)]}'
{"id":"openstack%2Fcinder~882837","triplet_id":"openstack%2Fcinder~stable%2Fzed~I612905a1bf4a1706cce913c0d8a6df7a240d599a","project":"openstack/cinder","branch":"stable/zed","topic":"bug/2004555","attention_set":{},"removed_from_attention_set":{"9535":{"account":{"_account_id":9535,"name":"Gorka Eguileor","email":"geguileo@redhat.com","username":"Gorka"},"last_update":"2023-05-11 18:00:27.000000000","reason":"Change was submitted"},"11904":{"account":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"last_update":"2023-05-11 18:00:27.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I612905a1bf4a1706cce913c0d8a6df7a240d599a","subject":"Reject unsafe delete attachment calls","status":"MERGED","created":"2023-05-10 14:38:12.000000000","updated":"2023-05-15 13:56:18.000000000","submitted":"2023-05-11 18:00:27.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"882837-bug/2004555","meta_rev_id":"e502b13993ffe2de72072cd2036e2553b4d4a478","_number":882837,"virtual_id_number":882837,"owner":{"_account_id":9535,"name":"Gorka Eguileor","email":"geguileo@redhat.com","username":"Gorka"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2023-05-11 18:00:27.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},{"value":0,"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2023-05-11 10:48:17.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},{"value":0,"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":2,"date":"2023-05-11 16:08:59.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},{"value":0,"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":1,"date":"2023-05-11 16:08:59.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"approved":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2023-05-11 10:48:17.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},{"value":0,"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"value":0,"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":15386,"name":"Nexenta CI","email":"openstackci@nexenta.com","username":"nexentaci","tags":["SERVICE_USER"]},{"_account_id":22248,"name":"HPE AlletraMP iSCSI CI","email":"hp.cinder.blr.ci@groups.ext.hpe.com","username":"hp-storage-blr-ci","tags":["SERVICE_USER"]},{"_account_id":28801,"name":"Cisco Cinder CI","email":"cisco-cinder-ci@cisco.com","username":"cisco-cinder-ci"},{"_account_id":31868,"name":"Open-E CI","email":"open-e-ci-joviandss@open-e.com","username":"open-e-ci-joviandss","tags":["SERVICE_USER"]},{"_account_id":32912,"name":"Pure Storage Third-Party CI","display_name":"Pure Storage Third-Party CI","email":"openstack-third-party-ci@purestorage.com","username":"purestorage-thirdparty-ci","status":"Doing CI things"},{"_account_id":34155,"name":"NEC V Cinder CI","email":"nec-v-cinder-istorage@istorage.jp.nec.com","username":"nec--v-cinder-ci"},{"_account_id":34318,"name":"HPE Nimble Storage CI","display_name":"HPE Nimble Storage CI","email":"raghavendra.tilay@capgemini.com","username":"hpe-nimble"}],"REVIEWER":[{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2023-05-10 14:51:40.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2023-05-10 14:53:18.000000000","updated_by":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"reviewer":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"state":"REVIEWER"},{"updated":"2023-05-10 15:01:34.000000000","updated_by":{"_account_id":15386,"name":"Nexenta CI","email":"openstackci@nexenta.com","username":"nexentaci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":15386,"name":"Nexenta CI","email":"openstackci@nexenta.com","username":"nexentaci","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2023-05-10 15:08:29.000000000","updated_by":{"_account_id":28801,"name":"Cisco Cinder CI","email":"cisco-cinder-ci@cisco.com","username":"cisco-cinder-ci"},"reviewer":{"_account_id":28801,"name":"Cisco Cinder CI","email":"cisco-cinder-ci@cisco.com","username":"cisco-cinder-ci"},"state":"CC"},{"updated":"2023-05-10 16:31:06.000000000","updated_by":{"_account_id":32912,"name":"Pure Storage Third-Party CI","display_name":"Pure Storage Third-Party CI","email":"openstack-third-party-ci@purestorage.com","username":"purestorage-thirdparty-ci","status":"Doing CI things"},"reviewer":{"_account_id":32912,"name":"Pure Storage Third-Party CI","display_name":"Pure Storage Third-Party CI","email":"openstack-third-party-ci@purestorage.com","username":"purestorage-thirdparty-ci","status":"Doing CI things"},"state":"CC"},{"updated":"2023-05-10 16:57:40.000000000","updated_by":{"_account_id":22248,"name":"HPE AlletraMP iSCSI CI","email":"hp.cinder.blr.ci@groups.ext.hpe.com","username":"hp-storage-blr-ci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22248,"name":"HPE AlletraMP iSCSI CI","email":"hp.cinder.blr.ci@groups.ext.hpe.com","username":"hp-storage-blr-ci","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2023-05-10 17:13:08.