)]}'
{"id":"openstack%2Fkeystone-tempest-plugin~979394","triplet_id":"openstack%2Fkeystone-tempest-plugin~master~I5ca68c405c7156033b3dff409a21256873b72307","project":"openstack/keystone-tempest-plugin","branch":"master","hashtags":[],"change_id":"I5ca68c405c7156033b3dff409a21256873b72307","subject":"Add OIDC scenario test for group domain defaulting to IdP domain","status":"NEW","created":"2026-03-07 18:02:07.000000000","updated":"2026-03-08 09:18:55.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":false,"submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"2592ce7243934a27756fca32f4a7aa99bd3cc3b2","_number":979394,"virtual_id_number":979394,"owner":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2026-03-08 09:18:55.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-03-07 18:37:38.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"5caccafadf4bf173dfc5451c5a21c83fd114dbef","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-07 18:02:07.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"82638bf3147d45e5a11eb68d2a00eef7b92b98a3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-07 18:03:50.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"2400c05ea745f23cc703ac5ea84a6376dfc0fd63","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-07 18:37:38.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/72db43e2fa98425c8c6622f4c64a5d1f\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/49cdabc34eab41c1ad9406b8f8f1cbcf : SUCCESS in 2m 20s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/19e78512f5b8423fb49ea0ab041bd13e : SUCCESS in 18m 15s\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/57f7ab6e633848d8872119a40aa060e2 : FAILURE in 25m 50s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/7104522872e14ad885643d194d874560 : SUCCESS in 30m 16s\n- keystone-tempest-2025-2 https://zuul.opendev.org/t/openstack/build/d77ee851b6c74459b741472ac9473492 : SUCCESS in 30m 36s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/007c24fb6af6443c8658343ed107a5a1 : FAILURE in 29m 20s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"99991400c097fa8954cebecc4b346c37b5d33dc2","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-08 08:43:25.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased. Commit message was updated.\n\nOutdated Votes:\n* Verified+1\n","accounts_in_message":[],"_revision_number":3},{"id":"2592ce7243934a27756fca32f4a7aa99bd3cc3b2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-08 09:18:55.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ee8d59c30db34f1c90c4c4158128a5e4\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2cbfc69d75bd4a4383f5c86380359ec9 : SUCCESS in 2m 18s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/cbb8ec4c1dbf4d45a40feb3a45106297 : SUCCESS in 12m 10s\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/c20e31c401ed40f9ab42d268dc2a888e : FAILURE in 14m 13s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/add239854f734fabbe8a0bb40defeb8b : SUCCESS in 29m 43s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/8f2d7cb278c24ad1a6e42181bf8df16f : SUCCESS in 29m 49s (non-voting)\n- keystone-tempest-2025-2 https://zuul.opendev.org/t/openstack/build/f783accfb39b43f18dc09368bcfbede9 : SUCCESS in 14m 27s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/284a64ff59c44174b78f756ff9f3f551 : FAILURE in 16m 17s (non-voting)","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"79f2f337d9fb94736e9b2e9d36ee896c5da66a59","revisions":{"bb250a0e0223b3ae03c5f83d4a36356e59628dc2":{"kind":"REWORK","_number":1,"created":"2026-03-07 18:02:07.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/94/979394/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-tempest-plugin","ref":"refs/changes/94/979394/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/1"}}},"commit":{"parents":[{"commit":"4d96ff9583eb784b1d0ad2c9816d884bc8dd8d18","subject":"Merge \"Replace deprecated tenant_id property\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/4d96ff9583eb784b1d0ad2c9816d884bc8dd8d18"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-06 14:00:06.000000000","tz":60},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-07 18:01:55.000000000","tz":60},"subject":"Add OIDC scenario test for group domain defaulting to IdP domain","message":"Add OIDC scenario test for group domain defaulting to IdP domain\n\nWhen a federation mapping rule specifies a group by name without an\nexplicit domain, Keystone should default the group domain to the\nidentity provider\u0027s domain_id. This mirrors the existing behavior\nfor user domain defaulting.