)]}'
{"security-notes/OSSN-0049":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"41eb92e1a908855b728d7def70759e227371316c","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"fa32b979_7c751696","line":11,"updated":"2015-06-23 15:04:41.000000000","message":"Should there be a comma after Nova?","commit_id":"29e8322da68e5ee26e35be2d2bcbba1628c2baec"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"04b56072238590a400a3235808648fd2234837ee","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"fa32b979_ddc20ee9","line":11,"in_reply_to":"fa32b979_7c751696","updated":"2015-06-23 21:48:15.000000000","message":"yes, absolutely correct. thanks","commit_id":"29e8322da68e5ee26e35be2d2bcbba1628c2baec"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver an operator will need to specify"},{"line_number":15,"context_line":"either the password or an authentication token for the ironic admin"},{"line_number":16,"context_line":"user\u0027s keystone credentials. Under normal circumstances this is not an"},{"line_number":17,"context_line":"issue, but when running the API server with logging levels set to"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_f3891a70","line":14,"updated":"2015-06-24 16:13:45.000000000","message":"insert a comma after \"driver\".  i.e. \"When using nova with the ironic driver, an operator.....\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver an operator will need to specify"},{"line_number":15,"context_line":"either the password or an authentication token for the ironic admin"},{"line_number":16,"context_line":"user\u0027s keystone credentials. Under normal circumstances this is not an"},{"line_number":17,"context_line":"issue, but when running the API server with logging levels set to"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_38e8b3b2","line":14,"in_reply_to":"fa32b979_f3891a70","updated":"2015-06-24 21:15:18.000000000","message":"Done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":19,"context_line":"the logs."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"The reason for this is that the oslo configuration for those options"},{"line_number":22,"context_line":"do not contain the `secret` flag. Without this flag set, the value for"},{"line_number":23,"context_line":"a configuration option will be displayed in the logs."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_330a2227","line":22,"updated":"2015-06-24 16:13:45.000000000","message":"Suggest replacing the first sentence with the following:  \"This behavior results from the oslo configuration not containing the \u0027secret\u0027 flag.\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":19,"context_line":"the logs."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"The reason for this is that the oslo configuration for those options"},{"line_number":22,"context_line":"do not contain the `secret` flag. Without this flag set, the value for"},{"line_number":23,"context_line":"a configuration option will be displayed in the logs."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_582d77fc","line":22,"in_reply_to":"fa32b979_330a2227","updated":"2015-06-24 21:15:18.000000000","message":"nice rephrasing, done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"},{"line_number":26,"context_line":"log verbosity for the purposes of debugging or extended log collection."},{"line_number":27,"context_line":"Depending on where the log files are being stored, and their access"},{"line_number":28,"context_line":"rights, these values could be read by an intruder to the system. The"},{"line_number":29,"context_line":"credentials will provide anyone who controls them access to the ironic"},{"line_number":30,"context_line":"API server\u0027s administrative functions. Additionally they could be used"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_deb73d38","line":27,"updated":"2015-06-24 16:13:45.000000000","message":"Suggest modifying the sentence beginning in line 26 to read:  \"Depending on permissions and log storage location, these values could be read by an intruder to the system.\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"},{"line_number":26,"context_line":"log verbosity for the purposes of debugging or extended log collection."