)]}'
{"id":"openstack%2Fdevstack~995827","triplet_id":"openstack%2Fdevstack~master~I1e902b77c73717a2c2b3a727a8f737e1f94193cf","project":"openstack/devstack","branch":"master","topic":"fix-cinder-barbican-member-role","attention_set":{},"removed_from_attention_set":{"13425":{"account":{"_account_id":13425,"name":"Simon Dodsley","email":"simon@purestorage.com","username":"sdodsley"},"last_update":"2026-07-02 18:45:12.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I1e902b77c73717a2c2b3a727a8f737e1f94193cf","subject":"Grant cinder service user the \"member\" role for barbican","status":"MERGED","created":"2026-07-02 14:03:29.000000000","updated":"2026-07-02 18:47:34.000000000","submitted":"2026-07-02 18:45:12.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"995827-fix-cinder-barbican-member-role","meta_rev_id":"39fe52f6eeb2c21ca00895ad7afdb002e0664e06","_number":995827,"virtual_id_number":995827,"owner":{"_account_id":13425,"name":"Simon Dodsley","email":"simon@purestorage.com","username":"sdodsley"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},{"value":0,"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":0,"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},{"value":0,"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-07-02 18:45:11.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"recommended":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"all":[{"value":1,"date":"2026-07-02 14:57:34.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},{"value":2,"date":"2026-07-02 15:42:45.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":1,"date":"2026-07-02 14:20:45.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},{"value":2,"date":"2026-07-02 15:28:09.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"all":[{"value":0,"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},{"value":1,"date":"2026-07-02 15:42:45.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":0,"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},{"value":0,"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"approved":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"all":[{"value":2,"date":"2026-07-02 14:57:34.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},{"value":0,"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":0,"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},{"value":2,"date":"2026-07-02 15:28:09.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-02 14:20:45.000000000","updated_by":{"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},"reviewer":{"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},"state":"REVIEWER"},{"updated":"2026-07-02 14:57:34.000000000","updated_by":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"reviewer":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"state":"REVIEWER"},{"updated":"2026-07-02 15:28:09.000000000","updated_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"reviewer":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"state":"REVIEWER"},{"updated":"2026-07-02 15:42:45.000000000","updated_by":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"reviewer":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"state":"REVIEWER"},{"updated":"2026-07-02 16:26:21.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"bdadec26b3721565673b571794c317491a3595dd","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13425,"name":"Simon Dodsley","email":"simon@purestorage.com","username":"sdodsley"},"date":"2026-07-02 14:03:29.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"3ab8512870bdb5763548999d8218a929d00596b7","author":{"_account_id":26471,"name":"Software Factory CI","email":"softwarefactory-operations-team@redhat.com","username":"sf-project-io"},"date":"2026-07-02 14:20:45.000000000","message":"Patch Set 1: Code-Review+1\n\nBuild succeeded (check pipeline).\nhttps://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/9876bbb03f2848d1a4565f99fb9c4b44\n\n- devstack-platform-centos-10-stream https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/build/af88379ead0241089636af952b6181d7 : FAILURE in 15m 39s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"abb208a1fe1736f72d84d0ba8cceafa2c627cd73","author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"date":"2026-07-02 14:57:34.000000000","message":"Patch Set 1: Code-Review+1 Review-Priority+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"996881eabe2d929ca3eb4c97b137c68412b9a1c7","author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"date":"2026-07-02 15:28:09.000000000","message":"Patch Set 1: Code-Review+2 Review-Priority+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"c8b880d0d12722320cb0fca86ad88bda4f56a693","author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"date":"2026-07-02 15:42:45.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"ef679c747e86ec06297d7367aa7dff79a7fe4ad2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-02 16:26:21.