)]}'
{"id":"openstack%2Fkeystone~725893","triplet_id":"openstack%2Fkeystone~stable%2Fstein~I39d0d705839fbe31ac518ac9a82959e108cb7c1d","project":"openstack/keystone","branch":"stable/stein","topic":"SEC-bug-1873290-1872733-1872735-1872755-stable/stein","hashtags":[],"change_id":"I39d0d705839fbe31ac518ac9a82959e108cb7c1d","subject":"Fix security issues with EC2 credentials","status":"MERGED","created":"2020-05-06 15:18:36.000000000","updated":"2020-05-11 20:04:57.000000000","submitted":"2020-05-11 20:01:56.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"725893-1589227316957-0a89928d","meta_rev_id":"5d09409f24629c865ea48a4ce8a8dbdf5676f1af","_number":725893,"virtual_id_number":725893,"owner":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"date":"2020-05-11 05:40:28.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":31882,"name":"Wander Way","email":"wanderwayout@gmail.com","username":"wanderway"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-05-11 20:01:56.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"date":"2020-05-11 13:06:35.000000000","_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},{"value":0,"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"recommended":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"all":[{"value":1,"date":"2020-05-06 20:49:25.000000000","permitted_voting_range":{"min":1,"max":2},"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},{"value":2,"date":"2020-05-07 13:58:23.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":31882,"name":"Wander Way","email":"wanderwayout@gmail.com","username":"wanderway"},{"value":1,"date":"2020-05-06 16:46:50.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":1,"date":"2020-05-06 16:43:40.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":1,"date":"2020-05-06 19:34:02.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":1,"date":"2020-05-07 10:26:10.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},{"value":0,"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"all":[{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"date":"2020-05-11 13:21:44.000000000","_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},{"value":1,"date":"2020-05-09 17:47:18.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"date":"2020-05-06 15:22:43.000000000","_account_id":31882,"name":"Wander Way","email":"wanderwayout@gmail.com","username":"wanderway"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},{"value":0,"date":"2020-05-06 15:22:43.000000000","_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},{"_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"_account_id":31882,"name":"Wander Way","email":"wanderwayout@gmail.com","username":"wanderway"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-05-06 15:22:43.000000000","updated_by":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"reviewer":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"state":"REVIEWER"},{"updated":"2020-05-06 15:22:43.000000000","updated_by":{"_account_id":31882,"name":"Wander Way","email":"wanderwayout@gmail.com","username":"wanderway"},"reviewer":{"_account_id":31882,"name":"Wander Way","email":"wanderwayout@gmail.com","username":"wanderway"},"state":"REVIEWER"},{"updated":"2020-05-06 16:43:40.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"},{"updated":"2020-05-06 16:46:50.000000000","updated_by":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"reviewer":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"state":"REVIEWER"},{"updated":"2020-05-06 19:34:02.000000000","updated_by":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"reviewer":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"state":"REVIEWER"},{"updated":"2020-05-06 20:49:25.000000000","updated_by":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"reviewer":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"state":"REVIEWER"},{"updated":"2020-05-07 10:26:10.000000000","updated_by":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"reviewer":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"state":"REVIEWER"},{"updated":"2020-05-09 17:47:18.000000000","updated_by":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"reviewer":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"state":"REVIEWER"},{"updated":"2020-05-11 13:06:35.000000000","updated_by":{"_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},"reviewer":{"_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},"state":"REVIEWER"},{"updated":"2020-05-11 13:21:44.000000000","updated_by":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"reviewer":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"state":"REVIEWER"},{"updated":"2020-05-11 20:01:56.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"3abf0edd0e7186c3750a1500f66c72b3f249e2c4","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-05-06 15:18:36.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"0e7aa66f11c3e603353b75926fc49b96cf1d6cb6","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-05-06 16:43:40.