},{"line_number":27,"context_line":"Depending on where the log files are being stored, and their access"},{"line_number":28,"context_line":"rights, these values could be read by an intruder to the system. The"},{"line_number":29,"context_line":"credentials will provide anyone who controls them access to the ironic"},{"line_number":30,"context_line":"API server\u0027s administrative functions. Additionally they could be used"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_b81923d3","line":27,"in_reply_to":"fa32b979_deb73d38","updated":"2015-06-24 21:15:18.000000000","message":"again, nice phrasing. done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":27,"context_line":"Depending on where the log files are being stored, and their access"},{"line_number":28,"context_line":"rights, these values could be read by an intruder to the system. The"},{"line_number":29,"context_line":"credentials will provide anyone who controls them access to the ironic"},{"line_number":30,"context_line":"API server\u0027s administrative functions. Additionally they could be used"},{"line_number":31,"context_line":"in conjuction with keystone to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_5356c6ce","line":30,"updated":"2015-06-24 16:13:45.000000000","message":"Insert comma after \"Additionally\".  i.e. \"Additionally, they could be used....\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":27,"context_line":"Depending on where the log files are being stored, and their access"},{"line_number":28,"context_line":"rights, these values could be read by an intruder to the system. The"},{"line_number":29,"context_line":"credentials will provide anyone who controls them access to the ironic"},{"line_number":30,"context_line":"API server\u0027s administrative functions. Additionally they could be used"},{"line_number":31,"context_line":"in conjuction with keystone to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_98753ffb","line":30,"in_reply_to":"fa32b979_5356c6ce","updated":"2015-06-24 21:15:18.000000000","message":"Done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":28,"context_line":"rights, these values could be read by an intruder to the system. The"},{"line_number":29,"context_line":"credentials will provide anyone who controls them access to the ironic"},{"line_number":30,"context_line":"API server\u0027s administrative functions. Additionally they could be used"},{"line_number":31,"context_line":"in conjuction with keystone to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"},{"line_number":34,"context_line":"permissions)."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_d332d6f1","line":31,"updated":"2015-06-24 16:13:45.000000000","message":"replace \"keystone\" with \"OpenStack Identity functions\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":28,"context_line":"rights, these values could be read by an intruder to the system. The"},{"line_number":29,"context_line":"credentials will provide anyone who controls them access to the ironic"},{"line_number":30,"context_line":"API server\u0027s administrative functions. Additionally they could be used"},{"line_number":31,"context_line":"in conjuction with keystone to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"},{"line_number":34,"context_line":"permissions)."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_7865db42","line":31,"in_reply_to":"fa32b979_d332d6f1","updated":"2015-06-24 21:15:18.000000000","message":"Done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":44,"context_line":"stable releases, which can be expected in the 2015.1.1 and 2014.2.4"},{"line_number":45,"context_line":"tags, respectively."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Where possible nova deployments should be updated to one of these"},{"line_number":48,"context_line":"releases; Liberty-1, 2015.1.1 (Kilo), and 2014.2.4 (Juno)."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_539d6608","line":47,"updated":"2015-06-24 16:13:45.000000000","message":"Insert comma after \"possible\".  i.e. \"Where possible, nova....\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":44,"context_line":"stable releases, which can be expected in the 2015.1.1 and 2014.2.4"},{"line_number":45,"context_line":"tags, respectively."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Where possible nova deployments should be updated to one of these"},{"line_number":48,"context_line":"releases; Liberty-1, 2015.1.1 (Kilo), and 2014.2.4 (Juno)."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_984c5fc9","line":47,"in_reply_to":"fa32b979_539d6608","updated":"2015-06-24 21:15:18.000000000","message":"Done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"d8c62fb6140d11b7fba0173acc6eae8adb7b8fb3","unresolved":false,"context_lines":[{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"},{"line_number":51,"context_line":"turn off the debug logging level whenever it is not in use and ensure"},{"line_number":52,"context_line":"that log files produced from those debug sessions are stored securely."},{"line_number":53,"context_line":"To disable the debug log level the nova configuration file should be"},{"line_number":54,"context_line":"editted as follows:"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"    [DEFAULT]"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_b3f39272","line":53,"updated":"2015-06-24 16:13:45.000000000","message":"Insert comma after \"level\".  i.e. \"To disable the debug log level, the nova....