)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":31500,"name":"Sabeel Ansari","email":"Sabeel.Ansari@windriver.com","username":"sansari"},"change_message_id":"f3e5a60ed844a5367868c102f2088d25a833a5b5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"066aa27a_e0661d36","updated":"2021-10-26 13:50:06.000000000","message":"lgtm","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"de469784_9643712f","updated":"2021-10-26 14:03:54.000000000","message":"see in-lined comments","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"d6011da1b0bf5656144d93af18f6504510e57743","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"f54042d8_c70027a5","updated":"2021-11-12 15:26:03.000000000","message":"Please make a few text changes.","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"82c8a4568790ac532d05d86832b792327adf36be","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"74cc2b1a_2a5be59c","updated":"2021-11-22 23:06:34.000000000","message":"Changes LGTM, ok to merge?","commit_id":"19bd9c69eb2fbce38cac1d47b14d310e681fabc5"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"59c93b6f5e8b0180c948f6f0e1ee0b161b3e8656","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":9,"id":"ca6daa2b_1d34fadf","updated":"2021-11-29 15:24:43.000000000","message":"LGTM, need Sabeel\u0027s +1","commit_id":"52b70f81c23f2404ba27e58879a66fad6300bad4"},{"author":{"_account_id":32187,"name":"Juanita-Balaraj","email":"juanita.balaraj@windriver.com","username":"jbalaraj"},"change_message_id":"822b693f6569fb491645a3860a07fde538568b30","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":9,"id":"b6eb1c6b_8b4af6c3","updated":"2021-11-29 19:54:19.000000000","message":"Merging this review. Ron confirmed, Sabeel approved via zoom chat","commit_id":"52b70f81c23f2404ba27e58879a66fad6300bad4"}],"doc/source/fault-mgmt/kubernetes/500-series-alarm-messages.rst":[{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"46e5ccbb9c400643a7a1da5b7b10093fb33c7fdb","unresolved":true,"context_lines":[{"line_number":54,"context_line":"   :widths: 6 25"},{"line_number":55,"context_line":"   :header-rows: 0"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"   * - **Alarm ID: 500.200**"},{"line_number":58,"context_line":"     - Certificate  \u003ccertificate-name\u003e is expiring sone on \u003cdate\u003e"},{"line_number":59,"context_line":"   * - Entity Instance"},{"line_number":60,"context_line":"     - host\u003dcontroller"},{"line_number":61,"context_line":"   * - Degrade Affecting Severity:"},{"line_number":62,"context_line":"     - None"},{"line_number":63,"context_line":"   * - Severity:"},{"line_number":64,"context_line":"     - M"},{"line_number":65,"context_line":"   * - Proposed Repair Action"},{"line_number":66,"context_line":"     - Renew the certificate."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"-----"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":".. list-table::"},{"line_number":71,"context_line":"   :widths: 6 25"},{"line_number":72,"context_line":"   :header-rows: 0"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"   * - **Alarm ID: 500.210**"},{"line_number":75,"context_line":"     - Certificate \u003ccertificate-name\u003e expired"},{"line_number":76,"context_line":"   * - Entity Instance"},{"line_number":77,"context_line":"     - host\u003dcontroller"},{"line_number":78,"context_line":"   * - Degrade Affecting Severity:"},{"line_number":79,"context_line":"     - None"},{"line_number":80,"context_line":"   * - Severity:"},{"line_number":81,"context_line":"     - C"},{"line_number":82,"context_line":"   * - Proposed Repair Action"},{"line_number":83,"context_line":"     - Renew the certificate."}],"source_content_type":"text/x-rst","patch_set":1,"id":"31d5f07f_94d68528","line":83,"range":{"start_line":57,"start_character":0,"end_line":83,"end_character":29},"updated":"2021-10-22 16:31:26.000000000","message":"Please review details carefully. Based on alarm output \u0026 some entries may not be correct/apply","commit_id":"68b64aafdbfc49c29570b23d8380eb83ac51738e"}],"doc/source/fault-mgmt/kubernetes/alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst":[{"author":{"_account_id":31500,"name":"Sabeel Ansari","email":"Sabeel.Ansari@windriver.com","username":"sansari"},"change_message_id":"fc69150cd5ae3dfdf37c389ba6206a462bcd3147","unresolved":true,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":".. waiting for sample textual output here"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"This feature is supported by the ``cert-alarm`` platform service. Logs from"},{"line_number":27,"context_line":"this service are available in ``/var/log/cert-alarm.log``."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"The ``cert-alarm`` service monitors the following resources to track and audit"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9c96a48c_c3d7a66c","line":26,"updated":"2021-10-25 13:27:47.000000000","message":"Need confirmation from Greg if this is needed in the documentation.","commit_id":"1ec33376ab743f8a0b3febc995012e4cde56c7a5"},{"author":{"_account_id":31500,"name":"Sabeel Ansari","email":"Sabeel.Ansari@windriver.com","username":"sansari"},"change_message_id":"fc69150cd5ae3dfdf37c389ba6206a462bcd3147","unresolved":true,"context_lines":[{"line_number":93,"context_line":"      starlingx.io/alarm-severity: minor"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"      starlingx.io/alarm-text: “webserverAPI certificate”"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"Corrective action"},{"line_number":98,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":99,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"312a93c6_15508ce7","line":96,"updated":"2021-10-25 13:27:47.000000000","message":"Might be worthwhile to explain to describe what happens with the example changes with the following blob.