)]}'
{".zuul.yaml":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"99785f16c68654ea22635ac0e095476390230c3e","unresolved":true,"context_lines":[{"line_number":757,"context_line":"      devstack_localrc:"},{"line_number":758,"context_line":"        ENFORCE_SCOPE: true"},{"line_number":759,"context_line":""},{"line_number":760,"context_line":"- job:"},{"line_number":761,"context_line":"    name: devstack-identity-security-compliance"},{"line_number":762,"context_line":"    parent: devstack"},{"line_number":763,"context_line":"    description: |"},{"line_number":764,"context_line":"      This job runs devstack with the security compliance feature enabled"},{"line_number":765,"context_line":"      in the Identity (Keystone) service."},{"line_number":766,"context_line":"    vars:"},{"line_number":767,"context_line":"      devstack_localrc:"},{"line_number":768,"context_line":"        KEYSTONE_SECURITY_COMPLIANCE_ENABLED: true"},{"line_number":769,"context_line":"        ADMIN_PASSWORD: secretadmin1"},{"line_number":770,"context_line":"        SERVICE_PASSWORD: secretservice1"},{"line_number":771,"context_line":""},{"line_number":772,"context_line":"- job:"},{"line_number":773,"context_line":"    name: devstack-multinode"},{"line_number":774,"context_line":"    parent: devstack"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"e6e86755_41632d23","line":771,"range":{"start_line":760,"start_character":0,"end_line":771,"end_character":0},"updated":"2025-08-19 19:27:02.000000000","message":"we do not need this separate job instead (i commented in tempest change) you can enable the 7 digit regex in tempest job and run the new test. We do not need to change devstack setup or new job to test it.","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"1d88b61adbe327da2b9f010d8c522b25c106b062","unresolved":false,"context_lines":[{"line_number":757,"context_line":"      devstack_localrc:"},{"line_number":758,"context_line":"        ENFORCE_SCOPE: true"},{"line_number":759,"context_line":""},{"line_number":760,"context_line":"- job:"},{"line_number":761,"context_line":"    name: devstack-identity-security-compliance"},{"line_number":762,"context_line":"    parent: devstack"},{"line_number":763,"context_line":"    description: |"},{"line_number":764,"context_line":"      This job runs devstack with the security compliance feature enabled"},{"line_number":765,"context_line":"      in the Identity (Keystone) service."},{"line_number":766,"context_line":"    vars:"},{"line_number":767,"context_line":"      devstack_localrc:"},{"line_number":768,"context_line":"        KEYSTONE_SECURITY_COMPLIANCE_ENABLED: true"},{"line_number":769,"context_line":"        ADMIN_PASSWORD: secretadmin1"},{"line_number":770,"context_line":"        SERVICE_PASSWORD: secretservice1"},{"line_number":771,"context_line":""},{"line_number":772,"context_line":"- job:"},{"line_number":773,"context_line":"    name: devstack-multinode"},{"line_number":774,"context_line":"    parent: devstack"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"0d0898f6_445963e2","line":771,"range":{"start_line":760,"start_character":0,"end_line":771,"end_character":0},"in_reply_to":"2d4d699e_4eb1d8b8","updated":"2025-09-18 16:02:32.000000000","message":"Sorry wrong link, the security compliance job is defined in this patch: https://review.opendev.org/c/openstack/keystone/+/961726","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"ecebf2db70ff74a28140ed4f555c0f4191d0a5cf","unresolved":false,"context_lines":[{"line_number":757,"context_line":"      devstack_localrc:"},{"line_number":758,"context_line":"        ENFORCE_SCOPE: true"},{"line_number":759,"context_line":""},{"line_number":760,"context_line":"- job:"},{"line_number":761,"context_line":"    name: devstack-identity-security-compliance"},{"line_number":762,"context_line":"    parent: devstack"},{"line_number":763,"context_line":"    description: |"},{"line_number":764,"context_line":"      This job runs devstack with the security compliance feature enabled"},{"line_number":765,"context_line":"      in the Identity (Keystone) service."