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2023-05-10 22:11:49.000000000","updated_by":{"_account_id":34318,"name":"HPE Nimble Storage CI","display_name":"HPE Nimble Storage CI","email":"raghavendra.tilay@capgemini.com","username":"hpe-nimble"},"reviewer":{"_account_id":34318,"name":"HPE Nimble Storage CI","display_name":"HPE Nimble Storage CI","email":"raghavendra.tilay@capgemini.com","username":"hpe-nimble"},"state":"CC"},{"updated":"2023-05-11 02:24:39.000000000","updated_by":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"reviewer":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"state":"CC"},{"updated":"2023-05-11 10:48:17.000000000","updated_by":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},"reviewer":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},"state":"REVIEWER"},{"updated":"2023-05-11 16:08:59.000000000","updated_by":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"reviewer":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"state":"REVIEWER"},{"updated":"2023-05-11 17:44:12.000000000","updated_by":{"_account_id":34155,"name":"NEC V Cinder CI","email":"nec-v-cinder-istorage@istorage.jp.nec.com","username":"nec--v-cinder-ci"},"reviewer":{"_account_id":34155,"name":"NEC V Cinder CI","email":"nec-v-cinder-istorage@istorage.jp.nec.com","username":"nec--v-cinder-ci"},"state":"CC"},{"updated":"2023-05-15 13:56:18.000000000","updated_by":{"_account_id":31868,"name":"Open-E CI","email":"open-e-ci-joviandss@open-e.com","username":"open-e-ci-joviandss","tags":["SERVICE_USER"]},"reviewer":{"_account_id":31868,"name":"Open-E CI","email":"open-e-ci-joviandss@open-e.com","username":"open-e-ci-joviandss","tags":["SERVICE_USER"]},"state":"CC"}],"messages":[{"id":"cec589b561b4058b906a043abb07d85888401c1f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9535,"name":"Gorka Eguileor","email":"geguileo@redhat.com","username":"Gorka"},"date":"2023-05-10 14:38:12.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"158786f371e2618fb7e6121a8174328efa38284a","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-10 14:51:40.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d25d5205fe0a455b97bc094c9e27e9d3\n\n- openstack-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/42f016bf4cd34a898734c5a16c8dc812 : SUCCESS in 9m 51s (non-voting)\n- openstack-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/cc55b6cd30834063b5a246854c362608 : SUCCESS in 12m 37s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"bc0c6183a9b199ba23c964b143d4f6e0e8b5c0d8","author":{"_account_id":11904,"name":"Sean McGinnis","email":"sean.mcginnis@gmail.com","username":"SeanM"},"date":"2023-05-10 14:53:18.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"8e8f60debd0f6741fc17cb0be2a42d37420da3dd","author":{"_account_id":15386,"name":"Nexenta CI","email":"openstackci@nexenta.com","username":"nexentaci","tags":["SERVICE_USER"]},"date":"2023-05-10 15:01:34.000000000","message":"Patch Set 1:\n\nBuild failed. For information on how to proceed, see https://docs.openstack.org/infra/manual/developers.html\n* NexentaStor5_Cinder_NFS http://104.254.242.106/refs-changes-37-882837-1/ns5_nfs : FAILURE in 1m 27s\n* NexentaStor5_Cinder_iSCSI http://104.254.242.106/refs-changes-37-882837-1/ns5_iscsi : FAILURE in 1m 26s\n\nLeave a comment with run-nexentaci to trigger a recheck. For more information about Nexenta CI, please see https://wiki.openstack.org/wiki/ThirdPartySystems/Nexenta_CI","accounts_in_message":[],"_revision_number":1},{"id":"155c4f48e37ffb0d1f527145cbd44cb83fb4ecce","author":{"_account_id":28801,"name":"Cisco Cinder CI","email":"cisco-cinder-ci@cisco.com","username":"cisco-cinder-ci"},"date":"2023-05-10 15:08:29.000000000","message":"Patch Set 1:\n\nBuild failed.\nhttps://127.0.0.1:9000/t/openstack/buildset/fcb72a09f27645b5a7fb615f23d409f6\n\n- dsvm-tempest-cisco-zonemanager-job https://127.0.0.1:9000/t/openstack/build/fe48bc2584e84324b0955bcf053fc343 : FAILURE in 25m 06s","accounts_in_message":[],"_revision_number":1},{"id":"8f75edf7dce5abd61a3d1c0126673ec452a4f221","author":{"_account_id":32912,"name":"Pure Storage Third-Party CI","display_name":"Pure Storage Third-Party CI","email":"openstack-third-party-ci@purestorage.com","username":"purestorage-thirdparty-ci","status":"Doing CI things"},"date":"2023-05-10 16:31:06.000000000","message":"Patch Set 1:\n\nBuild succeeded.