)]}'
{"id":"openstack%2Fkeystoneauth~690812","triplet_id":"openstack%2Fkeystoneauth~master~I1a4cab3fd7c0131ec1c5bc924d72e2dea17b9dda","project":"openstack/keystoneauth","branch":"master","topic":"bug/1849589","hashtags":[],"change_id":"I1a4cab3fd7c0131ec1c5bc924d72e2dea17b9dda","subject":"Fix trust-scoped token create another token","status":"ABANDONED","created":"2019-10-24 05:57:19.000000000","updated":"2021-06-04 18:24:44.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"a8ed90b0917ec39684b915e3ecd79a29c401b7fc","_number":690812,"virtual_id_number":690812,"owner":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"tag":"autogenerated:zuul:check","value":-1,"date":"2019-10-24 14:43:49.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"disliked":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"all":[{"value":-1,"date":"2019-10-30 09:36:30.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2019-10-24 14:43:49.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2019-10-30 09:36:30.000000000","updated_by":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"reviewer":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"state":"REVIEWER"}],"messages":[{"id":"88b542af483ea176e76ae16f9d8bd895fd620474","author":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"date":"2019-10-24 05:57:19.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"a3874b0df8aa2a39d9f7bffaed75a2e01922324b","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-10-24 07:52:15.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttp://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n\n- tempest-full https://zuul.opendev.org/t/openstack/build/92225da018f74642b6b885072cc7cd5a : SUCCESS in 1h 53m 27s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/ceb8be9b96394881a3a46b3724b2d2a1 : SUCCESS in 1h 36m 22s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/dfe260e10ee6487ea97c1d7dc44eb1da : FAILURE in 4m 20s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6505f514ec1a4de3989c9087db4e919a : FAILURE in 4m 18s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/5ed800a7a313458d8a498a4331d6b70a : FAILURE in 3m 52s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/f53e2b51f79149a8bde16633bd1cf798 : FAILURE in 4m 42s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/d986666e994949a79019934f34750e2e : FAILURE in 4m 01s\n- openstacksdk-functional-devstack-tips https://zuul.opendev.org/t/openstack/build/484ed81e0a544bd398bb288b5c1ed9bc : SUCCESS in 1h 09m 06s\n- openstacksdk-functional-devstack-tips-python2 https://zuul.opendev.org/t/openstack/build/15f84cf9fe2a4dbb9909e2018afc9a32 : SUCCESS in 1h 11m 39s\n- openstacksdk-tox-py36-tips https://zuul.opendev.org/t/openstack/build/d5cf26023d3842948d91f4716af33c0d : SUCCESS in 4m 02s\n- osc-tox-py27-tips https://zuul.opendev.org/t/openstack/build/0106701728f14599ab7e3b50e618eaa7 : SUCCESS in 4m 10s\n- osc-tox-py36-tips https://zuul.opendev.org/t/openstack/build/24a4d3c3896849d78cc1a89fb81fe5aa : SUCCESS in 4m 12s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/07b68897ab1343f5b07f73f680490b14 : SUCCESS in 5m 27s","accounts_in_message":[],"_revision_number":1},{"id":"5346c2953621babc878552e62edf3b2ddd127233","author":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"date":"2019-10-24 08:21:56.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"16a5a07f63c26d8ada00bd13878f37b33e9569a6","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-10-24 10:11:24.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttp://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n\n- tempest-full https://zuul.opendev.org/t/openstack/build/986c2ad20d274987b075ac81b5b44b4b : SUCCESS in 1h 39m 18s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e1d6ce778ad24e52acaff283b76d6624 : SUCCESS in 1h 36m 18s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/8834c6dbb9e84867a8b0b655b3810bb0 : FAILURE in 5m 50s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8d5a1fbdb83046c38ea21341705cb9e4 : FAILURE in 3m 51s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/f83852c5eac34278b0730a6b8e519051 : FAILURE in 4m 05s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/eb85dbee89e44d49a48fe502b2b6180b : FAILURE in 2m 58s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/25ca0ad9c5334cb6ae585fb4c8d5227d : FAILURE in 4m 06s\n- openstacksdk-functional-devstack-tips https://zuul.opendev.org/t/openstack/build/3fea26ba87f1465aa19f17571918f677 : SUCCESS in 1h 02m 34s\n- openstacksdk-functional-devstack-tips-python2 https://zuul.opendev.org/t/openstack/build/7e481042f7564b9bbd006dd63b7d3676 : SUCCESS in 1h 02m 09s\n- openstacksdk-tox-py36-tips https://zuul.opendev.org/t/openstack/build/260a9d28a1524c7b97b056a72d293615 : SUCCESS in 3m 48s\n- osc-tox-py27-tips https://zuul.opendev.org/t/openstack/build/ec126aec6f65498590c626501fff877d : SUCCESS in 4m 36s\n- osc-tox-py36-tips https://zuul.opendev.org/t/openstack/build/b708613db9ea4638bed546e201f8731d : SUCCESS in 4m 36s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d0934cac5b02439288418fed1ad02acd : SUCCESS in 7m 06s","accounts_in_message":[],"_revision_number":2},{"id":"78b3465447158cdd38f629565c3c7de3e623c072","author":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"date":"2019-10-24 12:49:06.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"fe8d1663fa3f59fdb3a65362ee7283888c25e1b0","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-10-24 14:43:49.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttp://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n\n- tempest-full https://zuul.opendev.org/t/openstack/build/24dd428f4b9947859e0fc9fae58ac26c : SUCCESS in 1h 52m 43s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/5ca639a3532b4da09d51c6277c30f475 : SUCCESS in 1h 27m 19s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/830e9d6a021e41579ab58c0ef5ce444f : FAILURE in 4m 15s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1feb149f4e154b128a0deb7ad0fff6fa : FAILURE in 3m 53s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/a6018d08905545e590b58d06b20a47bf : FAILURE in 4m 03s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/f2a8008dc6844102ad5475fde3930fd2 : FAILURE in 4m 47s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/324bf9dc2ca44413a1b59d415ff773c7 : FAILURE in 5m 15s\n- openstacksdk-functional-devstack-tips https://zuul.opendev.org/t/openstack/build/ec88df8f6b864679a70757cb96d027f3 : SUCCESS in 1h 10m 51s\n- openstacksdk-functional-devstack-tips-python2 https://zuul.opendev.org/t/openstack/build/3bf3e19601f14100a4fa45f35a24aa54 : SUCCESS in 1h 06m 51s\n- openstacksdk-tox-py36-tips https://zuul.opendev.org/t/openstack/build/4ae36fdd5c0243849b50f93923c36c93 : SUCCESS in 5m 43s\n- osc-tox-py27-tips https://zuul.opendev.org/t/openstack/build/d7eba089ac7a46668edd950cd0193b83 : SUCCESS in 4m 54s\n- osc-tox-py36-tips https://zuul.opendev.org/t/openstack/build/69f097ad24674b3fb116a238ea280fd1 : SUCCESS in 5m 04s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/431b0b4a7ddb472e97e706320597dd81 : SUCCESS in 6m 11s","accounts_in_message":[],"_revision_number":3},{"id":"8f327ee2eff904af4deec127b97aab78ca0e88ad","author":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"date":"2019-10-30 09:36:30.000000000","message":"Patch Set 3: Code-Review-1\n\nI am still investigating and trying to reproduce the issue.\n\nCould you add a release note and, if possible, a unit test?","accounts_in_message":[],"_revision_number":3},{"id":"a8ed90b0917ec39684b915e3ecd79a29c401b7fc","tag":"autogenerated:gerrit:abandon","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2021-06-04 18:24:44.000000000","message":"Abandoned\n\nAbandoning since there hasn\u0027t been any recent activity, if anyone wants to continue this work, please feel free to restore this or create a new change.","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"8d651838fbce65554c1e897b62d1e3cf1ee6277c","revisions":{"f1dc1414917c746badc074b1e998b3ad01cacf6d":{"kind":"REWORK","_number":1,"created":"2019-10-24 05:57:19.000000000","uploader":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"ref":"refs/changes/12/690812/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystoneauth","ref":"refs/changes/12/690812/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/1"}}},"commit":{"parents":[{"commit":"de53f90bf93376f0259f9579d8cf8aac3bdb05da","subject":"Merge \"Fetch discovery documents