},{"line_number":766,"context_line":"    vars:"},{"line_number":767,"context_line":"      devstack_localrc:"},{"line_number":768,"context_line":"        KEYSTONE_SECURITY_COMPLIANCE_ENABLED: true"},{"line_number":769,"context_line":"        ADMIN_PASSWORD: secretadmin1"},{"line_number":770,"context_line":"        SERVICE_PASSWORD: secretservice1"},{"line_number":771,"context_line":""},{"line_number":772,"context_line":"- job:"},{"line_number":773,"context_line":"    name: devstack-multinode"},{"line_number":774,"context_line":"    parent: devstack"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"2d4d699e_4eb1d8b8","line":771,"range":{"start_line":760,"start_character":0,"end_line":771,"end_character":0},"in_reply_to":"3aa3090f_98726908","updated":"2025-09-18 16:01:19.000000000","message":"Moved the job to the keystone repo: https://review.opendev.org/c/openstack/devstack/+/957969","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c471b9d7504f8af8701efd16d663dbd6497399e4","unresolved":true,"context_lines":[{"line_number":757,"context_line":"      devstack_localrc:"},{"line_number":758,"context_line":"        ENFORCE_SCOPE: true"},{"line_number":759,"context_line":""},{"line_number":760,"context_line":"- job:"},{"line_number":761,"context_line":"    name: devstack-identity-security-compliance"},{"line_number":762,"context_line":"    parent: devstack"},{"line_number":763,"context_line":"    description: |"},{"line_number":764,"context_line":"      This job runs devstack with the security compliance feature enabled"},{"line_number":765,"context_line":"      in the Identity (Keystone) service."},{"line_number":766,"context_line":"    vars:"},{"line_number":767,"context_line":"      devstack_localrc:"},{"line_number":768,"context_line":"        KEYSTONE_SECURITY_COMPLIANCE_ENABLED: true"},{"line_number":769,"context_line":"        ADMIN_PASSWORD: secretadmin1"},{"line_number":770,"context_line":"        SERVICE_PASSWORD: secretservice1"},{"line_number":771,"context_line":""},{"line_number":772,"context_line":"- job:"},{"line_number":773,"context_line":"    name: devstack-multinode"},{"line_number":774,"context_line":"    parent: devstack"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3aa3090f_98726908","line":771,"range":{"start_line":760,"start_character":0,"end_line":771,"end_character":0},"in_reply_to":"85d06a2c_513b5135","updated":"2025-08-19 23:59:25.000000000","message":"yeah, keystone job is even much better place to do that. ++","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"c49cbc731e5c5843b723179f7d6dab0d8b6da804","unresolved":true,"context_lines":[{"line_number":757,"context_line":"      devstack_localrc:"},{"line_number":758,"context_line":"        ENFORCE_SCOPE: true"},{"line_number":759,"context_line":""},{"line_number":760,"context_line":"- job:"},{"line_number":761,"context_line":"    name: devstack-identity-security-compliance"},{"line_number":762,"context_line":"    parent: devstack"},{"line_number":763,"context_line":"    description: |"},{"line_number":764,"context_line":"      This job runs devstack with the security compliance feature enabled"},{"line_number":765,"context_line":"      in the Identity (Keystone) service."