\"","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"c5ac328918e0fa89eaa2d1d2120a1834b93ed035","unresolved":false,"context_lines":[{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"},{"line_number":51,"context_line":"turn off the debug logging level whenever it is not in use and ensure"},{"line_number":52,"context_line":"that log files produced from those debug sessions are stored securely."},{"line_number":53,"context_line":"To disable the debug log level the nova configuration file should be"},{"line_number":54,"context_line":"editted as follows:"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"    [DEFAULT]"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"fa32b979_b847e3a1","line":53,"in_reply_to":"fa32b979_b3f39272","updated":"2015-06-24 21:15:18.000000000","message":"Done","commit_id":"9545974eec849dc790372ecd7601e67386b0f25c"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"fe37904a96b45f07bc1cce936005ecb5591debe5","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Nova logging sensitive information while operating in debug mode"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_71ae2231","line":1,"updated":"2015-06-25 20:56:41.000000000","message":"Maybe put Nova ironic driver in title?","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"afaf49ea96293233c934dd13e9f247364bf80eda","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Nova logging sensitive information while operating in debug mode"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_52b42081","line":1,"in_reply_to":"fa32b979_71ae2231","updated":"2015-06-26 13:02:44.000000000","message":"i don\u0027t mind doing that","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"fe37904a96b45f07bc1cce936005ecb5591debe5","unresolved":false,"context_lines":[{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"The password and authentication token configuration options for the"},{"line_number":6,"context_line":"ironic driver in nova are not marked as secret. These options will"},{"line_number":7,"context_line":"be logged to the standard logging output when the controller is run"},{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_6b007136","line":6,"updated":"2015-06-25 20:56:41.000000000","message":"I\u0027m guessing convention is that we don\u0027t capitalize service names?","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"afaf49ea96293233c934dd13e9f247364bf80eda","unresolved":false,"context_lines":[{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"The password and authentication token configuration options for the"},{"line_number":6,"context_line":"ironic driver in nova are not marked as secret. These options will"},{"line_number":7,"context_line":"be logged to the standard logging output when the controller is run"},{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_1288d8c5","line":6,"in_reply_to":"fa32b979_6b007136","updated":"2015-06-26 13:02:44.000000000","message":"yea","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":979,"name":"Dave Walker","email":"email@daviey.com","username":"davewalker"},"change_message_id":"0c563d02c31824d96f3d2d8892d0fad982bf35fa","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_6592e358","line":11,"updated":"2015-06-25 17:25:50.000000000","message":"It is known not to be relevant on older releases?","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"fe37904a96b45f07bc1cce936005ecb5591debe5","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_51f75e59","line":11,"updated":"2015-06-25 20:56:41.000000000","message":"Yeah, I see your point about listing ironic or not - I\u0027d say no, since this isn\u0027t an issue with Ironic, it\u0027s an issue with Nova.\n\nIs there some way of being more specific so that somebody skimming can quickly know they aren\u0027t vulnerable if they don\u0027t use the ironic driver?","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"afaf49ea96293233c934dd13e9f247364bf80eda","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_b2bfac5f","line":11,"in_reply_to":"fa32b979_51f75e59","updated":"2015-06-26 13:02:44.000000000","message":"good question, i could change this to Nova(ironic driver), would that be more clear?","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"afaf49ea96293233c934dd13e9f247364bf80eda","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_92938800","line":11,"in_reply_to":"fa32b979_6592e358","updated":"2015-06-26 13:02:44.000000000","message":"@Dave, yes i looked and Juno is the farthest back that these ironic driver values go","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"aede5f04dbad10f9a94ec64006fc175122315098","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_737126a8","line":11,"in_reply_to":"fa32b979_b2bfac5f","updated":"2015-06-26 13:59:11.000000000","message":"Yeah, definitely.  I think that would make the note more user friendly :)","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"fe37904a96b45f07bc1cce936005ecb5591debe5","unresolved":false,"context_lines":[{"line_number":19,"context_line":"the logs."