\n\n- pure-devstack-cinder-tempest-iscsi-aio http://openstack-logs.purestorage.com/37/882837/1/thirdparty-check/pure-devstack-cinder-tempest-iscsi-aio/45b8232/ : SUCCESS in 1h 51m 27s\n- pure-devstack-cinder-tempest-fc-aio http://openstack-logs.purestorage.com/37/882837/1/thirdparty-check/pure-devstack-cinder-tempest-fc-aio/5505040/ : SUCCESS in 1h 33m 57s (non-voting)\n- pure-devstack-cinder-tempest-nvme-roce-aio http://openstack-logs.purestorage.com/37/882837/1/thirdparty-check/pure-devstack-cinder-tempest-nvme-roce-aio/3f685a7/ : SUCCESS in 1h 40m 35s","accounts_in_message":[],"_revision_number":1},{"id":"efa899b9c8b3e3e224324f485c2085b92638c200","author":{"_account_id":22248,"name":"HPE AlletraMP iSCSI CI","email":"hp.cinder.blr.ci@groups.ext.hpe.com","username":"hp-storage-blr-ci","tags":["SERVICE_USER"]},"date":"2023-05-10 16:57:40.000000000","message":"Patch Set 1:\n\nBuild failed.\n\n- 3par-iscsi-driver-master-client-pip-ssa02-dsvm https://github.com/hpe-storage/hpe_cinder_logs/tree/master/new_logs/882837 : FAILURE in 1h 05m 37s","accounts_in_message":[],"_revision_number":1},{"id":"63c3a9857905d82d33698024a86a60cef3636ac3","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-10 17:13:08.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/b035a6a2581149018bad73667e49d778\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/545da85b51fa4085856f22ed84178a27 : SUCCESS in 7m 18s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/06d8944fc82e465183c807b8d057d9de : SUCCESS in 9m 46s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/0e78c5d27717464fa608313667d97da9 : SUCCESS in 9m 27s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/3b42d261ee4c453aabce08aafadba1b6 : SUCCESS in 9m 36s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ad0bf93051044511820f39532a49bddd : SUCCESS in 12m 12s\n- grenade https://zuul.opendev.org/t/openstack/build/eedcf272e8dc4bb5b06ebbd9894f7af1 : SUCCESS in 1h 28m 33s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/32ece481733246809c068b5feb61b49d : SUCCESS in 1h 11m 37s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/4efce6469c904e1d8dd179864139a6f5 : SUCCESS in 50m 37s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/3af79ce86d2846058d4d8e71164b67fc : SUCCESS in 7m 52s\n- cinder-code-coverage https://zuul.opendev.org/t/openstack/build/123919ee4c4540d9839eaacdfb168297 : SUCCESS in 20m 53s (non-voting)\n- cinder-mypy https://zuul.opendev.org/t/openstack/build/b52ac13bd4a240b89bd393bd650322f1 : FAILURE in 10m 02s\n- cinder-tox-bandit-baseline https://zuul.opendev.org/t/openstack/build/13518000b66842d498bbf0cfcb29fa2f : SUCCESS in 10m 56s (non-voting)\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/7409b37b203240188d491ed31d536fca : SUCCESS in 5m 54s\n- openstack-tox-functional-py39 https://zuul.opendev.org/t/openstack/build/5c5a583415f548a7945a5214844828aa : SUCCESS in 5m 45s\n- cinder-rally-task https://zuul.opendev.org/t/openstack/build/09815fe7a91a4d858343afdf570cad6a : SUCCESS in 47m 32s (non-voting)\n- openstack-tox-pylint https://zuul.opendev.org/t/openstack/build/0fd58099efa641568753ab3c047b6269 : FAILURE in 6m 25s (non-voting)\n- cinder-plugin-ceph-tempest https://zuul.opendev.org/t/openstack/build/b09c1907ae084cb985e4e445eb8f8697 : SUCCESS in 1h 03m 53s\n- cinder-plugin-ceph-tempest-mn-aa https://zuul.opendev.org/t/openstack/build/3e28ff148e294ff3a399be88526d52b4 : FAILURE in 1h 40m 55s (non-voting)\n- cinder-tempest-plugin-lvm-lio-barbican https://zuul.opendev.org/t/openstack/build/b3dd20432c12464aa2d476e0567fa620 : SUCCESS in 1h 41m 50s\n- cinder-grenade-mn-sub-volbak https://zuul.opendev.org/t/openstack/build/b0d3fd7e28e742658db70e067e43c62e : SUCCESS in 1h 35m 54s\n- cinder-tempest-lvm-multibackend https://zuul.opendev.org/t/openstack/build/a19f139fceca4c8dbb650c0fd0047ddb : SUCCESS in 1h 29m 20s (non-voting)\n- cinder-for-glance-optimized https://zuul.opendev.org/t/openstack/build/4dfed6503f5c4f70b9b3bdf9b2cb4b1a : SUCCESS in 50m 00s (non-voting)\n- devstack-plugin-nfs-tempest-full https://zuul.opendev.org/t/openstack/build/cfa4bea11a644a67844448f7e9aec6a5 : SUCCESS in 1h 26m 12s\n- tempest-slow-py3 https://zuul.opendev.org/t/openstack/build/dea2a6139bcd4663b8ac74c8f58a60b8 : SUCCESS in 2h 29m 05s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8020bce31440442792c2084f218566b5 : SUCCESS in 1h 08m 51s","accounts_in_message":[],"_revision_number":1},{"id":"c8322359c217b6920991802e980b505e3c06609d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9535,"name":"Gorka Eguileor","email":"geguileo@redhat.com","username":"Gorka"},"date":"2023-05-10 17:55:14.