},{"line_number":766,"context_line":"    vars:"},{"line_number":767,"context_line":"      devstack_localrc:"},{"line_number":768,"context_line":"        KEYSTONE_SECURITY_COMPLIANCE_ENABLED: true"},{"line_number":769,"context_line":"        ADMIN_PASSWORD: secretadmin1"},{"line_number":770,"context_line":"        SERVICE_PASSWORD: secretservice1"},{"line_number":771,"context_line":""},{"line_number":772,"context_line":"- job:"},{"line_number":773,"context_line":"    name: devstack-multinode"},{"line_number":774,"context_line":"    parent: devstack"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"85d06a2c_513b5135","line":771,"range":{"start_line":760,"start_character":0,"end_line":771,"end_character":0},"in_reply_to":"e6e86755_41632d23","updated":"2025-08-19 19:53:13.000000000","message":"i assume you mean in https://review.opendev.org/c/openstack/tempest/+/954029\nor in a tempest job defined in the  keystone repo correct.\n\neventually defining this in keystone would likely be the best approach to allow them to evolve it directly without needing to modify devstack in general if they want to update the regex ectra.","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"}],"/COMMIT_MSG":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"b99b3d585ec2d09ed03cd3c8ed04d3a5cb020c79","unresolved":true,"context_lines":[{"line_number":22,"context_line":""},{"line_number":23,"context_line":"[1] https://docs.openstack.org/keystone/latest/admin/configuration.html#configuring-password-strength-requirements"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"Needed-By: https://review.opendev.org/c/openstack/tempest/+/954029"},{"line_number":26,"context_line":"Change-Id: Idbf6919813321ec8e227c9b3217b8352ae53b701"},{"line_number":27,"context_line":"Signed-off-by: Douglas Mendizábal \u003cdmendiza@redhat.com\u003e"},{"line_number":28,"context_line":"Co-Authored-By: Milana Levy \u003cmillevy@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"bfc06cd5_f317ea21","line":25,"range":{"start_line":25,"start_character":0,"end_line":25,"end_character":66},"updated":"2025-11-05 15:35:30.000000000","message":"this is not correct, devstack change need tempest change as new config option added in tempest is set by devtack change so tempest change needs to be merged first.\n\nDepends-on https://review.opendev.org/c/openstack/tempest/+/954029","commit_id":"601b5b8cc86f269eb340721d6ef9408907cf5609"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"be3e41b38e9d9d6900efb81efde6073a713f65dc","unresolved":false,"context_lines":[{"line_number":22,"context_line":""},{"line_number":23,"context_line":"[1] https://docs.openstack.org/keystone/latest/admin/configuration.html#configuring-password-strength-requirements"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"Needed-By: https://review.opendev.org/c/openstack/tempest/+/954029"},{"line_number":26,"context_line":"Change-Id: Idbf6919813321ec8e227c9b3217b8352ae53b701"},{"line_number":27,"context_line":"Signed-off-by: Douglas Mendizábal \u003cdmendiza@redhat.com\u003e"},{"line_number":28,"context_line":"Co-Authored-By: Milana Levy \u003cmillevy@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"5ca23c3a_02e365c3","line":25,"range":{"start_line":25,"start_character":0,"end_line":25,"end_character":66},"in_reply_to":"bfc06cd5_f317ea21","updated":"2025-11-05 15:39:58.000000000","message":"I updated the correct deps, now:\n\n1.tempest change (adding new config and test): https://review.opendev.org/c/openstack/tempest/+/954029\n\n      ^\n      |\n\n2.devstack change (setting the new config): https://review.opendev.org/c/openstack/devstack/+/957969\n\n      ^\n      |\n      \n3.keystone change (adding new jobs to set config and run new test): https://review.opendev.org/c/openstack/keystone/+/961726","commit_id":"601b5b8cc86f269eb340721d6ef9408907cf5609"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"99785f16c68654ea22635ac0e095476390230c3e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"9f82a42f_deef64f3","updated":"2025-08-19 19:27:02.000000000","message":"this direction lgtm, a few comment but overall this is better way to configure and test.","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"47f91b0ce318d8f782a97b13355680e0f71326b8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"f06f2ef2_2469737d","updated":"2025-09-18 