-domains\"/\u003e."},{"line_number":82,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_3d7ed5af","line":79,"updated":"2015-02-11 21:40:40.000000000","message":"Any brief description of the special consideration that might be appropriately general-but-useful?","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"},{"line_number":80,"context_line":"    configuration, see"},{"line_number":81,"context_line":"    \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-proxy-domains\"/\u003e."},{"line_number":82,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_4ca4b84a","line":79,"in_reply_to":"da86d52c_3d7ed5af","updated":"2015-02-11 22:18:34.000000000","message":"i\u0027ll add a sentence about it","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":101,"context_line":"    \u003cpara\u003e"},{"line_number":102,"context_line":"      For situations where the fixed and floating IP addresses do not"},{"line_number":103,"context_line":"      provide the functionality required the controller can provide access"},{"line_number":104,"context_line":"      via two alternate methods; custom network topologies, and indirect"},{"line_number":105,"context_line":"      access. The custom network topologies allow the controller to access"},{"line_number":106,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":107,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_78005b01","line":104,"updated":"2015-02-11 21:40:40.000000000","message":"Semicolon to colon and remove the comma in a 2-list.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":101,"context_line":"    \u003cpara\u003e"},{"line_number":102,"context_line":"      For situations where the fixed and floating IP addresses do not"},{"line_number":103,"context_line":"      provide the functionality required the controller can provide access"},{"line_number":104,"context_line":"      via two alternate methods; custom network topologies, and indirect"},{"line_number":105,"context_line":"      access. The custom network topologies allow the controller to access"},{"line_number":106,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":107,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_6f27aeb6","line":104,"in_reply_to":"da86d52c_78005b01","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc60350bb56ddb76d346b08615963a0cf0626748","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by data processing to store job binaries"},{"line_number":62,"context_line":"    and data sources. Users wishing to have access to all of the Data"},{"line_number":63,"context_line":"    processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_62898525","line":61,"updated":"2015-02-11 23:02:38.000000000","message":"Capital d needed here?","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c7d0b061f3de0d0d41c6d8a566cb611409b89989","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by data processing to store job binaries"},{"line_number":62,"context_line":"    and data sources. Users wishing to have access to all of the Data"},{"line_number":63,"context_line":"    processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_25eeb7ed","line":61,"in_reply_to":"da86d52c_62898525","updated":"2015-02-11 23:17:20.000000000","message":"this is a tough question, i\u0027m not exactly sure but i\u0027ve been following the pattern observed elsewhere. for example, Object Store service, and, something being stored in an object store.\n\ni would like to know what is the best approach here.","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc60350bb56ddb76d346b08615963a0cf0626748","unresolved":false,"context_lines":[{"line_number":73,"context_line":"    frameworks of its clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"},{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_82959934","line":76,"updated":"2015-02-11 23:02:38.000000000","message":"Capital d as it\u0027s relating to the service?","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c7d0b061f3de0d0d41c6d8a566cb611409b89989","unresolved":false,"context_lines":[{"line_number":73,"context_line":"    frameworks of its clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"},{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_85c04351","line":76,"in_reply_to":"da86d52c_82959934","updated":"2015-02-11 23:17:20.000000000","message":"same as above, i\u0027m not exactly sure.","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc60350bb56ddb76d346b08615963a0cf0626748","unresolved":false,"context_lines":[{"line_number":103,"context_line":"    \u003cpara\u003e"},{"line_number":104,"context_line":"      For situations where the fixed and floating IP addresses do not"},{"line_number":105,"context_line":"      provide the functionality required the controller can provide access"},{"line_number":106,"context_line":"      via two alternate methods: custom network topologies and indirect"},{"line_number":107,"context_line":"      access. The custom network topologies allow the controller to access"},{"line_number":108,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":109,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_a2ad3d86","line":106,"updated":"2015-02-11 23:02:38.000000000","message":"Convention is to not use \u0027via\u0027 in favor of something like \u0027through\u0027","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c7d0b061f3de0d0d41c6d8a566cb611409b89989","unresolved":false,"context_lines":[{"line_number":103,"context_line":"    \u003cpara\u003e"},{"line_number":104,"context_line":"      For situations where the fixed and floating IP addresses do not"},{"line_number":105,"context_line":"      provide the functionality required the controller can provide access"},{"line_number":106,"context_line":"      via two alternate methods: custom network topologies and indirect"},{"line_number":107,"context_line":"      access. The custom network topologies allow the controller to access"},{"line_number":108,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":109,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_85a763bc","line":106,"in_reply_to":"da86d52c_a2ad3d86","updated":"2015-02-11 23:17:20.000000000","message":"Done","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eDeployment\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The Data processing service is deployed like many other openstack"},{"line_number":11,"context_line":"    services, as an application running on a host connected to the stack."},{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_77475ca3","line":10,"updated":"2015-02-12 19:21:07.000000000","message":"\"service is deployed, like many other OpenStack services, as an application\"\nNote comma after deployed and capitalization on OpenStack","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eDeployment\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The Data processing service is deployed like many other openstack"},{"line_number":11,"context_line":"    services, as an application running on a host connected to the stack."},{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b4399bf4","line":10,"in_reply_to":"da86d52c_77475ca3","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The Data processing service is deployed like many other openstack"},{"line_number":11,"context_line":"    services, as an application running on a host connected to the stack."},{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"},{"line_number":14,"context_line":"    services, it also requires a database to store information about its"},{"line_number":15,"context_line":"    resources, see \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_37d884ee","line":12,"updated":"2015-02-12 19:21:07.000000000","message":"\"As of the Kilo release, it has the ability\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The Data processing service is deployed like many other openstack"},{"line_number":11,"context_line":"    services, as an application running on a host connected to the stack."