)]}'
{"id":"openstack%2Fdevstack~995833","triplet_id":"openstack%2Fdevstack~master~Ida3d86e042d73bc3542a8735adb2d093c491248e","project":"openstack/devstack","branch":"master","hashtags":[],"change_id":"Ida3d86e042d73bc3542a8735adb2d093c491248e","subject":"Fix cinder service user role for Barbican secure RBAC","status":"ABANDONED","created":"2026-07-02 14:39:51.000000000","updated":"2026-07-02 14:41:22.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"cafd8ba95ffde19601507d6caef8c4c69737bf11","_number":995833,"virtual_id_number":995833,"owner":{"_account_id":30126,"name":"Luca Miccini","email":"lmiccini@redhat.com","username":"lmiccini2"},"actions":{},"labels":{"Verified":{"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{},"pending_reviewers":{},"reviewer_updates":[],"messages":[{"id":"431d9975541b4808e40c1d73ee3c7759c87abd65","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":30126,"name":"Luca Miccini","email":"lmiccini@redhat.com","username":"lmiccini2"},"date":"2026-07-02 14:39:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"cafd8ba95ffde19601507d6caef8c4c69737bf11","tag":"autogenerated:gerrit:abandon","author":{"_account_id":30126,"name":"Luca Miccini","email":"lmiccini@redhat.com","username":"lmiccini2"},"date":"2026-07-02 14:41:22.000000000","message":"Abandoned","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"c9a8b0d06c19ead11145b36114cd74b67985c23f","revisions":{"c9a8b0d06c19ead11145b36114cd74b67985c23f":{"kind":"REWORK","_number":1,"created":"2026-07-02 14:39:51.000000000","uploader":{"_account_id":30126,"name":"Luca Miccini","email":"lmiccini@redhat.com","username":"lmiccini2"},"ref":"refs/changes/33/995833/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack","ref":"refs/changes/33/995833/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack refs/changes/33/995833/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack refs/changes/33/995833/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack refs/changes/33/995833/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack refs/changes/33/995833/1"}}},"commit":{"parents":[{"commit":"689d0b9f0af1cd06d120d3a2e8170edc49125001","subject":"Merge \"Fix verify-ipv6-address.py crash on Python 3.14\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/689d0b9f0af1cd06d120d3a2e8170edc49125001"}]}],"author":{"name":"Luca Miccini","email":"lmiccini@redhat.com","date":"2026-07-02 14:39:07.000000000","tz":120},"committer":{"name":"Luca Miccini","email":"lmiccini@redhat.com","date":"2026-07-02 14:39:49.000000000","tz":120},"subject":"Fix cinder service user role for Barbican secure RBAC","message":"Fix cinder service user role for Barbican secure RBAC\n\nSince devstack changes I7edce151 and Ib5afc73 enforced secure RBAC\nby default, the cinder-tempest-plugin-lvm-lio-barbican job fails\nbecause the cinder service user cannot create secrets in Barbican.\n\nUnder the new policy defaults (enforce_new_defaults\u003dTrue), Barbican\u0027s\nsecrets:post requires role:member. The legacy \"creator\" role is only\nrecognized by the deprecated policy rules which are now ignored.\n\nChange the cinder service user setup to assign the \"member\" role\ninstead of \"creator\" when Barbican is enabled.\n\nAssisted-By: Claude\nChange-Id: Ida3d86e042d73bc3542a8735adb2d093c491248e\nSigned-off-by: Luca Miccini \u003clmiccini@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/c9a8b0d06c19ead11145b36114cd74b67985c23f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/c9a8b0d06c19ead11145b36114cd74b67985c23f"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{"label:Review-Priority\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}