16:56:33.000000000","message":"sorry of not getting back to this for a while\ni think we have found a path forward and gmaans comments seam to have been addressed so im ok with proceeding with this as proposed.","commit_id":"373d666bb471496ded8b66a8e423e54178c42e44"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"77c5cba2c1d8d6ce48b5236c4d745f2327d9a1e1","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"bc30f052_1ccbdeb4","updated":"2025-10-30 20:15:15.000000000","message":"i think the devstack side of this is fine\nim finw with waiting for the consuming patch to compelte.\nin the last run it timed out and a recehck is currently pending\nhttps://review.opendev.org/c/openstack/keystone/+/961726","commit_id":"601b5b8cc86f269eb340721d6ef9408907cf5609"},{"author":{"_account_id":34637,"name":"Milana Levy","email":"millevy@redhat.com","username":"millevy"},"change_message_id":"916f47861c8a03d36e79651d641293a14d8c4b66","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"fd775d9d_aecd79a2","updated":"2025-10-16 08:35:11.000000000","message":"recheck","commit_id":"601b5b8cc86f269eb340721d6ef9408907cf5609"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"918bf3ca2c12e21e1699bd4e691584ee85d65be2","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"fbc35948_879e5d21","updated":"2025-10-15 18:32:11.000000000","message":"this lgtm, I will be +2 here but waiting for new job result once that is updated to run the new tempest test https://review.opendev.org/c/openstack/keystone/+/961726","commit_id":"601b5b8cc86f269eb340721d6ef9408907cf5609"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"68f0a404bb12b3c98b34b156d94540794242e6b6","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"a7b03ab1_a8608131","in_reply_to":"bc30f052_1ccbdeb4","updated":"2025-11-05 15:40:51.000000000","message":"Keystone change should run test now asthe  tempest change adding new config and test was not in hierarchy in that series.","commit_id":"601b5b8cc86f269eb340721d6ef9408907cf5609"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"053b2225b27908f1e07808580267db0a1c4abcba","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"c308f321_e646467d","updated":"2025-11-06 02:05:56.000000000","message":"new job in keystone change is consistently timeout, https://review.opendev.org/c/openstack/keystone/+/961726","commit_id":"1fc23273d54668b2a173ed9c022ffb217cf983f4"},{"author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"change_message_id":"250bcb684967720960d561bde2f71dae6967b548","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"37188a6b_714c194a","updated":"2025-11-26 15:17:20.000000000","message":"recheck to see whether the world has changed in 20 days","commit_id":"7dd4c2f9c25feee549f17c2f2879663399bac645"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"f9e19f5e88cf9951382437d09c46181678d913e5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"6f9ad79e_faac8889","in_reply_to":"37188a6b_714c194a","updated":"2025-11-26 16:12:08.000000000","message":"we need to have new jobs running fine in keystone and there we can test this tempest change - https://review.opendev.org/c/openstack/keystone/+/961726","commit_id":"7dd4c2f9c25feee549f17c2f2879663399bac645"}],"lib/keystone":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"99785f16c68654ea22635ac0e095476390230c3e","unresolved":true,"context_lines":[{"line_number":97,"context_line":"KEYSTONE_SERVICE_URI_V3\u003d$KEYSTONE_SERVICE_URI/v3"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"# Security compliance"},{"line_number":100,"context_line":"KEYSTONE_SECURITY_COMPLIANCE_ENABLED\u003d${KEYSTONE_SECURITY_COMPLIANCE_ENABLED:-False}"},{"line_number":101,"context_line":"KEYSTONE_LOCKOUT_FAILURE_ATTEMPTS\u003d${KEYSTONE_LOCKOUT_FAILURE_ATTEMPTS:-2}"},{"line_number":102,"context_line":"KEYSTONE_LOCKOUT_DURATION\u003d${KEYSTONE_LOCKOUT_DURATION:-10}"},{"line_number":103,"context_line":"KEYSTONE_UNIQUE_LAST_PASSWORD_COUNT\u003d${KEYSTONE_UNIQUE_LAST_PASSWORD_COUNT:-2}"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"35a7564d_c0f75fed","line":100,"range":{"start_line":100,"start_character":0,"end_line":100,"end_character":83},"updated":"2025-08-19 