)]}'
{"id":"openstack%2Fbarbican-tempest-plugin~1007884","triplet_id":"openstack%2Fbarbican-tempest-plugin~master~I87de261aec14895f78d2dab7ec5ea0105f4b49ad","project":"openstack/barbican-tempest-plugin","branch":"master","attention_set":{},"removed_from_attention_set":{"35125":{"account":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"last_update":"2026-09-30 10:01:37.000000000","reason":"removed on reply"}},"hashtags":[],"change_id":"I87de261aec14895f78d2dab7ec5ea0105f4b49ad","subject":"Remove ProjectAdminTests overrides allowing cross-project secret access","status":"ABANDONED","created":"2026-09-29 14:44:33.000000000","updated":"2026-09-30 10:10:12.000000000","total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"59963f0fb241c64bd6392e6d2401ef4fe03862fb","_number":1007884,"virtual_id_number":1007884,"owner":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":-1,"date":"2026-09-29 20:06:00.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-09-29 15:34:53.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"bd7a450da0ce4be892e3abc3f2c188521cdc7ca4","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"date":"2026-09-29 14:44:33.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"2e443308120df2df4eefb706c6459d20298c99e8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-29 15:34:53.000000000","message":"Patch Set 1: Verified-1\n\n(1 comment)\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/e12fc69cb4a14ebd949ed56631864d98\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1f9709ff4bcd4b119248d8a6e06683ca : FAILURE in 2m 42s\n- barbican-tempest-plugin-simple-crypto https://zuul.opendev.org/t/openstack/build/7ebb5c3a521842d2b76a51e0c013344e : FAILURE in 34m 45s\n- barbican-tempest-plugin-simple-crypto-secure-rbac https://zuul.opendev.org/t/openstack/build/3f488e6cb0264316bb7ca45cc38b80f5 : FAILURE in 26m 58s\n- barbican-tempest-plugin-simple-crypto-2026-2 https://zuul.opendev.org/t/openstack/build/7aa0d505f835472289b2d4110106f29a : FAILURE in 36m 42s\n- barbican-tempest-plugin-simple-crypto-2026-1 https://zuul.opendev.org/t/openstack/build/0c41de533db040c8be32764d7d5029fb : SUCCESS in 37m 01s\n- barbican-tempest-plugin-simple-crypto-2025-2 https://zuul.opendev.org/t/openstack/build/823e7b3edb9040adaf44ea64d37f29d5 : SUCCESS in 25m 34s\n- barbican-tempest-plugin-simple-crypto-2025-1 https://zuul.opendev.org/t/openstack/build/7a89d1822b5b437a87309f90f3ac7f0f : SUCCESS in 40m 58s\n- barbican-tempest-plugin-simple-crypto-ipv6-only https://zuul.opendev.org/t/openstack/build/13c9941e83b54eea8a6d5ee25f4c9cb2 : FAILURE in 33m 09s\n- barbican-tempest-plugin-simple-crypto-castellan-src https://zuul.opendev.org/t/openstack/build/ee9ca9ae700f48f48c43d87fc9825b54 : FAILURE in 35m 23s\n- barbican-tempest-plugin-simple-crypto-cursive https://zuul.opendev.org/t/openstack/build/104353efac934a3d8e379ae931dc3c45 : FAILURE in 26m 52s","accounts_in_message":[],"_revision_number":1},{"id":"e341888d59511221222fe6147880d86bc1b858f7","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"date":"2026-09-29 17:23:47.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"65d175569e9f32b5909f1a191d87e2d6204a79c3","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-29 18:26:40.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/8a9565eba0684d5ea4d0658539e24b11\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8ed21525e9f84362aebaa8a282cac541 : SUCCESS in 3m 26s\n- barbican-tempest-plugin-simple-crypto https://zuul.opendev.org/t/openstack/build/6d14b114608d4b76a09adce89159060e : FAILURE in 36m 44s\n- barbican-tempest-plugin-simple-crypto-secure-rbac https://zuul.opendev.org/t/openstack/build/7085b909bf754390ab540a41da890429 : FAILURE in 26m 24s\n- barbican-tempest-plugin-simple-crypto-2026-2 https://zuul.opendev.org/t/openstack/build/bed6e84eeeaf4f88a33cddf13b7f3c38 : FAILURE in 33m 25s\n- barbican-tempest-plugin-simple-crypto-2026-1 https://zuul.opendev.org/t/openstack/build/26158f519f3f4f80af1be4a0000b63ff : SUCCESS in 34m 14s\n- barbican-tempest-plugin-simple-crypto-2025-2 https://zuul.opendev.org/t/openstack/build/2c94cc7a55aa479a92e776c5d20f5ebe : SUCCESS in 35m 44s\n- barbican-tempest-plugin-simple-crypto-2025-1 https://zuul.opendev.org/t/openstack/build/517b57cc8ee8489bb133760b81647e65 : SUCCESS in 22m 27s\n- barbican-tempest-plugin-simple-crypto-ipv6-only https://zuul.opendev.org/t/openstack/build/44a5573f87df4f5fac3012e982f303ee : FAILURE in 34m 24s\n- barbican-tempest-plugin-simple-crypto-castellan-src https://zuul.opendev.org/t/openstack/build/3a8c954ce92a4c7f8d8015d92aba4630 : FAILURE in 35m 03s\n- barbican-tempest-plugin-simple-crypto-cursive https://zuul.opendev.org/t/openstack/build/a4d9e42bbbd4426a98fa91c17ff395ca : FAILURE in 38m 47s","accounts_in_message":[],"_revision_number":2},{"id":"a0465342510279329d9ba1e894f242de0c0cb09f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"date":"2026-09-29 20:04:34.000000000","message":"Uploaded patch set 3: Commit message was updated.