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"This behavior results from the oslo configuration not containing the"},{"line_number":22,"context_line":"`secret` flag. Without this flag set, the value for a configuration"},{"line_number":23,"context_line":"option will be displayed in the logs."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_31041a17","line":22,"updated":"2015-06-25 20:56:41.000000000","message":"Can we provide guidance to the users to set this oslo configuration themselves?  This seems like a viable fix for users who don\u0027t want to update or for unsupported versions like Icehouse.","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"afaf49ea96293233c934dd13e9f247364bf80eda","unresolved":false,"context_lines":[{"line_number":19,"context_line":"the logs."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"This behavior results from the oslo configuration not containing the"},{"line_number":22,"context_line":"`secret` flag. Without this flag set, the value for a configuration"},{"line_number":23,"context_line":"option will be displayed in the logs."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_d27fd0a9","line":22,"in_reply_to":"fa32b979_31041a17","updated":"2015-06-26 13:02:44.000000000","message":"i\u0027m not sure the best way to advise that, should i put a reference to the review for the change?\n\nit\u0027s a fairly simple fix and the change was able to be applied to all versions without the need for any merge fixup.","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"aede5f04dbad10f9a94ec64006fc175122315098","unresolved":false,"context_lines":[{"line_number":19,"context_line":"the logs."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"This behavior results from the oslo configuration not containing the"},{"line_number":22,"context_line":"`secret` flag. Without this flag set, the value for a configuration"},{"line_number":23,"context_line":"option will be displayed in the logs."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"This presents a challenge to any operator who might have increased the"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_d36032d2","line":22,"in_reply_to":"fa32b979_d27fd0a9","updated":"2015-06-26 13:59:11.000000000","message":"Cool, yeah I think this would be a nice option to have.","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":979,"name":"Dave Walker","email":"email@daviey.com","username":"davewalker"},"change_message_id":"0c563d02c31824d96f3d2d8892d0fad982bf35fa","unresolved":false,"context_lines":[{"line_number":49,"context_line":""},{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"},{"line_number":51,"context_line":"turn off the debug logging level whenever it is not in use and ensure"},{"line_number":52,"context_line":"that log files produced from those debug sessions are stored securely."},{"line_number":53,"context_line":"To disable the debug log level, the nova configuration file should be"},{"line_number":54,"context_line":"editted as follows:"},{"line_number":55,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_a5822bfd","line":52,"updated":"2015-06-25 17:25:50.000000000","message":"Do we know what permissions distro\u0027s have this set to by default?","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"afaf49ea96293233c934dd13e9f247364bf80eda","unresolved":false,"context_lines":[{"line_number":49,"context_line":""},{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"},{"line_number":51,"context_line":"turn off the debug logging level whenever it is not in use and ensure"},{"line_number":52,"context_line":"that log files produced from those debug sessions are stored securely."},{"line_number":53,"context_line":"To disable the debug log level, the nova configuration file should be"},{"line_number":54,"context_line":"editted as follows:"},{"line_number":55,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":3,"id":"fa32b979_f253f437","line":52,"in_reply_to":"fa32b979_a5822bfd","updated":"2015-06-26 13:02:44.000000000","message":"i\u0027m not sure there is a default as enabling debug mode and creating a log file would require the operator to specify the log file when running nova.","commit_id":"b8fe73a69514b6362efd7a6ebd589f78e44ce264"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"5253f5b9ac182c097dc4651426ded44728469ae3","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Nova ironic driver logging sensitive information while operating in debug mode"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_33ea62ad","line":1,"updated":"2015-07-01 11:22:43.000000000","message":"logs?","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"73b3572fc424b9ba5c8b1eedc6a75747f38f48b6","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Nova ironic driver logging sensitive