)]}'
{"id":"openstack%2Fkeystonemiddleware~850669","triplet_id":"openstack%2Fkeystonemiddleware~master~I3d6934c2dceadd476d335efaacda935625c792e5","project":"openstack/keystonemiddleware","branch":"master","topic":"audit-ignore-path","attention_set":{},"removed_from_attention_set":{"9542":{"account":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"last_update":"2026-03-06 17:01:00.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I3d6934c2dceadd476d335efaacda935625c792e5","subject":"Add ignore_path_list option","status":"MERGED","created":"2022-07-21 15:22:17.000000000","updated":"2026-03-06 17:02:03.000000000","submitted":"2026-03-06 17:01:00.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":1,"has_review_started":true,"submission_id":"850669-audit-ignore-path","meta_rev_id":"b4be32ef9db02849f233ed1c28f190c169b3da25","_number":850669,"virtual_id_number":850669,"owner":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-03-06 17:01:00.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"all":[{"value":2,"date":"2026-02-27 15:36:13.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-03-06 15:50:17.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2026-03-06 15:50:17.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"}],"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2022-07-21 17:11:09.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-02-18 04:50:39.000000000","updated_by":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"reviewer":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"state":"CC"},{"updated":"2026-02-27 15:36:13.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"},{"updated":"2026-03-06 15:50:17.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"}],"messages":[{"id":"69d2cfaa7f7b525015ca2ce79d133da69dc09e13","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"date":"2022-07-21 15:22:17.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"071a48e21c1bc8ba0f5216d4092c805b4dc77b4e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"date":"2022-07-21 15:23:07.000000000","message":"Patch Set 2: Patch Set 1 was rebased","accounts_in_message":[],"_revision_number":2},{"id":"a3060aefb91a2c8e47728f1930f5f81e4a338af3","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-07-21 17:11:09.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a41ca5d60b2c45cd9e876eaf2cb4a56e\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2e39e216599f47ea94948b9309e84071 : SUCCESS in 4m 31s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d3254f42b3324ca88219745bdc3fe903 : SUCCESS in 4m 09s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8e2939153a16422da7c2552025ca8ccb : SUCCESS in 4m 21s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/456817c036bc4bd097ef588527430b2d : SUCCESS in 4m 38s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/88286f4775fa4d5b8e5ba5bf03ea9f76 : SUCCESS in 4m 13s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c724826b2da548f2a62e164e0c569dd6 : SUCCESS in 5m 57s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/0c8e62aeeca245da807b8c752f120b69 : SUCCESS in 1h 43m 01s","accounts_in_message":[],"_revision_number":2},{"id":"00038b9f811aaa3563f20a9ff02e8486049f5cb0","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"date":"2022-12-20 10:39:45.000000000","message":"Patch Set 3: Patch Set 2 was rebased","accounts_in_message":[],"_revision_number":3},{"id":"7fb0283b19dfcee2570bbdf26fe7ea1bb2b8ae4d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-12-20 12:11:03.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a8e058409ae0413782570e044a35dd02\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/873ad38f14664f7fb938421da636dc5e : SUCCESS in 3m 02s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/be5cf45434114773ba1ab00bdc7094e6 : SUCCESS in 3m 23s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/62c1db84dcda468c93a27af9919e0c86 : SUCCESS in 3m 05s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/a342d2642a2d432b8395f775cb3f2d56 : SUCCESS in 2m 58s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/25b08a7ca0c34c3b93ad67ec4cad678e : SUCCESS in 2m 59s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a88da17e31cc4f1fa1c375200e266070 : SUCCESS in 6m 54s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/623c770d5a8b455fac2500bc21f521c7 : SUCCESS in 1h 29m 47s","accounts_in_message":[],"_revision_number":3},{"id":"c589ad3ac5210543733a94b246d86f11b0292795","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"date":"2024-04-11 15:02:46.000000000","message":"Patch Set 4: Patch Set 3 was rebased\n\nOutdated Votes:\n* Verified+1\n","accounts_in_message":[],"_revision_number":4},{"id":"ec7ac5691933d3d318f03bdc3b2be0e7c5eb104f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-04-11 16:33:55.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0f90bab3cf8a4666b1b079cdb5f43348\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/5f69564ad9604e6eb76f6006797e27dc : SUCCESS in 3m 12s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/12fcfd761bf24c44b4f16956ae64e490 : SUCCESS in 4m 53s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/1ece7f7c93c24bd8863bdb0e6a4e21da : SUCCESS in 6m 01s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/3acf75d054934f7ab37e3986b391b4a8 : SUCCESS in 3m 50s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/cd1d515fcf684813ae74c12192b39044 : SUCCESS in 7m 55s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/6f5a78aca40648c184e89a964b9fa04b : SUCCESS in 5m 21s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/f6bb139b5a3b430595ddcf2173010a1d : SUCCESS in 1h 29m 17s","accounts_in_message":[],"_revision_number":4},{"id":"b9aa056b0731e81c01fc77c75143298665e021df","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2026-02-18 04:50:39.