},{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"},{"line_number":14,"context_line":"    services, it also requires a database to store information about its"},{"line_number":15,"context_line":"    resources, see \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_f42233b9","line":12,"in_reply_to":"da86d52c_37d884ee","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"},{"line_number":14,"context_line":"    services, it also requires a database to store information about its"},{"line_number":15,"context_line":"    resources, see \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"},{"line_number":16,"context_line":"    note that the Data processing service will need access to the control"},{"line_number":17,"context_line":"    plane and as such we recommend installing it alongside other service"},{"line_number":18,"context_line":"    controllers."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_f7b7cc82","line":15,"updated":"2015-02-12 19:21:07.000000000","message":"\"its resources. See \u003cxref\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    As of the Kilo release it has the ability to be deployed in a"},{"line_number":13,"context_line":"    distributed manner with several redundant controllers. Like other"},{"line_number":14,"context_line":"    services, it also requires a database to store information about its"},{"line_number":15,"context_line":"    resources, see \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"},{"line_number":16,"context_line":"    note that the Data processing service will need access to the control"},{"line_number":17,"context_line":"    plane and as such we recommend installing it alongside other service"},{"line_number":18,"context_line":"    controllers."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_7416435a","line":15,"in_reply_to":"da86d52c_f7b7cc82","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":54,"context_line":"  \u003c/itemizedlist\u003e"},{"line_number":55,"context_line":"  \u003cpara\u003e"},{"line_number":56,"context_line":"    We recommend documenting all the data flows and bridging points"},{"line_number":57,"context_line":"    between these services and the data processing controller, see"},{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_1779c0c7","line":57,"updated":"2015-02-12 19:21:07.000000000","message":"\"processing controller. See\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by data processing to store job binaries"},{"line_number":62,"context_line":"    and data sources. Users wishing to have access to all of the Data"},{"line_number":63,"context_line":"    processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_141b471d","line":61,"updated":"2015-02-13 19:43:53.000000000","message":"just noting a capitalization case, \"data processing\" in this sense is really the data processing service. Wouldn\u0027t want to miss it on a grep :)","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by data processing to store job binaries"},{"line_number":62,"context_line":"    and data sources. Users wishing to have access to all of the Data"},{"line_number":63,"context_line":"    processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_af078217","line":61,"in_reply_to":"da86d52c_141b471d","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by data processing to store job binaries"},{"line_number":62,"context_line":"    and data sources. Users wishing to have access to all of the Data"},{"line_number":63,"context_line":"    processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."},{"line_number":65,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_74d1e32e","line":62,"updated":"2015-02-13 19:43:53.000000000","message":"suggestion, I would change \"all of the\" to \"full\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by data processing to store job binaries"},{"line_number":62,"context_line":"    and data sources. Users wishing to have access to all of the Data"},{"line_number":63,"context_line":"    processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."},{"line_number":65,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_0f0ece32","line":62,"in_reply_to":"da86d52c_74d1e32e","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":73,"context_line":"    frameworks of its clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"},{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_d4b7eff3","line":76,"updated":"2015-02-13 19:43:53.000000000","message":"another cap shoutout","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":73,"context_line":"    frameworks of its clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"},{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_6f72eab1","line":76,"in_reply_to":"da86d52c_d4b7eff3","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"},{"line_number":80,"context_line":"    configuration, see"},{"line_number":81,"context_line":"    \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-proxy-domains\"/\u003e."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b4a99b92","line":78,"updated":"2015-02-13 19:43:53.000000000","message":"Suggest\n\n\"Installations that use the proxy domain configuration require special consideration, see \"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":75,"context_line":"  \u003cpara\u003e"},{"line_number":76,"context_line":"    Also of note is the Identity service. Users of data processing will"},{"line_number":77,"context_line":"    need appropriate roles in their projects to allow the provisioning of"},{"line_number":78,"context_line":"    instances for their clusters. There will also need to be special"},{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"},{"line_number":80,"context_line":"    configuration, see"},{"line_number":81,"context_line":"    \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-proxy-domains\"/\u003e."}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_8f771e9f","line":78,"in_reply_to":"da86d52c_b4a99b92","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"},{"line_number":80,"context_line":"    configuration, see"},{"line_number":81,"context_line":"    \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-proxy-domains\"/\u003e."},{"line_number":82,"context_line":"    In specific, the Data processing service will need the ability to create"},{"line_number":83,"context_line":"    users within the proxy domain."},{"line_number":84,"context_line":"  \u003c/para\u003e"},{"line_number":85,"context_line":"  \u003csection xml:id\u003d\"data-processing-deployment-controller-network-access-to-clusters\"\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_77ff5c02","line":82,"updated":"2015-02-12 19:21:07.000000000","message":"\"Specifically, the Data\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":79,"context_line":"    consideration for installations that use the proxy domain"},{"line_number":80,"context_line":"    configuration, see"},{"line_number":81,"context_line":"    \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-proxy-domains\"/\u003e."},{"line_number":82,"context_line":"    In specific, the Data processing service will need the ability to create"},{"line_number":83,"context_line":"    users within the proxy domain."