)]}'
{"id":"openstack%2Fkeystone-specs~983440","triplet_id":"openstack%2Fkeystone-specs~master~Icee868753aacb397a0f6b26f13521d0ba40357e2","project":"openstack/keystone-specs","branch":"master","topic":"explicit-resource-ids","attention_set":{"5890":{"account":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"last_update":"2026-06-01 20:51:28.000000000","reason":"Vote got outdated and was removed: Code-Review+1"},"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-06-09 20:09:57.000000000","reason":"Vote got outdated and was removed: Code-Review+2"},"13478":{"account":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"last_update":"2026-06-01 20:51:28.000000000","reason":"Vote got outdated and was removed: Code-Review-1"},"9914":{"account":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"last_update":"2026-06-04 20:19:51.000000000","reason":"A robot voted negatively on a label"}},"removed_from_attention_set":{"7973":{"account":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"last_update":"2026-07-15 02:47:55.000000000","reason":"\u003cGERRIT_ACCOUNT_7973\u003e replied on the change","reason_account":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-05-21 05:29:16.000000000","reason":"\u003cGERRIT_ACCOUNT_27900\u003e replied on the change","reason_account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}}},"hashtags":[],"change_id":"Icee868753aacb397a0f6b26f13521d0ba40357e2","subject":"spec: explicit IDs for projects, users, domains","status":"NEW","created":"2026-04-06 14:23:29.000000000","updated":"2026-07-15 17:09:27.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":44,"unresolved_comment_count":27,"has_review_started":true,"meta_rev_id":"0c966c551a24608dbaa1a8686c6369720c59b8f0","_number":983440,"virtual_id_number":983440,"owner":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},{"tag":"autogenerated:zuul:check","value":1,"date":"2026-06-09 20:18:46.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"disliked":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":-1,"date":"2026-07-15 02:47:55.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-04-06 14:28:10.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-04-09 13:54:05.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"},{"updated":"2026-05-11 23:40:19.000000000","updated_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"reviewer":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"state":"CC"},{"updated":"2026-05-26 15:08:49.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"},{"updated":"2026-05-26 19:38:42.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"state":"REVIEWER"},{"updated":"2026-05-27 00:44:57.000000000","updated_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"reviewer":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"state":"REVIEWER"},{"updated":"2026-05-27 20:33:00.000000000","updated_by":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"reviewer":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"state":"REVIEWER"}],"messages":[{"id":"1091d0977b0885397a45e684ca98f9808d109dd9","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-04-06 14:23:29.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"7d578ec52b088c1d443a8708951c4e28f5d7a9b4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-06 14:28:10.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c92fff8ca34e416abc930a1c1277940c\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e8929a78c23e4b96b3e5460597ab2e03 : SUCCESS in 3m 32s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c0553a64db684beba8d795354b4da376 : SUCCESS in 2m 53s","accounts_in_message":[],"_revision_number":1},{"id":"a5289d2a08e84f1b2beb625b959644a855077c2d","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-04-09 13:54:05.000000000","message":"Patch Set 1: Code-Review-2\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"be7f2a03bfb8884cddcdbbb10ae56c746285135d","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-05-11 23:40:19.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"63033c104011f4531fc0293afa0e4824d2e63dc8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-18 21:44:22.000000000","message":"Uploaded patch set 2.\n\nCopied Votes:\n* Code-Review-2 (copy condition: \"changekind:TRIVIAL_REBASE OR **is:MIN**\")\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"c988850eeee55193623bb7c4551151ad250563c8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-18 21:48:53.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/dfa8f28a88c54d118fcff2dad5ec4fcc\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c9f46e437231424b9f52b2793bc232f2 : SUCCESS in 2m 33s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/b352997dfb8a4d268c16b4440faf5f1c : FAILURE in 1m 59s","accounts_in_message":[],"_revision_number":2},{"id":"73db3c5281b76de7b0886a9834eb9de67aed5a84","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-18 21:51:04.