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"baa7e5ecb9fde555b42fed51922f525483574be9","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2020-05-06 16:46:50.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"a12c1e81b255d230e9c99088d4b66f0a80ae26ae","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-06 17:29:56.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/d0075f4619044c5badd2e1522abf6d77 : SUCCESS in 33m 05s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/a78e5f2653a440b5b4b4a66c4ea38c68 : SUCCESS in 36m 48s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4ef9a52b0f98490b9aced86377a850cb : SUCCESS in 7m 28s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/6429ca08062a457f9849c80f752bde37 : SUCCESS in 22m 25s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/ac087086fe3e41bb8615abc00f58eb2f : SUCCESS in 28m 42s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/00682576da7b4398b6141ed03439d8c3 : TIMED_OUT in 41m 47s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5cc35cb545874fa89bafc40589da2423 : SUCCESS in 9m 22s\n- tempest-full https://zuul.opendev.org/t/openstack/build/b6f50de3fa5843b792779d639ee46701 : SUCCESS in 1h 33m 25s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/27fb92b78e2548d38c72d0a558beae26 : SUCCESS in 52m 43s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/7c9e689aca8242bbadfb71ce5502dba0 : SUCCESS in 1h 22m 23s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/49a0f5bf3a8843d2b824985730c0a72d : SUCCESS in 19m 22s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/17dc0f9351ca46bdbaa34c9c156a47e5 : SUCCESS in 32m 03s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/f27468e7919346b4b58fcc50b5a7b5de : SUCCESS in 34m 04s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/ec75ba1ab2084557a7ad5e77552ed140 : POST_FAILURE in 35m 01s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/b515ba4c51304b4fa01cbcc2e55e9de7 : FAILURE in 39m 48s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/35a2309b425d4d0891e8e88ea9c11626 : FAILURE in 37m 09s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/1a2ed19ed56f43989b6376bb030815d0 : SUCCESS in 15m 49s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/e8664fc02a474edbbb4eb6aea4d5b021 : SUCCESS in 40m 20s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/9c5be413bcd14698bc9645fa08302e7a : SUCCESS in 55m 25s","accounts_in_message":[],"_revision_number":1},{"id":"a995e3564b9633c55e12c4e78a2f02b945957885","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-05-06 17:34:47.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"61c26930e45ac655a790e26256e4c7beb3f2eca7","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-06 19:04:28.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/4b8e7d7fea9f4c69b58438aec005344c : SUCCESS in 31m 45s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/52a3a96f3b9e49e3997daa437b1432b4 : TIMED_OUT in 42m 30s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6fb02f15640b4ea590a91441af7ce0c8 : SUCCESS in 6m 21s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/8d442ab5ea52496f9f0a4df454045ffe : SUCCESS in 23m 01s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/72410ee23ed843f88e28da60dfa2e37e : SUCCESS in 30m 42s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/5e9720405fe246ec82477bcd219be185 : SUCCESS in 29m 17s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d0c08b2365184a14932081c794e397a2 : SUCCESS in 9m 05s\n- tempest-full https://zuul.opendev.org/t/openstack/build/136fba97e6e742b9bea5e33bbc974e31 : SUCCESS in 1h 24m 58s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/14616c5f70b448a1891eedf44b7c7948 : SUCCESS in 57m 30s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/6d1a07cb5063469c9641fb262bccaffc : SUCCESS in 1h 20m 40s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/28be734e48df46eca815a6c72b472455 : SUCCESS in 21m 27s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/d52279c705ac47519d35ce85f279dfc4 : SUCCESS in 36m 12s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/7513f8a97d8d45458f9fe553bf3ff763 : SUCCESS in 37m 19s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/ee5e492c7a9941119970b6c3db481e3a : SUCCESS in 38m 26s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/cbeaf734bc10472eba4ca4261c649b6f : SUCCESS in 39m 54s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/4dbdd611cb0349d5afd3dfa369a9eb6f : SUCCESS in 32m 52s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/e9cfafe2862b47d6b383e43423a1d394 : SUCCESS in 20m 36s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/4d0adc0ee2064458a7c203ca632137c9 : SUCCESS in 52m 29s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/5a5a2d530b45494f9b8ffa86c98efa75 : SUCCESS in 1h 04m 55s","accounts_in_message":[],"_revision_number":1},{"id":"3837795dd1d421ddf3f952d3a1a0905c9c8ebe23","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-05-06 19:11:38.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"dbeb2bea3d345ba8597cbd37082423f65504328f","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-06 19:34:02.