},{"line_number":84,"context_line":"  \u003c/para\u003e"},{"line_number":85,"context_line":"  \u003csection xml:id\u003d\"data-processing-deployment-controller-network-access-to-clusters\"\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_cf7116aa","line":82,"in_reply_to":"da86d52c_77ff5c02","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":85,"context_line":"  \u003csection xml:id\u003d\"data-processing-deployment-controller-network-access-to-clusters\"\u003e"},{"line_number":86,"context_line":"    \u003ctitle\u003eController network access to clusters\u003c/title\u003e"},{"line_number":87,"context_line":"    \u003cpara\u003e"},{"line_number":88,"context_line":"      One of the primary tasks of the data processing controller is to"},{"line_number":89,"context_line":"      communicate with the nodes it spawns. These nodes are provisioned and"},{"line_number":90,"context_line":"      then configured depending on the framework being used. The"},{"line_number":91,"context_line":"      communication between the controller and the nodes uses secure shell"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_549a1f6f","line":88,"updated":"2015-02-13 19:43:53.000000000","message":"cap shoutout","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":85,"context_line":"  \u003csection xml:id\u003d\"data-processing-deployment-controller-network-access-to-clusters\"\u003e"},{"line_number":86,"context_line":"    \u003ctitle\u003eController network access to clusters\u003c/title\u003e"},{"line_number":87,"context_line":"    \u003cpara\u003e"},{"line_number":88,"context_line":"      One of the primary tasks of the data processing controller is to"},{"line_number":89,"context_line":"      communicate with the nodes it spawns. These nodes are provisioned and"},{"line_number":90,"context_line":"      then configured depending on the framework being used. The"},{"line_number":91,"context_line":"      communication between the controller and the nodes uses secure shell"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_2fb7123c","line":88,"in_reply_to":"da86d52c_549a1f6f","updated":"2015-02-13 20:11:18.000000000","message":"according to the conversations i\u0027ve had with the doc folks, this is one instance where it should be lower case.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":94,"context_line":"    \u003cpara\u003e"},{"line_number":95,"context_line":"      When provisioning clusters each node will be given an IP address in"},{"line_number":96,"context_line":"      the network provided by the user. This first network is often referred"},{"line_number":97,"context_line":"      to as the management network, and the IP address provided as the fixed"},{"line_number":98,"context_line":"      address. The controller can also be configured to use floating IP"},{"line_number":99,"context_line":"      addresses for the nodes in addition to their fixed address. When"},{"line_number":100,"context_line":"      communicating with the nodes the controller will prefer the floating"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b2a002f5","line":97,"updated":"2015-02-12 19:21:07.000000000","message":"Confused here. I think it means: \"This first network is often referred to as the management network and nodes can use the fixed IP address assigned by the Networking services for this network.\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":94,"context_line":"    \u003cpara\u003e"},{"line_number":95,"context_line":"      When provisioning clusters each node will be given an IP address in"},{"line_number":96,"context_line":"      the network provided by the user. This first network is often referred"},{"line_number":97,"context_line":"      to as the management network, and the IP address provided as the fixed"},{"line_number":98,"context_line":"      address. The controller can also be configured to use floating IP"},{"line_number":99,"context_line":"      addresses for the nodes in addition to their fixed address. When"},{"line_number":100,"context_line":"      communicating with the nodes the controller will prefer the floating"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_0f46ce21","line":97,"in_reply_to":"da86d52c_b2a002f5","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":104,"context_line":"      For situations where the fixed and floating IP addresses do not"},{"line_number":105,"context_line":"      provide the functionality required the controller can provide access"},{"line_number":106,"context_line":"      through two alternate methods: custom network topologies and indirect"},{"line_number":107,"context_line":"      access. The custom network topologies allow the controller to access"},{"line_number":108,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":109,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"},{"line_number":110,"context_line":"      gateways by the user during cluster provisioning. These options are"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_d4b36fe7","line":107,"updated":"2015-02-13 19:43:53.000000000","message":"suggestion, \n\n\"The custom network topologies feature allows\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":104,"context_line":"      For situations where the fixed and floating IP addresses do not"},{"line_number":105,"context_line":"      provide the functionality required the controller can provide access"},{"line_number":106,"context_line":"      through two alternate methods: custom network topologies and indirect"},{"line_number":107,"context_line":"      access. The custom network topologies allow the controller to access"},{"line_number":108,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":109,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"},{"line_number":110,"context_line":"      gateways by the user during cluster provisioning. These options are"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_4f67e6b7","line":107,"in_reply_to":"da86d52c_d4b36fe7","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"14587a9fed25eb5a521d0578f0d88e651ef5e424","unresolved":false,"context_lines":[{"line_number":108,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":109,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"},{"line_number":110,"context_line":"      gateways by the user during cluster provisioning. These options are"},{"line_number":111,"context_line":"      discussed with examples of usage in the Configuration and Hardening"},{"line_number":112,"context_line":"      section."},{"line_number":113,"context_line":"    \u003c/para\u003e"},{"line_number":114,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b4aefb7f","line":111,"updated":"2015-02-13 19:43:53.000000000","message":"Configuration and Hardening, Should this be a section reference?","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":108,"context_line":"      the nodes through a supplied shell command in the configuration file."},{"line_number":109,"context_line":"      Indirect access is used to specify nodes that can be used as proxy"},{"line_number":110,"context_line":"      gateways by the user during cluster provisioning. These options are"},{"line_number":111,"context_line":"      discussed with examples of usage in the Configuration and Hardening"},{"line_number":112,"context_line":"      section."},{"line_number":113,"context_line":"    \u003c/para\u003e"},{"line_number":114,"context_line":"  \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_6f03cabe","line":111,"in_reply_to":"da86d52c_b4aefb7f","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":38,"context_line":"    \u003c/listitem\u003e"},{"line_number":39,"context_line":"    \u003clistitem\u003e"},{"line_number":40,"context_line":"      \u003cpara\u003e"},{"line_number":41,"context_line":"        Object Store"},{"line_number":42,"context_line":"      \u003c/para\u003e"},{"line_number":43,"context_line":"    \u003c/listitem\u003e"},{"line_number":44,"context_line":"    \u003clistitem\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_0f208eaf","line":41,"updated":"2015-02-13 20:33:38.000000000","message":"Object Storage","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":38,"context_line":"    \u003c/listitem\u003e"},{"line_number":39,"context_line":"    \u003clistitem\u003e"},{"line_number":40,"context_line":"      \u003cpara\u003e"},{"line_number":41,"context_line":"        Object Store"},{"line_number":42,"context_line":"      \u003c/para\u003e"},{"line_number":43,"context_line":"    \u003c/listitem\u003e"},{"line_number":44,"context_line":"    \u003clistitem\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_4887c5d7","line":41,"in_reply_to":"da86d52c_0f208eaf","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by the Data processing service  to store"},{"line_number":62,"context_line":"    job binaries and data sources. Users wishing to have access to the full"},{"line_number":63,"context_line":"    Data processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_af10625a","line":61,"updated":"2015-02-13 20:33:38.000000000","message":"Object Storage, please check all occurences.","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Store service is used by the Data processing service  to store"},{"line_number":62,"context_line":"    job binaries and data sources. Users