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"756cd1f31fc9cdfe0767e5b67d121f91dafdb00f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-18 22:26:18.000000000","message":"Uploaded patch set 3.\n\nCopied Votes:\n* Code-Review-2 (copy condition: \"changekind:TRIVIAL_REBASE OR **is:MIN**\")\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"f6cc630876fdc170de467985f0782ce25cfc7f22","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-18 22:31:16.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/eab6a1f551204188b18b6ee6621d85bf\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a997389e0017477f83e8c2a7823bcf32 : SUCCESS in 2m 58s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1634fa9b230c43ef9deaa671a880a0f5 : SUCCESS in 3m 11s","accounts_in_message":[],"_revision_number":3},{"id":"29dbc416ea30c89e3858928c7884dbfbd73eb224","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-20 20:17:32.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"00171815e89fa84f9714c076f926855c8fad8cbe","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-21 05:29:16.000000000","message":"Patch Set 3: -Code-Review\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"1680f9b48f97a2e29442d2e7b4440a1da4231c06","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-05-26 15:08:49.000000000","message":"Patch Set 3: Code-Review-1\n\n(3 comments)","accounts_in_message":[],"_revision_number":3},{"id":"eca17c655e3d657408dc3a5fc1a304fc9109705c","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-26 18:42:37.000000000","message":"Patch Set 3:\n\n(2 comments)","accounts_in_message":[],"_revision_number":3},{"id":"6920c5302150c22de40a5a864592fa915fe8e54b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-26 19:22:22.000000000","message":"Uploaded patch set 4.\n\nOutdated Votes:\n* Code-Review-1 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":4},{"id":"3f103219c9174444a14c7742e81b10775f0a2fe3","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-05-26 19:23:49.000000000","message":"Patch Set 4:\n\n(2 comments)","accounts_in_message":[],"_revision_number":4},{"id":"f463022544af840e74f61a5d31ce21897211d299","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-05-26 19:30:49.000000000","message":"Patch Set 4: Code-Review+2","accounts_in_message":[],"_revision_number":4},{"id":"62de32742b27a60186bf2a1b7784d1f984fb53f9","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-26 19:31:34.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b8807d872bc341508e67db92ca4f48be\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/311671c4d049433e931d24008aa13547 : SUCCESS in 3m 29s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/98452a91e30443c9a78a01a1a943f499 : SUCCESS in 3m 03s","accounts_in_message":[],"_revision_number":4},{"id":"f6223c73a9ed165902bf0df2a6d502cdc200ee99","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-05-27 00:44:57.000000000","message":"Patch Set 4: Code-Review+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"651c116502bcfa166329f3e2c67387f34f6a5f0d","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2026-05-27 19:56:00.000000000","message":"Patch Set 4: Code-Review-1\n\n(12 comments)","accounts_in_message":[],"_revision_number":4},{"id":"87d9c8bc6df6d7f66883c7699e14b409299c4a03","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-05-27 20:33:00.000000000","message":"Patch Set 4: Code-Review-1\n\n(7 comments)","accounts_in_message":[],"_revision_number":4},{"id":"aa87a3e542dd25046038b6c8da7f27bf5d25fee1","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-05-27 20:39:08.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"b74bba75a94e623b6e83bc373af509ed920c6a20","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-05-27 21:27:04.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"38652fa72871c6762092656f2be2448b189847af","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-06-01 20:51:28.000000000","message":"Uploaded patch set 5.\n\nOutdated Votes:\n* Code-Review+1, Code-Review+2, Code-Review-1 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":5},{"id":"3025c203899a3bfb6d55e3327c40d5db790e768e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 20:58:57.