)]}'
{"security-guide/source/block-storage/volume_wiping.rst":[{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"bae2d6c087beea4b1421237a5c355498f3fdd37c","unresolved":false,"context_lines":[{"line_number":6,"context_line":"to set the ``lvm_type`` to ``thin``, and then use the ``volume_clear``"},{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_7c0cd594","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":71},"updated":"2016-10-11 13:00:27.000000000","message":"I agree, you can delete the key which will leave the data scrambled and inaccessible, but you link to a doc page that does not describe the key deletion use case, or what \u0027set up details\u0027 are. I think we would either need to remove the text that points users to the reference doc or describe how key deletion can be a use case for secure wipe in the volume_encryption.rst doc.","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"7a9ddf13c0701f62fbccf28ff92e48d116821236","unresolved":false,"context_lines":[{"line_number":6,"context_line":"to set the ``lvm_type`` to ``thin``, and then use the ``volume_clear``"},{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_b3cbf371","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":71},"in_reply_to":"fa6399be_2b320df2","updated":"2016-10-11 15:22:07.000000000","message":"I would then remove the reference to the other documentation until its place, then push a patch to update sec-docs to point to the secure wipe key removal steps.","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"85007e0729bcc98963ae9afc2d843b10109a3f12","unresolved":false,"context_lines":[{"line_number":6,"context_line":"to set the ``lvm_type`` to ``thin``, and then use the ``volume_clear``"},{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_2b320df2","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":71},"in_reply_to":"fa6399be_7c0cd594","updated":"2016-10-11 14:27:15.000000000","message":"I agree that a more detailed description would be helpful, but I think it should be made in the Castellan key manager documentation, with only another link here. I put that update on my to do list.","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"3c81e43af45b09f275ec57b28644afe5f961a4dd","unresolved":false,"context_lines":[{"line_number":6,"context_line":"to set the ``lvm_type`` to ``thin``, and then use the ``volume_clear``"},{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_c7925d57","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":71},"in_reply_to":"fa6399be_b3cbf371","updated":"2016-10-11 16:44:52.000000000","message":"Actually I found a reference in the existing Castellan documentation about how to delete a key.  It\u0027s midway down http://docs.openstack.org/developer/castellan/usage.html","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"3c589da490947afec535591249402648775910a4","unresolved":false,"context_lines":[{"line_number":6,"context_line":"to set the ``lvm_type`` to ``thin``, and then use the ``volume_clear``"},{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_27b6b9dc","line":9,"range":{"start_line":9,"start_character":0,"end_line":9,"end_character":71},"in_reply_to":"fa6399be_c7925d57","updated":"2016-10-11 16:46:59.000000000","message":"If you\u0027re ok with this, I can push both changes you suggest together","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"bae2d6c087beea4b1421237a5c355498f3fdd37c","unresolved":false,"context_lines":[{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_9cb9a9ec","line":10,"range":{"start_line":10,"start_character":27,"end_line":10,"end_character":33},"updated":"2016-10-11 13:00:27.000000000","message":"change this to \u0027newton\u0027 now.","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"7a9ddf13c0701f62fbccf28ff92e48d116821236","unresolved":false,"context_lines":[{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_93e7cf11","line":10,"range":{"start_line":10,"start_character":27,"end_line":10,"end_character":33},"in_reply_to":"fa6399be_4b04a17d","updated":"2016-10-11 15:22:07.000000000","message":"There is an effort already underway https://review.openstack.org/#/c/384014/. So for new entries and with newton now released, we should use the current version in all doc changes","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"85007e0729bcc98963ae9afc2d843b10109a3f12","unresolved":false,"context_lines":[{"line_number":7,"context_line":"parameter. Alternatively, if the volume encryption feature is used, then"},{"line_number":8,"context_line":"volume wiping is not necessary if the volume encryption key is deleted."},{"line_number":9,"context_line":"See the OpenStack Configuration Reference doc in the `Volume Encryption"},{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/mitaka/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_4b04a17d","line":10,"range":{"start_line":10,"start_character":27,"end_line":10,"end_character":33},"in_reply_to":"fa6399be_9cb9a9ec","updated":"2016-10-11 14:27:15.000000000","message":"All the links in the security guide currently point to mitaka, and I intentionally included this link with that version so it could be updated along with the other links. If this patch is delayed in getting merged, then I\u0027ll need to update it to newton separately.","commit_id":"9eb281830c1d8edce4539535c596f6c54c302935"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"0cb977693f9f0d6646a3a76e479a5533792da382","unresolved":false,"context_lines":[{"line_number":10,"context_line":"\u003chttp://docs.openstack.org/newton/config-reference/block-storage/volume-encryption.html\u003e`__"},{"line_number":11,"context_line":"section for set up details and also the `Castellan usage"},{"line_number":12,"context_line":"\u003chttp://docs.openstack.org/developer/castellan/usage.html\u003e`__ document"},{"line_number":13,"context_line":"for key deletion."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":".. note::"},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa6399be_0be1dfd0","line":13,"range":{"start_line":13,"start_character":16,"end_line":13,"end_character":17},"updated":"2016-10-17 20:13:24.000000000","message":"Luke, I\u0027ve addressed the link update and key management issues you raised in this patch. The first link gives info on initially setting up the volume encryption via horizon, and the second link says how to delete a key of an encrypted volume (i.e. at the end of it\u0027s lifecycle.)  I agree that a separate key management page in the security manual is needed to describe the key deletion use case. I think this patch is a first step to what you\u0027re ultimately looking for.","commit_id":"9d124d388f4e087c4c7483e63a1aa510f550d349"}]}