\n\nWith these override settings, the system-restapi-gui-certificate resource is monitored (alarm: enabled) to raise an alarm if the certificate renewal fails with a minor severity, 15 days before the certificate expiry with the alarm text showing “webserverAPI certificate namespace\u003ddeployment.certificate\u003dsystem-restapi-gui-certificate is expiring soon on \u003cdate\u003e”","commit_id":"1ec33376ab743f8a0b3febc995012e4cde56c7a5"}],"doc/source/security/kubernetes/alarm-expiring-soon-and-expired-certificates-baf5b8f73009.rst":[{"author":{"_account_id":31500,"name":"Sabeel Ansari","email":"Sabeel.Ansari@windriver.com","username":"sansari"},"change_message_id":"48af74325fb64c22071496d874b1a5dc184800c1","unresolved":true,"context_lines":[{"line_number":40,"context_line":"   |          |                                                                                          |                                      |          |                  |"},{"line_number":41,"context_line":"   +----------+------------------------------------------------------------------------------------------+--------------------------------------+----------+------------------+"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"This feature is supported by the ``cert-alarm`` platform service. Logs from"},{"line_number":44,"context_line":"this service are available in ``/var/log/cert-alarm.log``."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"The ``cert-alarm`` service monitors the following resources to track and audit"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ca9e0141_51975c9f","line":43,"updated":"2021-10-25 18:53:16.000000000","message":"These statements can be removed and dont need it in documentation.","commit_id":"80a2471f683264cbb32cfd2708aea66a4e0453ba"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"8c98d25f5e78628af2a9059d472ca66182f14a75","unresolved":false,"context_lines":[{"line_number":40,"context_line":"   |          |                                                                                          |                                      |          |                  |"},{"line_number":41,"context_line":"   +----------+------------------------------------------------------------------------------------------+--------------------------------------+----------+------------------+"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"This feature is supported by the ``cert-alarm`` platform service. Logs from"},{"line_number":44,"context_line":"this service are available in ``/var/log/cert-alarm.log``."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"The ``cert-alarm`` service monitors the following resources to track and audit"}],"source_content_type":"text/x-rst","patch_set":4,"id":"c55af28e_1e649ef8","line":43,"in_reply_to":"ca9e0141_51975c9f","updated":"2021-10-26 10:58:20.000000000","message":"Done","commit_id":"80a2471f683264cbb32cfd2708aea66a4e0453ba"},{"author":{"_account_id":31500,"name":"Sabeel Ansari","email":"Sabeel.Ansari@windriver.com","username":"sansari"},"change_message_id":"48af74325fb64c22071496d874b1a5dc184800c1","unresolved":true,"context_lines":[{"line_number":110,"context_line":"      starlingx.io/alarm-severity: minor"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"      starlingx.io/alarm-text: “webserverAPI certificate”"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"Corrective action"},{"line_number":115,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":116,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"5b9c0910_e2ae70da","line":113,"updated":"2021-10-25 18:53:16.000000000","message":"Missing section on what the changes mean in descriptive text","commit_id":"80a2471f683264cbb32cfd2708aea66a4e0453ba"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"8c98d25f5e78628af2a9059d472ca66182f14a75","unresolved":false,"context_lines":[{"line_number":110,"context_line":"      starlingx.io/alarm-severity: minor"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"      starlingx.io/alarm-text: “webserverAPI certificate”"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"Corrective action"},{"line_number":115,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":116,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"ede82d88_3fca1ae6","line":113,"in_reply_to":"5b9c0910_e2ae70da","updated":"2021-10-26 10:58:20.000000000","message":"Done","commit_id":"80a2471f683264cbb32cfd2708aea66a4e0453ba"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Expired certificates may prevent the proper operation of platform and"},{"line_number":8,"context_line":"applications running on the platform. In order to avoid having certificates"},{"line_number":9,"context_line":"that will expire soon or are expired, |prod| supports alarms for these"},{"line_number":10,"context_line":"scenarios."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":".. contents:: |minitoc|"},{"line_number":13,"context_line":"   :local:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"2ef96d5a_3933a183","line":10,"range":{"start_line":8,"start_character":38,"end_line":10,"end_character":10},"updated":"2021-10-26 14:03:54.000000000","message":"Reword ?\n\nIn order to avoid expired certificates, |prod| generates alarms for certificates which are within 30 days (default) of expiry or have already expired.","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Expired certificates may prevent the proper operation of platform and"},{"line_number":8,"context_line":"applications running on the platform. In order to avoid having certificates"},{"line_number":9,"context_line":"that will expire soon or are expired, |prod| supports alarms for these"},{"line_number":10,"context_line":"scenarios."