wishing to have access to the full"},{"line_number":63,"context_line":"    Data processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_c849f5b8","line":61,"in_reply_to":"da86d52c_af10625a","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":68,"context_line":"    clusters. Prior to provisioning, the user is expected to provide one"},{"line_number":69,"context_line":"    or more networks for the cluster instances. The action of associating"},{"line_number":70,"context_line":"    networks is similar to the process of assigning networks when"},{"line_number":71,"context_line":"    launching instances through the Dashboard. These networks are used by"},{"line_number":72,"context_line":"    the controller for administrative access to the instances and"},{"line_number":73,"context_line":"    frameworks of its clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_8a02ac07","line":71,"updated":"2015-02-13 20:33:38.000000000","message":"OpenStack dashboard","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":68,"context_line":"    clusters. Prior to provisioning, the user is expected to provide one"},{"line_number":69,"context_line":"    or more networks for the cluster instances. The action of associating"},{"line_number":70,"context_line":"    networks is similar to the process of assigning networks when"},{"line_number":71,"context_line":"    launching instances through the Dashboard. These networks are used by"},{"line_number":72,"context_line":"    the controller for administrative access to the instances and"},{"line_number":73,"context_line":"    frameworks of its clusters."},{"line_number":74,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_e8c5d90a","line":71,"in_reply_to":"da86d52c_8a02ac07","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":14,"context_line":"    services, it also requires a database to store information about its"},{"line_number":15,"context_line":"    resources. See \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"},{"line_number":16,"context_line":"    note that the Data processing service will need access to the control"},{"line_number":17,"context_line":"    plane and as such we recommend installing it alongside other service"},{"line_number":18,"context_line":"    controllers."},{"line_number":19,"context_line":"  \u003c/para\u003e"},{"line_number":20,"context_line":"  \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_72bccab5","line":17,"updated":"2015-02-19 20:15:22.000000000","message":"It would be nice to explain why control plane access is required.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":14,"context_line":"    services, it also requires a database to store information about its"},{"line_number":15,"context_line":"    resources. See \u003cxref linkend\u003d\"databases\"/\u003e. It is important to"},{"line_number":16,"context_line":"    note that the Data processing service will need access to the control"},{"line_number":17,"context_line":"    plane and as such we recommend installing it alongside other service"},{"line_number":18,"context_line":"    controllers."},{"line_number":19,"context_line":"  \u003c/para\u003e"},{"line_number":20,"context_line":"  \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_3c6ea464","line":17,"in_reply_to":"da86d52c_72bccab5","updated":"2015-02-19 21:58:59.000000000","message":"Done","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ae8bb5cbf7b4062722bead94922faf46b358e2a9","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Storage service is used by the Data processing service  to store"},{"line_number":62,"context_line":"    job binaries and data sources. Users wishing to have access to the full"},{"line_number":63,"context_line":"    Data processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_d05c161c","line":61,"updated":"2015-02-18 19:53:53.000000000","message":"Nit: looks like there are two spaces between \"service\" and \"to\"","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"61e8c2a26dd985776c06f8b7a9fc3fdc734d3cbd","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    \u003cxref linkend\u003d\"documentation\"/\u003e."},{"line_number":59,"context_line":"  \u003c/para\u003e"},{"line_number":60,"context_line":"  \u003cpara\u003e"},{"line_number":61,"context_line":"    The Object Storage service is used by the Data processing service  to store"},{"line_number":62,"context_line":"    job binaries and data sources. Users wishing to have access to the full"},{"line_number":63,"context_line":"    Data processing service functionality will need an object store in the"},{"line_number":64,"context_line":"    projects they are using."}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_76522714","line":61,"in_reply_to":"da86d52c_d05c161c","updated":"2015-02-18 22:46:56.000000000","message":"in fact there are, done.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":85,"context_line":"    \u003ctitle\u003eController network access to clusters\u003c/title\u003e"},{"line_number":86,"context_line":"    \u003cpara\u003e"},{"line_number":87,"context_line":"      One of the primary tasks of the data processing controller is to"},{"line_number":88,"context_line":"      communicate with the nodes it spawns. These nodes are provisioned and"},{"line_number":89,"context_line":"      then configured depending on the framework being used. The"},{"line_number":90,"context_line":"      communication between the controller and the nodes uses secure shell"},{"line_number":91,"context_line":"      and http protocols."}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_32697225","line":88,"updated":"2015-02-19 20:15:22.000000000","message":"The use of \"node\" here is a bit confusing to me.  I assume we are talking about instances in the cloud?  Perhaps this could be clarified in the text.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":85,"context_line":"    \u003ctitle\u003eController network access to clusters\u003c/title\u003e"},{"line_number":86,"context_line":"    \u003cpara\u003e"},{"line_number":87,"context_line":"      One of the primary tasks of the data processing controller is to"},{"line_number":88,"context_line":"      communicate with the nodes it spawns. These nodes are provisioned and"},{"line_number":89,"context_line":"      then configured depending on the framework being used. The"},{"line_number":90,"context_line":"      communication between the controller and the nodes uses secure shell"},{"line_number":91,"context_line":"      and http protocols."}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_bf0fe6de","line":88,"in_reply_to":"da86d52c_32697225","updated":"2015-02-19 21:58:59.000000000","message":"perhaps i should change this to \"instances\" instead of nodes, i think it won\u0027t change the meaning but might make it clearer.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":88,"context_line":"      communicate with the nodes it spawns. These nodes are provisioned and"},{"line_number":89,"context_line":"      then configured depending on the framework being used. The"},{"line_number":90,"context_line":"      communication between the controller and the nodes uses secure shell"},{"line_number":91,"context_line":"      and http protocols."},{"line_number":92,"context_line":"    \u003c/para\u003e"},{"line_number":93,"context_line":"    \u003cpara\u003e"},{"line_number":94,"context_line":"      When provisioning clusters each node will be given an IP address in"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_b299e220","line":91,"updated":"2015-02-19 20:15:22.000000000","message":"\"secure shell (SSH) and HTTP protocols.\"\n\nAlso, is there a way to configure this to use HTTPS?  HTTP is far from ideal.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":88,"context_line":"      communicate with the nodes it spawns. These nodes are provisioned and"},{"line_number":89,"context_line":"      then configured depending on the framework being used. The"},{"line_number":90,"context_line":"      communication between the controller and the nodes uses secure shell"},{"line_number":91,"context_line":"      and http protocols."