19:27:02.000000000","message":"this can stay as it is and let\u0027s not change the existing setup/configuration. instead we can make KEYSTONE_PASSWORD_REGEX_MIN_LENGTH as configurable and let job set this to test.","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"1e5048d9d0da04125452f61b384094c53bd1ce50","unresolved":false,"context_lines":[{"line_number":97,"context_line":"KEYSTONE_SERVICE_URI_V3\u003d$KEYSTONE_SERVICE_URI/v3"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"# Security compliance"},{"line_number":100,"context_line":"KEYSTONE_SECURITY_COMPLIANCE_ENABLED\u003d${KEYSTONE_SECURITY_COMPLIANCE_ENABLED:-False}"},{"line_number":101,"context_line":"KEYSTONE_LOCKOUT_FAILURE_ATTEMPTS\u003d${KEYSTONE_LOCKOUT_FAILURE_ATTEMPTS:-2}"},{"line_number":102,"context_line":"KEYSTONE_LOCKOUT_DURATION\u003d${KEYSTONE_LOCKOUT_DURATION:-10}"},{"line_number":103,"context_line":"KEYSTONE_UNIQUE_LAST_PASSWORD_COUNT\u003d${KEYSTONE_UNIQUE_LAST_PASSWORD_COUNT:-2}"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"dba83636_9591315a","line":100,"range":{"start_line":100,"start_character":0,"end_line":100,"end_character":83},"in_reply_to":"35a7564d_c0f75fed","updated":"2025-09-03 21:39:53.000000000","message":"Done","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"99785f16c68654ea22635ac0e095476390230c3e","unresolved":true,"context_lines":[{"line_number":106,"context_line":"# - one (1) letter"},{"line_number":107,"context_line":"# - one (1) digit"},{"line_number":108,"context_line":"# - minimum length of 7 characters"},{"line_number":109,"context_line":"KEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.*\\d)(?\u003d.*[a-zA-Z]).{7,}$\u0027}"},{"line_number":110,"context_line":"KEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-7}"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"# Number of bcrypt hashing rounds, increasing number exponentially increases required"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"e63db4b8_dd850df5","line":109,"range":{"start_line":109,"start_character":77,"end_line":109,"end_character":78},"updated":"2025-08-19 19:27:02.000000000","message":"you can use KEYSTONE_PASSWORD_REGEX_MIN_LENGTH here so that jobs do not need to change two var.\n- KEYSTONE_PASSWORD_REGEX_MIN_LENGTH as configurable\n- default it to 3 digit so that it does not impact nay existing devstack setup/password\n- Job (I commented in tempest change), you can configure it to 7 digit in tempest-full-py3 or tempest-extra-test jobs.\n\nSomething like:\n\nKEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-3}\nKEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.*\\d)(?\u003d.*[a-zA-Z]).{$KEYSTONE_PASSWORD_REGEX_MIN_LENGTH,}$\u0027}","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"1e5048d9d0da04125452f61b384094c53bd1ce50","unresolved":true,"context_lines":[{"line_number":106,"context_line":"# - one (1) letter"},{"line_number":107,"context_line":"# - one (1) digit"},{"line_number":108,"context_line":"# - minimum length of 7 characters"},{"line_number":109,"context_line":"KEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.*\\d)(?\u003d.*[a-zA-Z]).{7,}$\u0027}"},{"line_number":110,"context_line":"KEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-7}"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"# Number of bcrypt hashing rounds, increasing number exponentially increases required"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"7b490665_b9366022","line":109,"range":{"start_line":109,"start_character":77,"end_line":109,"end_character":78},"in_reply_to":"5505ec05_e71d5928","updated":"2025-09-03 21:39:53.000000000","message":"I see, its adding one letter things also. \n\nIn that case, let\u0027s go with KEYSTONE_SECURITY_COMPLIANCE_ENABLED\u003dFalse way\n\nbut let\u0027s use KEYSTONE_PASSWORD_REGEX_MIN_LENGTH in KEYSTONE_PASSWORD_REGEX so that two configuration will match to each other. Otherwise if anyone change the KEYSTONE_PASSWORD_REGEX without changing KEYSTONE_PASSWORD_REGEX_MIN_LENGTH will break the tempest test.