)]}'
{"id":"openstack%2Fkeystone~1002289","triplet_id":"openstack%2Fkeystone~master~I41c2d2dfe6e594ddff8971b2178d278e569f0067","project":"openstack/keystone","branch":"master","attention_set":{"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-09-02 11:24:36.000000000","reason":"\u003cGERRIT_ACCOUNT_27900\u003e replied on the change","reason_account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}}},"removed_from_attention_set":{"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-09-02 11:24:36.000000000","reason":"\u003cGERRIT_ACCOUNT_27900\u003e replied on the change","reason_account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}}},"hashtags":[],"change_id":"I41c2d2dfe6e594ddff8971b2178d278e569f0067","subject":"auth: encode ec2credential and oauth2_credential in the method bitmask","status":"NEW","created":"2026-08-25 13:40:00.000000000","updated":"2026-09-02 11:24:36.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":4,"unresolved_comment_count":1,"has_review_started":true,"meta_rev_id":"45d25409db2599af583b8b2643f6bc8dab56cfbd","_number":1002289,"virtual_id_number":1002289,"owner":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:check","value":1,"date":"2026-08-25 14:53:47.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"recommended":{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},"disliked":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"all":[{"value":1,"date":"2026-08-25 15:38:48.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},{"value":2,"date":"2026-08-25 14:55:34.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":-1,"date":"2026-09-01 14:01:53.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"}],"CC":[{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-08-25 14:53:47.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-08-25 15:38:48.000000000","updated_by":{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},"reviewer":{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},"state":"REVIEWER"},{"updated":"2026-08-27 10:29:11.000000000","updated_by":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"reviewer":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"state":"CC"},{"updated":"2026-09-01 14:01:53.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"}],"messages":[{"id":"5da5cbb25c2fd497ac6074ada3fad85fcbd5b553","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-08-25 13:40:00.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"2de8924d1313bdb8b177842312a57ced917aaa81","tag":"autogenerated:gerrit:setReadyForReview","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-08-25 13:42:25.000000000","message":"Set Ready For Review","accounts_in_message":[],"_revision_number":1},{"id":"b3cf2767f39fe4872a98381d441b943e0e334474","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-25 14:53:47.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/7721e397923a4e8d82576b6a5e684035\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/04021bb0cac34fdfaf61448e155a8432 : SUCCESS in 14m 20s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f23c9c067ded4988bb078c18e4967621 : SUCCESS in 5m 07s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/7460b90f11f347c186d32a71b4a1bbfe : SUCCESS in 9m 24s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/6b543727c34547229b9ecfd237cddb9e : SUCCESS in 11m 14s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/12d5fb0caae841ec94f359d1472d263e : SUCCESS in 12m 14s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9d98d1d1a85240c49110e90c64d51ac6 : SUCCESS in 15m 02s\n- grenade https://zuul.opendev.org/t/openstack/build/44f7c9331420423a815e7c1d52c6bdb3 : SUCCESS in 31m 05s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/f12b091b44774d60925a1dad7b587783 : SUCCESS in 1h 02m 11s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/9432678ec5ab438b8a9416d1cf78d327 : SUCCESS in 14m 42s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/ebbf4b585bad4f708998f825128ede4d : SUCCESS in 10m 28s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/4256c35b09854e2f9ed6d42058a2fe33 : SUCCESS in 51m 13s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/f75acb02bcf743cbaa52d11350e600a7 : FAILURE in 11m 50s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/595166eb243b4565bd886e365b68cd10 : FAILURE in 15m 31s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/ee771cd975a642dda61e4a2dca86d269 : SUCCESS in 28m 52s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/b8cff88e37574cda8a55e381478844f1 : SUCCESS in 50m 23s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/67261466199a40f2a537bb8604fa9e41 : SUCCESS in 23m 36s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/3d2a45d386154c5c8df6406f65f49ab6 : SUCCESS in 59m 13s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/58cfa2cd48e14d28bf015478e99820ae : SUCCESS in 47m 51s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/4b829ff4e1f24d78924d513e7b27309f : SUCCESS in 3m 59s (non-voting)\n\nWarning:\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/opendev/base-jobs/playbooks/base/cleanup.yaml for job keystone-tempest-fips.