information while operating in debug mode"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_0251fcd7","line":1,"in_reply_to":"ba3cc151_33ea62ad","updated":"2015-07-01 15:39:01.000000000","message":"Done","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"5253f5b9ac182c097dc4651426ded44728469ae3","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova(ironic driver), Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_335d8279","line":11,"updated":"2015-07-01 11:22:43.000000000","message":"Although you loose some granularity I think this might be better\nNova, Ironic, Kilo, Juno \n\nWhen we start parsing/converting OSSNs this will work better.","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"73b3572fc424b9ba5c8b1eedc6a75747f38f48b6","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova(ironic driver), Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_02681c86","line":11,"in_reply_to":"ba3cc151_335d8279","updated":"2015-07-01 15:39:01.000000000","message":"ok, i\u0027ll change it. this is exactly the question we had about whether to include Ironic or not.","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":14046,"name":"Chris Cannon","email":"ccannon@hp.com","username":"Helimaniac"},"change_message_id":"752b40e40d468ed906e9971f7ced86dc2a649a3b","unresolved":false,"context_lines":[{"line_number":28,"context_line":"be read by an intruder to the system. The credentials will provide"},{"line_number":29,"context_line":"anyone who controls them access to the ironic API server\u0027s"},{"line_number":30,"context_line":"administrative functions. Additionally, they could be used in conjuction"},{"line_number":31,"context_line":"with OpenStack identity functions to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"},{"line_number":34,"context_line":"permissions)."}],"source_content_type":"application/octet-stream","patch_set":4,"id":"fa32b979_8c336162","line":31,"updated":"2015-06-26 17:03:26.000000000","message":"\"identity\" should be capitalized, as the line refers to the OpenStack Identity service in place of referencing the keystone project.","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"e85d3f4d5756f993ca4c39ceb079d9f0e8705665","unresolved":false,"context_lines":[{"line_number":28,"context_line":"be read by an intruder to the system. The credentials will provide"},{"line_number":29,"context_line":"anyone who controls them access to the ironic API server\u0027s"},{"line_number":30,"context_line":"administrative functions. Additionally, they could be used in conjuction"},{"line_number":31,"context_line":"with OpenStack identity functions to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"},{"line_number":34,"context_line":"permissions)."}],"source_content_type":"application/octet-stream","patch_set":4,"id":"fa32b979_f250c60c","line":31,"in_reply_to":"fa32b979_8c336162","updated":"2015-06-26 17:32:45.000000000","message":"doh! i missed that one.","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"73b3572fc424b9ba5c8b1eedc6a75747f38f48b6","unresolved":false,"context_lines":[{"line_number":28,"context_line":"be read by an intruder to the system. The credentials will provide"},{"line_number":29,"context_line":"anyone who controls them access to the ironic API server\u0027s"},{"line_number":30,"context_line":"administrative functions. Additionally, they could be used in conjuction"},{"line_number":31,"context_line":"with OpenStack identity functions to issue new authentication tokens or"},{"line_number":32,"context_line":"perform further malicious activity depending on the scope of the"},{"line_number":33,"context_line":"administrative account access (for example, modifying account"},{"line_number":34,"context_line":"permissions)."}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_42ce2483","line":31,"in_reply_to":"fa32b979_f250c60c","updated":"2015-07-01 15:39:01.000000000","message":"Done","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"5253f5b9ac182c097dc4651426ded44728469ae3","unresolved":false,"context_lines":[{"line_number":42,"context_line":"This issue has been resolved in nova and will be included in the"},{"line_number":43,"context_line":"Liberty-1 release. It has also been backported to the Kilo and Juno"},{"line_number":44,"context_line":"stable releases, which can be expected in the 2015.1.1 and 2014.2.4"},{"line_number":45,"context_line":"tags, respectively."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Where possible, nova deployments should be updated to one of these"},{"line_number":48,"context_line":"releases; Liberty-1, 2015.1.1 (Kilo), and 2014.2.4 (Juno)."