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Code-Review+2 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified-1\n","accounts_in_message":[],"_revision_number":2},{"id":"c508927d61a2c430f61616516bcaf93b29f1deaf","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-10 18:28:52.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5913ebf9255846979157dd56e55673a8\n\n- openstack-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/3fbfb3583a884cddb006d7cbb3117627 : SUCCESS in 31m 34s (non-voting)\n- openstack-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/db3018049c6d46aca9830fd55d8c8ceb : FAILURE in 27m 12s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"a922a3d272ecf1e9e2b68a8881a47dafc59ee60a","author":{"_account_id":15386,"name":"Nexenta CI","email":"openstackci@nexenta.com","username":"nexentaci","tags":["SERVICE_USER"]},"date":"2023-05-10 18:39:01.000000000","message":"Patch Set 2:\n\nBuild failed. For information on how to proceed, see https://docs.openstack.org/infra/manual/developers.html\n* NexentaStor5_Cinder_NFS http://104.254.242.106/refs-changes-37-882837-2/ns5_nfs : FAILURE in 1m 27s\n* NexentaStor5_Cinder_iSCSI http://104.254.242.106/refs-changes-37-882837-2/ns5_iscsi : FAILURE in 1m 28s\n\nLeave a comment with run-nexentaci to trigger a recheck. For more information about Nexenta CI, please see https://wiki.openstack.org/wiki/ThirdPartySystems/Nexenta_CI","accounts_in_message":[],"_revision_number":2},{"id":"4337d72a83025ac97e40eb000ad10b72c74a83b4","author":{"_account_id":28801,"name":"Cisco Cinder CI","email":"cisco-cinder-ci@cisco.com","username":"cisco-cinder-ci"},"date":"2023-05-10 19:44:00.000000000","message":"Patch Set 2:\n\nBuild failed.\nhttps://127.0.0.1:9000/t/openstack/buildset/e47b3d3dccd0448ea5d87775fa1ada16\n\n- dsvm-tempest-cisco-zonemanager-job https://127.0.0.1:9000/t/openstack/build/4edbba28a3f8440e8fb0d5d531a88037 : FAILURE in 51m 55s","accounts_in_message":[],"_revision_number":2},{"id":"27647977568885399c2d7691bf8aa8f87f2ebb7a","author":{"_account_id":32912,"name":"Pure Storage Third-Party CI","display_name":"Pure Storage Third-Party CI","email":"openstack-third-party-ci@purestorage.com","username":"purestorage-thirdparty-ci","status":"Doing CI things"},"date":"2023-05-10 19:51:59.000000000","message":"Patch Set 2:\n\nBuild succeeded.\n\n- pure-devstack-cinder-tempest-iscsi-aio http://openstack-logs.purestorage.com/37/882837/2/thirdparty-check/pure-devstack-cinder-tempest-iscsi-aio/020ff55/ : SUCCESS in 1h 55m 45s\n- pure-devstack-cinder-tempest-fc-aio http://openstack-logs.purestorage.com/37/882837/2/thirdparty-check/pure-devstack-cinder-tempest-fc-aio/4b59899/ : SUCCESS in 1h 41m 43s (non-voting)\n- pure-devstack-cinder-tempest-nvme-roce-aio http://openstack-logs.purestorage.com/37/882837/2/thirdparty-check/pure-devstack-cinder-tempest-nvme-roce-aio/60a2164/ : SUCCESS in 1h 39m 43s","accounts_in_message":[],"_revision_number":2},{"id":"082f2a57d3a053811883234384fc888f4b021fce","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-10 20:21:27.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/cdbdfa14d5a946939d1512e22b7ea84d\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/0b293d2ea5ed415890757897a41fc049 : SUCCESS in 6m 09s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8ecbfa83b17c40588eb3b493e48b2d8d : SUCCESS in 10m 08s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/47232fe72e28449aa0efc0779046343b : SUCCESS in 10m 24s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/904aec84adc54422b2a4248739ffa642 : SUCCESS in 10m 45s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5a645feee8a541bfb8cfecbc229b3ed4 : SUCCESS in 10m 29s\n- grenade https://zuul.opendev.org/t/openstack/build/e94ce5f32e6f46879257aa28fc05be40 : SUCCESS in 59m 47s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/cff9a7a475924be38d5e6b2ecfd59681 : SUCCESS in 1h 21m 16s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/425c64ebc15a43f79023f58f77cebbb5 : SUCCESS in 57m 15s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/6681594fe20d4d9db08d0d733bf25b8f : SUCCESS in 8m 36s\n- cinder-code-coverage https://zuul.opendev.org/t/openstack/build/799c720390ff4008bea40f2c9134e006 : SUCCESS in 13m 31s (non-voting)\n- cinder-mypy https://zuul.opendev.org/t/openstack/build/d4ccdd6a12cc406da6f663cb48309b93 : SUCCESS in 5m 35s\n- cinder-tox-bandit-baseline https://zuul.opendev.org/t/openstack/build/59ebab4709aa42c79fa61684b3953381 : SUCCESS in 6m 34s (non-voting)\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/fa2d106786b14cba9fc62d8ae28f89b2 : SUCCESS in 5m 27s\n- openstack-tox-functional-py39 https://zuul.opendev.org/t/openstack/build/d5582355cfe3452eb7a038ea634e4b2c : SUCCESS in 6m 