},{"line_number":92,"context_line":"    \u003c/para\u003e"},{"line_number":93,"context_line":"    \u003cpara\u003e"},{"line_number":94,"context_line":"      When provisioning clusters each node will be given an IP address in"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_1f73924e","line":91,"in_reply_to":"da86d52c_b299e220","updated":"2015-02-19 21:58:59.000000000","message":"changing the phrasing.\n\nas for the usage of HTTP instead of HTTPS, my understanding is that we use HTTP to access the deployed frameworks. changing this HTTPS access is something that will need to be investigated but is certainly a step towards greater hardening for sahara. i will add this to my list of research topics.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":93,"context_line":"    \u003cpara\u003e"},{"line_number":94,"context_line":"      When provisioning clusters each node will be given an IP address in"},{"line_number":95,"context_line":"      the networks provided by the user. The first network is often referred"},{"line_number":96,"context_line":"      to as the management network and nodes can use the fixed IP address"},{"line_number":97,"context_line":"      assigned by the Networking service for this network. The controller"},{"line_number":98,"context_line":"      can also be configured to use floating IP addresses for the nodes in"},{"line_number":99,"context_line":"      addition to their fixed address. When communicating with the nodes the"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_f26d1a04","line":96,"updated":"2015-02-19 20:15:22.000000000","message":"Not to be confused with the management network of the control plane in the cloud.  Perhaps this can be the \"data processing management network\"?","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":93,"context_line":"    \u003cpara\u003e"},{"line_number":94,"context_line":"      When provisioning clusters each node will be given an IP address in"},{"line_number":95,"context_line":"      the networks provided by the user. The first network is often referred"},{"line_number":96,"context_line":"      to as the management network and nodes can use the fixed IP address"},{"line_number":97,"context_line":"      assigned by the Networking service for this network. The controller"},{"line_number":98,"context_line":"      can also be configured to use floating IP addresses for the nodes in"},{"line_number":99,"context_line":"      addition to their fixed address. When communicating with the nodes the"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_5f2c2a02","line":96,"in_reply_to":"da86d52c_f26d1a04","updated":"2015-02-19 21:58:59.000000000","message":"Done","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"}],"security-guide/section_data-processing-introduction-to-data-processing.xml":[{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"3f0e6c5450b0d7bcce60c3dbcb732d4a1f4987d2","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_987a6f86","line":10,"updated":"2015-02-11 21:29:21.000000000","message":"maybe capitalize \"processing\" or lower case \"Data\"","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"be31537c058237139ab31d6fa29feb59918f3309","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_18cf5f57","line":10,"in_reply_to":"da86d52c_987a6f86","updated":"2015-02-11 21:39:22.000000000","message":"according to the official OpenStack name, the service is the \"Data processing\" service. i agree in general though.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":19,"context_line":"  \u003c/para\u003e"},{"line_number":20,"context_line":"  \u003cpara\u003e"},{"line_number":21,"context_line":"    The service controller will be responsible for creating, maintaining,"},{"line_number":22,"context_line":"    and destroying any instances created for it\u0027s clusters. The controller"},{"line_number":23,"context_line":"    will use the Networking service to establish network paths between"},{"line_number":24,"context_line":"    itself and the cluster instances. It will also manage the deployment"},{"line_number":25,"context_line":"    and life-cycle of user applications that are to be run on the"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_58455741","line":22,"updated":"2015-02-11 21:40:40.000000000","message":"Its.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"3f0e6c5450b0d7bcce60c3dbcb732d4a1f4987d2","unresolved":false,"context_lines":[{"line_number":19,"context_line":"  \u003c/para\u003e"},{"line_number":20,"context_line":"  \u003cpara\u003e"},{"line_number":21,"context_line":"    The service controller will be responsible for creating, maintaining,"},{"line_number":22,"context_line":"    and destroying any instances created for it\u0027s clusters. The controller"},{"line_number":23,"context_line":"    will use the Networking service to establish network paths between"},{"line_number":24,"context_line":"    itself and the cluster instances. It will also manage the deployment"},{"line_number":25,"context_line":"    and life-cycle of user applications that are to be run on the"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_f8afebe0","line":22,"updated":"2015-02-11 21:29:21.000000000","message":"its","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"be31537c058237139ab31d6fa29feb59918f3309","unresolved":false,"context_lines":[{"line_number":19,"context_line":"  \u003c/para\u003e"},{"line_number":20,"context_line":"  \u003cpara\u003e"},{"line_number":21,"context_line":"    The service controller will be responsible for creating, maintaining,"},{"line_number":22,"context_line":"    and destroying any instances created for it\u0027s clusters. The controller"},{"line_number":23,"context_line":"    will use the Networking service to establish network paths between"},{"line_number":24,"context_line":"    itself and the cluster instances. It will also manage the deployment"},{"line_number":25,"context_line":"    and life-cycle of user applications that are to be run on the"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_7805bb78","line":22,"in_reply_to":"da86d52c_f8afebe0","updated":"2015-02-11 21:39:22.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"3f0e6c5450b0d7bcce60c3dbcb732d4a1f4987d2","unresolved":false,"context_lines":[{"line_number":24,"context_line":"    itself and the cluster instances. It will also manage the deployment"},{"line_number":25,"context_line":"    and life-cycle of user applications that are to be run on the"},{"line_number":26,"context_line":"    clusters. The instances within a cluster contain the core of a"},{"line_number":27,"context_line":"    framework\u0027s processing engine and the Data processing service provides"},{"line_number":28,"context_line":"    several options for creating and managing the connections to these"},{"line_number":29,"context_line":"    instances."},{"line_number":30,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_f8960b93","line":27,"updated":"2015-02-11 21:29:21.000000000","message":"case mismatch again","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":42,"context_line":"    processing users with respect to their applications, the data that"},{"line_number":43,"context_line":"    they use, and the user\u0027s expected capabilities within a project. We"},{"line_number":44,"context_line":"    will also demonstrate a number of hardening techniques for the service"},{"line_number":45,"context_line":"    controller and it\u0027s clusters, and provide examples of various"},{"line_number":46,"context_line":"    controller configurations and user management approaches to ensure an"},{"line_number":47,"context_line":"    adequate level of security and privacy."},{"line_number":48,"context_line":"  \u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_78d13b56","line":45,"updated":"2015-02-11 21:40:40.000000000","message":"Weirdly, we only use it\u0027s for the contraction of \"it is\". It makes no sense, but it\u0027s true. Its again.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":84,"context_line":"      general familiarity with these applications. The list of highlighted"},{"line_number":85,"context_line":"      technologies is broken into two sections; the first designates high"},{"line_number":86,"context_line":"      priority applications that have a greater impact on security, the"},{"line_number":87,"context_line":"      second are supporting applications with a lower impact."