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":".. contents:: |minitoc|"},{"line_number":13,"context_line":"   :local:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a58b77c_9d06e25c","line":10,"range":{"start_line":8,"start_character":38,"end_line":10,"end_character":10},"in_reply_to":"2ef96d5a_3933a183","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":17,"context_line":"certificates that are approaching their respective expiry dates. User-override"},{"line_number":18,"context_line":"options are available for customizing the alarm behavior."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Two alarm types support this feature:"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"* ``Expiring Soon`` (alarm ID: 500.200, severity: major)"},{"line_number":23,"context_line":"* ``Expired`` (alarm ID: 500.210, severity: critical)."}],"source_content_type":"text/x-rst","patch_set":5,"id":"e337e261_5e72dc53","line":20,"range":{"start_line":20,"start_character":0,"end_line":20,"end_character":36},"updated":"2021-10-26 14:03:54.000000000","message":"Reword?\n\nThe two types of certificate alarms are:","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":17,"context_line":"certificates that are approaching their respective expiry dates. User-override"},{"line_number":18,"context_line":"options are available for customizing the alarm behavior."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Two alarm types support this feature:"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"* ``Expiring Soon`` (alarm ID: 500.200, severity: major)"},{"line_number":23,"context_line":"* ``Expired`` (alarm ID: 500.210, severity: critical)."}],"source_content_type":"text/x-rst","patch_set":5,"id":"a0346c2e_e4131104","line":20,"range":{"start_line":20,"start_character":0,"end_line":20,"end_character":36},"in_reply_to":"e337e261_5e72dc53","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Two alarm types support this feature:"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"* ``Expiring Soon`` (alarm ID: 500.200, severity: major)"},{"line_number":23,"context_line":"* ``Expired`` (alarm ID: 500.210, severity: critical)."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":".. code-block:: none"}],"source_content_type":"text/x-rst","patch_set":5,"id":"63e495c6_5a4aae49","line":22,"range":{"start_line":22,"start_character":55,"end_line":22,"end_character":56},"updated":"2021-10-26 14:03:54.000000000","message":"); by default raised 30 days prior to expiry of the certificate.","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Two alarm types support this feature:"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"* ``Expiring Soon`` (alarm ID: 500.200, severity: major)"},{"line_number":23,"context_line":"* ``Expired`` (alarm ID: 500.210, severity: critical)."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":".. code-block:: none"}],"source_content_type":"text/x-rst","patch_set":5,"id":"add5ac4b_f45e1eb6","line":22,"range":{"start_line":22,"start_character":55,"end_line":22,"end_character":56},"in_reply_to":"63e495c6_5a4aae49","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":40,"context_line":"   |          |                                                                                          |                                      |          |                  |"},{"line_number":41,"context_line":"   +----------+------------------------------------------------------------------------------------------+--------------------------------------+----------+------------------+"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"The ``cert-alarm`` service monitors the following resources to track and audit"},{"line_number":44,"context_line":"certificate expiry dates:"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"* All |TLS| type secrets in all Kubernetes namespaces."}],"source_content_type":"text/x-rst","patch_set":5,"id":"17312447_04321506","line":43,"range":{"start_line":43,"start_character":4,"end_line":43,"end_character":26},"updated":"2021-10-26 14:03:54.000000000","message":"platform","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":40,"context_line":"   |          |                                                                                          |                                      |          |                  |"},{"line_number":41,"context_line":"   +----------+------------------------------------------------------------------------------------------+--------------------------------------+----------+------------------+"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"The ``cert-alarm`` service monitors the following resources to track and audit"},{"line_number":44,"context_line":"certificate expiry dates:"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"* All |TLS| type secrets in all Kubernetes namespaces."}],"source_content_type":"text/x-rst","patch_set":5,"id":"b23f9ea4_444728b4","line":43,"range":{"start_line":43,"start_character":4,"end_line":43,"end_character":26},"in_reply_to":"17312447_04321506","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":51,"context_line":"* All certificates installed on the platform via the :command:`system"},{"line_number":52,"context_line":"  certificate-install` command."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"* Other internal certificates required by the platform to function normally"},{"line_number":55,"context_line":"  such as Kubernetes RootCA, Etcd RootCA etc."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Overriding Default Settings via Kubernetes Annotations"}],"source_content_type":"text/x-rst","patch_set":5,"id":"1650c51d_af1250ea","line":54,"range":{"start_line":54,"start_character":55,"end_line":54,"end_character":75},"updated":"2021-10-26 14:03:54.000000000","message":"remove","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":51,"context_line":"* All certificates installed on the platform via the :command:`system"},{"line_number":52,"context_line":"  certificate-install` command."