\n\nKEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-3}\nKEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.\\d)(?\u003d.[a-zA-Z]).{$KEYSTONE_PASSWORD_REGEX_MIN_LENGTH,}$\u0027}","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"change_message_id":"ecebf2db70ff74a28140ed4f555c0f4191d0a5cf","unresolved":false,"context_lines":[{"line_number":106,"context_line":"# - one (1) letter"},{"line_number":107,"context_line":"# - one (1) digit"},{"line_number":108,"context_line":"# - minimum length of 7 characters"},{"line_number":109,"context_line":"KEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.*\\d)(?\u003d.*[a-zA-Z]).{7,}$\u0027}"},{"line_number":110,"context_line":"KEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-7}"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"# Number of bcrypt hashing rounds, increasing number exponentially increases required"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"6f6ffaca_17c15702","line":109,"range":{"start_line":109,"start_character":77,"end_line":109,"end_character":78},"in_reply_to":"7b490665_b9366022","updated":"2025-09-18 16:01:19.000000000","message":"Done","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"c49cbc731e5c5843b723179f7d6dab0d8b6da804","unresolved":true,"context_lines":[{"line_number":106,"context_line":"# - one (1) letter"},{"line_number":107,"context_line":"# - one (1) digit"},{"line_number":108,"context_line":"# - minimum length of 7 characters"},{"line_number":109,"context_line":"KEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.*\\d)(?\u003d.*[a-zA-Z]).{7,}$\u0027}"},{"line_number":110,"context_line":"KEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-7}"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"# Number of bcrypt hashing rounds, increasing number exponentially increases required"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"5505ec05_e71d5928","line":109,"range":{"start_line":109,"start_character":77,"end_line":109,"end_character":78},"in_reply_to":"aabea822_01c9d64b","updated":"2025-08-19 19:53:13.000000000","message":"the lenght is not the only problem the requiremetn for a number also breaks things.\n\nwe default to secret\n\nhttps://github.com/openstack/devstack/blob/a2df120ceac46b817d0d58cceb05a1d25a89f1f5/openrc#L39\n\nor nomoresecret \n\nhttps://github.com/openstack/devstack/blob/a2df120ceac46b817d0d58cceb05a1d25a89f1f5/samples/local.conf#L28\n\nor other values liek password in different docs.\n\nhttps://github.com/openstack/devstack/blob/a2df120ceac46b817d0d58cceb05a1d25a89f1f5/doc/source/guides/devstack-with-octavia.rst?plain\u003d1#L36\n\nhttps://github.com/openstack/devstack/blob/a2df120ceac46b817d0d58cceb05a1d25a89f1f5/doc/source/guides/single-vm.rst?plain\u003d1#L66\n\n\nbut we also default to secretadmin in ci.\n\nhttps://github.com/openstack/devstack/blob/a2df120ceac46b817d0d58cceb05a1d25a89f1f5/.zuul.yaml#L407\n\n\nwe have similer defaulting for SERVICE_PASSWORD ectra that is quially incosnitent but not definityly over 7 charaters but none of them contain a number.