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4f8625b278184cdea807b17cd2e44869\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8fa3c653fb58419585b28aa11401b32b : SUCCESS in 4m 40s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f26f75ad491b427c87aaf89c2ff59ada : SUCCESS in 3m 04s","accounts_in_message":[],"_revision_number":5},{"id":"941f4611178834d318c4f73477c7e09ed4470646","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-06-04 13:45:56.000000000","message":"Patch Set 5: Code-Review+1","accounts_in_message":[],"_revision_number":5},{"id":"9531b76507ff0c8420c91f735fb0e83d0f763d83","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-06-04 20:16:38.000000000","message":"Uploaded patch set 6.\n\nOutdated Votes:\n* Code-Review+1 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":6},{"id":"e6aa0dd46f79e63c14edf603fadb5bf410253c55","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 20:19:51.000000000","message":"Patch Set 6: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/d406a3a2553e40ea8c6294a6bd4aa4c1\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c4b386da613443e0a02ef7bf17f3c7cd : FAILURE in 2m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/b6512df8dcbe4910a83ad81717672c11 : FAILURE in 2m 06s","accounts_in_message":[],"_revision_number":6},{"id":"3d477d4e94b287fddead4e22bce1780d29acb4fd","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-06-04 21:19:02.000000000","message":"Uploaded patch set 7.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":7},{"id":"cd372a96cf2345da942f98e72b45320e187e27c4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 21:28:17.000000000","message":"Patch Set 7: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/b9af552f46f84636b24f8cc61541a729\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/538e3e2ffa77418c8d517b73d4eefd10 : FAILURE in 3m 44s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d7733a441f4940eaadf68d2fb7608fef : SUCCESS in 4m 08s","accounts_in_message":[],"_revision_number":7},{"id":"5ad7001228cdc75567ed43994fdcc521bfc3211c","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-06-04 22:12:30.000000000","message":"Uploaded patch set 8.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":8},{"id":"5e4567a23b17ed2486f93e1881cd0aa795a297e5","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 22:21:34.000000000","message":"Patch Set 8: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9b423cd3044b43cfa547f952ca99e098\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/24ecac5ce2a041c6b478633af1b80a2a : SUCCESS in 3m 35s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ec4f3d04bc6f4f648f71bbb154992404 : SUCCESS in 2m 11s","accounts_in_message":[],"_revision_number":8},{"id":"d4d03ffb38fbbd9dd8b00f5d24f66dafc8558984","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-06-09 18:54:01.000000000","message":"Patch Set 8: Code-Review+2","accounts_in_message":[],"_revision_number":8},{"id":"c5471d84d551a535e0a16e84509ebde383a0f105","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-06-09 20:07:23.000000000","message":"Patch Set 8:\n\n(6 comments)","accounts_in_message":[],"_revision_number":8},{"id":"e1a348dde6d2ac7518f894d619560429f94c0e83","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-06-09 20:09:57.000000000","message":"Uploaded patch set 9.\n\nOutdated Votes:\n* Code-Review+2 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":9},{"id":"20c7bb09208aec0d510f46fa25c46d269f4a085f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"date":"2026-06-09 20:11:21.000000000","message":"Uploaded patch set 10: Commit message was updated.","accounts_in_message":[],"_revision_number":10},{"id":"5ff94bafa161993213ce4c580d7e9adcfcca3b0d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-09 20:18:46.000000000","message":"Patch Set 10: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9c12c8b5f6bc47cab8909ade652245f4\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fc04dcf18b9248c2b0d348481f12eb50 : SUCCESS in 3m 26s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d928e7061254472296e7a54452aaa5c0 : SUCCESS in 2m 54s","accounts_in_message":[],"_revision_number":10},{"id":"51cda0fabab65863bb1a92e66f0ebfa316511cee","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2026-07-15 02:47:55.000000000","message":"Patch Set 10: Code-Review-1","accounts_in_message":[],"_revision_number":10},{"id":"36c9488a6b305e0add3801c275140428ba68febb","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2026-07-15 16:54:03.000000000","message":"Patch Set 10:\n\n(1 comment)","accounts_in_message":[],"_revision_number":10},{"id":"0c966c551a24608dbaa1a8686c6369720c59b8f0","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2026-07-15 17:09:27.000000000","message":"Patch Set 10:\n\n(3 comments)","accounts_in_message":[],"_revision_number":10}],"current_revision_number":10,"current_revision":"24876482066c893b7198dbb3af4d9a14a83d5a1c","revisions":{"9936bddc7e67507e8de24e802110a0950f89cd87":{"kind":"REWORK","_number":1,"created":"2026-04-06 14:23:29.