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"* Other internal certificates required by the platform to function normally"},{"line_number":55,"context_line":"  such as Kubernetes RootCA, Etcd RootCA etc."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Overriding Default Settings via Kubernetes Annotations"}],"source_content_type":"text/x-rst","patch_set":5,"id":"a246f1db_1bac34a3","line":54,"range":{"start_line":54,"start_character":55,"end_line":54,"end_character":75},"in_reply_to":"1650c51d_af1250ea","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":53,"context_line":""},{"line_number":54,"context_line":"* Other internal certificates required by the platform to function normally"},{"line_number":55,"context_line":"  such as Kubernetes RootCA, Etcd RootCA etc."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Overriding Default Settings via Kubernetes Annotations"},{"line_number":58,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":59,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"571985bd_e4decf73","line":56,"updated":"2021-10-26 14:03:54.000000000","message":"NOTE:  For certificates managed by cert-manager, the expiring soon alarm is not generated unless the certificate\u0027s \u0027renewBefore\u0027 date is past.  In this way, alarms for certificates auto-renewed by cert-manager, will only occur if the renew failed.","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":53,"context_line":""},{"line_number":54,"context_line":"* Other internal certificates required by the platform to function normally"},{"line_number":55,"context_line":"  such as Kubernetes RootCA, Etcd RootCA etc."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Overriding Default Settings via Kubernetes Annotations"},{"line_number":58,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":59,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7e0f8792_0db9ce61","line":56,"in_reply_to":"571985bd_e4decf73","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":54,"context_line":"* Other internal certificates required by the platform to function normally"},{"line_number":55,"context_line":"  such as Kubernetes RootCA, Etcd RootCA etc."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Overriding Default Settings via Kubernetes Annotations"},{"line_number":58,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"For certificates that exist under the Kubernetes domain, Kube Annotations can"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5a228938_52545c13","line":57,"range":{"start_line":57,"start_character":19,"end_line":57,"end_character":54},"updated":"2021-10-26 14:03:54.000000000","message":"? Certificate Alarming Behaviour ?","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":54,"context_line":"* Other internal certificates required by the platform to function normally"},{"line_number":55,"context_line":"  such as Kubernetes RootCA, Etcd RootCA etc."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Overriding Default Settings via Kubernetes Annotations"},{"line_number":58,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"For certificates that exist under the Kubernetes domain, Kube Annotations can"}],"source_content_type":"text/x-rst","patch_set":5,"id":"e8baa01d_9da99c81","line":57,"range":{"start_line":57,"start_character":19,"end_line":57,"end_character":54},"in_reply_to":"5a228938_52545c13","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":58,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"For certificates that exist under the Kubernetes domain, Kube Annotations can"},{"line_number":61,"context_line":"be used to override the default settings. All other certificate types only"},{"line_number":62,"context_line":"support certificate alarming behavior and cannot be overridden."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":5,"id":"677968f0_8e86eec7","line":61,"range":{"start_line":61,"start_character":32,"end_line":61,"end_character":40},"updated":"2021-10-26 14:03:54.000000000","message":"certificate alarming behaviour","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":58,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"For certificates that exist under the Kubernetes domain, Kube Annotations can"},{"line_number":61,"context_line":"be used to override the default settings. All other certificate types only"},{"line_number":62,"context_line":"support certificate alarming behavior and cannot be overridden."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":5,"id":"6c28f4bf_38624f69","line":61,"range":{"start_line":61,"start_character":32,"end_line":61,"end_character":40},"in_reply_to":"677968f0_8e86eec7","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":59,"context_line":""},{"line_number":60,"context_line":"For certificates that exist under the Kubernetes domain, Kube Annotations can"},{"line_number":61,"context_line":"be used to override the default settings. All other certificate types only"},{"line_number":62,"context_line":"support certificate alarming behavior and cannot be overridden."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":".. note::"},{"line_number":65,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7f4f2c35_66ce7d85","line":62,"range":{"start_line":62,"start_character":8,"end_line":62,"end_character":20},"updated":"2021-10-26 14:03:54.000000000","message":"default certificate","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":59,"context_line":""},{"line_number":60,"context_line":"For certificates that exist under the Kubernetes domain, Kube Annotations can"},{"line_number":61,"context_line":"be used to override the default settings. All other certificate types only"},{"line_number":62,"context_line":"support certificate alarming behavior and cannot be overridden."