}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_33d4a2bb","line":45,"updated":"2015-07-01 11:22:43.000000000","message":"The last four paragraphs all start with the word \"This\" if you\u0027re making some more edits to the OSSN consider perhaps changing the language slightly to avoid the alliteration","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"73b3572fc424b9ba5c8b1eedc6a75747f38f48b6","unresolved":false,"context_lines":[{"line_number":42,"context_line":"This issue has been resolved in nova and will be included in the"},{"line_number":43,"context_line":"Liberty-1 release. It has also been backported to the Kilo and Juno"},{"line_number":44,"context_line":"stable releases, which can be expected in the 2015.1.1 and 2014.2.4"},{"line_number":45,"context_line":"tags, respectively."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Where possible, nova deployments should be updated to one of these"},{"line_number":48,"context_line":"releases; Liberty-1, 2015.1.1 (Kilo), and 2014.2.4 (Juno)."}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_4202a43e","line":45,"in_reply_to":"ba3cc151_33d4a2bb","updated":"2015-07-01 15:39:01.000000000","message":"Done","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"5253f5b9ac182c097dc4651426ded44728469ae3","unresolved":false,"context_lines":[{"line_number":84,"context_line":""},{"line_number":85,"context_line":"### Contacts / References ###"},{"line_number":86,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0049"},{"line_number":87,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1451931"},{"line_number":88,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":89,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"},{"line_number":90,"context_line":"Oslo Config Special Handling Instructions: http://docs.openstack.org/developer/oslo.config/cfg.html#special-handling-instructions"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_b37c32b6","line":87,"updated":"2015-07-01 11:22:43.000000000","message":"I think this should be https://bugs.launchpad.net/nova/+bug/1451931 as it was originally reported in Nova (Not that it makes a difference but traditionally that\u0027s what we link to here).","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"73b3572fc424b9ba5c8b1eedc6a75747f38f48b6","unresolved":false,"context_lines":[{"line_number":84,"context_line":""},{"line_number":85,"context_line":"### Contacts / References ###"},{"line_number":86,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0049"},{"line_number":87,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1451931"},{"line_number":88,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":89,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"},{"line_number":90,"context_line":"Oslo Config Special Handling Instructions: http://docs.openstack.org/developer/oslo.config/cfg.html#special-handling-instructions"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"ba3cc151_a52dbaff","line":87,"in_reply_to":"ba3cc151_b37c32b6","updated":"2015-07-01 15:39:01.000000000","message":"Done","commit_id":"34594b2a7e31315ceb82fc5c2a31f8260158b54b"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"db523e5639e06ec76f8e7952611d97b0d517b8c7","unresolved":false,"context_lines":[{"line_number":45,"context_line":"can be expected in the 2015.1.1 and 2014.2.4 tags, respectively."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Where possible, nova deployments should be updated to one of these"},{"line_number":48,"context_line":"releases; Liberty-1, 2015.1.1 (Kilo), or 2014.2.4 (Juno)."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"},{"line_number":51,"context_line":"turn off the debug logging level whenever it is not in use and ensure"}],"source_content_type":"application/octet-stream","patch_set":5,"id":"ba3cc151_0502660b","line":48,"updated":"2015-07-01 15:45:10.000000000","message":"s/releases;/releases:","commit_id":"adb4fb52852eb59c9c504b9423de828119cffb08"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"e983d944942e2d08f0b23f25706b3d7bc10898b6","unresolved":false,"context_lines":[{"line_number":45,"context_line":"can be expected in the 2015.1.1 and 2014.2.4 tags, respectively."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Where possible, nova deployments should be updated to one of these"},{"line_number":48,"context_line":"releases; Liberty-1, 2015.1.1 (Kilo), or 2014.2.4 (Juno)."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"If updating the nova deployment is not feasible, operators should"},{"line_number":51,"context_line":"turn off the debug logging level whenever it is not in use and ensure"}],"source_content_type":"application/octet-stream","patch_set":5,"id":"ba3cc151_6824695f","line":48,"in_reply_to":"ba3cc151_0502660b","updated":"2015-07-01 15:49:06.000000000","message":"doh, the might colon!","commit_id":"adb4fb52852eb59c9c504b9423de828119cffb08"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"e383ed404f0f4da8afe20cdf1763266a8877fab8","unresolved":false,"context_lines":[{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"The password and authentication token configuration options for the"},{"line_number":6,"context_line":"ironic