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/1"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-04-03 23:07:24.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-04-06 14:18:50.000000000","tz":-240},"subject":"Support caller-specified ID for projects and users","message":"Support caller-specified ID for projects and users\n\nAdd a keystone-specs entry targeting the 2026.2 release. Proposes\nexplicit_project_id and explicit_user_id fields on POST /v3/projects\nand POST /v3/users, mirroring the existing explicit_domain_id on\nPOST /v3/domains.  The spec also proposes relaxing the existing domain\nruntime check to accept dashed UUIDs, includes a detailed\nID-format-constraints analysis, and documents the required follow-on\nchanges in python-keystoneclient, python-openstacksdk, and\npython-openstackclient.\n\nThis implements and extends the use case in bug #1832848, applying the\nsame approach to users as well as projects.\n\npartial-bug: #1832848\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\nCo-authored-by: Claude (Cursor) \u003cclaude@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/9936bddc7e67507e8de24e802110a0950f89cd87"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/9936bddc7e67507e8de24e802110a0950f89cd87"}]},"branch":"refs/heads/master"},"2d4be07df854b18602601738e1ee74244e1a6f14":{"kind":"REWORK","_number":2,"created":"2026-05-18 21:44:22.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/2"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-04-03 23:07:24.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-05-18 21:43:42.000000000","tz":-240},"subject":"Support caller-specified ID for projects and users","message":"Support caller-specified ID for projects and users\n\nAdd a keystone-specs entry targeting the 2026.2 release. Proposes\nexplicit_project_id and explicit_user_id fields on POST /v3/projects\nand POST /v3/users, mirroring the existing explicit_domain_id on\nPOST /v3/domains.  The spec also proposes relaxing the existing domain\nruntime check to accept dashed UUIDs, includes a detailed\nID-format-constraints analysis, and documents the required follow-on\nchanges in python-keystoneclient, python-openstacksdk, and\npython-openstackclient.\n\nThis implements and extends the use case in bug #1832848, applying the\nsame approach to users as well as projects.\n\npartial-bug: #1832848\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\nCo-authored-by: Claude (Cursor) \u003cclaude@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2d4be07df854b18602601738e1ee74244e1a6f14"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2d4be07df854b18602601738e1ee74244e1a6f14"}]},"branch":"refs/heads/master"},"1c25c79fedcc52f18783b8d7ce830e2f42aa58d8":{"kind":"REWORK","_number":3,"created":"2026-05-18 22:26:18.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/3"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-04-03 23:07:24.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-05-18 22:25:40.000000000","tz":-240},"subject":"Support caller-specified ID for projects and users","message":"Support caller-specified ID for projects and users\n\nAdd a keystone-specs entry targeting the 2026.2 release. Proposes\naccepting an \u0027id\u0027 field on POST /v3/projects and POST /v3/users,\nmirroring Glance and Nova. Also adds \u0027id\u0027 as an alias for the existing\nexplicit_domain_id on POST /v3/domains, providing consistency across\nall three resource types.\n\nAll three resources accept dashless UUID format only (32 lowercase hex\ncharacters) for projects and domains. Users accept any non-empty string\nup to 64 characters to support diverse IdP identifiers (sAMAccountName,\nuid, etc.).\n\nThe spec includes detailed ID-format-constraints analysis and documents\nthe required follow-on changes in python-keystoneclient,\npython-openstacksdk, and python-openstackclient.\n\nThis implements and extends the use case in bug #1832848, applying the\nsame approach to users as well as projects.\n\npartial-bug: #1832848\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\nCo-authored-by: Claude (Cursor) \u003cclaude@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/1c25c79fedcc52f18783b8d7ce830e2f42aa58d8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/1c25c79fedcc52f18783b8d7ce830e2f42aa58d8"}]},"branch":"refs/heads/master"},"45c82037e823e52a7b44ab3263b4a3e6df8b0255":{"kind":"REWORK","_number":4,"created":"2026-05-26 19:22:22.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/4"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-04-03 23:07:24.