)]}'
{"id":"openstack%2Fkeystone~1002444","triplet_id":"openstack%2Fkeystone~stable%2F2025.2~I9c479eca37c49cd994f63374f9060e490b3de96d","project":"openstack/keystone","branch":"stable/2025.2","topic":"fix-protection-functional-stables","hashtags":[],"change_id":"I9c479eca37c49cd994f63374f9060e490b3de96d","subject":"devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests","status":"ABANDONED","created":"2026-08-26 07:17:54.000000000","updated":"2026-08-26 07:31:47.000000000","total_comment_count":0,"unresolved_comment_count":0,"work_in_progress":true,"has_review_started":false,"meta_rev_id":"62512b7067d02b6abaf844925df96a4e5ef3a6cc","_number":1002444,"virtual_id_number":1002444,"owner":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"actions":{},"labels":{"Verified":{"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{},"pending_reviewers":{},"reviewer_updates":[],"messages":[{"id":"d422129e8d9bbcd47a9e69cad36753c70b693863","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-08-26 07:17:54.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"69bbe2e507a71061fab07cf60b962315f89f4a13","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-08-26 07:25:42.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"62512b7067d02b6abaf844925df96a4e5ef3a6cc","tag":"autogenerated:gerrit:abandon","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-08-26 07:31:47.000000000","message":"Abandoned\n\nRedundant with https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/1002440 — the job is branchless, so restoring KEYSTONE_ENFORCE_SCOPE there is the fix. Stables already honor that variable.","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"9ad9167bfa458bbf73cbde6d8bca489d56843572","revisions":{"a4af989ed602a7ed0767ab46f10baca7884cab17":{"kind":"REWORK","_number":1,"created":"2026-08-26 07:17:54.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/44/1002444/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/44/1002444/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/44/1002444/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/44/1002444/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/44/1002444/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/44/1002444/1"}}},"commit":{"parents":[{"commit":"81d0a4f037b482bf716b0ce13c4f87e0391839c7","subject":"Fix keystone scope flag in tempest.conf","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/81d0a4f037b482bf716b0ce13c4f87e0391839c7"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-08-26 07:16:38.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-08-26 07:16:38.000000000","tz":120},"subject":"devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests","message":"devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests\n\nkeystone-tempest-plugin I6b5b7745afbdbb7ef91a80fece0aae8eaef764a0\nswitched the branchless keystone-protection-functional job to\nKEYSTONE_ENFORCE_NEW_DEFAULTS. This branch still needs\noslo_policy.enforce_scope\u003dtrue (do not backport 993829).\n\nTreat either job variable as a request to enable SRBAC and write\ntempest.conf so the RBAC tests are not skipped.\n\nAssisted-by: Cursor Grok 4.6 \u003cnoreply@cursor.com\u003e\nChange-Id: I9c479eca37c49cd994f63374f9060e490b3de96d\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a4af989ed602a7ed0767ab46f10baca7884cab17"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a4af989ed602a7ed0767ab46f10baca7884cab17"}]},"branch":"refs/heads/stable/2025.2"},"9ad9167bfa458bbf73cbde6d8bca489d56843572":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-08-26 07:25:42.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/44/1002444/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/44/1002444/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/44/1002444/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/44/1002444/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/44/1002444/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/44/1002444/2"}}},"commit":{"parents":[{"commit":"3dfbbe7b9bd11dcd64420da0e4eda48b637f4a70","subject":"Merge \"Fix project policy allowing unauthorized access to root domains\" into stable/2025.2","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3dfbbe7b9bd11dcd64420da0e4eda48b637f4a70"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-08-26 07:16:38.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-08-26 07:25:19.000000000","tz":120},"subject":"devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests","message":"devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests\n\nkeystone-tempest-plugin I6b5b7745afbdbb7ef91a80fece0aae8eaef764a0\nswitched the branchless keystone-protection-functional job to\nKEYSTONE_ENFORCE_NEW_DEFAULTS. This branch still needs\noslo_policy.enforce_scope\u003dtrue (do not backport 993829).\n\nTreat either job variable as a request to enable SRBAC and write\ntempest.conf so the RBAC tests are not skipped.\n\nAssisted-by: Cursor Grok 4.6 \u003cnoreply@cursor.com\u003e\nChange-Id: I9c479eca37c49cd994f63374f9060e490b3de96d\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/9ad9167bfa458bbf73cbde6d8bca489d56843572"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/9ad9167bfa458bbf73cbde6d8bca489d56843572"}]},"branch":"refs/heads/stable/2025.2"}},"requirements":[],"submit_records":[],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}