)]}'
{"id":"openstack%2Fkeystone-tempest-plugin~979422","triplet_id":"openstack%2Fkeystone-tempest-plugin~master~I818309f42fee39c70c1761ff5095fd57332aea4c","project":"openstack/keystone-tempest-plugin","branch":"master","hashtags":[],"change_id":"I818309f42fee39c70c1761ff5095fd57332aea4c","subject":"Add OIDC scenario test for group domain defaulting to IdP domain","status":"ABANDONED","created":"2026-03-08 08:40:39.000000000","updated":"2026-03-08 08:42:15.000000000","total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"78de9c1f6c2288b0f5d7615bbea1689562da146a","_number":979422,"virtual_id_number":979422,"owner":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"actions":{},"labels":{"Verified":{"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{},"pending_reviewers":{},"reviewer_updates":[],"messages":[{"id":"8618f128c7a578ccbbd361a4fe0fdb223c481d37","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-08 08:40:39.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"b203668b86d9895731c7be28bf2591b46b5fa98e","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-08 08:42:03.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"78de9c1f6c2288b0f5d7615bbea1689562da146a","tag":"autogenerated:gerrit:abandon","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-08 08:42:15.000000000","message":"Abandoned\n\ni have no idea what i am doing","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"978f42265dbb3494b31f12c0d0703300501a8d10","revisions":{"978f42265dbb3494b31f12c0d0703300501a8d10":{"kind":"REWORK","_number":1,"created":"2026-03-08 08:40:39.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/22/979422/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone-tempest-plugin","ref":"refs/changes/22/979422/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/22/979422/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/22/979422/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/22/979422/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone-tempest-plugin refs/changes/22/979422/1"}}},"commit":{"parents":[{"commit":"e391a2165091c150919cd7dbb7958d022db54115","subject":"Add keystone-tempest-oidc-federation job to CI","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/e391a2165091c150919cd7dbb7958d022db54115"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-06 14:00:06.000000000","tz":60},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-08 08:40:20.000000000","tz":60},"subject":"Add OIDC scenario test for group domain defaulting to IdP domain","message":"Add OIDC scenario test for group domain defaulting to IdP domain\n\nWhen a federation mapping rule specifies a group by name without an\nexplicit domain, Keystone should default the group domain to the\nidentity provider\u0027s domain_id. This mirrors the existing behavior\nfor user domain defaulting.\n\nAdd TestOidcGroupDomainDefaultToIdp as a standalone test class that\ncreates its own identity provider, group, project, role assignment,\nand mapping. The mapping omits the group domain. The test verifies\nthe full OIDC authentication flow (via Keycloak) works correctly,\nproving the group is resolved in the IdP\u0027s auto-created domain.\n\npartial-bug: #2143399\nGenerated-By: Claude (Anthropic)\nChange-Id: I818309f42fee39c70c1761ff5095fd57332aea4c\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/978f42265dbb3494b31f12c0d0703300501a8d10"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone-tempest-plugin/commit/978f42265dbb3494b31f12c0d0703300501a8d10"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{}}}]}