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"1f62d13dc9aaa213728b9f45751964fc61ae71e2","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2020-05-06 20:49:25.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"a138070e112bbe7384fb8b4e470d1a8781ca13cb","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-06 20:56:52.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/64240bde0dad43f59d8a534c15b91e4e : SUCCESS in 31m 36s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/ab49ce949a1c4d5a8cc14af130fac3ed : SUCCESS in 33m 05s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/45fe0430cf1949dfb44aeaf3437f41e5 : SUCCESS in 12m 11s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/df16531dbf6b4b16b72ef07c5559c1cc : SUCCESS in 23m 42s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/883bd79f0a8941bc8c2994a810c36c33 : SUCCESS in 29m 22s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/296840cc92944c869b99463da65fc52c : SUCCESS in 34m 18s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b54d5145fa7247e89d1dcbb0e11ceee8 : SUCCESS in 12m 56s\n- tempest-full https://zuul.opendev.org/t/openstack/build/ad76604ed6c84d1ebda88fd83a074cb4 : SUCCESS in 1h 30m 31s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/ba4080c7415c4c7986ff0b8b68b43764 : SUCCESS in 53m 29s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/124000c7e0b24c009c560f4b8d06b0fb : SUCCESS in 1h 27m 16s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/6c57b7aed89b444d81419cd76f42b3d1 : SUCCESS in 21m 23s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/008691a17fa541d5b4272e66851bc5ef : SUCCESS in 33m 21s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/1dba2ac7ec0a42e3a8c1c9ef389ce6ba : SUCCESS in 42m 58s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/43503644da4446b9bfb24e07a3b87b7d : SUCCESS in 45m 02s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/b1a8c4a1286d42688744b1b1f54fc446 : SUCCESS in 35m 03s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/a7d5eebbbc9d48a2b3888ae506e29fc9 : SUCCESS in 34m 41s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/3e7b7c8817604e28a681a91738be7b54 : SUCCESS in 19m 01s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/c990861c05264136af2a999b9bb05ff0 : SUCCESS in 38m 23s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/380d07f2da344629aea9d6b5471dc492 : SUCCESS in 58m 51s","accounts_in_message":[],"_revision_number":1},{"id":"19f28bd502c72100d81feeedfd1e35f6a9186bc8","author":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"date":"2020-05-07 10:26:10.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"7b67fbdbe7be8339d5561e79f0cc84f5a22b56e1","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-05-07 13:58:23.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"749cb2975371854456239dad65e5318addef1a02","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-05-09 17:47:18.000000000","message":"Patch Set 1: Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"c0f9ec97f3ad93662e73da34ff1625a240b4592c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-09 17:47:31.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"42f2705af3448e8c82bd157c676fb53cf62289ee","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-09 19:12:02.000000000","message":"Patch Set 1: Verified-2\n\nThis change depends on a change that failed to merge.","accounts_in_message":[],"_revision_number":1},{"id":"2bdc97cecd5dc2c2b46ff86a0b9182e448f0de6f","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-05-11 05:40:28.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"251bb0b0c97b0acd04ef2e16efb9e8507ff422ac","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 07:36:39.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/6d26b1624cf34caa898b2469250df275 : SUCCESS in 42m 42s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/c45077f2bbb44f1d863baa40bd53d2bc : TIMED_OUT in 42m 14s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4922fd95900244fdb1ac2b0176044c5f : SUCCESS in 9m 14s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/eb4ed07dd9ef4719bb38375d5c7a9a75 : SUCCESS in 36m 51s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/b25ea4eebd444db5896107038c476d7e : SUCCESS in 36m 50s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/1110c1a390304feca4d2af86834beacb : SUCCESS in 41m 48s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5d3387f01ee04eb3a63bb2a5c6e1a809 : SUCCESS in 12m 09s\n- tempest-full https://zuul.opendev.org/t/openstack/build/80dd715d17fb41cdbdfaaaf5c28175fe : SUCCESS in 1h 54m 28s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/10039d4b480a44ef86b6ce604dadc32f : SUCCESS in 1h 10m 58s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/13001b7d60d547d39ddd60cf0cbe2160 : SUCCESS in 1h 42m 56s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8538b1fab6e8441a8d61dc2e530fc9a6 : SUCCESS in 19m 14s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/58ae521e65024bdbb8d1e84277faf2d9 : SUCCESS in 50m 