)]}'
{"specs/newton/undercloud-ntp-server.rst":[{"author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"change_message_id":"860d41ce948d392de4e06fad0d341ba1ad635740","unresolved":false,"context_lines":[{"line_number":34,"context_line":"NTP server would be optional, but we may wish to make it a default."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"The operation of the NTP server on the Undercloud would be primarily of use"},{"line_number":37,"context_line":"in small or proof-of-concept deploiyments. It is expected that sufficiently"},{"line_number":38,"context_line":"large deployments will have a security- hardened NTP server already operating"},{"line_number":39,"context_line":"locally."},{"line_number":40,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9ad45d7e_4d08f62d","line":37,"updated":"2016-08-09 16:31:57.000000000","message":"deployment","commit_id":"c430d421b05969d5269624c48d56c69997227dd2"},{"author":{"_account_id":4328,"name":"Steven Hardy","email":"steven.hardy@suse.com","username":"shardy"},"change_message_id":"a411c32f2aa6a74495c2d737943b970edc37595a","unresolved":false,"context_lines":[{"line_number":78,"context_line":""},{"line_number":79,"context_line":"We now require that a valid NTP server be configured either in the templates"},{"line_number":80,"context_line":"or on the deployment command-line. This requirement would be optional if we had"},{"line_number":81,"context_line":"a default pointing to NTP services on the Undercloud. "},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Developer Impact"},{"line_number":84,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bacf61ea_d3a3c89c","line":81,"range":{"start_line":81,"start_character":53,"end_line":81,"end_character":54},"updated":"2016-08-04 10:06:01.000000000","message":"trailing whitespace","commit_id":"c430d421b05969d5269624c48d56c69997227dd2"},{"author":{"_account_id":6928,"name":"Ben Nemec","email":"openstack@nemebean.com","username":"bnemec"},"change_message_id":"d130310667fd0d65b868d4c83e9160b2ba246f60","unresolved":false,"context_lines":[{"line_number":116,"context_line":"deployment of an HA overcloud, this functionality will be tested every time"},{"line_number":117,"context_line":"a TripleO CI HA job is run."},{"line_number":118,"context_line":""},{"line_number":119,"context_line":"We may also want to implement a validation that ensures that the NTP server"},{"line_number":120,"context_line":"can reach its upstream stratum 1 servers. This will ensure that the NTP"},{"line_number":121,"context_line":"server is serving up the correct time."},{"line_number":122,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bacf61ea_ae6a18eb","line":119,"updated":"2016-08-04 16:24:44.000000000","message":"Given the intended use case for this, I\u0027m not sure we would even want to do that.  The important thing is that all of the overcloud nodes think it\u0027s the same time.  It\u0027s not necessarily important that the time be in sync with the rest of the world.  As you note, a production-level deployment should be using a production-level NTP server, so for test/isolated/poc deployments any NTP server should be fine, whether it\u0027s syncing with the outside world or not.","commit_id":"c430d421b05969d5269624c48d56c69997227dd2"},{"author":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"change_message_id":"a045daa02e332bb55bc905b534477f732adf8315","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"The Undercloud should provide NTP services for when external NTP services are"},{"line_number":6,"context_line":"not available."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"Problem Description"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa6399be_16519fd8","line":6,"updated":"2016-10-19 22:23:54.000000000","message":"Since there are use cases for operators who do not have external internet access, nor already deployed ntp servers, would it be beneficial to instead provide an NtpServer role that can be deployed on seperate systems rather than rely on the undercloud? This allows greater flexibility for access control and security considerations as it relates to the time providing systems. \n\nI\u0027m not sure of the current role of the undercloud, but is it currently possible to take down the undercloud without impacting the overcloud?  \n\nAlso what is the default configuration for NTP today?","commit_id":"1fce12937b9f6d04bad1b82f83b954ca3cbcda10"},{"author":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"change_message_id":"a045daa02e332bb55bc905b534477f732adf8315","unresolved":false,"context_lines":[{"line_number":36,"context_line":"The operation of the NTP server on the Undercloud would be primarily of use"},{"line_number":37,"context_line":"in small or proof-of-concept deployments. It is expected that sufficiently"},{"line_number":38,"context_line":"large deployments will have a security- hardened NTP server already operating"},{"line_number":39,"context_line":"locally."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Alternatives"},{"line_number":42,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa6399be_365ea3e9","line":39,"updated":"2016-10-19 22:23:54.000000000","message":"This is not always the case.  We should provide a flexible solution that can work for both the small and large deployments.  Specifically there are people who want a large deployment but do not have the proper external network connectivity (due to policies) or don\u0027t have NTP servers within their environment.\n\nAlso what are all the overcloud hosts pointed at today?","commit_id":"1fce12937b9f6d04bad1b82f83b954ca3cbcda10"},{"author":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"change_message_id":"a045daa02e332bb55bc905b534477f732adf8315","unresolved":false,"context_lines":[{"line_number":48,"context_line":"---------------"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"Since the NTP server is required for syncing the HA, a skewed clock on one"},{"line_number":51,"context_line":"controller (in relation to the other controllers) may make it ineligable to"},{"line_number":52,"context_line":"participate in the HA cluster. If more than one controller\u0027s clock is skewed,"},{"line_number":53,"context_line":"the entire cluster will fail to operate. This opens up an opportunity for"},{"line_number":54,"context_line":"denial-of-service attacks against the cloud, either by causing NTP updates"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa6399be_566157a7","line":51,"updated":"2016-10-19 22:23:54.000000000","message":"Is there a reason to not use the controllers as ntp servers if none are available?","commit_id":"1fce12937b9f6d04bad1b82f83b954ca3cbcda10"},{"author":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"change_message_id":"a045daa02e332bb55bc905b534477f732adf8315","unresolved":false,"context_lines":[{"line_number":92,"context_line":"-----------"},{"line_number":93,"context_line":"Primary assignees:"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"* \u003cTBD\u003e"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"Work Items"},{"line_number":98,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa6399be_76581bfb","line":95,"updated":"2016-10-19 22:23:54.000000000","message":"This needs someone.","commit_id":"1fce12937b9f6d04bad1b82f83b954ca3cbcda10"}],"specs/ocata/undercloud-ntp-server.rst":[{"author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"change_message_id":"cf398c24f47501e8945eba1dba6e103bc80eba5c","unresolved":false,"context_lines":[{"line_number":100,"context_line":"Work Items"},{"line_number":101,"context_line":"----------"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"The TripleO Undercloud installation scripts will have to be modified to include"},{"line_number":104,"context_line":"the installation and configuration of an NTP server."},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"Implement opening up iptables for NTP on the control plane network (bound to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba5da102_02a94e7b","line":103,"updated":"2016-11-01 13:56:54.000000000","message":"I actually think it should be a composable service in THT, that we would consume on the undercloud, since the longterm plan is to have an undercloud deployed by Heat.","commit_id":"c6311018bbf221a47c8858521ab2b2b1bcc53226"},{"author":{"_account_id":12398,"name":"Dan Sneddon","email":"dsneddon@redhat.com","username":"dsneddon"},"change_message_id":"92efa29a0cf9d19b518e6d936ef5b207687650d8","unresolved":false,"context_lines":[{"line_number":100,"context_line":"Work Items"},{"line_number":101,"context_line":"----------"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"The TripleO Undercloud installation scripts will have to be modified to include"},{"line_number":104,"context_line":"the installation and configuration of an NTP server."},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"Implement opening up iptables for NTP on the control plane network (bound to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba5da102_36ebbf79","line":103,"in_reply_to":"ba5da102_02a94e7b","updated":"2016-11-02 17:19:10.000000000","message":"Done","commit_id":"c6311018bbf221a47c8858521ab2b2b1bcc53226"}]}