22s\n- cinder-rally-task https://zuul.opendev.org/t/openstack/build/36bd314cd9ab4ba194e4295a6f6262fd : SUCCESS in 40m 33s (non-voting)\n- openstack-tox-pylint https://zuul.opendev.org/t/openstack/build/3fa638f7cb424874b6296a8e38946e37 : FAILURE in 6m 19s (non-voting)\n- cinder-plugin-ceph-tempest https://zuul.opendev.org/t/openstack/build/51633ca02f25400d8f4697913f50cd14 : SUCCESS in 1h 18m 47s\n- cinder-plugin-ceph-tempest-mn-aa https://zuul.opendev.org/t/openstack/build/3e42c66b9bf64101b0022219e69e66ff : FAILURE in 1h 22m 50s (non-voting)\n- cinder-tempest-plugin-lvm-lio-barbican https://zuul.opendev.org/t/openstack/build/e812a7e513574cfc8f9522c13fd4184f : SUCCESS in 1h 29m 53s\n- cinder-grenade-mn-sub-volbak https://zuul.opendev.org/t/openstack/build/c098ccbe7af643969475b662fd868935 : SUCCESS in 49m 31s\n- cinder-tempest-lvm-multibackend https://zuul.opendev.org/t/openstack/build/f5fdddff70cd4a0c8381a43dac90c3e7 : SUCCESS in 1h 19m 43s (non-voting)\n- cinder-for-glance-optimized https://zuul.opendev.org/t/openstack/build/89ab4639001e4ab29f558c29a43ee7c2 : SUCCESS in 49m 56s (non-voting)\n- devstack-plugin-nfs-tempest-full https://zuul.opendev.org/t/openstack/build/96b1aaf81a5946478c057b65bcd789db : SUCCESS in 1h 14m 07s\n- tempest-slow-py3 https://zuul.opendev.org/t/openstack/build/db0e6e5023644f81aaa57078fa147692 : FAILURE in 2h 21m 08s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/7bcc34b957254ac6adf55e497664b012 : SUCCESS in 37m 24s","accounts_in_message":[],"_revision_number":2},{"id":"6144d43578facb3819db5ed83a30468cf3ce956a","author":{"_account_id":22248,"name":"HPE AlletraMP iSCSI CI","email":"hp.cinder.blr.ci@groups.ext.hpe.com","username":"hp-storage-blr-ci","tags":["SERVICE_USER"]},"date":"2023-05-10 20:35:33.000000000","message":"Patch Set 2:\n\nBuild failed.\n\n- 3par-iscsi-driver-master-client-pip-ssa02-dsvm https://github.com/hpe-storage/hpe_cinder_logs/tree/master/new_logs/882837 : FAILURE in 59m 22s","accounts_in_message":[],"_revision_number":2},{"id":"552f3200331289a107b6ab78841d81ec00a54259","author":{"_account_id":34318,"name":"HPE Nimble Storage CI","display_name":"HPE Nimble Storage CI","email":"raghavendra.tilay@capgemini.com","username":"hpe-nimble"},"date":"2023-05-10 22:11:49.000000000","message":"Patch Set 2:\n\nBuild failed.\n\n- iscsi-driver-alletra-6k https://hpe-storage.github.io/alletra-6k-ci-logs/logs/37/882837/2/check/iscsi-driver-alletra-6k/8099f0c/8099f0c.html : FAILURE in 1h 50m 19s","accounts_in_message":[],"_revision_number":2},{"id":"640c2724927bda8839761f8db59923b129aa7c9d","author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"date":"2023-05-11 02:24:39.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"7160a869d455de0c8876feb324de437aadcab239","author":{"_account_id":28801,"name":"Cisco Cinder CI","email":"cisco-cinder-ci@cisco.com","username":"cisco-cinder-ci"},"date":"2023-05-11 02:52:44.000000000","message":"Patch Set 2:\n\nBuild failed.\nhttps://127.0.0.1:9000/t/openstack/buildset/08ff9fc7f5d74d3195833a8d3e0d4898\n\n- dsvm-tempest-cisco-zonemanager-job https://127.0.0.1:9000/t/openstack/build/1ae2d2c7252c4c44b76ae4d2fbef2a11 : FAILURE in 25m 21s","accounts_in_message":[],"_revision_number":2},{"id":"ddba34f532a349aa3f74e921335ce0419972b831","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-11 03:07:46.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/f2da6a7564e54d12b826109dbdb5662c\n\n- openstack-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/905ea882d258497596cf758e8a809c39 : SUCCESS in 29m 42s (non-voting)\n- openstack-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/ca6fc48ca98a48058f1dced7c3be3d68 : SUCCESS in 30m 57s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"324b92c0b772b51c763e584b7fd157467f4cd0e8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-11 05:32:56.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b7f99ff8f7e043fdad535051e6aed716\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7ea19d2addbb479f96b889c1d27c03b8 : SUCCESS in 6m 44s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/e61e151aa93948fc8c615d9b7b467dc1 : SUCCESS in 10m 00s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/e5a20bcfbc0649ab8340c6cc6735d351 : SUCCESS in 9m 17s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/52eb3239d8354bf4999a2315feba0bd5 : SUCCESS in 11m 20s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2762ab864fa242d4a88445ee40c83073 : SUCCESS in 12m 17s\n- grenade https://zuul.opendev.org/t/openstack/build/a8cdde19b4f6416c9c07d43fd161e94d : SUCCESS in 51m 27s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/63fe0c8fb08845af94c748b258e14153 : SUCCESS in 