},{"line_number":88,"context_line":"    \u003c/para\u003e"},{"line_number":89,"context_line":"    \u003cpara\u003eHigher impact\u003c/para\u003e"},{"line_number":90,"context_line":"    \u003citemizedlist\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_389c236a","line":87,"updated":"2015-02-11 21:40:40.000000000","message":"\"the second\" is a singular \"section\", so it can\u0027t support the plural \"are\", and yet \"the second is supporting applications\" is incredibly awkward. Maybe:\n\"The list of highlighted technologies is broken into two sections: first, high priority applications that have a greater impact on security, and second, supporting applications with a lower impact.\"","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":84,"context_line":"      general familiarity with these applications. The list of highlighted"},{"line_number":85,"context_line":"      technologies is broken into two sections; the first designates high"},{"line_number":86,"context_line":"      priority applications that have a greater impact on security, the"},{"line_number":87,"context_line":"      second are supporting applications with a lower impact."},{"line_number":88,"context_line":"    \u003c/para\u003e"},{"line_number":89,"context_line":"    \u003cpara\u003eHigher impact\u003c/para\u003e"},{"line_number":90,"context_line":"    \u003citemizedlist\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_0fdb927c","line":87,"in_reply_to":"da86d52c_389c236a","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":202,"context_line":"      processing service are shared within the scope of a project. Although"},{"line_number":203,"context_line":"      a single controller installation may manage several sets of resources,"},{"line_number":204,"context_line":"      these resources will each be scoped to a single project. Given this"},{"line_number":205,"context_line":"      constraint we recommend ensuring that user membership in projects is"},{"line_number":206,"context_line":"      monitored closely to maintain proper segregation of resources."},{"line_number":207,"context_line":"    \u003c/para\u003e"},{"line_number":208,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_18c83f54","line":205,"updated":"2015-02-11 21:40:40.000000000","message":"\"ensuring\" here reads a bit awkwardly to me; could just be me though. It could be removed and the sentence would still fundamentally work.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":202,"context_line":"      processing service are shared within the scope of a project. Although"},{"line_number":203,"context_line":"      a single controller installation may manage several sets of resources,"},{"line_number":204,"context_line":"      these resources will each be scoped to a single project. Given this"},{"line_number":205,"context_line":"      constraint we recommend ensuring that user membership in projects is"},{"line_number":206,"context_line":"      monitored closely to maintain proper segregation of resources."},{"line_number":207,"context_line":"    \u003c/para\u003e"},{"line_number":208,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_8fd6a24d","line":205,"in_reply_to":"da86d52c_18c83f54","updated":"2015-02-11 22:18:34.000000000","message":"Done","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":8090,"name":"Chad Roberts","email":"croberts@redhat.com","username":"croberts"},"change_message_id":"3f0e6c5450b0d7bcce60c3dbcb732d4a1f4987d2","unresolved":false,"context_lines":[{"line_number":211,"context_line":"      focus on data privacy, cluster management, and end-user application as"},{"line_number":212,"context_line":"      a starting point for evaluating the needs of their users. These"},{"line_number":213,"context_line":"      decisions will help guide the process of configuring user access to"},{"line_number":214,"context_line":"      the service. For an expanded discussion on data privacy see "},{"line_number":215,"context_line":"      \u003cxref linkend\u003d\"tenant-data\"/\u003e."},{"line_number":216,"context_line":"    \u003c/para\u003e"},{"line_number":217,"context_line":"    \u003cpara\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_58e1d728","line":214,"updated":"2015-02-11 21:29:21.000000000","message":"extra space make me see red","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":13953,"name":"Elise Gafford","email":"egafford@redhat.com","username":"egafford"},"change_message_id":"840f2f7d831ebd5aff508370cbe45238baad93af","unresolved":false,"context_lines":[{"line_number":220,"context_line":"      the event that more granular control is required the Data processing"},{"line_number":221,"context_line":"      service provides a policy file (as described in"},{"line_number":222,"context_line":"      \u003cxref linkend\u003d\"identity-policies\"/\u003e). These configurations will be"},{"line_number":223,"context_line":"      highly dependent on the needs of the installing organization, as such"},{"line_number":224,"context_line":"      there is no general advice on their usage, see"},{"line_number":225,"context_line":"      \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-role-based-access-control-policies\"/\u003e"},{"line_number":226,"context_line":"      for details."}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_b88013c0","line":223,"updated":"2015-02-11 21:40:40.000000000","message":"This comma should be a semicolon or period (or be followed by an and). After \"their usage\" below, a colon would be more accurate, though the comma seems to be used frequently enough with \"see [example]\", so natural language can win out if you like.","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"865084d9350c1cde625e0945d94e66581b4e42a4","unresolved":false,"context_lines":[{"line_number":220,"context_line":"      the event that more granular control is required the Data processing"},{"line_number":221,"context_line":"      service provides a policy file (as described in"},{"line_number":222,"context_line":"      \u003cxref linkend\u003d\"identity-policies\"/\u003e). These configurations will be"},{"line_number":223,"context_line":"      highly dependent on the needs of the installing organization, as such"},{"line_number":224,"context_line":"      there is no general advice on their usage, see"},{"line_number":225,"context_line":"      \u003cxref linkend\u003d\"data-processing-configuration-and-hardening-role-based-access-control-policies\"/\u003e"},{"line_number":226,"context_line":"      for details."}],"source_content_type":"application/xml","patch_set":1,"id":"da86d52c_6f06cecf","line":223,"in_reply_to":"da86d52c_b88013c0","updated":"2015-02-11 22:18:34.000000000","message":"i\u0027m gonna go with a combo meal here","commit_id":"c1f958bf4c135dca1141c8bd43d5abe5204e8051"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc60350bb56ddb76d346b08615963a0cf0626748","unresolved":false,"context_lines":[{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"},{"line_number":14,"context_line":"    applications which may access data in object storage or external"},{"line_number":15,"context_line":"    providers. The data processing controller uses the Orchestration"},{"line_number":16,"context_line":"    service to create clusters of instances which may exist as"},{"line_number":17,"context_line":"    long-running groups that can grow and shrink as requested, or as"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_a2e45de0","line":14,"updated":"2015-02-11 23:02:38.000000000","message":"Should object storage be capitalized here?","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c7d0b061f3de0d0d41c6d8a566cb611409b89989","unresolved":false,"context_lines":[{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"},{"line_number":14,"context_line":"    applications which may access data in object storage or external"},{"line_number":15,"context_line":"    providers. The data processing controller uses the Orchestration"},{"line_number":16,"context_line":"    service to create clusters of instances which may exist as"},{"line_number":17,"context_line":"    long-running groups that can grow and shrink as requested, or as"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_65898f25","line":14,"in_reply_to":"da86d52c_a2e45de0","updated":"2015-02-11 23:17:20.000000000","message":"good question, i thought the name were only capitalized when spelling out \"Object Store service. perhaps i\u0027m interpreting this too literally.","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fc60350bb56ddb76d346b08615963a0cf0626748","unresolved":false,"context_lines":[{"line_number":215,"context_line":"      \u003cxref linkend\u003d\"tenant-data\"/\u003e."