55s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/cbbb66754c2947d088fdb4a7946778d9 : SUCCESS in 1h 01m 09s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/efe15180e1ee44a190555dff7b5e1f6e : FAILURE in 12m 15s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/22761cb18d5f4d219c45095447915b9e : FAILURE in 12m 06s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/6908489d809843ecbc1861862c959702 : FAILURE in 12m 06s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/885f3747032c4937bdd374a01ac9d5f6 : SUCCESS in 34m 38s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/f436570f540a432dabf62747cb0a980e : SUCCESS in 1h 00m 23s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/e7af2a3e95fc4345a614ccfa67dfd238 : SUCCESS in 1h 28m 03s","accounts_in_message":[],"_revision_number":1},{"id":"409fc544564f892413c7a3b94701a2fb913a5296","author":{"_account_id":9373,"name":"Vlad Gusev","email":"vlad.esten@gmail.com","username":"s10"},"date":"2020-05-11 13:06:35.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"05ef7c0f6e08b3de063d063a2ceee6dbd73bf719","author":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"date":"2020-05-11 16:34:46.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"8ccb33f094b5fdd79281d79b66807154fd05d68c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 18:16:37.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/1ea506f9d87e4fe186d6fe1e715f9ba8 : SUCCESS in 35m 32s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/b977056de12d42f4befdfb93cf6aafb2 : SUCCESS in 30m 25s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/02107a8a9b014f0db8df338a7cf754c2 : SUCCESS in 6m 53s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/1bd680b4d9b34b7b9f404a930522daf3 : SUCCESS in 23m 33s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/f21fa55dc2444f509119ac48bd2fedad : SUCCESS in 26m 53s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/0547bb7baa9541a38165f5a1a5e153bc : SUCCESS in 25m 21s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/29e2d1ca9d9b46a890706f91bf6365f0 : SUCCESS in 13m 40s\n- tempest-full https://zuul.opendev.org/t/openstack/build/7c76535d55f94c4b95da70f10eccdf28 : SUCCESS in 1h 28m 57s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/655a0a992a594840b8d8af499300fad9 : SUCCESS in 1h 10m 49s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/9fc69089e1a54f3ab11b669a84a9de06 : SUCCESS in 1h 27m 38s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/10cc6a038f2c46b1a23ac8a669fba416 : SUCCESS in 18m 53s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/0200b99131ab490c83d0a674cdcf1cc2 : SUCCESS in 35m 07s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/19e9b5203d4d45fcadafa83accaacd40 : SUCCESS in 37m 08s\n- keystone-dsvm-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/961a5e24b232422fbe50f5d55320b138 : FAILURE in 16m 52s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/a7e46ffa70c64756af75ef3fb6f0a2bb : FAILURE in 12m 08s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/4b1b6f352b1d40d684b86e8889d8d559 : FAILURE in 8m 55s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/149459c2b7944f73bb294b3c33399ccd : SUCCESS in 20m 11s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/18e01e1eb3bd4650a11a4a7c8511dae8 : SUCCESS in 49m 24s (non-voting)\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/67ced5ee711144ef951f60a31666f60c : SUCCESS in 1h 03m 20s","accounts_in_message":[],"_revision_number":1},{"id":"04c5a71eab7f488727ba61448d9b334084620684","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 18:17:00.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"1fbd7c88f38b06395bb77a40c3e50a4f6d211b6a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 20:01:56.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/a19558099f404ee4bc7c1c589b6a33e3 : SUCCESS in 27m 50s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8b180e7e8245412f9d768158ee4c2363 : SUCCESS in 6m 19s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/be77d5622d6f486399073eb55c89972b : SUCCESS in 24m 06s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/ec973de6f7df4718a13c5e8ebdbeba61 : SUCCESS in 41m 14s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/7169e30fdbc14c2ebef0266480fda5e8 : SUCCESS in 41m 33s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b4cceb96730142d592123bc54df75f0f : SUCCESS in 9m 11s\n- tempest-full https://zuul.opendev.org/t/openstack/build/c2ddfb7249134f128a29034485db5226 : SUCCESS in 1h 39m 14s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/dd0a7716d84d4602a040ca6c2d867e20 : SUCCESS in 1h 09m 35s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/40eeabe4058348888ba6bf837ed795ce : SUCCESS in 1h 15m 20s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5f9f4804aec945ecb7fc8a1fa62c2735 : SUCCESS in 16m 47s\n- keystone-dsvm-functional https://zuul.opendev.org/t/openstack/build/8b398ca4d99a48448fbb0f203df9fcdd : SUCCESS in 32m 15s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/312ba92144ea40928fd2f6640bb2621e : SUCCESS in 33m 26s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/f0a2e0d6d7f24a74a9e6c23b75af531d : SUCCESS in 56m 43s","accounts_in_message":[],"_revision_number":1},{"id":"dae44ee1fc5235582e1a040d7a90e995bb8b53c6","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 20:01:56.