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":".. note::"},{"line_number":65,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5506d68d_07be40aa","line":62,"range":{"start_line":62,"start_character":8,"end_line":62,"end_character":20},"in_reply_to":"7f4f2c35_66ce7d85","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":63,"context_line":""},{"line_number":64,"context_line":".. note::"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"   If you added a certificate was added by directly creating a Kubernetes |TLS|"},{"line_number":67,"context_line":"   Secret, the annotation should be added to that Kubernetes Secret resource."},{"line_number":68,"context_line":"   If the Secret was indirectly created by configuring a Cert-Manager"},{"line_number":69,"context_line":"   certificate resource, the annotation will be added by the platform to the"}],"source_content_type":"text/x-rst","patch_set":5,"id":"dc541d59_0ff8e151","line":66,"range":{"start_line":66,"start_character":30,"end_line":66,"end_character":39},"updated":"2021-10-26 14:03:54.000000000","message":"remove","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":63,"context_line":""},{"line_number":64,"context_line":".. note::"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"   If you added a certificate was added by directly creating a Kubernetes |TLS|"},{"line_number":67,"context_line":"   Secret, the annotation should be added to that Kubernetes Secret resource."},{"line_number":68,"context_line":"   If the Secret was indirectly created by configuring a Cert-Manager"},{"line_number":69,"context_line":"   certificate resource, the annotation will be added by the platform to the"}],"source_content_type":"text/x-rst","patch_set":5,"id":"699c1879_45096aa8","line":66,"range":{"start_line":66,"start_character":30,"end_line":66,"end_character":39},"in_reply_to":"dc541d59_0ff8e151","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":66,"context_line":"   If you added a certificate was added by directly creating a Kubernetes |TLS|"},{"line_number":67,"context_line":"   Secret, the annotation should be added to that Kubernetes Secret resource."},{"line_number":68,"context_line":"   If the Secret was indirectly created by configuring a Cert-Manager"},{"line_number":69,"context_line":"   certificate resource, the annotation will be added by the platform to the"},{"line_number":70,"context_line":"   certificate resource."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"The supported annotations are:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"8a6bb611_30ea36fb","line":69,"range":{"start_line":69,"start_character":54,"end_line":69,"end_character":69},"updated":"2021-10-26 14:03:54.000000000","message":"remove","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":66,"context_line":"   If you added a certificate was added by directly creating a Kubernetes |TLS|"},{"line_number":67,"context_line":"   Secret, the annotation should be added to that Kubernetes Secret resource."},{"line_number":68,"context_line":"   If the Secret was indirectly created by configuring a Cert-Manager"},{"line_number":69,"context_line":"   certificate resource, the annotation will be added by the platform to the"},{"line_number":70,"context_line":"   certificate resource."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"The supported annotations are:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"89641e77_8e2d26ea","line":69,"range":{"start_line":69,"start_character":40,"end_line":69,"end_character":45},"updated":"2021-10-26 14:03:54.000000000","message":"should","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":66,"context_line":"   If you added a certificate was added by directly creating a Kubernetes |TLS|"},{"line_number":67,"context_line":"   Secret, the annotation should be added to that Kubernetes Secret resource."},{"line_number":68,"context_line":"   If the Secret was indirectly created by configuring a Cert-Manager"},{"line_number":69,"context_line":"   certificate resource, the annotation will be added by the platform to the"},{"line_number":70,"context_line":"   certificate resource."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"The supported annotations are:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"f93a7217_d56e9367","line":69,"range":{"start_line":69,"start_character":40,"end_line":69,"end_character":45},"in_reply_to":"89641e77_8e2d26ea","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":66,"context_line":"   If you added a certificate was added by directly creating a Kubernetes |TLS|"},{"line_number":67,"context_line":"   Secret, the annotation should be added to that Kubernetes Secret resource."},{"line_number":68,"context_line":"   If the Secret was indirectly created by configuring a Cert-Manager"},{"line_number":69,"context_line":"   certificate resource, the annotation will be added by the platform to the"},{"line_number":70,"context_line":"   certificate resource."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"The supported annotations are:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"9a84b200_8655a4d9","line":69,"range":{"start_line":69,"start_character":54,"end_line":69,"end_character":69},"in_reply_to":"8a6bb611_30ea36fb","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":83,"context_line":".. rubric:: |eg|"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"If the ``system-restapi-gui-certificate`` has been configured to install the"},{"line_number":86,"context_line":"Webserver certificate to be managed by Cert-Manager, the default"},{"line_number":87,"context_line":"annotations can be edited:"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"#. open the current configuration."