driver in nova are not marked as secret. These options will"},{"line_number":7,"context_line":"be logged to the standard logging output when the controller is run"},{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_2e289e99","line":6,"updated":"2015-07-01 20:42:09.000000000","message":"(nit) I\u0027d say \"The values of these options\".","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"29ee0f12b78f1a3c879d50455e996a60e95bcf00","unresolved":false,"context_lines":[{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"The password and authentication token configuration options for the"},{"line_number":6,"context_line":"ironic driver in nova are not marked as secret. These options will"},{"line_number":7,"context_line":"be logged to the standard logging output when the controller is run"},{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_2f6099ce","line":6,"in_reply_to":"ba3cc151_2e289e99","updated":"2015-07-01 21:00:04.000000000","message":"Done","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"e383ed404f0f4da8afe20cdf1763266a8877fab8","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Ironic, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_8e152a4a","line":11,"updated":"2015-07-01 20:42:09.000000000","message":"(nit) We usually list releases in chronological order.","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"29ee0f12b78f1a3c879d50455e996a60e95bcf00","unresolved":false,"context_lines":[{"line_number":8,"context_line":"in debug mode."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"### Affected Services / Software ###"},{"line_number":11,"context_line":"Nova, Ironic, Kilo, Juno"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"### Discussion ###"},{"line_number":14,"context_line":"When using nova with the ironic driver, an operator will need to specify"}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_ef9cf1c1","line":11,"in_reply_to":"ba3cc151_8e152a4a","updated":"2015-07-01 21:00:04.000000000","message":"Done","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"e383ed404f0f4da8afe20cdf1763266a8877fab8","unresolved":false,"context_lines":[{"line_number":56,"context_line":"    [DEFAULT]"},{"line_number":57,"context_line":"    debug \u003d False"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"A final option, for installations that require debug logging and"},{"line_number":60,"context_line":"cannot upgrade, is to perform the code upgrade manually on the nova"},{"line_number":61,"context_line":"service. This option should only be performed by operators that feel"},{"line_number":62,"context_line":"fully comfortable modifying the deployed codebase. For all deployed"}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_acda7749","line":59,"updated":"2015-07-01 20:42:09.000000000","message":"This is a little scary to recommend.  I don\u0027t know that we\u0027ve recommended modifying the code in an OSSN before, and I\u0027m a bit hesitant to start doing this.","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"1d7198429cab25adf769c0a073dd2b5e3b6b765c","unresolved":false,"context_lines":[{"line_number":56,"context_line":"    [DEFAULT]"},{"line_number":57,"context_line":"    debug \u003d False"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"A final option, for installations that require debug logging and"},{"line_number":60,"context_line":"cannot upgrade, is to perform the code upgrade manually on the nova"},{"line_number":61,"context_line":"service. This option should only be performed by operators that feel"},{"line_number":62,"context_line":"fully comfortable modifying the deployed codebase. For all deployed"}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_1b8073bf","line":59,"in_reply_to":"ba3cc151_2fb7393b","updated":"2015-07-01 22:46:32.000000000","message":"Per discussion on IRC, let\u0027s remove this.","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"29ee0f12b78f1a3c879d50455e996a60e95bcf00","unresolved":false,"context_lines":[{"line_number":56,"context_line":"    [DEFAULT]"},{"line_number":57,"context_line":"    debug \u003d False"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"A final option, for installations that require debug logging and"},{"line_number":60,"context_line":"cannot upgrade, is to perform the code upgrade manually on the nova"},{"line_number":61,"context_line":"service. This option should only be performed by operators that feel"},{"line_number":62,"context_line":"fully comfortable modifying the deployed codebase. For all deployed"}],"source_content_type":"application/octet-stream","patch_set":6,"id":"ba3cc151_2fb7393b","line":59,"in_reply_to":"ba3cc151_acda7749","updated":"2015-07-01 21:00:04.000000000","message":"i agree, i think this is something we need to discuss as this section was specifically requested.","commit_id":"8b1181851195c4c1aa7afe0787f561692715dce7"}]}