1h 21m 05s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/b4352444abb944f1b8c3de24f5fb9f58 : SUCCESS in 51m 15s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/3bd7fb5b6e7949028901bb44b89b2958 : SUCCESS in 7m 15s\n- cinder-code-coverage https://zuul.opendev.org/t/openstack/build/6b276835bec94b85a3df9e329ff929cf : SUCCESS in 15m 45s (non-voting)\n- cinder-mypy https://zuul.opendev.org/t/openstack/build/f6128ffc40f94205b98dc57f6fcdbc63 : SUCCESS in 6m 18s\n- cinder-tox-bandit-baseline https://zuul.opendev.org/t/openstack/build/f7709a10b6e3487fb412eec36ab66fb1 : SUCCESS in 7m 06s (non-voting)\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/139118ef6d5a45b9a38d04b4271512ea : SUCCESS in 5m 39s\n- openstack-tox-functional-py39 https://zuul.opendev.org/t/openstack/build/e3acac0de9a74526b0d3256c8064361c : SUCCESS in 7m 11s\n- cinder-rally-task https://zuul.opendev.org/t/openstack/build/2f6164b6c7d140a1b1c8f401425a21d6 : SUCCESS in 31m 39s (non-voting)\n- openstack-tox-pylint https://zuul.opendev.org/t/openstack/build/7759864ec34c40a993b5502f16048372 : FAILURE in 6m 24s (non-voting)\n- cinder-plugin-ceph-tempest https://zuul.opendev.org/t/openstack/build/9460c51f59eb496489e123bab24a7a75 : SUCCESS in 1h 21m 14s\n- cinder-plugin-ceph-tempest-mn-aa https://zuul.opendev.org/t/openstack/build/d7fbd8ff6e984c969babeda52c8ccaba : FAILURE in 1h 28m 12s (non-voting)\n- cinder-tempest-plugin-lvm-lio-barbican https://zuul.opendev.org/t/openstack/build/888479d04f4f46a4b4a51587af4626b1 : SUCCESS in 1h 54m 11s\n- cinder-grenade-mn-sub-volbak https://zuul.opendev.org/t/openstack/build/faceb06cbe9149caa1d54b60d3d026ea : SUCCESS in 1h 15m 51s\n- cinder-tempest-lvm-multibackend https://zuul.opendev.org/t/openstack/build/8bfec783ea1b477c9e024f2e3c5693ec : SUCCESS in 1h 45m 04s (non-voting)\n- cinder-for-glance-optimized https://zuul.opendev.org/t/openstack/build/dd6816e4ccb84ec3ba7b683c7c64ef9c : SUCCESS in 53m 11s (non-voting)\n- devstack-plugin-nfs-tempest-full https://zuul.opendev.org/t/openstack/build/ba4c91cb12744a77b6b6d83128662b46 : SUCCESS in 1h 29m 04s\n- tempest-slow-py3 https://zuul.opendev.org/t/openstack/build/a3dbfb87fadd4930846f944e11e0a516 : SUCCESS in 2h 44m 39s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2f29eef931d64a329e2dd58671dd3533 : SUCCESS in 1h 12m 43s","accounts_in_message":[],"_revision_number":2},{"id":"519d30d384367e40d29abf9bc6053e91ad763a4e","author":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"},"date":"2023-05-11 10:48:17.000000000","message":"Patch Set 2: Code-Review+2 Review-Priority+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"3fa9d364ac3c2fedd09ed2994a4e89dc914aa347","author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"date":"2023-05-11 16:08:59.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"8e121d1a6148a91439e5fc5540fb6cc3c5fc0420","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-11 16:09:47.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"a6e82465274475422ac7eac6e63460ae22ea8b46","tag":"autogenerated:NEC_V_Cinder_CI","author":{"_account_id":34155,"name":"NEC V Cinder CI","email":"nec-v-cinder-istorage@istorage.jp.nec.com","username":"nec--v-cinder-ci"},"date":"2023-05-11 17:44:12.000000000","message":"Patch Set 2:\n\nBuild succeeded.\n\n- NEC-V-ISCSI https://fl9-119-243-99-132.tky.mesh.ad.jp/37/882837/2/20230511204540/NEC-V-ISCSI : SUCCESS in 2h 45m 24s\n- NEC-V-FC https://fl9-119-243-99-132.tky.mesh.ad.jp/37/882837/2/20230511204540/NEC-V-FC : SUCCESS in 5h 58m 29s","accounts_in_message":[],"_revision_number":2},{"id":"b66171fb519c984183192a3caab1718e4f04e014","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-11 18:00:27.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/6ceade5004944edfba3b28506d2a17a4\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/49b7e6289a6544768627d7537a7d0119 : SUCCESS in 7m 43s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/7e4b5e804d464b118ca7d4527b34110f : SUCCESS in 11m 40s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/500ab0fd143149f496174d13df388130 : SUCCESS in 11m 08s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fdc6685b9a5a4f7c83a2f8ea83caf63e : SUCCESS in 12m 54s\n- grenade https://zuul.opendev.org/t/openstack/build/c2ed6d89a7734cb6bb54bfa2560b5290 : SUCCESS in 51m 35s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/c14744918ee64c5fa36ef64354d3d6db : SUCCESS in 1h 06m 50s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/4bddec4ffec14afa95fc978468ad91c1 : SUCCESS in 1h 00m 41s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1e1f18f40d024b82a2db7028d027c711 : SUCCESS in 8m 17s\n- cinder-grenade-mn-sub-volbak https://zuul.opendev.org/t/openstack/build/ab88952454184d42958f8a41c4a1caa6 : SUCCESS in 1h 09m 24s\n- cinder-plugin-ceph-tempest https://zuul.opendev.org/t/openstack/build/4f9604921a954be68ea0c59fa65b820b : SUCCESS in 1h 28m 58s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6c792c5ccc434e10804065e93497a15f : SUCCESS in 57m 50s","accounts_in_message":[],"_revision_number":2},{"id":"75ea90a629f5e75e387a9fd5b2a837ddc2786ee1","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-11 18:00:27.