}],"source_content_type":"text/x-rst","patch_set":5,"id":"c4ecdbb5_8d9d1f6b","line":86,"range":{"start_line":86,"start_character":0,"end_line":86,"end_character":10},"updated":"2021-10-26 14:03:54.000000000","message":"StarlingX RESTAPI / Webserver","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":83,"context_line":".. rubric:: |eg|"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"If the ``system-restapi-gui-certificate`` has been configured to install the"},{"line_number":86,"context_line":"Webserver certificate to be managed by Cert-Manager, the default"},{"line_number":87,"context_line":"annotations can be edited:"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"#. open the current configuration."}],"source_content_type":"text/x-rst","patch_set":5,"id":"79550d7f_bcbfaeb7","line":86,"range":{"start_line":86,"start_character":0,"end_line":86,"end_character":10},"in_reply_to":"c4ecdbb5_8d9d1f6b","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":98,"context_line":""},{"line_number":99,"context_line":"      metadata:"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"      annotations:"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"      starlingx.io/alarm: enabled"},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"      starlingx.io/alarm-before: 15d"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"      starlingx.io/alarm-severity: minor"},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"      starlingx.io/alarm-text: “webserverAPI certificate”"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"These override settings cause the ``system-restapi-gui-certificate`` resource"},{"line_number":112,"context_line":"to be monitored via the ``alarm: enabled`` annotation. An alarm will be raised"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7c9fea86_0d4b33c3","line":109,"range":{"start_line":101,"start_character":0,"end_line":109,"end_character":57},"updated":"2021-10-26 14:03:54.000000000","message":"? are indentations correct here ? ... check with sabeel","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":98,"context_line":""},{"line_number":99,"context_line":"      metadata:"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"      annotations:"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"      starlingx.io/alarm: enabled"},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"      starlingx.io/alarm-before: 15d"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"      starlingx.io/alarm-severity: minor"},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"      starlingx.io/alarm-text: “webserverAPI certificate”"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"These override settings cause the ``system-restapi-gui-certificate`` resource"},{"line_number":112,"context_line":"to be monitored via the ``alarm: enabled`` annotation. An alarm will be raised"}],"source_content_type":"text/x-rst","patch_set":5,"id":"2c10ea35_2efe1808","line":109,"range":{"start_line":101,"start_character":0,"end_line":109,"end_character":57},"in_reply_to":"7c9fea86_0d4b33c3","updated":"2021-10-27 13:02:35.000000000","message":"\u003e ? are indentations correct here ? ... check with sabeel\n\nSabeel - can you confirm or correct?","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":26026,"name":"Greg Waines","email":"greg.waines@windriver.com","username":"gwaines"},"change_message_id":"ef5a47730a59cfad91ea30f96c6cd91604ee1c18","unresolved":true,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":"When a certificate alarm occurs, the resource should be updated in order to"},{"line_number":123,"context_line":"clear the alarm. If the certificate was installed via the :command:`system"},{"line_number":124,"context_line":"certificate-install` command, a new certificate may need to be generated and"},{"line_number":125,"context_line":"re-installed. For certificates that are managed by Cert-Manager, the"},{"line_number":126,"context_line":"certificates will auto-renew provided there are no configuration errors; list"},{"line_number":127,"context_line":"issues with cert-manager auto-renewal of a certificate with :command:`kubectl"}],"source_content_type":"text/x-rst","patch_set":5,"id":"b056932c_23b0c933","line":124,"range":{"start_line":124,"start_character":48,"end_line":124,"end_character":72},"updated":"2021-10-26 14:03:54.000000000","message":"needs to be obtained","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"111612c08f86ea0e35a28bc339e16967ee1e9220","unresolved":false,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":"When a certificate alarm occurs, the resource should be updated in order to"},{"line_number":123,"context_line":"clear the alarm. If the certificate was installed via the :command:`system"},{"line_number":124,"context_line":"certificate-install` command, a new certificate may need to be generated and"},{"line_number":125,"context_line":"re-installed. For certificates that are managed by Cert-Manager, the"},{"line_number":126,"context_line":"certificates will auto-renew provided there are no configuration errors; list"},{"line_number":127,"context_line":"issues with cert-manager auto-renewal of a certificate with :command:`kubectl"}],"source_content_type":"text/x-rst","patch_set":5,"id":"bc8baf44_90f1acd6","line":124,"range":{"start_line":124,"start_character":48,"end_line":124,"end_character":72},"in_reply_to":"b056932c_23b0c933","updated":"2021-10-27 13:02:35.000000000","message":"Done","commit_id":"25ce1d4675e58eb656219accfeeda5e8262cab30"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"d6011da1b0bf5656144d93af18f6504510e57743","unresolved":true,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Expired certificates may prevent the proper operation of platform and"},{"line_number":8,"context_line":"applications running on the platform. In order to avoid expired certificates,"},{"line_number":9,"context_line":"|prod| generates alarms for certificates which are within 30 days (default) of"},{"line_number":10,"context_line":"expiry or have already expired."