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-05-26 18:55:44.000000000","tz":-240},"subject":"Support caller-specified ID for projects and users","message":"Support caller-specified ID for projects and users\n\nAdd a keystone-specs entry targeting the 2026.2 release. Proposes\naccepting an \u0027id\u0027 field on POST /v3/projects and POST /v3/users,\nmirroring Glance and Nova. Also adds \u0027id\u0027 as an alias for the existing\nexplicit_domain_id on POST /v3/domains, providing consistency across\nall three resource types.\n\nAll three resources accept dashless UUID format only (32 lowercase hex\ncharacters) for projects and domains. Users accept any non-empty string\nup to 64 characters to support diverse IdP identifiers (sAMAccountName,\nuid, etc.).\n\nThe spec includes detailed ID-format-constraints analysis and documents\nthe required follow-on changes in python-keystoneclient,\npython-openstacksdk, and python-openstackclient.\n\nThis implements and extends the use case in bug #1832848, applying the\nsame approach to users as well as projects.\n\npartial-bug: #1832848\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\nCo-authored-by: Claude (Cursor) \u003cclaude@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/45c82037e823e52a7b44ab3263b4a3e6df8b0255"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/45c82037e823e52a7b44ab3263b4a3e6df8b0255"}]},"branch":"refs/heads/master"},"404157c815110a7b70d09152cbabb41fd6acf9cd":{"kind":"REWORK","_number":5,"created":"2026-06-01 20:51:28.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/5"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-04-03 23:07:24.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-01 20:50:49.000000000","tz":-240},"subject":"spec: support caller-specified IDs for projects, users, and domains","message":"spec: support caller-specified IDs for projects, users, and domains\n\nThis spec proposes extending the Identity v3 API to accept an optional\ncaller-specified \u0027id\u0027 parameter when creating projects, users, and domains.\n\nKey features:\n- Dedicated policy rules (identity:create_*_with_explicit_id) default to\n  system-admin only to prevent security issues\n- Global uniqueness checking across all resource types\n- User ID validation defaults to Nova\u0027s constraint (^[a-zA-Z0-9-]*$) to\n  ensure compatibility with Nova compute operations\n- Optional uuid mode for stricter consistency\n- Custom mode for operator-defined patterns (must be subset of Nova\u0027s\n  constraint)\n\nBy using Nova\u0027s pattern as the default, we ensure user IDs created by\nadministrators work correctly across all OpenStack services while\nproviding reasonable naming flexibility.\n\nSoft delete support documented as future work across 3 release phases.\n\npartial-bug: #1832848\nAssisted-by: Claude Sonnet 4.5\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/404157c815110a7b70d09152cbabb41fd6acf9cd"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/404157c815110a7b70d09152cbabb41fd6acf9cd"}]},"branch":"refs/heads/master"},"411a08c689cd92e9d695d40393f087a6751795ba":{"kind":"REWORK","_number":6,"created":"2026-06-04 20:16:38.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/6"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 20:16:05.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 20:16:05.000000000","tz":-240},"subject":"spec: support caller-specified IDs for projects, users, and domains","message":"spec: support caller-specified IDs for projects, users, and domains\n\nThis spec proposes extending the Identity v3 API to accept an optional\ncaller-specified \u0027id\u0027 parameter when creating projects, users, and domains.\n\nKey features:\n- Projects and users get new dedicated RBAC policies\n  (identity:create_{project,user}_with_explicit_id) that default to admin-only,\n  which is more restrictive than the base create policies that allow domain\n  managers\n- Domains use existing identity:create_domain policy (already admin-only),\n  so no additional policy is needed\n- Global uniqueness checking across all resource types prevents ID collision\n  attacks\n- User ID validation defaults to Nova\u0027s constraint (^[a-zA-Z0-9-]*$) to ensure\n  compatibility with Nova compute operations\n- Optional uuid mode for stricter consistency\n- Custom mode for operator-defined patterns (must be subset of Nova\u0027s\n  constraint)\n\nBy using Nova\u0027s pattern as the default, we ensure user IDs created by\nadministrators work correctly with Nova while preventing known security issues\nin other services. The admin-only restriction prevents domain managers from\ncreating resources with arbitrary IDs that could enable resource theft via ID\ncollision.