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"265e3ac045b024ae89a9accf889d20d417e82812","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-05-11 18:01:53.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/6b1f7f782bda444b86b49bd7d7b6759a\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/765e67ce5ce147dea250fc54f4d5705e : SUCCESS in 58s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a3b443e45aed4392806e4ca2e16b9e9e : SUCCESS in 52s","accounts_in_message":[],"_revision_number":2},{"id":"e502b13993ffe2de72072cd2036e2553b4d4a478","author":{"_account_id":31868,"name":"Open-E CI","email":"open-e-ci-joviandss@open-e.com","username":"open-e-ci-joviandss","tags":["SERVICE_USER"]},"date":"2023-05-15 13:56:18.000000000","message":"Patch Set 2:\n\nBuild failed.\n\n- cinder-joviandss-driver-ci http://51.89.139.192/openstack/cinder/37/882837/2/ : RETRY_LIMIT in 3m 06s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"cb4682fb836912225c5da1536108a0d05fd5c46e","revisions":{"4225beb6c791ab14f8293ea4fc5f0269c0b6446b":{"kind":"REWORK","_number":1,"created":"2023-05-10 14:38:12.000000000","uploader":{"_account_id":9535,"name":"Gorka Eguileor","email":"geguileo@redhat.com","username":"Gorka"},"ref":"refs/changes/37/882837/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/cinder","ref":"refs/changes/37/882837/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/cinder refs/changes/37/882837/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/cinder refs/changes/37/882837/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/cinder refs/changes/37/882837/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/cinder refs/changes/37/882837/1"}}},"commit":{"parents":[{"commit":"bff964511e9dcce0848f6ca5b395c667c557e6d9","subject":"Merge \"RBD: Fix total_capacity\" into stable/zed","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/cinder/commit/bff964511e9dcce0848f6ca5b395c667c557e6d9"}]}],"author":{"name":"Gorka Eguileor","email":"geguileo@redhat.com","date":"2023-02-16 14:57:15.000000000","tz":60},"committer":{"name":"Gorka Eguileor","email":"geguileo@redhat.com","date":"2023-04-24 15:30:02.000000000","tz":120},"subject":"Reject unsafe delete attachment calls","message":"Reject unsafe delete attachment calls\n\nDue to how the Linux SCSI kernel driver works there are some storage\nsystems, such as iSCSI with shared targets, where a normal user can\naccess other projects\u0027 volume data connected to the same compute host\nusing the attachments REST API.\n\nThis affects both single and multi-pathed connections.\n\nTo prevent users from doing this, unintentionally or maliciously,\ncinder-api will now reject some delete attachment requests that are\ndeemed unsafe.\n\nCinder will process the delete attachment request normally in the\nfollowing cases:\n\n- The request comes from an OpenStack service that is sending the\n  service token that has one of the roles in `service_token_roles`.\n- Attachment doesn\u0027t have an instance_uuid value\n- The instance for the attachment doesn\u0027t exist in Nova\n- According to Nova the volume is not connected to the instance\n- Nova is not using this attachment record\n\nThere are 3 operations in the actions REST API endpoint that can be used\nfor an attack:\n\n- `os-terminate_connection`: Terminate volume attachment available at\n- `os-detach`: Detach a volume\n- `os-force_detach`: Force detach a volume\n\nIn this endpoint we just won\u0027t allow anything that is not coming from a\nservice.  This should not be a problem because:\n\n- Cinder backup doesn\u0027t use the REST API but RPC calls via RabbitMQ\n- Glance doesn\u0027t use this interface\n\nChecking whether it\u0027s a service or not is done at the cinder-api level\nby checking that the service user that made the call has at least one of\nthe roles in the `service_token_roles` configuration. These roles are\nretrieved from keystone by the keystone middleware using the value of\nthe \"X-Service-Token\" header.\n\nIf Cinder is configured with `service_token_roles_required \u003d true` and\nan attacker provides non-service valid credentials the service will\nreturn a 401 error, otherwise it\u0027ll return 409 as if a normal user had\nmade the call without the service token.