)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":6926,"name":"Bogdan Dobrelya","email":"bdobreli@redhat.com","username":"bogdando"},"change_message_id":"de689d3c0440f43a71e8526ae6caaf1eadffb56f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"efd7bb7a_8f05748b","updated":"2022-04-07 14:44:23.000000000","message":"it contains passwords and other secrets, should not be world readable","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":8449,"name":"Marios Andreou","email":"marios.andreou@gmail.com","username":"marios"},"change_message_id":"731fa8f8cd33dd24989be8dfd92e4684a89d6df7","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"6b25e021_ad45466f","updated":"2022-04-20 12:24:57.000000000","message":"lgtm and no comments for a few days merging (via irc requestin #oooq)","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":6926,"name":"Bogdan Dobrelya","email":"bdobreli@redhat.com","username":"bogdando"},"change_message_id":"a97d39715221b90f5baa51f1795894d808fc1c70","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"c11dd66d_7eadbef8","updated":"2022-04-08 10:35:49.000000000","message":"ok, sorry, LGTM then","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":34452,"name":"Joan Gilabert","display_name":"jgilaber","email":"jgilaber@redhat.com","username":"jgilaber"},"change_message_id":"9b189147f83052e4e12d3a82833909a7d1685f48","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"54b51130_9a863626","updated":"2022-04-08 11:29:25.000000000","message":"recheck","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":34452,"name":"Joan Gilabert","display_name":"jgilaber","email":"jgilaber@redhat.com","username":"jgilaber"},"change_message_id":"280c6bd5e10b990a7c3afab9cc21e78273f3ff09","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"6a5cc038_bcd114ab","updated":"2022-04-13 10:59:15.000000000","message":"recheck","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":34452,"name":"Joan Gilabert","display_name":"jgilaber","email":"jgilaber@redhat.com","username":"jgilaber"},"change_message_id":"c9122369ecfbad66e3577930bc93a6164d68b713","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"7029bfff_9f7c5b6f","updated":"2022-04-08 15:32:29.000000000","message":"recheck","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":34452,"name":"Joan Gilabert","display_name":"jgilaber","email":"jgilaber@redhat.com","username":"jgilaber"},"change_message_id":"1e3bb00376a389d145a83f3de643df46907f2e0a","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"7a8fc02c_087c6aad","in_reply_to":"736a3aa0_703c1c49","updated":"2022-04-13 10:58:25.000000000","message":"Done","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":6926,"name":"Bogdan Dobrelya","email":"bdobreli@redhat.com","username":"bogdando"},"change_message_id":"3ab783a99a55b5dd7c6c2d1938e7bb3c5330b7cd","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"fd3084f3_1490b011","in_reply_to":"76c233e2_09d7f66b","updated":"2022-04-08 09:54:09.000000000","message":"then we have a major security issue to be reported please.\n\nSee for example https://56d14ea4030066cbb4d5-f4be3dee3dd2f59f172a475a402b0ea7.ssl.cf5.rackcdn.com/836954/1/check/tripleo-ci-centos-9-standalone/230bf70/logs/undercloud/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf there is password\u003dFsgYbQOvoYUBBZoMp0P68ZFUX\n\nat stack home dir, those values are stored in not world read password env files.\nIf puppet generate when as world read, please let\u0027s fix that problem.","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":34452,"name":"Joan Gilabert","display_name":"jgilaber","email":"jgilaber@redhat.com","username":"jgilaber"},"change_message_id":"f6e6625fcdff317afeef96333f44b31485dafdc2","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"76c233e2_09d7f66b","in_reply_to":"efd7bb7a_8f05748b","updated":"2022-04-08 07:19:41.000000000","message":"I checked in a couple of director jobs and it seems to be world readable usually. The only instance where that was not true is in the deployment that used the unbound template, which caused the interference.","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"},{"author":{"_account_id":34452,"name":"Joan Gilabert","display_name":"jgilaber","email":"jgilaber@redhat.com","username":"jgilaber"},"change_message_id":"e317c685b7b87cd80caa59ba685c0538aeb1d73f","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"736a3aa0_703c1c49","in_reply_to":"fd3084f3_1490b011","updated":"2022-04-08 10:03:45.000000000","message":"Just to be clear, the nova.conf file that you passed as example is not readable. I can get to /var/lib/config-data/puppet-generated/nova/etc/nova/ but not read the file. This patch intends just to set the config-data folder as readable, not change the permissions of everything under there.","commit_id":"73486ded47f94cacbe29bd7fff9337d96e3b5b3a"}]}