\n\nim in the \"set all password in devstack to `password`\" camp\n\nby following \nhttps://github.com/openstack/devstack/blob/a2df120ceac46b817d0d58cceb05a1d25a89f1f5/doc/source/index.rst?plain\u003d1#L95-L99\n\nand just updating ADMIN_PASSWORD to `password`\n\nso i woudl prefer to keep thsi as propsoed and set KEYSTONE_SECURITY_COMPLIANCE_ENABLED\u003dFalse\n\nbut allow the revich and min lenght exctra to be confiugred to follow best pratices or keystone docs recomentions.","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2a1f899d55df290c50326ca069e56ca127a965d1","unresolved":true,"context_lines":[{"line_number":106,"context_line":"# - one (1) letter"},{"line_number":107,"context_line":"# - one (1) digit"},{"line_number":108,"context_line":"# - minimum length of 7 characters"},{"line_number":109,"context_line":"KEYSTONE_PASSWORD_REGEX\u003d${KEYSTONE_PASSWORD_REGEX:-\u0027^(?\u003d.*\\d)(?\u003d.*[a-zA-Z]).{7,}$\u0027}"},{"line_number":110,"context_line":"KEYSTONE_PASSWORD_REGEX_MIN_LENGTH\u003d${KEYSTONE_PASSWORD_REGEX_MIN_LENGTH:-7}"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"# Number of bcrypt hashing rounds, increasing number exponentially increases required"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"aabea822_01c9d64b","line":109,"range":{"start_line":109,"start_character":77,"end_line":109,"end_character":78},"in_reply_to":"e63db4b8_dd850df5","updated":"2025-08-19 19:31:48.000000000","message":"I realized that if job configure it to 7 digit min then we might need to change default password (like ADMIN_PASSWORD you are doing in  https://review.opendev.org/c/openstack/devstack/+/956111).\n\nMy question is, can we test it with 3 digit as min length and keep other regex same as it is working currently? That should be enough to test the new test right? -https://review.opendev.org/c/openstack/tempest/+/954029/11/tempest/api/identity/v3/test_users.py","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"99785f16c68654ea22635ac0e095476390230c3e","unresolved":true,"context_lines":[{"line_number":251,"context_line":"        iniset $KEYSTONE_CONF security_compliance lockout_failure_attempts $KEYSTONE_LOCKOUT_FAILURE_ATTEMPTS"},{"line_number":252,"context_line":"        iniset $KEYSTONE_CONF security_compliance lockout_duration $KEYSTONE_LOCKOUT_DURATION"},{"line_number":253,"context_line":"        iniset $KEYSTONE_CONF security_compliance unique_last_password_count $KEYSTONE_UNIQUE_LAST_PASSWORD_COUNT"},{"line_number":254,"context_line":"        iniset $KEYSTONE_CONF security_compliance password_regex $KEYSTONE_PASSWORD_REGEX"},{"line_number":255,"context_line":"    fi"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"    iniset $KEYSTONE_CONF oslo_policy policy_file policy.yaml"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"7f886bcf_302b4852","line":254,"range":{"start_line":254,"start_character":66,"end_line":254,"end_character":89},"updated":"2025-08-19 19:27:02.000000000","message":"++, if we keep length as 3 digit will not impact current setup and let tempest job change it to 7 to test it further","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"1e5048d9d0da04125452f61b384094c53bd1ce50","unresolved":false,"context_lines":[{"line_number":251,"context_line":"        iniset $KEYSTONE_CONF security_compliance lockout_failure_attempts $KEYSTONE_LOCKOUT_FAILURE_ATTEMPTS"},{"line_number":252,"context_line":"        iniset $KEYSTONE_CONF security_compliance lockout_duration $KEYSTONE_LOCKOUT_DURATION"},{"line_number":253,"context_line":"        iniset $KEYSTONE_CONF security_compliance unique_last_password_count $KEYSTONE_UNIQUE_LAST_PASSWORD_COUNT"},{"line_number":254,"context_line":"        iniset $KEYSTONE_CONF security_compliance password_regex $KEYSTONE_PASSWORD_REGEX"},{"line_number":255,"context_line":"    fi"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"    iniset $KEYSTONE_CONF oslo_policy policy_file policy.yaml"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"7b88d3ba_a5fce7d3","line":254,"range":{"start_line":254,"start_character":66,"end_line":254,"end_character":89},"in_reply_to":"7f886bcf_302b4852","updated":"2025-09-03 21:39:53.000000000","message":"ignore the comment as this update is good now.","commit_id":"f3456beda5e2432cdbf353f4c039793a9b0dccbd"}]}