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":".. contents:: |minitoc|"}],"source_content_type":"text/x-rst","patch_set":7,"id":"12072790_b30b8cc3","line":9,"range":{"start_line":9,"start_character":41,"end_line":9,"end_character":47},"updated":"2021-11-12 15:26:03.000000000","message":"that :)","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"5e6f8efd99f0edd6c490c85593a6ab6cd107eba5","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Expired certificates may prevent the proper operation of platform and"},{"line_number":8,"context_line":"applications running on the platform. In order to avoid expired certificates,"},{"line_number":9,"context_line":"|prod| generates alarms for certificates which are within 30 days (default) of"},{"line_number":10,"context_line":"expiry or have already expired."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":".. contents:: |minitoc|"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bdd9763d_a6da7f7d","line":9,"range":{"start_line":9,"start_character":41,"end_line":9,"end_character":47},"in_reply_to":"12072790_b30b8cc3","updated":"2021-11-26 16:12:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"82c8a4568790ac532d05d86832b792327adf36be","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Expired certificates may prevent the proper operation of platform and"},{"line_number":8,"context_line":"applications running on the platform. In order to avoid expired certificates,"},{"line_number":9,"context_line":"|prod| generates alarms for certificates which are within 30 days (default) of"},{"line_number":10,"context_line":"expiry or have already expired."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":".. contents:: |minitoc|"}],"source_content_type":"text/x-rst","patch_set":7,"id":"c444e0aa_36de8f0e","line":9,"range":{"start_line":9,"start_character":41,"end_line":9,"end_character":47},"in_reply_to":"12072790_b30b8cc3","updated":"2021-11-22 23:06:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"d6011da1b0bf5656144d93af18f6504510e57743","unresolved":true,"context_lines":[{"line_number":94,"context_line":"StarlingX RESTAPI / Webserver certificate to be managed by Cert-Manager, the"},{"line_number":95,"context_line":"default annotations can be edited:"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"#. open the current configuration."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"   .. code-block:: none"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"8bbbe208_c875b4b8","line":97,"range":{"start_line":97,"start_character":20,"end_line":97,"end_character":34},"updated":"2021-11-12 15:26:03.000000000","message":"Change . to :","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"d6011da1b0bf5656144d93af18f6504510e57743","unresolved":true,"context_lines":[{"line_number":94,"context_line":"StarlingX RESTAPI / Webserver certificate to be managed by Cert-Manager, the"},{"line_number":95,"context_line":"default annotations can be edited:"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"#. open the current configuration."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"   .. code-block:: none"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"9fe77e48_68258915","line":97,"range":{"start_line":97,"start_character":3,"end_line":97,"end_character":7},"updated":"2021-11-12 15:26:03.000000000","message":"Open","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"5e6f8efd99f0edd6c490c85593a6ab6cd107eba5","unresolved":false,"context_lines":[{"line_number":94,"context_line":"StarlingX RESTAPI / Webserver certificate to be managed by Cert-Manager, the"},{"line_number":95,"context_line":"default annotations can be edited:"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"#. open the current configuration."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"   .. code-block:: none"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"9604639c_6e1bc3a1","line":97,"range":{"start_line":97,"start_character":20,"end_line":97,"end_character":34},"in_reply_to":"8bbbe208_c875b4b8","updated":"2021-11-26 16:12:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"82c8a4568790ac532d05d86832b792327adf36be","unresolved":false,"context_lines":[{"line_number":94,"context_line":"StarlingX RESTAPI / Webserver certificate to be managed by Cert-Manager, the"},{"line_number":95,"context_line":"default annotations can be edited:"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"#. open the current configuration."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"   .. code-block:: none"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"c53e8b65_c60f2230","line":97,"range":{"start_line":97,"start_character":20,"end_line":97,"end_character":34},"in_reply_to":"8bbbe208_c875b4b8","updated":"2021-11-22 23:06:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"82c8a4568790ac532d05d86832b792327adf36be","unresolved":false,"context_lines":[{"line_number":94,"context_line":"StarlingX RESTAPI / Webserver certificate to be managed by Cert-Manager, the"},{"line_number":95,"context_line":"default annotations can be edited:"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"#. open the current configuration."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"   .. code-block:: none"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"d8b57619_f5cfd992","line":97,"range":{"start_line":97,"start_character":3,"end_line":97,"end_character":7},"in_reply_to":"9fe77e48_68258915","updated":"2021-11-22 23:06:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"5e6f8efd99f0edd6c490c85593a6ab6cd107eba5","unresolved":false,"context_lines":[{"line_number":94,"context_line":"StarlingX RESTAPI / Webserver certificate to be managed by Cert-Manager, the"},{"line_number":95,"context_line":"default annotations can be edited:"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"#. open the current configuration."