\n\nAssisted-by: Claude Sonnet 4.5\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/411a08c689cd92e9d695d40393f087a6751795ba"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/411a08c689cd92e9d695d40393f087a6751795ba"}]},"branch":"refs/heads/master"},"a5f2637eff8b15620c2f375c11c7dc3dd5f520dd":{"kind":"REWORK","_number":7,"created":"2026-06-04 21:19:02.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/7"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 20:16:05.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 21:11:08.000000000","tz":-240},"subject":"spec: support caller-specified IDs for projects, users, and domains","message":"spec: support caller-specified IDs for projects, users, and domains\n\nThis spec proposes extending the Identity v3 API to accept an optional\ncaller-specified \u0027id\u0027 parameter when creating projects, users, and domains.\n\nKey features:\n- Projects and users get new dedicated RBAC policies\n  (identity:create_{project,user}_with_explicit_id) that default to admin-only,\n  which is more restrictive than the base create policies that allow domain\n  managers\n- Domains use existing identity:create_domain policy (already admin-only),\n  so no additional policy is needed\n- Global uniqueness checking across all resource types prevents ID collision\n  attacks\n- User ID validation defaults to Nova\u0027s constraint (^[a-zA-Z0-9-]*$) to ensure\n  compatibility with Nova compute operations\n- Optional uuid mode for stricter consistency\n- Custom mode for operator-defined patterns (must be subset of Nova\u0027s\n  constraint)\n\nBy using Nova\u0027s pattern as the default, we ensure user IDs created by\nadministrators work correctly with Nova while preventing known security issues\nin other services. The admin-only restriction prevents domain managers from\ncreating resources with arbitrary IDs that could enable resource theft via ID\ncollision.\n\nAssisted-by: Claude Sonnet 4.5\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/a5f2637eff8b15620c2f375c11c7dc3dd5f520dd"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/a5f2637eff8b15620c2f375c11c7dc3dd5f520dd"}]},"branch":"refs/heads/master"},"798083c01992ef94581d67e3a6c132ea1d66dfab":{"kind":"REWORK","_number":8,"created":"2026-06-04 22:12:30.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/8","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/8","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/8 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/8 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/8 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/8"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 20:16:05.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 22:06:40.000000000","tz":-240},"subject":"spec: support caller-specified IDs for projects, users, and domains","message":"spec: support caller-specified IDs for projects, users, and domains\n\nThis spec proposes extending the Identity v3 API to accept an optional\ncaller-specified \u0027id\u0027 parameter when creating projects, users, and domains.\n\nKey features:\n- Projects and users get new dedicated RBAC policies\n  (identity:create_{project,user}_with_explicit_id) that default to admin-only,\n  which is more restrictive than the base create policies that allow domain\n  managers\n- Domains use existing identity:create_domain policy (already admin-only),\n  so no additional policy is needed\n- Global uniqueness checking across all resource types prevents ID collision\n  attacks\n- User ID validation defaults to Nova\u0027s constraint (^[a-zA-Z0-9-]*$) to ensure\n  compatibility with Nova compute operations\n- Optional uuid mode for stricter consistency\n- Custom mode for operator-defined patterns (must be subset of Nova\u0027s\n  constraint)\n\nBy using Nova\u0027s pattern as the default, we ensure user IDs created by\nadministrators work correctly with Nova while preventing known security issues\nin other services. The admin-only restriction prevents domain managers from\ncreating resources with arbitrary IDs that could enable resource theft via ID\ncollision.\n\nAssisted-by: Claude Sonnet 4.5\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/798083c01992ef94581d67e3a6c132ea1d66dfab"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/798083c01992ef94581d67e3a6c132ea1d66dfab"}]},"branch":"refs/heads/master"},"e5ee27ceeaf9f39b0a6a99993cb47d135170177e":{"kind":"REWORK","_number":9,"created":"2026-06-09 20:09:57.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/9","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/9","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/9 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/9 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/9 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/9"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 20:16:05.