\n\nCloses-Bug: #2004555\nChange-Id: I612905a1bf4a1706cce913c0d8a6df7a240d599a\n(cherry picked from commit 71c6bdfb9a6728622156bde4694aa4707b56f40b)\nConflicts:\n\tcinder/exception.py\n(cherry picked from commit 4b37a1e94754bbc791976e48035d88d90ea05642)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/cinder/commit/4225beb6c791ab14f8293ea4fc5f0269c0b6446b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/cinder/commit/4225beb6c791ab14f8293ea4fc5f0269c0b6446b"}]},"branch":"refs/heads/stable/zed"},"cb4682fb836912225c5da1536108a0d05fd5c46e":{"kind":"REWORK","_number":2,"created":"2023-05-10 17:55:14.000000000","uploader":{"_account_id":9535,"name":"Gorka Eguileor","email":"geguileo@redhat.com","username":"Gorka"},"ref":"refs/changes/37/882837/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/cinder","ref":"refs/changes/37/882837/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/cinder refs/changes/37/882837/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/cinder refs/changes/37/882837/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/cinder refs/changes/37/882837/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/cinder refs/changes/37/882837/2"}}},"commit":{"parents":[{"commit":"bff964511e9dcce0848f6ca5b395c667c557e6d9","subject":"Merge \"RBD: Fix total_capacity\" into stable/zed","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/cinder/commit/bff964511e9dcce0848f6ca5b395c667c557e6d9"}]}],"author":{"name":"Gorka Eguileor","email":"geguileo@redhat.com","date":"2023-02-16 14:57:15.000000000","tz":60},"committer":{"name":"Gorka Eguileor","email":"geguileo@redhat.com","date":"2023-05-10 17:54:15.000000000","tz":120},"subject":"Reject unsafe delete attachment calls","message":"Reject unsafe delete attachment calls\n\nDue to how the Linux SCSI kernel driver works there are some storage\nsystems, such as iSCSI with shared targets, where a normal user can\naccess other projects\u0027 volume data connected to the same compute host\nusing the attachments REST API.\n\nThis affects both single and multi-pathed connections.\n\nTo prevent users from doing this, unintentionally or maliciously,\ncinder-api will now reject some delete attachment requests that are\ndeemed unsafe.\n\nCinder will process the delete attachment request normally in the\nfollowing cases:\n\n- The request comes from an OpenStack service that is sending the\n  service token that has one of the roles in `service_token_roles`.\n- Attachment doesn\u0027t have an instance_uuid value\n- The instance for the attachment doesn\u0027t exist in Nova\n- According to Nova the volume is not connected to the instance\n- Nova is not using this attachment record\n\nThere are 3 operations in the actions REST API endpoint that can be used\nfor an attack:\n\n- `os-terminate_connection`: Terminate volume attachment available at\n- `os-detach`: Detach a volume\n- `os-force_detach`: Force detach a volume\n\nIn this endpoint we just won\u0027t allow anything that is not coming from a\nservice.  This should not be a problem because:\n\n- Cinder backup doesn\u0027t use the REST API but RPC calls via RabbitMQ\n- Glance doesn\u0027t use this interface\n\nChecking whether it\u0027s a service or not is done at the cinder-api level\nby checking that the service user that made the call has at least one of\nthe roles in the `service_token_roles` configuration. These roles are\nretrieved from keystone by the keystone middleware using the value of\nthe \"X-Service-Token\" header.\n\nIf Cinder is configured with `service_token_roles_required \u003d true` and\nan attacker provides non-service valid credentials the service will\nreturn a 401 error, otherwise it\u0027ll return 409 as if a normal user had\nmade the call without the service token.\n\nCloses-Bug: #2004555\nChange-Id: I612905a1bf4a1706cce913c0d8a6df7a240d599a\n(cherry picked from commit 6df1839bdf288107c600b3e53dff7593a6d4c161)\nConflicts:\n        cinder/exception.py\n(cherry picked from commit dd6010a9f7bf8cbe0189992f0848515321781747)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/cinder/commit/cb4682fb836912225c5da1536108a0d05fd5c46e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/cinder/commit/cb4682fb836912225c5da1536108a0d05fd5c46e"}]},"branch":"refs/heads/stable/zed"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"}},{"label":"Review-Priority","status":"MAY","applied_by":{"_account_id":27615,"name":"Rajat Dhasmana","email":"rajatdhasmana@gmail.com","username":"whoami-rajat"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}