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"   .. code-block:: none"},{"line_number":100,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"e1553978_1b33d9b2","line":97,"range":{"start_line":97,"start_character":3,"end_line":97,"end_character":7},"in_reply_to":"9fe77e48_68258915","updated":"2021-11-26 16:12:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"d6011da1b0bf5656144d93af18f6504510e57743","unresolved":true,"context_lines":[{"line_number":120,"context_line":"to be monitored via the ``alarm: enabled`` annotation. An alarm will be raised"},{"line_number":121,"context_line":"15 days before the certificate expiry if the certificate is soon-to-expire or"},{"line_number":122,"context_line":"has expired with a minor severity. The alarm text will be prefixed with the"},{"line_number":123,"context_line":"string \"webserverAPI certificate\", resulting in “webserverAPI certificate"},{"line_number":124,"context_line":"namespace\u003ddeployment.certificate\u003dsystem-restapi-gui-certificate is expiring"},{"line_number":125,"context_line":"soon on \u003cdate\u003e”"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Corrective action"},{"line_number":128,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":7,"id":"4338b69f_f4f47deb","line":125,"range":{"start_line":123,"start_character":7,"end_line":125,"end_character":15},"updated":"2021-11-12 15:26:03.000000000","message":"Replace \" \"  with ``  ``  (2 instances)","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30859,"name":"M Camp","email":"mcamp859@hotmail.com","username":"mcamp859"},"change_message_id":"82c8a4568790ac532d05d86832b792327adf36be","unresolved":false,"context_lines":[{"line_number":120,"context_line":"to be monitored via the ``alarm: enabled`` annotation. An alarm will be raised"},{"line_number":121,"context_line":"15 days before the certificate expiry if the certificate is soon-to-expire or"},{"line_number":122,"context_line":"has expired with a minor severity. The alarm text will be prefixed with the"},{"line_number":123,"context_line":"string \"webserverAPI certificate\", resulting in “webserverAPI certificate"},{"line_number":124,"context_line":"namespace\u003ddeployment.certificate\u003dsystem-restapi-gui-certificate is expiring"},{"line_number":125,"context_line":"soon on \u003cdate\u003e”"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Corrective action"},{"line_number":128,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":7,"id":"071c24bd_08db4da6","line":125,"range":{"start_line":123,"start_character":7,"end_line":125,"end_character":15},"in_reply_to":"4338b69f_f4f47deb","updated":"2021-11-22 23:06:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"5e6f8efd99f0edd6c490c85593a6ab6cd107eba5","unresolved":false,"context_lines":[{"line_number":120,"context_line":"to be monitored via the ``alarm: enabled`` annotation. An alarm will be raised"},{"line_number":121,"context_line":"15 days before the certificate expiry if the certificate is soon-to-expire or"},{"line_number":122,"context_line":"has expired with a minor severity. The alarm text will be prefixed with the"},{"line_number":123,"context_line":"string \"webserverAPI certificate\", resulting in “webserverAPI certificate"},{"line_number":124,"context_line":"namespace\u003ddeployment.certificate\u003dsystem-restapi-gui-certificate is expiring"},{"line_number":125,"context_line":"soon on \u003cdate\u003e”"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Corrective action"},{"line_number":128,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":7,"id":"951e26c3_cb98c9b1","line":125,"range":{"start_line":123,"start_character":7,"end_line":125,"end_character":15},"in_reply_to":"4338b69f_f4f47deb","updated":"2021-11-26 16:12:34.000000000","message":"Done","commit_id":"1e82414ce9750f34072f5d9daa26fb25a033dce3"},{"author":{"_account_id":31500,"name":"Sabeel Ansari","email":"Sabeel.Ansari@windriver.com","username":"sansari"},"change_message_id":"ed03efa2581a044503d80c075c67a9f73384998f","unresolved":true,"context_lines":[{"line_number":22,"context_line":"* ``Expiring Soon`` (alarm ID: 500.200, severity: major); by default raised 30"},{"line_number":23,"context_line":"  days prior to expiry of the certificate."},{"line_number":24,"context_line":"* ``Expired`` (alarm ID: 500.210, severity: critical)."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":".. code-block:: none"},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"   [sysadmin@controller-0 ~(keystone_admin)]$ fm alarm-list"}],"source_content_type":"text/x-rst","patch_set":8,"id":"3a991542_2ef1a448","line":25,"updated":"2021-11-25 16:25:28.000000000","message":"One other note we should add to this doc is a note that measurement is done in days. During testing, there was some discussion about setting unrealistic certificate timelines measured in hours. So, somewhere here in doc, we should add a note that timelines are measured in days.","commit_id":"19bd9c69eb2fbce38cac1d47b14d310e681fabc5"},{"author":{"_account_id":30539,"name":"Ron Stone","email":"ronald.stone@windriver.com","username":"ronstone2000"},"change_message_id":"5e6f8efd99f0edd6c490c85593a6ab6cd107eba5","unresolved":false,"context_lines":[{"line_number":22,"context_line":"* ``Expiring Soon`` (alarm ID: 500.200, severity: major); by default raised 30"},{"line_number":23,"context_line":"  days prior to expiry of the certificate."},{"line_number":24,"context_line":"* ``Expired`` (alarm ID: 500.210, severity: critical)."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":".. code-block:: none"},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"   [sysadmin@controller-0 ~(keystone_admin)]$ fm alarm-list"}],"source_content_type":"text/x-rst","patch_set":8,"id":"01e79e8f_2f0bb589","line":25,"in_reply_to":"3a991542_2ef1a448","updated":"2021-11-26 16:12:34.000000000","message":"Done","commit_id":"19bd9c69eb2fbce38cac1d47b14d310e681fabc5"}]}