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-09 20:03:24.000000000","tz":-240},"subject":"spec: support caller-specified IDs for projects, users, and domains","message":"spec: support caller-specified IDs for projects, users, and domains\n\nThis spec proposes extending the Identity v3 API to accept an optional\ncaller-specified \u0027id\u0027 parameter when creating projects, users, and domains.\n\nKey features:\n- Projects and users get new dedicated RBAC policies\n  (identity:create_{project,user}_with_explicit_id) that default to admin-only,\n  which is more restrictive than the base create policies that allow domain\n  managers\n- Domains use existing identity:create_domain policy (already admin-only),\n  so no additional policy is needed\n- Global uniqueness checking across all resource types prevents ID collision\n  attacks\n- User ID validation defaults to Nova\u0027s constraint (^[a-zA-Z0-9-]*$) to ensure\n  compatibility with Nova compute operations\n- Optional uuid mode for stricter consistency\n- Custom mode for operator-defined patterns (must be subset of Nova\u0027s\n  constraint)\n- Domain create rejects requests that specify both ``id`` and\n  ``explicit_domain_id`` (HTTP 400)\n\nBy using Nova\u0027s pattern as the default, we ensure user IDs created by\nadministrators work correctly with Nova while preventing known security issues\nin other services. The admin-only restriction prevents domain managers from\ncreating resources with arbitrary IDs that could enable resource theft via ID\ncollision.\n\nAssisted-by: Claude Sonnet 4.5\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/e5ee27ceeaf9f39b0a6a99993cb47d135170177e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/e5ee27ceeaf9f39b0a6a99993cb47d135170177e"}]},"branch":"refs/heads/master"},"24876482066c893b7198dbb3af4d9a14a83d5a1c":{"kind":"NO_CODE_CHANGE","_number":10,"created":"2026-06-09 20:11:21.000000000","uploader":{"_account_id":9914,"name":"Ade Lee","email":"alee@redhat.com","username":"alee"},"ref":"refs/changes/40/983440/10","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-specs","ref":"refs/changes/40/983440/10","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/10 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/10 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/10 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-specs refs/changes/40/983440/10"}}},"commit":{"parents":[{"commit":"2cc6c7c8a59a303098aaccaa776352c13b79d1d3","subject":"Claim `Include invalid password details in audit messages`","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/2cc6c7c8a59a303098aaccaa776352c13b79d1d3"}]}],"author":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-04 20:16:05.000000000","tz":-240},"committer":{"name":"Ade Lee","email":"alee@redhat.com","date":"2026-06-09 20:11:18.000000000","tz":-240},"subject":"spec: explicit IDs for projects, users, domains","message":"spec: explicit IDs for projects, users, domains\n\nThis spec proposes extending the Identity v3 API to accept an\noptional caller-specified ``id`` parameter when creating projects,\nusers, and domains.\n\nKey features:\n- Projects and users get new dedicated RBAC policies\n  (``identity:create_{project,user}_with_explicit_id``) that default\n  to admin-only, which is more restrictive than the base create\n  policies that allow domain managers\n- Domains use existing ``identity:create_domain`` policy\n  (already admin-only), so no additional policy is needed\n- Global uniqueness checking across all resource types prevents ID\n  collision attacks\n- User ID validation defaults to Nova\u0027s constraint\n  (``^[a-zA-Z0-9-]*$``) to ensure compatibility with Nova compute\n  operations\n- Optional uuid mode for stricter consistency\n- Custom mode for operator-defined patterns (must be subset of\n  Nova\u0027s constraint)\n- Domain create rejects requests that specify both ``id`` and\n  ``explicit_domain_id`` (HTTP 400)\n\nBy using Nova\u0027s pattern as the default, we ensure user IDs created\nby administrators work correctly with Nova while preventing known\nsecurity issues in other services. The admin-only restriction\nprevents domain managers from creating resources with arbitrary IDs\nthat could enable resource theft via ID collision.\n\nAssisted-by: Claude Sonnet 4.5\nChange-Id: Icee868753aacb397a0f6b26f13521d0ba40357e2\nSigned-off-by: Ade Lee \u003calee@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/24876482066c893b7198dbb3af4d9a14a83d5a1c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-specs/commit/24876482066c893b7198dbb3af4d9a14a83d5a1c"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"}},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}