},{"line_number":216,"context_line":"    \u003c/para\u003e"},{"line_number":217,"context_line":"    \u003cpara\u003e"},{"line_number":218,"context_line":"      The default assumption for a data processing installation is that"},{"line_number":219,"context_line":"      users will have access to all functionality within their projects. In"},{"line_number":220,"context_line":"      the event that more granular control is required the Data processing"},{"line_number":221,"context_line":"      service provides a policy file (as described in"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_42d561e3","line":218,"updated":"2015-02-11 23:02:38.000000000","message":"Capital d needed here?","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c7d0b061f3de0d0d41c6d8a566cb611409b89989","unresolved":false,"context_lines":[{"line_number":215,"context_line":"      \u003cxref linkend\u003d\"tenant-data\"/\u003e."},{"line_number":216,"context_line":"    \u003c/para\u003e"},{"line_number":217,"context_line":"    \u003cpara\u003e"},{"line_number":218,"context_line":"      The default assumption for a data processing installation is that"},{"line_number":219,"context_line":"      users will have access to all functionality within their projects. In"},{"line_number":220,"context_line":"      the event that more granular control is required the Data processing"},{"line_number":221,"context_line":"      service provides a policy file (as described in"}],"source_content_type":"application/xml","patch_set":2,"id":"da86d52c_c584fb0c","line":218,"in_reply_to":"da86d52c_42d561e3","updated":"2015-02-11 23:17:20.000000000","message":"ditto","commit_id":"8d1fd34109f4bf2b529befd1bdae29eed288b77f"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_d2fc9674","line":10,"updated":"2015-02-12 19:21:07.000000000","message":"capitalize Sahara","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"9d98acdc1e1fedb064451b5bd1001ab257d6d1db","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b7c7eb45","line":10,"in_reply_to":"da86d52c_258cbcd6","updated":"2015-02-13 15:03:41.000000000","message":"I\u0027m not all that familiar with the guidelines, but go with whatever is in guidelines and used by everyone else in the docs. It is capitalized on the web sites.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d1540632034cfdc7705006eacf4fd0bdd952f0cc","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_258cbcd6","line":10,"in_reply_to":"da86d52c_d2fc9674","updated":"2015-02-13 02:36:35.000000000","message":"according to the naming guidelines, the project names are not supposed to be capitalized. unless i\u0027ve missed something in this case.","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"58f8b6cbed58b694088938d5a067f5d76b1c7c87","unresolved":false,"context_lines":[{"line_number":40,"context_line":"  \u003cpara\u003e"},{"line_number":41,"context_line":"    In this chapter we will discuss how to assess the needs of data"},{"line_number":42,"context_line":"    processing users with respect to their applications, the data that"},{"line_number":43,"context_line":"    they use, and the user\u0027s expected capabilities within a project. We"},{"line_number":44,"context_line":"    will also demonstrate a number of hardening techniques for the service"},{"line_number":45,"context_line":"    controller and its clusters, and provide examples of various"},{"line_number":46,"context_line":"    controller configurations and user management approaches to ensure an"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_56a86777","line":43,"updated":"2015-02-13 18:43:41.000000000","message":"complete and total nit, but \"users\" is plural everywhere previous in this sentence (\"users\" and \"their\") so it should be in the last clause too.\n\neither \"the users\u0027 expected capabilities\" or \"their expected capabilities\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":40,"context_line":"  \u003cpara\u003e"},{"line_number":41,"context_line":"    In this chapter we will discuss how to assess the needs of data"},{"line_number":42,"context_line":"    processing users with respect to their applications, the data that"},{"line_number":43,"context_line":"    they use, and the user\u0027s expected capabilities within a project. We"},{"line_number":44,"context_line":"    will also demonstrate a number of hardening techniques for the service"},{"line_number":45,"context_line":"    controller and its clusters, and provide examples of various"},{"line_number":46,"context_line":"    controller configurations and user management approaches to ensure an"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_0f1b2e1d","line":43,"in_reply_to":"da86d52c_56a86777","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":14692,"name":"Lucas Fisher","email":"lucas.fisher@gmail.com","username":"lucas.fisher"},"change_message_id":"a90ee594a71f53da7e24042fc76437df2509f2ab","unresolved":false,"context_lines":[{"line_number":66,"context_line":"      The Data processing service makes heavy use of the Compute,"},{"line_number":67,"context_line":"      Orchestration, Image, and Block Storage services during the"},{"line_number":68,"context_line":"      provisioning of clusters. It will also use one or more networks,"},{"line_number":69,"context_line":"      created with the Networking service, provided during cluster creation"},{"line_number":70,"context_line":"      for administrative access to the instances. While users are running"},{"line_number":71,"context_line":"      framework applications the controller and the clusters will be"},{"line_number":72,"context_line":"      accessing the Object Store service. Given these service usages, we"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_d2cf3627","line":69,"updated":"2015-02-12 19:21:07.000000000","message":"\"created by the Networking\"","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d1540632034cfdc7705006eacf4fd0bdd952f0cc","unresolved":false,"context_lines":[{"line_number":66,"context_line":"      The Data processing service makes heavy use of the Compute,"},{"line_number":67,"context_line":"      Orchestration, Image, and Block Storage services during the"},{"line_number":68,"context_line":"      provisioning of clusters. It will also use one or more networks,"},{"line_number":69,"context_line":"      created with the Networking service, provided during cluster creation"},{"line_number":70,"context_line":"      for administrative access to the instances. While users are running"},{"line_number":71,"context_line":"      framework applications the controller and the clusters will be"},{"line_number":72,"context_line":"      accessing the Object Store service. Given these service usages, we"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_e5ac6437","line":69,"in_reply_to":"da86d52c_d2cf3627","updated":"2015-02-13 02:36:35.