\n\nAdd TestOidcGroupDomainDefaultToIdp as a standalone test class that\ncreates its own identity provider, group, project, role assignment,\nand mapping. The mapping omits the group domain. The test verifies\nthe full OIDC authentication flow (via Keycloak) works correctly,\nproving the group is resolved in the IdP\u0027s auto-created domain.\n\npartial-bug: #2143399\nGenerated-By: Claude (Anthropic)\nDepends-On: 979393\nChange-Id: I5ca68c405c7156033b3dff409a21256873b72307\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/bb250a0e0223b3ae03c5f83d4a36356e59628dc2"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/bb250a0e0223b3ae03c5f83d4a36356e59628dc2"}]},"branch":"refs/heads/master"},"1cc679037d9400edda140a1c35765c5d51831e26":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2026-03-07 18:03:50.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/94/979394/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-tempest-plugin","ref":"refs/changes/94/979394/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/2"}}},"commit":{"parents":[{"commit":"4d96ff9583eb784b1d0ad2c9816d884bc8dd8d18","subject":"Merge \"Replace deprecated tenant_id property\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/4d96ff9583eb784b1d0ad2c9816d884bc8dd8d18"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-06 14:00:06.000000000","tz":60},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-07 18:03:15.000000000","tz":60},"subject":"Add OIDC scenario test for group domain defaulting to IdP domain","message":"Add OIDC scenario test for group domain defaulting to IdP domain\n\nWhen a federation mapping rule specifies a group by name without an\nexplicit domain, Keystone should default the group domain to the\nidentity provider\u0027s domain_id. This mirrors the existing behavior\nfor user domain defaulting.\n\nAdd TestOidcGroupDomainDefaultToIdp as a standalone test class that\ncreates its own identity provider, group, project, role assignment,\nand mapping. The mapping omits the group domain. The test verifies\nthe full OIDC authentication flow (via Keycloak) works correctly,\nproving the group is resolved in the IdP\u0027s auto-created domain.\n\npartial-bug: #2143399\nGenerated-By: Claude (Anthropic)\nDepends-On: https://review.opendev.org/c/openstack/keystone/+/979393\nChange-Id: I5ca68c405c7156033b3dff409a21256873b72307\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/1cc679037d9400edda140a1c35765c5d51831e26"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/1cc679037d9400edda140a1c35765c5d51831e26"}]},"branch":"refs/heads/master"},"79f2f337d9fb94736e9b2e9d36ee896c5da66a59":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":3,"created":"2026-03-08 08:43:25.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/94/979394/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-tempest-plugin","ref":"refs/changes/94/979394/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/94/979394/3"}}},"commit":{"parents":[{"commit":"e391a2165091c150919cd7dbb7958d022db54115","subject":"Add keystone-tempest-oidc-federation job to CI","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/e391a2165091c150919cd7dbb7958d022db54115"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-06 14:00:06.000000000","tz":60},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-08 08:42:46.000000000","tz":60},"subject":"Add OIDC scenario test for group domain defaulting to IdP domain","message":"Add OIDC scenario test for group domain defaulting to IdP domain\n\nWhen a federation mapping rule specifies a group by name without an\nexplicit domain, Keystone should default the group domain to the\nidentity provider\u0027s domain_id. This mirrors the existing behavior\nfor user domain defaulting.\n\nAdd TestOidcGroupDomainDefaultToIdp as a standalone test class that\ncreates its own identity provider, group, project, role assignment,\nand mapping. The mapping omits the group domain. The test verifies\nthe full OIDC authentication flow (via Keycloak) works correctly,\nproving the group is resolved in the IdP\u0027s auto-created domain.\n\nPartial-Bug: #2143399\nGenerated-By: Claude (Anthropic)\nDepends-On: https://review.opendev.org/c/openstack/keystone/+/979393\nChange-Id: I5ca68c405c7156033b3dff409a21256873b72307\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/79f2f337d9fb94736e9b2e9d36ee896c5da66a59"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/79f2f337d9fb94736e9b2e9d36ee896c5da66a59"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}