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c2a7337c07684b2d88d403bce9460649\n\n- grenade https://zuul.opendev.org/t/openstack/build/5dc4b1e6dfef4934a9fb253138987887 : SUCCESS in 53m 35s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/fc80c637c32b403589e1eaf6f35017a6 : SUCCESS in 1h 55m 13s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2e75095889b44a81a84605a30d76e52b : SUCCESS in 6m 02s\n- devstack https://zuul.opendev.org/t/openstack/build/48f7f4eedbb4428786f1841a417f67f1 : SUCCESS in 17m 05s\n- devstack-ipv6 https://zuul.opendev.org/t/openstack/build/86d99a03cb2544d9a6bcb042011b8afc : SUCCESS in 11m 52s\n- devstack-enforce-scope https://zuul.opendev.org/t/openstack/build/8ca546bd9bde4100a905f71476764e98 : SUCCESS in 28m 54s\n- devstack-platform-almalinux-purple-lion-ovn-source https://zuul.opendev.org/t/openstack/build/7aa3be6a33c24543a3d521dd825c974c : SUCCESS in 1h 47m 29s (non-voting)\n- devstack-platform-centos-10-stream https://zuul.opendev.org/t/openstack/build/113bf9cacf1a4bfdadf78c1257fbc1a2 : SUCCESS in 2h 20m 18s (non-voting)\n- devstack-platform-centos-9-stream https://zuul.opendev.org/t/openstack/build/58dbfbb0916343fd9a6bfca3606fa7b7 : SUCCESS in 1h 55m 42s (non-voting)\n- devstack-platform-debian-bookworm https://zuul.opendev.org/t/openstack/build/f363d784007a4398afc0a81ecb7a95c6 : SUCCESS in 1h 34m 21s\n- devstack-platform-debian-trixie https://zuul.opendev.org/t/openstack/build/98a458eb1ed44a67a37fa7d78b65805f : SUCCESS in 1h 35m 15s\n- devstack-platform-rocky-blue-onyx https://zuul.opendev.org/t/openstack/build/85be71e234b54e4c80bb1e9f588fd3e2 : SUCCESS in 1h 36m 33s (non-voting)\n- devstack-platform-rocky-red-quartz https://zuul.opendev.org/t/openstack/build/d1574ff62bf9491eb65b8f07eaee5b72 : SUCCESS in 1h 39m 52s (non-voting)\n- devstack-platform-ubuntu-noble-ovn-source https://zuul.opendev.org/t/openstack/build/c938d892090d4419b39dbc95947ce164 : SUCCESS in 2h 09m 05s (non-voting)\n- devstack-platform-ubuntu-noble-ovs https://zuul.opendev.org/t/openstack/build/1eed0baeb23f4289b8780fc3b1524d75 : SUCCESS in 1h 47m 51s (non-voting)\n- devstack-platform-ubuntu-resolute https://zuul.opendev.org/t/openstack/build/80c851e855a546409b17d2dd4308c53b : SUCCESS in 1h 45m 50s (non-voting)\n- devstack-multinode https://zuul.opendev.org/t/openstack/build/889ea53d203f4a018567c814d0b12bcf : SUCCESS in 36m 03s\n- devstack-unit-tests https://zuul.opendev.org/t/openstack/build/12b3189ef6ba4f96befdc221db182b68 : SUCCESS in 3m 13s\n- openstack-tox-bashate https://zuul.opendev.org/t/openstack/build/e70cd73ddf02485db66a790a6c539d6d : SUCCESS in 2m 59s\n- ironic-tempest-bios-ipmi-autodetect https://zuul.opendev.org/t/openstack/build/d74c41d3b2f24bdbac1cfdddf5474b1a : SUCCESS in 1h 08m 54s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/1d8cf245d2514962b48289ae6534d57a : SUCCESS in 56m 46s\n- neutron-ovs-grenade-multinode https://zuul.opendev.org/t/openstack/build/db9b0106e5f44ecd933f1d2eaa0c27b4 : SUCCESS in 1h 12m 29s\n- neutron-ovn-tempest-ovs-release https://zuul.opendev.org/t/openstack/build/9b69551206f143f6acad83f33e9ce977 : SUCCESS in 1h 28m 06s (non-voting)\n- tempest-multinode-full-py3 https://zuul.opendev.org/t/openstack/build/3ae5bf8c389649ce820b2661933a517d : SUCCESS in 1h 13m 54s (non-voting)\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/8b3f25166ccd448e9b91074e494d1d5d : SUCCESS in 1h 07m 15s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/cb5d0b15bc1f420784717f9973acdace : SUCCESS in 1h 00m 11s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/ecf64a7e6e824152bf7ab41dda8c35bd : SUCCESS in 1h 49m 04s","accounts_in_message":[],"_revision_number":1},{"id":"f265f4e4bd11c5435da357cab48b8aae795a0340","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-02 16:27:10.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"4e4ed2e5fc4457bb31b4e2c65831add9dcb639ac","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-02 18:45:11.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/33d3a43c04924105a848df4d2abe267a\n\n- grenade https://zuul.opendev.org/t/openstack/build/170cd34666d64fa1813da2b88327edb2 : SUCCESS in 1h 05m 03s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/1ddf7e8ed74043669799363ababaa8d6 : SUCCESS in 1h 58m 47s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d52d233d54f949c187cd7998d46c4ec2 : SUCCESS in 7m 46s\n- devstack https://zuul.opendev.org/t/openstack/build/469bff23c00a4cba863b0a7c3d21b33e : SUCCESS in 25m 35s\n- devstack-ipv6 https://zuul.opendev.org/t/openstack/build/1d4c897657174632a17ae212e4d5da61 : SUCCESS in 29m 16s\n- devstack-platform-debian-bookworm https://zuul.opendev.org/t/openstack/build/e62df6c6a07c43559aacfd12ac878493 : SUCCESS in 1h 00m 13s\n- devstack-platform-debian-trixie https://zuul.opendev.org/t/openstack/build/6923bf753e44498cb9c017ce683dc217 : SUCCESS in 1h 42m 11s\n- devstack-enforce-scope https://zuul.opendev.org/t/openstack/build/7d5b87d3124b440ea324dab87ca82292 : SUCCESS in 14m 18s\n- devstack-multinode