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"9fac16bc927516eadf65279cff080db23979b6c7","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-29 20:06:00.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/ff38ffc612b94e2695e5327093d1fb6e\n\n\nWarning:\n  Dependency cycle detected and project openstack/barbican doesn\u0027t allow circular dependencies on stable/2025.2","accounts_in_message":[],"_revision_number":3},{"id":"166014a7289c19bab60818e97090bd7648db4b5e","author":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"date":"2026-09-30 10:01:37.000000000","message":"Patch Set 3:\n\nAbandoning this patch. It depends on openstack/barbican 1007858, which is being abandoned: the role:admin check it removed is required to clean up secrets orphaned when their owning project is deleted. The existing ProjectAdminTests behavior is intended.","accounts_in_message":[],"_revision_number":3},{"id":"59963f0fb241c64bd6392e6d2401ef4fe03862fb","tag":"autogenerated:gerrit:abandon","author":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"date":"2026-09-30 10:10:12.000000000","message":"Abandoned","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"2e0f2a0fd8a2c7fab18d722aab7839a9ca67be9e","revisions":{"47e477333a0fa8d545162d736c0fcf0e6d5c0a1a":{"kind":"REWORK","_number":1,"created":"2026-09-29 14:44:33.000000000","uploader":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"ref":"refs/changes/84/1007884/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/barbican-tempest-plugin","ref":"refs/changes/84/1007884/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/1"}}},"commit":{"parents":[{"commit":"f370cf0ee9e72ada0f48bf80360b7de851444b8e","subject":"Merge \"Add stable/2026.2 job\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/f370cf0ee9e72ada0f48bf80360b7de851444b8e"}]}],"author":{"name":"Mauricio Harley","email":"mharley@redhat.com","date":"2026-09-29 14:43:57.000000000","tz":120},"committer":{"name":"Mauricio Harley","email":"mharley@redhat.com","date":"2026-09-29 14:44:30.000000000","tz":120},"subject":"Remove ProjectAdminTests overrides allowing cross-project secret access","message":"Remove ProjectAdminTests overrides allowing cross-project secret access\n\nThe test_get_other_project_secret and test_delete_other_project_secret\noverrides in ProjectAdminTests expected that a project-scoped admin\ncould read and delete secrets belonging to other projects. This\nbehavior was the result of a standalone role:admin check (without\nrule:secret_project_match) in the secret:get and secret:delete policies.\n\nThe corresponding policy fix in barbican [1] removes the standalone\nrole:admin and replaces it with role:service, so project-scoped admins\nno longer have cross-project access to secrets. Remove the test\noverrides so ProjectAdminTests inherits the correct Forbidden\nexpectation from ProjectMemberTests.\n\n[1] https://review.opendev.org/c/openstack/barbican/+/1007858\n\nCloses-Bug: #f370cf0\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\nChange-Id: I87de261aec14895f78d2dab7ec5ea0105f4b49ad\nSigned-off-by: Mauricio Harley \u003cmharley@redhat.com\u003e\nCo-authored-by: Cursor \u003ccursoragent@cursor.