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"9238338d732c56f0ccc447ef6a79b8eaa7cf0d65","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-02-27 15:36:13.000000000","message":"Patch Set 4: Code-Review+2","accounts_in_message":[],"_revision_number":4},{"id":"c412af47ae6ecb4c1978b431b022cfb16be7ca27","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-03-06 15:50:17.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"ebb18c1405c380a8de9f3f49636d4d7c458381f0","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-06 15:50:37.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"0978e19634910150017cb18c92b505db69d5beee","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-06 17:01:00.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/00beccae07504e0f8b541d60652e1586\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/857ae42e44d143c2804918867469b91b : SUCCESS in 3m 20s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/93840f874f814f7c88f19fb609d91b83 : SUCCESS in 2m 31s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/c4927a4c1627450083dd292ebb5a6c66 : SUCCESS in 3m 35s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1729f06661e249059a43c093a46da560 : SUCCESS in 7m 52s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/f70a626df9774537bc7a7e56389fe7e4 : SUCCESS in 1h 10m 12s","accounts_in_message":[],"_revision_number":4},{"id":"a64f4dfe3f234240cdf2cbbc3c99ded4c83f77c4","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-06 17:01:00.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"b4be32ef9db02849f233ed1c28f190c169b3da25","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-06 17:02:03.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/46ffdc90c66b4e548f664290553c40c7\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/db50b48941c34743a4ca6bad84bc4fd7 : SUCCESS in 52s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"945f5dab0d1c1deae8fcec6300b107d7a6f59e84","revisions":{"65ee83a35e74add5d61f548075318782d17ac505":{"kind":"REWORK","_number":1,"created":"2022-07-21 15:22:17.000000000","uploader":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"ref":"refs/changes/69/850669/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystonemiddleware","ref":"refs/changes/69/850669/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/1"}}},"commit":{"parents":[{"commit":"dd31878b291e342ce478382e42d4e9dc29322258","subject":"Merge \"setup.cfg: Replace dashes by underscores\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/dd31878b291e342ce478382e42d4e9dc29322258"}]}],"author":{"name":"Pavlo Shchelokovskyy","email":"shchelokovskyy@gmail.com","date":"2022-07-20 12:36:43.000000000","tz":180},"committer":{"name":"Pavlo Shchelokovskyy","email":"shchelokovskyy@gmail.com","date":"2022-07-20 12:36:43.000000000","tz":180},"subject":"Add ignore_path_list option","message":"Add ignore_path_list option\n\nsome API frameworks and how they are used in OpenStack projects\n(e.g. Pecan in Octavia or Ironic) do not allow for enabling audit middleware\nonly on specific paths, plus they have intentional API parts that do not use\nKeystone authentication by design (for communications with agents\nrunning inside instances).\nAs a result, audit middleware is triggered on API paths that have not\nwent thru authtoken middleware, producing not-so valid CADF messages,\nand for some paths (like root \u0027/\u0027 or \u0027/healthcheck\u0027) to much of such\nmessages too (triggered by monitoring).\n\nThis patch adds an additonal recognised configuration parameter for\naudit middleware - ignore_path_list. This is a coma-separated list of\napi paths that will be excempted from triggering audit notifications.\n\nChange-Id: I3d6934c2dceadd476d335efaacda935625c792e5\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/65ee83a35e74add5d61f548075318782d17ac505"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/65ee83a35e74add5d61f548075318782d17ac505"}]},"branch":"refs/heads/master"},"b89ffa56e379b837aef3e78d164621179500a5f2":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2022-07-21 15:23:07.000000000","uploader":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"ref":"refs/changes/69/850669/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystonemiddleware","ref":"refs/changes/69/850669/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/2"}}},"commit":{"parents":[{"commit":"bc863d808cd3e9fb0bb132e6466b2772b1328f11","subject":"Adapt to fixtures 4.x","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/bc863d808cd3e9fb0bb132e6466b2772b1328f11"}]}],"author":{"name":"Pavlo Shchelokovskyy","email":"shchelokovskyy@gmail.com","date":"2022-07-20 12:36:43.000000000","tz":180},"committer":{"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","date":"2022-07-21 15:23:07.000000000","tz":0},"subject":"Add ignore_path_list option","message":"Add ignore_path_list option\n\nsome API frameworks and how they are used in OpenStack projects\n(e.g. Pecan in Octavia or Ironic) do not allow for enabling audit middleware\nonly on specific paths, plus they have intentional API parts that do not use\nKeystone authentication by design (for communications with agents\nrunning inside instances).