)]}'
{"security-guide/source/api-endpoints/api-endpoint-configuration-recommendations.rst":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"a96685da09cdb549897e194cf43487ef3514d434","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"   $ openstack endpoint create identity \\"},{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     http://management-ip:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Configure applications for internal URLs"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a89bdaa_dc4f6a68","line":34,"updated":"2016-09-12 01:44:38.000000000","message":"The endpoints here were changed from a port for Nova endpoint to keystone.  Why the service change?  And why only show an example that only uses a management network and on an insecure http instead of https.","commit_id":"6cfa7311d1628f3f30f0568690cf34a3f29342c4"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"f7e3f513e28cf042fe2a1fdd4792e2951bac053b","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"   $ openstack endpoint create identity \\"},{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     http://management-ip:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Configure applications for internal URLs"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a89bdaa_8a79cafe","line":34,"in_reply_to":"9a89bdaa_1cab8dd7","updated":"2016-09-13 08:45:03.000000000","message":"I would still put https, as it sends out a better message / sets good habits. Is there any reason to not put https? Even if internal, TLS everywhere is the ideal we should be striving for.","commit_id":"6cfa7311d1628f3f30f0568690cf34a3f29342c4"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"2c1ef419c404cb7c8807645bec331e71fe680807","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"   $ openstack endpoint create identity \\"},{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     http://management-ip:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Configure applications for internal URLs"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a89bdaa_f0a073f6","line":34,"in_reply_to":"9a89bdaa_2a5c3e4a","updated":"2016-09-13 13:07:11.000000000","message":"So don\u0027t we need adminurl, publicurl still?","commit_id":"6cfa7311d1628f3f30f0568690cf34a3f29342c4"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"82b9987aab71e3897e0c82082ff42e29e4a8b672","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"   $ openstack endpoint create identity \\"},{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     http://management-ip:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Configure applications for internal URLs"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a89bdaa_2a5c3e4a","line":34,"in_reply_to":"9a89bdaa_8a79cafe","updated":"2016-09-13 08:48:45.000000000","message":"agree. patch set2 has changed this. Please review, thanks! : )","commit_id":"6cfa7311d1628f3f30f0568690cf34a3f29342c4"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"7ab96aae6ce1ded8d5a57c9364e9961ad5d89393","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"   $ openstack endpoint create identity \\"},{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     http://management-ip:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Configure applications for internal URLs"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a89bdaa_1cab8dd7","line":34,"in_reply_to":"9a89bdaa_dc4f6a68","updated":"2016-09-12 06:20:09.000000000","message":"In many cases, we use the 5000 port for keystone endpoint. Indeed, using http is insecure. But this example is to register an internal endpoint, not pulic. I think it is not too bad to use http. :-)","commit_id":"6cfa7311d1628f3f30f0568690cf34a3f29342c4"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"f9d4fa7447a8b1276555ec80521819b65eb0df9c","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"   $ openstack endpoint create identity \\"},{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     http://management-ip:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"Configure applications for internal URLs"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a89bdaa_2b598e35","line":34,"in_reply_to":"9a89bdaa_f0a073f6","updated":"2016-09-13 13:20:38.000000000","message":"Line 28: To register an internal URL for an endpoint:\n\nnot include adminurl and publicurl.","commit_id":"6cfa7311d1628f3f30f0568690cf34a3f29342c4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"b1c5a27578b47969dad7a87512bfe5cecd3a9e4d","unresolved":false,"context_lines":[{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     https://MANAGEMENT_IP:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Replace ``MANAGEMENT_IP`` with the management ip of controller node."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Configure applications for internal URLs"},{"line_number":39,"context_line":"----------------------------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a8ec9b2_683c2c30","line":36,"range":{"start_line":36,"start_character":46,"end_line":36,"end_character":48},"updated":"2016-09-13 20:41:37.000000000","message":"IP address","commit_id":"5fd81883be48be2e2a94983876ec044db8bc93c0"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"b1c5a27578b47969dad7a87512bfe5cecd3a9e4d","unresolved":false,"context_lines":[{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     https://MANAGEMENT_IP:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Replace ``MANAGEMENT_IP`` with the management ip of controller node."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Configure applications for internal URLs"},{"line_number":39,"context_line":"----------------------------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a8ec9b2_080c8893","line":36,"range":{"start_line":36,"start_character":49,"end_line":36,"end_character":51},"updated":"2016-09-13 20:41:37.000000000","message":"of your","commit_id":"5fd81883be48be2e2a94983876ec044db8bc93c0"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"1e62873900b07878f36a4ca0cd50341435a8dfad","unresolved":false,"context_lines":[{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     https://MANAGEMENT_IP:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Replace ``MANAGEMENT_IP`` with the management ip of controller node."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Configure applications for internal URLs"},{"line_number":39,"context_line":"----------------------------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a8ec9b2_12e2eed5","line":36,"range":{"start_line":36,"start_character":49,"end_line":36,"end_character":51},"in_reply_to":"7a8ec9b2_080c8893","updated":"2016-09-14 01:52:44.000000000","message":"Done","commit_id":"5fd81883be48be2e2a94983876ec044db8bc93c0"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"1e62873900b07878f36a4ca0cd50341435a8dfad","unresolved":false,"context_lines":[{"line_number":33,"context_line":"     --region RegionOne internal \\"},{"line_number":34,"context_line":"     https://MANAGEMENT_IP:5000/v3"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Replace ``MANAGEMENT_IP`` with the management ip of controller node."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Configure applications for internal URLs"},{"line_number":39,"context_line":"----------------------------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a8ec9b2_f2dca21a","line":36,"range":{"start_line":36,"start_character":46,"end_line":36,"end_character":48},"in_reply_to":"7a8ec9b2_683c2c30","updated":"2016-09-14 01:52:44.000000000","message":"Done","commit_id":"5fd81883be48be2e2a94983876ec044db8bc93c0"}]}