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/47e477333a0fa8d545162d736c0fcf0e6d5c0a1a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/47e477333a0fa8d545162d736c0fcf0e6d5c0a1a"}]},"branch":"refs/heads/master"},"1d87e859d177589853297e7c70417d451d6a7570":{"kind":"REWORK","_number":2,"created":"2026-09-29 17:23:47.000000000","uploader":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"ref":"refs/changes/84/1007884/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/barbican-tempest-plugin","ref":"refs/changes/84/1007884/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/2"}}},"commit":{"parents":[{"commit":"f370cf0ee9e72ada0f48bf80360b7de851444b8e","subject":"Merge \"Add stable/2026.2 job\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/f370cf0ee9e72ada0f48bf80360b7de851444b8e"}]}],"author":{"name":"Mauricio Harley","email":"mharley@redhat.com","date":"2026-09-29 17:22:54.000000000","tz":120},"committer":{"name":"Mauricio Harley","email":"mharley@redhat.com","date":"2026-09-29 17:22:54.000000000","tz":120},"subject":"Remove ProjectAdminTests overrides allowing cross-project secret access","message":"Remove ProjectAdminTests overrides allowing cross-project secret access\n\nThe test_get_other_project_secret and test_delete_other_project_secret\noverrides in ProjectAdminTests expected that a project-scoped admin\ncould read and delete secrets belonging to other projects. This\nbehavior was the result of a standalone role:admin check (without\nrule:secret_project_match) in the secret:get and secret:delete policies.\n\nThe corresponding policy fix in barbican [1] removes the standalone\nrole:admin and replaces it with role:service, so project-scoped admins\nno longer have cross-project access to secrets. Remove the test\noverrides so ProjectAdminTests inherits the correct Forbidden\nexpectation from ProjectMemberTests.\n\n[1] https://review.opendev.org/c/openstack/barbican/+/1007858\n\nCloses-Bug: #f370cf0\n\nChange-Id: I87de261aec14895f78d2dab7ec5ea0105f4b49ad\nSigned-off-by: Mauricio Harley \u003cmharley@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/1d87e859d177589853297e7c70417d451d6a7570"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/1d87e859d177589853297e7c70417d451d6a7570"}]},"branch":"refs/heads/master"},"2e0f2a0fd8a2c7fab18d722aab7839a9ca67be9e":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2026-09-29 20:04:34.000000000","uploader":{"_account_id":35125,"name":"Mauricio Harley","email":"mharley@redhat.com","username":"mharley-rh"},"ref":"refs/changes/84/1007884/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/barbican-tempest-plugin","ref":"refs/changes/84/1007884/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/barbican-tempest-plugin refs/changes/84/1007884/3"}}},"commit":{"parents":[{"commit":"f370cf0ee9e72ada0f48bf80360b7de851444b8e","subject":"Merge \"Add stable/2026.2 job\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/f370cf0ee9e72ada0f48bf80360b7de851444b8e"}]}],"author":{"name":"Mauricio Harley","email":"mharley@redhat.com","date":"2026-09-29 17:22:54.000000000","tz":120},"committer":{"name":"Mauricio Harley","email":"mharley@redhat.com","date":"2026-09-29 20:00:33.000000000","tz":120},"subject":"Remove ProjectAdminTests overrides allowing cross-project secret access","message":"Remove ProjectAdminTests overrides allowing cross-project secret access\n\nThe test_get_other_project_secret and test_delete_other_project_secret\noverrides in ProjectAdminTests expected that a project-scoped admin\ncould read and delete secrets belonging to other projects. This\nbehavior was the result of a standalone role:admin check (without\nrule:secret_project_match) in the secret:get and secret:delete policies.\n\nThe corresponding policy fix in barbican [1] removes the standalone\nrole:admin and replaces it with role:service, so project-scoped admins\nno longer have cross-project access to secrets. Remove the test\noverrides so ProjectAdminTests inherits the correct Forbidden\nexpectation from ProjectMemberTests.\n\n[1] https://review.opendev.org/c/openstack/barbican/+/1007858\n\nCloses-Bug: #2168853\n\nDepends-On: https://review.opendev.org/c/openstack/barbican/+/1007858\nDepends-On: https://review.opendev.org/c/openstack/barbican/+/1007946\nDepends-On: https://review.opendev.org/c/openstack/barbican/+/1007947\nDepends-On: https://review.opendev.org/c/openstack/barbican/+/1007948\nDepends-On: https://review.opendev.org/c/openstack/barbican/+/1007952\n\nChange-Id: I87de261aec14895f78d2dab7ec5ea0105f4b49ad\nSigned-off-by: Mauricio Harley \u003cmharley@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/2e0f2a0fd8a2c7fab18d722aab7839a9ca67be9e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican-tempest-plugin/commit/2e0f2a0fd8a2c7fab18d722aab7839a9ca67be9e"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}