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/opendev/base-jobs/playbooks/base/post-logs.yaml for job keystone-tempest-fips.  Add to preserve-home-paths if safe, or otherwise remove.","accounts_in_message":[],"_revision_number":1},{"id":"91879c1bb4f03b38c0fb2a28155313632aa1d71e","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-08-25 14:55:34.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"f4e8d82a837f65cc1a1cc6c7199b71c523697a66","author":{"_account_id":38726,"name":"Benjamin Pinchon","email":"dev@mdfr.me","username":"bpinchon"},"date":"2026-08-25 15:38:48.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"b4c2fc081890f9fad27bb2afa97981b937d5ce96","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-25 18:53:34.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/bcaee4b3b4d7436cac18542477ff0303\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/f27141db143849889d925e2c2a1f609a : NODE_FAILURE Node(set) request 7ffbf24cab0b45e49b065575e1711e6d failed in 0s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/0d5fc0b7015748f897aaab25b41e2a27 : SUCCESS in 21m 58s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/8fc10cf8ecfe4f139e6474f7f9444f65 : SUCCESS in 32m 27s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"8dc6ab71ecc2497122ea2f411b3c040943ab0267","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2026-08-27 10:29:11.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"ee3ba603c306c8378c41ca09e544043186609a94","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-09-01 14:01:53.000000000","message":"Patch Set 1: Code-Review-1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"51e7d460cbfa589a68a67e62ec4f9775d40dfa6e","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-09-02 11:22:47.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"45d25409db2599af583b8b2643f6bc8dab56cfbd","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-09-02 11:24:36.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"dbb5c174705153f23f93d143c951a2008c9912b6","revisions":{"dbb5c174705153f23f93d143c951a2008c9912b6":{"kind":"REWORK","_number":1,"created":"2026-08-25 13:40:00.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/89/1002289/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/89/1002289/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/89/1002289/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/89/1002289/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/89/1002289/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/89/1002289/1"}}},"commit":{"parents":[{"commit":"16afc813b7e6de727d8a91e065d7824b06e32925","subject":"Merge \"Abandon server-side paged search cursor when sizelimit is reached\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/16afc813b7e6de727d8a91e065d7824b06e32925"}]}],"author":{"name":"Benjamin Pinchon","email":"benjamin.pinchon@corp.ovh.com","date":"2026-08-25 13:20:12.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-08-25 13:35:58.000000000","tz":120},"subject":"auth: encode ec2credential and oauth2_credential in the method bitmask","message":"auth: encode ec2credential and oauth2_credential in the method bitmask\n\nconvert_method_list_to_integer() builds its map from CONF.auth.methods,\nso a method name absent from that list is silently dropped and the\nresult is 0, which convert_integer_to_method_list() turns back into\nan empty list.\n\n\u0027ec2credential\u0027 (keystone.api._shared.EC2_S3_Resource) and\n\u0027oauth2_credential\u0027 (keystone.api.os_oauth2) are written into\ntoken.methods by endpoints that are not auth plugins, so they cannot\nbe listed in CONF.auth.methods: load_auth_methods() would look for a\nkeystone.auth.\u003cname\u003e entry point that does not exist, and the name\nwould become client-requestable on POST /v3/auth/tokens. Neither has\never survived the fernet round-trip.\n\nMaster already ships the EC2 API ban (910ebab06) which rejects\ntokens with \u0027ec2credential\u0027 in token.methods. Without this round-trip\nfix that check never sees the method on a fernet token, so the ban\nis a no-op for issued tokens.\n\nReserve fixed high bits for both so they round-trip. High and fixed\nmeans they never collide with the sequential indexes and adding one\nnever shifts an existing index, so tokens in circulation stay\ndecodable.\n\nThis does not fix tokens already issued: they carry the integer 0\nand still decode to an empty list.\n\nChange-Id: I41c2d2dfe6e594ddff8971b2178d278e569f0067\nAssisted-by: Cursor Grok 4.6 \u003cnoreply@cursor.com\u003e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/dbb5c174705153f23f93d143c951a2008c9912b6"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/dbb5c174705153f23f93d143c951a2008c9912b6"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}