https://zuul.opendev.org/t/openstack/build/2826138d901342c4b570bc3cb04e2139 : SUCCESS in 40m 23s\n- devstack-unit-tests https://zuul.opendev.org/t/openstack/build/67eefc7fa25f48a7b1fdc67c41924a8b : SUCCESS in 2m 33s\n- openstack-tox-bashate https://zuul.opendev.org/t/openstack/build/db3d9e366acd475db9c27f160539fc08 : SUCCESS in 3m 49s\n- neutron-ovs-grenade-multinode https://zuul.opendev.org/t/openstack/build/fcfe047e8d5d4c4bb1781fd4aef610ad : SUCCESS in 1h 13m 10s\n- ironic-tempest-bios-ipmi-autodetect https://zuul.opendev.org/t/openstack/build/ed17ed4cec9847f0802d43c3ea5d4793 : SUCCESS in 1h 06m 40s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/59d0e2a3215b4462b915c2dacd72813a : SUCCESS in 50m 17s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/37947f541ac24da99cd1a965595a5ae5 : SUCCESS in 1h 06m 23s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/e949838801ab48dbae1bce3b25a5221c : SUCCESS in 58m 01s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/c175d0ea17064bfda3a2ac85dd7e9809 : SUCCESS in 1h 27m 50s","accounts_in_message":[],"_revision_number":1},{"id":"bed0293db38d745bf4ef4d2c2ff85226e5e3d96b","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-02 18:45:12.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"39fe52f6eeb2c21ca00895ad7afdb002e0664e06","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-02 18:47:34.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/81ebdb14e01d4f318b8895b461836ec3\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f59455788fbf48e8b877dfc81a2fb380 : SUCCESS in 45s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"8a415cdb3cd50dd560029547abdf12ee18ad949f","revisions":{"8a415cdb3cd50dd560029547abdf12ee18ad949f":{"kind":"REWORK","_number":1,"created":"2026-07-02 14:03:29.000000000","uploader":{"_account_id":13425,"name":"Simon Dodsley","email":"simon@purestorage.com","username":"sdodsley"},"ref":"refs/changes/27/995827/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack","ref":"refs/changes/27/995827/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack refs/changes/27/995827/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack refs/changes/27/995827/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack refs/changes/27/995827/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack refs/changes/27/995827/1"}}},"commit":{"parents":[{"commit":"689d0b9f0af1cd06d120d3a2e8170edc49125001","subject":"Merge \"Fix verify-ipv6-address.py crash on Python 3.14\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/689d0b9f0af1cd06d120d3a2e8170edc49125001"}]}],"author":{"name":"Simon Dodsley","email":"simon@purestorage.com","date":"2026-07-02 14:00:59.000000000","tz":-240},"committer":{"name":"Simon Dodsley","email":"simon@purestorage.com","date":"2026-07-02 14:03:25.000000000","tz":-240},"subject":"Grant cinder service user the \"member\" role for barbican","message":"Grant cinder service user the \"member\" role for barbican\n\nCinder uses barbican (via castellan) to manage encryption keys for\nencrypted volumes.  Some of these operations run as the cinder service\nuser rather than as the end user -- notably the key transfer performed\nduring an encrypted volume transfer, where transfer_create stores a new\nsecret using the cinder service context.\n\nBarbican\u0027s legacy policy authorized secret creation via the \"creator\"\nrole:\n\n    secrets:post -\u003e rule:admin_or_creator\n\nand devstack therefore grants the cinder service user the \"creator\" role\nwhen barbican is enabled.  Barbican\u0027s new RBAC defaults instead require\nthe \"member\" role:\n\n    secrets:post -\u003e True:%(enforce_new_defaults)s and role:member\n\nNow that enforce_scope / enforce_new_defaults are enabled by default,\nthe cinder service user (which holds only \"service\" and \"creator\") is no\nlonger permitted to create secrets, so every encrypted volume transfer\nfails with:\n\n    Forbidden: Secret creation attempt not allowed - please review your\n    user/project privileges\n    oslo_policy.policy.PolicyNotAuthorized: secrets:post is disallowed by\n    policy\n\nThis breaks the cinder-tempest-plugin *-barbican jobs\n(TransferEncryptedVolumeTest.test_create_accept_volume_transfer) across\nall cinder changes.\n\nAdditionally grant the cinder service user the \"member\" role in the\nservice project when barbican is enabled.  The existing \"creator\" grant\nis retained so the path keeps working under the deprecated policy as\nwell.\n\nChange-Id: I1e902b77c73717a2c2b3a727a8f737e1f94193cf\nSigned-off-by: Simon Dodsley \u003csimon@purestorage.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/8a415cdb3cd50dd560029547abdf12ee18ad949f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/8a415cdb3cd50dd560029547abdf12ee18ad949f"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"}},{"label":"Review-Priority","status":"MAY","applied_by":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{"label:Review-Priority\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}