)]}'
{"doc/saio/swift/account-server/1.conf":[{"author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"change_message_id":"85f494feda31d3393bf8ba3159f8c8f5bbbfab16","unresolved":false,"context_lines":[{"line_number":11,"context_line":"eventlet_debug \u003d true"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"[pipeline:main]"},{"line_number":14,"context_line":"pipeline \u003d healthcheck recon account-server"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"[app:account-server]"},{"line_number":17,"context_line":"use \u003d egg:swift#account"}],"source_content_type":"text/plain","patch_set":1,"id":"5f7c97a3_fc698ff6","line":14,"range":{"start_line":14,"start_character":11,"end_line":14,"end_character":22},"updated":"2018-07-28 00:28:52.000000000","message":":-(\n\nWe forgot the [filter:healthcheck] sections for all of these...","commit_id":"69d47af070d3b34939bdc307f5eed03645305ee4"},{"author":{"_account_id":9625,"name":"Thiago da Silva","email":"thiagodasilva@gmail.com","username":"thiago"},"change_message_id":"655b45b1d28729af705917bb1437fcf459959be5","unresolved":false,"context_lines":[{"line_number":11,"context_line":"eventlet_debug \u003d true"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"[pipeline:main]"},{"line_number":14,"context_line":"pipeline \u003d healthcheck recon account-server"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"[app:account-server]"},{"line_number":17,"context_line":"use \u003d egg:swift#account"}],"source_content_type":"text/plain","patch_set":1,"id":"5f7c97a3_7c4d646f","line":14,"range":{"start_line":14,"start_character":11,"end_line":14,"end_character":22},"in_reply_to":"5f7c97a3_fc698ff6","updated":"2018-08-02 21:09:19.000000000","message":"heh, that\u0027s what happens you rush, sorry, will fix.","commit_id":"69d47af070d3b34939bdc307f5eed03645305ee4"}],"doc/saio/swift/proxy-server.conf":[{"author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"change_message_id":"7d981c3e77a82aaede3685d5bdd78c2c0e00b756","unresolved":false,"context_lines":[{"line_number":80,"context_line":"# Example to create root secret: `openssl rand -base64 32`"},{"line_number":81,"context_line":"[filter:keymaster]"},{"line_number":82,"context_line":"use \u003d egg:swift#keymaster"},{"line_number":83,"context_line":"encryption_root_secret \u003d changeme"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"# To enable use of encryption add both middlewares to pipeline, example:"},{"line_number":86,"context_line":"# \u003cother middleware\u003e keymaster encryption proxy-logging proxy-server"}],"source_content_type":"text/plain","patch_set":1,"id":"5f7c97a3_1949fd64","line":83,"updated":"2018-07-27 21:56:19.000000000","message":"Hmm... we\u0027ll actually *error out* if they don\u0027t change this, yeah? Seems different from the hash prefix/suffix values [1], where they\u0027re still usable (if not-advisable).\n\nFWIW, vagrant-swift-all-in-one defaults in a usable value [2]. It\u0027s still a *very dumb* value (Really? Couldn\u0027t have gone with something like base64.b64encode(hashlib.sha256(\u0027swift\u0027).digest())? Had to go double-encode it to get up to the length requirements?) but at least it works out-of-the-box.\n\n[1] https://github.com/openstack/swift/blob/2.18.0/doc/saio/swift/swift.conf#L4-L5\n[2] https://github.com/swiftstack/vagrant-swift-all-in-one/blob/586224e/cookbooks/swift/templates/default/etc/swift/proxy-server/default.conf-template.erb#L50-L51","commit_id":"69d47af070d3b34939bdc307f5eed03645305ee4"},{"author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"change_message_id":"ead08de824f54da9df77584b8d1544eaeaa6d879","unresolved":false,"context_lines":[{"line_number":77,"context_line":"[filter:symlink]"},{"line_number":78,"context_line":"use \u003d egg:swift#symlink"},{"line_number":79,"context_line":""},{"line_number":80,"context_line":"# To enable, add the s3api middleware to the pipeline before tempauth"},{"line_number":81,"context_line":"[filter:s3api]"},{"line_number":82,"context_line":"use \u003d egg:swift#s3api"},{"line_number":83,"context_line":""}],"source_content_type":"text/plain","patch_set":3,"id":"3f79a3b5_04c08d29","line":80,"updated":"2018-08-13 19:41:14.000000000","message":"Nice, +1","commit_id":"0887f0985b109746953dcf42cfca4c9f5c102834"},{"author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"change_message_id":"ead08de824f54da9df77584b8d1544eaeaa6d879","unresolved":false,"context_lines":[{"line_number":84,"context_line":"# Example to create root secret: `openssl rand -base64 32`"},{"line_number":85,"context_line":"[filter:keymaster]"},{"line_number":86,"context_line":"use \u003d egg:swift#keymaster"},{"line_number":87,"context_line":"encryption_root_secret \u003d changeme/changeme/changeme/changeme/change/\u003d"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"# To enable use of encryption add both middlewares to pipeline, example:"},{"line_number":90,"context_line":"# \u003cother middleware\u003e keymaster encryption proxy-logging proxy-server"}],"source_content_type":"text/plain","patch_set":3,"id":"3f79a3b5_e4c23134","line":87,"range":{"start_line":87,"start_character":61,"end_line":87,"end_character":69},"updated":"2018-08-13 19:41:14.000000000","message":"FWIW, we\u0027re fine to go *over* 32 bytes -- we only start complaining if it\u0027s *less than* 256 bits: https://github.com/openstack/swift/blob/2.18.0/swift/common/middleware/crypto/keymaster.py#L142-L143\n\nThat is to say, something like\n\n changeme/changeme/changeme/changeme/changeme\n\nwould be fine.","commit_id":"0887f0985b109746953dcf42cfca4c9f5c102834"}]}