\nAs a result, audit middleware is triggered on API paths that have not\nwent thru authtoken middleware, producing not-so valid CADF messages,\nand for some paths (like root \u0027/\u0027 or \u0027/healthcheck\u0027) to much of such\nmessages too (triggered by monitoring).\n\nThis patch adds an additonal recognised configuration parameter for\naudit middleware - ignore_path_list. This is a coma-separated list of\napi paths that will be excempted from triggering audit notifications.\n\nChange-Id: I3d6934c2dceadd476d335efaacda935625c792e5\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/b89ffa56e379b837aef3e78d164621179500a5f2"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/b89ffa56e379b837aef3e78d164621179500a5f2"}]},"branch":"refs/heads/master","description":"Rebase"},"cbe87cee121d936ae7dc735254d7b227e57b5c5c":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2022-12-20 10:39:45.000000000","uploader":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"ref":"refs/changes/69/850669/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystonemiddleware","ref":"refs/changes/69/850669/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/3"}}},"commit":{"parents":[{"commit":"e05466c5f439cd05482f109e6eb97a50ba156698","subject":"Remove cache invalidation when using expired token","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/e05466c5f439cd05482f109e6eb97a50ba156698"}]}],"author":{"name":"Pavlo Shchelokovskyy","email":"shchelokovskyy@gmail.com","date":"2022-07-20 12:36:43.000000000","tz":180},"committer":{"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","date":"2022-12-20 10:39:45.000000000","tz":0},"subject":"Add ignore_path_list option","message":"Add ignore_path_list option\n\nsome API frameworks and how they are used in OpenStack projects\n(e.g. Pecan in Octavia or Ironic) do not allow for enabling audit middleware\nonly on specific paths, plus they have intentional API parts that do not use\nKeystone authentication by design (for communications with agents\nrunning inside instances).\nAs a result, audit middleware is triggered on API paths that have not\nwent thru authtoken middleware, producing not-so valid CADF messages,\nand for some paths (like root \u0027/\u0027 or \u0027/healthcheck\u0027) to much of such\nmessages too (triggered by monitoring).\n\nThis patch adds an additonal recognised configuration parameter for\naudit middleware - ignore_path_list. This is a coma-separated list of\napi paths that will be excempted from triggering audit notifications.\n\nChange-Id: I3d6934c2dceadd476d335efaacda935625c792e5\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/cbe87cee121d936ae7dc735254d7b227e57b5c5c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/cbe87cee121d936ae7dc735254d7b227e57b5c5c"}]},"branch":"refs/heads/master","description":"Rebase"},"945f5dab0d1c1deae8fcec6300b107d7a6f59e84":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2024-04-11 15:02:46.000000000","uploader":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"ref":"refs/changes/69/850669/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystonemiddleware","ref":"refs/changes/69/850669/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystonemiddleware refs/changes/69/850669/4"}}},"commit":{"parents":[{"commit":"ebb842abf01745be4dbd280764faee6d32b2a76b","subject":"Imported Translations from Zanata","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/ebb842abf01745be4dbd280764faee6d32b2a76b"}]}],"author":{"name":"Pavlo Shchelokovskyy","email":"shchelokovskyy@gmail.com","date":"2022-07-20 12:36:43.000000000","tz":180},"committer":{"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","date":"2024-04-11 15:02:46.000000000","tz":0},"subject":"Add ignore_path_list option","message":"Add ignore_path_list option\n\nsome API frameworks and how they are used in OpenStack projects\n(e.g. Pecan in Octavia or Ironic) do not allow for enabling audit middleware\nonly on specific paths, plus they have intentional API parts that do not use\nKeystone authentication by design (for communications with agents\nrunning inside instances).\nAs a result, audit middleware is triggered on API paths that have not\nwent thru authtoken middleware, producing not-so valid CADF messages,\nand for some paths (like root \u0027/\u0027 or \u0027/healthcheck\u0027) to much of such\nmessages too (triggered by monitoring).\n\nThis patch adds an additonal recognised configuration parameter for\naudit middleware - ignore_path_list. This is a coma-separated list of\napi paths that will be excempted from triggering audit notifications.\n\nChange-Id: I3d6934c2dceadd476d335efaacda935625c792e5\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/945f5dab0d1c1deae8fcec6300b107d7a6f59e84"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystonemiddleware/commit/945f5dab0d1c1deae8fcec6300b107d7a6f59e84"}]},"branch":"refs/heads/master","description":"Rebase"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}