with auth when needed\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/de53f90bf93376f0259f9579d8cf8aac3bdb05da"}]}],"author":{"name":"jun923.gu","email":"gujun1989@126.com","date":"2019-10-24 03:47:23.000000000","tz":480},"committer":{"name":"jun923.gu","email":"gujun1989@126.com","date":"2019-10-24 05:57:53.000000000","tz":480},"subject":"Fix trust-scoped token create another token","message":"Fix trust-scoped token create another token\n\nWhen creating volume that encrypt it with barbican using trust-scoped\ntoken, it failed. Because the trust-scoped token will create another\ntoken, but keystone don\u0027t allow tokens used for delegation to create\nanother token. So we should prevent the trust-scoped to create another\ntoken.\n\nChange-Id: I1a4cab3fd7c0131ec1c5bc924d72e2dea17b9dda\nCloses-Bug: #1849589\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/f1dc1414917c746badc074b1e998b3ad01cacf6d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/f1dc1414917c746badc074b1e998b3ad01cacf6d"}]},"branch":"refs/heads/master"},"bf36e755f221224809fb8e1a3f5504f3c5db82c2":{"kind":"REWORK","_number":2,"created":"2019-10-24 08:21:56.000000000","uploader":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"ref":"refs/changes/12/690812/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystoneauth","ref":"refs/changes/12/690812/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/2"}}},"commit":{"parents":[{"commit":"de53f90bf93376f0259f9579d8cf8aac3bdb05da","subject":"Merge \"Fetch discovery documents with auth when needed\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/de53f90bf93376f0259f9579d8cf8aac3bdb05da"}]}],"author":{"name":"jun923.gu","email":"gujun1989@126.com","date":"2019-10-24 03:47:23.000000000","tz":480},"committer":{"name":"jun923.gu","email":"gujun1989@126.com","date":"2019-10-24 08:21:55.000000000","tz":480},"subject":"Fix trust-scoped token create another token","message":"Fix trust-scoped token create another token\n\nWhen creating volume that encrypt it with barbican using trust-scoped\ntoken, it failed. Because the trust-scoped token will create another\ntoken, but keystone don\u0027t allow tokens used for delegation to create\nanother token. So we should prevent the trust-scoped to create another\ntoken.\n\nChange-Id: I1a4cab3fd7c0131ec1c5bc924d72e2dea17b9dda\nCloses-Bug: #1849589\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/bf36e755f221224809fb8e1a3f5504f3c5db82c2"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/bf36e755f221224809fb8e1a3f5504f3c5db82c2"}]},"branch":"refs/heads/master"},"8d651838fbce65554c1e897b62d1e3cf1ee6277c":{"kind":"REWORK","_number":3,"created":"2019-10-24 12:49:06.000000000","uploader":{"_account_id":17144,"name":"jun923.gu","email":"gujun1989@126.com","username":"jun923.gu"},"ref":"refs/changes/12/690812/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystoneauth","ref":"refs/changes/12/690812/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystoneauth refs/changes/12/690812/3"}}},"commit":{"parents":[{"commit":"de53f90bf93376f0259f9579d8cf8aac3bdb05da","subject":"Merge \"Fetch discovery documents with auth when needed\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/de53f90bf93376f0259f9579d8cf8aac3bdb05da"}]}],"author":{"name":"jun923.gu","email":"gujun1989@126.com","date":"2019-10-24 03:47:23.000000000","tz":480},"committer":{"name":"jun923.gu","email":"gujun1989@126.com","date":"2019-10-24 12:49:16.000000000","tz":480},"subject":"Fix trust-scoped token create another token","message":"Fix trust-scoped token create another token\n\nWhen creating volume that encrypt it with barbican using trust-scoped\ntoken, it failed. Because the trust-scoped token will create another\ntoken, but keystone don\u0027t allow tokens used for delegation to create\nanother token. So we should prevent the trust-scoped to create another\ntoken.\n\nChange-Id: I1a4cab3fd7c0131ec1c5bc924d72e2dea17b9dda\nCloses-Bug: #1849589\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/8d651838fbce65554c1e897b62d1e3cf1ee6277c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystoneauth/commit/8d651838fbce65554c1e897b62d1e3cf1ee6277c"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}