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":1},{"id":"120ea1c6ff50903548a808962dad824d120f8a25","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 20:04:57.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7193c40f25bc4b89bcb35d43130e5a95 : SUCCESS in 2m 29s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/91681e5151524e0281596e410eeb91a0 : SUCCESS in 2m 15s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"206392a40ce3da3d389e5e7ec721ada2737b84da","revisions":{"206392a40ce3da3d389e5e7ec721ada2737b84da":{"kind":"REWORK","_number":1,"created":"2020-05-06 15:18:36.000000000","uploader":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"ref":"refs/changes/93/725893/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/93/725893/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/725893/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/725893/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/725893/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/93/725893/1"}}},"commit":{"parents":[{"commit":"330911cee48b5105ec121d96b23aed197551b561","subject":"Ensure OAuth1 authorized roles are respected","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/330911cee48b5105ec121d96b23aed197551b561"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-14 23:47:44.000000000","tz":-420},"committer":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-05-06 15:18:16.000000000","tz":-420},"subject":"Fix security issues with EC2 credentials","message":"Fix security issues with EC2 credentials\n\nThis change addresses several issues in the creation and use of EC2/S3\ncredentials with keystone tokens.\n\n1. Disable altering credential owner attributes or metadata\n\nWithout this patch, an authenticated user can create an EC2 credential\nfor themself for a project they have a role on, then update the\ncredential to target a user and project completely unrelated to them. In\nthe worst case, this could be the admin user and a project the admin\nuser has a role assignment on. A token granted for an altered credential\nlike this would allow the user to masquerade as the victim user. This\npatch ensures that when updating a credential, the new form of the\ncredential is one the acting user has access to: if the system admin\nuser is changing the credential, the new user ID or project ID could be\nanything, but regular users may only change the credential to be one\nthat they still own.\n\nRelatedly, when a user uses an application credential or a trust to\ncreate an EC2 credential, keystone automatically adds the trust ID or\napplication credential ID as metadata in the EC2 access blob so that it\nknows how the token can be scoped when it is used. Without this patch, a\nuser who has created a credential in this way can update the access blob\nto remove or alter this metadata and escalate their privileges to be\nfully authorized for the trustor\u0027s, application credential creator\u0027s, or\nOAuth1 access token authorizor\u0027s privileges on the project. This patch\nfixes the issue by simply disallowing updates to keystone-controlled\nmetadata in the credential.\n\n2. Respect token roles when creating EC2 credentials\n\nWithout this patch, a trustee, an application credential user, or an\nOAuth1 access token holder could create an EC2 credential or an\napplication credential using any roles the trustor, application\ncredential creator, or access token authorizor had on the project,\nregardless of whether the creator had delegated only a limited subset of\nroles. This was because the trust_id attribute of the EC2 access blob\nwas ignored, and no metadata for the application credential or access\ntoken was recorded either. This change ensures that the access\ndelegation resource is recorded in the metadata of the EC2 credential\nwhen created and passed to the token provider when used for\nauthentication so that the token provider can look up the correct roles\nfor the request.\n\nConflicts (six removal in  e2d83ae9, pep8 fixes in e2d83ae9):\n      keystone/api/credentials.py\n      keystone/tests/unit/test_v3_application_credential.py\n      keystone/tests/unit/test_v3_credential.py\n\nChange-Id: I39d0d705839fbe31ac518ac9a82959e108cb7c1d\nCloses-bug: #1872733\nCloses-bug: #1872755\nCloses-bug: #1872735\n(cherry picked from commit 37e9907a176dad6843819b1bec4946c3aecc4548)\n(cherry picked from commit 2f2736ebb267c757ad77fcf25ee0aaeefab2a09d)\n(cherry picked from commit 27caafe3daa552663719954f2cd6713dd4493178)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/206392a40ce3da3d389e5e7ec721ada2737b84da"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/206392a40ce3da3d389e5e7ec721ada2737b84da"}]},"branch":"refs/heads/stable/stein"}},"requirements":[],"submit_records":[],"submit_requirements":[]}