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"f2c537be351023dcd75cdf7fceda933b7dbaf47f","unresolved":false,"context_lines":[{"line_number":207,"context_line":"    \u003c/para\u003e"},{"line_number":208,"context_line":"    \u003cpara\u003e"},{"line_number":209,"context_line":"      As the security requirements of organizations deploying this service"},{"line_number":210,"context_line":"      will vary based their specific needs, we recommend that operators"},{"line_number":211,"context_line":"      focus on data privacy, cluster management, and end-user application as"},{"line_number":212,"context_line":"      a starting point for evaluating the needs of their users. These"},{"line_number":213,"context_line":"      decisions will help guide the process of configuring user access to"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_b407db17","line":210,"updated":"2015-02-13 19:24:32.000000000","message":"missing \"on\"\n\nbased on their ...","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":207,"context_line":"    \u003c/para\u003e"},{"line_number":208,"context_line":"    \u003cpara\u003e"},{"line_number":209,"context_line":"      As the security requirements of organizations deploying this service"},{"line_number":210,"context_line":"      will vary based their specific needs, we recommend that operators"},{"line_number":211,"context_line":"      focus on data privacy, cluster management, and end-user application as"},{"line_number":212,"context_line":"      a starting point for evaluating the needs of their users. These"},{"line_number":213,"context_line":"      decisions will help guide the process of configuring user access to"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_4fec46f4","line":210,"in_reply_to":"da86d52c_b407db17","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":8091,"name":"Trevor McKay","email":"tmckay@redhat.com","username":"tmckay"},"change_message_id":"b4fe1fbf87e22437f4aa5b3b3f08554c2c3e1a78","unresolved":false,"context_lines":[{"line_number":208,"context_line":"    \u003cpara\u003e"},{"line_number":209,"context_line":"      As the security requirements of organizations deploying this service"},{"line_number":210,"context_line":"      will vary based their specific needs, we recommend that operators"},{"line_number":211,"context_line":"      focus on data privacy, cluster management, and end-user application as"},{"line_number":212,"context_line":"      a starting point for evaluating the needs of their users. These"},{"line_number":213,"context_line":"      decisions will help guide the process of configuring user access to"},{"line_number":214,"context_line":"      the service. For an expanded discussion on data privacy see"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_9485775b","line":211,"updated":"2015-02-13 19:30:17.000000000","message":"plural, end-user applications? I could go either way","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"f81c1f0d38a7828bfce43034a6471cf1ea8963b5","unresolved":false,"context_lines":[{"line_number":208,"context_line":"    \u003cpara\u003e"},{"line_number":209,"context_line":"      As the security requirements of organizations deploying this service"},{"line_number":210,"context_line":"      will vary based their specific needs, we recommend that operators"},{"line_number":211,"context_line":"      focus on data privacy, cluster management, and end-user application as"},{"line_number":212,"context_line":"      a starting point for evaluating the needs of their users. These"},{"line_number":213,"context_line":"      decisions will help guide the process of configuring user access to"},{"line_number":214,"context_line":"      the service. For an expanded discussion on data privacy see"}],"source_content_type":"application/xml","patch_set":4,"id":"da86d52c_8fa47eba","line":211,"in_reply_to":"da86d52c_9485775b","updated":"2015-02-13 20:11:18.000000000","message":"Done","commit_id":"cb157dcbd85b40b9d7c4820b497de1bfec7b0cd9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_4a18b475","line":10,"updated":"2015-02-13 20:33:38.000000000","message":"Use \"Data processing service for OpenStack\"","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":7,"context_line":"  \u003c?dbhtml stop-chunking?\u003e"},{"line_number":8,"context_line":"  \u003ctitle\u003eIntroduction to Data processing\u003c/title\u003e"},{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_88d61dc2","line":10,"in_reply_to":"da86d52c_4a18b475","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a568f53f478a8e5716729dd7ec591042737b3e2e","unresolved":false,"context_lines":[{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"},{"line_number":14,"context_line":"    applications which may access data in object storage or external"},{"line_number":15,"context_line":"    providers. The data processing controller uses the Orchestration"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_aa1e905d","line":12,"updated":"2015-02-13 20:33:38.000000000","message":"dashboard is lowercase","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"6ec9fc5a6168eef451a6a5fc07608230e42f890c","unresolved":false,"context_lines":[{"line_number":9,"context_line":"  \u003cpara\u003e"},{"line_number":10,"context_line":"    The OpenStack Data processing service (sahara) provides a platform for"},{"line_number":11,"context_line":"    the provisioning and management of instance clusters using processing"},{"line_number":12,"context_line":"    frameworks such as Hadoop and Spark. Through the OpenStack Dashboard"},{"line_number":13,"context_line":"    or REST API, users will be able to upload and execute framework"},{"line_number":14,"context_line":"    applications which may access data in object storage or external"},{"line_number":15,"context_line":"    providers. The data processing controller uses the Orchestration"}],"source_content_type":"application/xml","patch_set":5,"id":"da86d52c_a8e3e1a2","line":12,"in_reply_to":"da86d52c_aa1e905d","updated":"2015-02-16 02:14:23.000000000","message":"Done","commit_id":"c8a17638c7f567406dd84fee0520eaa962b38164"},{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[{"line_number":38,"context_line":"    role-based access controls."},{"line_number":39,"context_line":"  \u003c/para\u003e"},{"line_number":40,"context_line":"  \u003cpara\u003e"},{"line_number":41,"context_line":"    In this chapter we will discuss how to assess the needs of data"},{"line_number":42,"context_line":"    processing users with respect to their applications, the data that"},{"line_number":43,"context_line":"    they use, and their expected capabilities within a project. We"},{"line_number":44,"context_line":"    will also demonstrate a number of hardening techniques for the service"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_b793944d","line":41,"updated":"2015-02-19 20:15:22.000000000","message":"remove \"will\"?","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fe14b09b437c90d56b62ed61bd56b086cb6901fa","unresolved":false,"context_lines":[{"line_number":38,"context_line":"    role-based access controls."},{"line_number":39,"context_line":"  \u003c/para\u003e"},{"line_number":40,"context_line":"  \u003cpara\u003e"},{"line_number":41,"context_line":"    In this chapter we will discuss how to assess the needs of data"},{"line_number":42,"context_line":"    processing users with respect to their applications, the data that"},{"line_number":43,"context_line":"    they use, and their expected capabilities within a project. We"},{"line_number":44,"context_line":"    will also demonstrate a number of hardening techniques for the service"}],"source_content_type":"application/xml","patch_set":6,"id":"da86d52c_1a0f202f","line":41,"in_reply_to":"da86d52c_b793944d","updated":"2015-02-19 21:58:59.000000000","message":"Done","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"}],"security-guide/static/data_processing_architecture.png":[{"author":{"_account_id":2807,"name":"Bryan D. Payne","email":"bdpayne@acm.org","username":"bdpayne"},"change_message_id":"dfc7e4dc6de2ded5686fbebc9f8c88b6b3066d99","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"da86d52c_f7a50c03","updated":"2015-02-19 20:15:22.000000000","message":"After talking with Sam-I-Am in IRC, it sounds like the preferred color scheme for new diagrams is http://ethanschoonover.com/solarized.  And the font should be Open Sans.  I suggest we rework this diagram to use that.  Also, we should include the source file (svg) for this somewhere to make it easier to edit later.\n\nSee the install guide for some examples.\n\nAlso see https://github.com/ionosphere80/openstack-networking-guide/tree/master/common/images for some example images.","commit_id":"4e592e32e5adbf8d98024233d4c9564f1edd32d6"}]}