)]}'
{"id":"openstack%2Fkeystone~726025","triplet_id":"openstack%2Fkeystone~stable%2Fpike~Idb10267338b4204b435df233c636046a1ce5711f","project":"openstack/keystone","branch":"stable/pike","topic":"bug/1872737","hashtags":[],"change_id":"Idb10267338b4204b435df233c636046a1ce5711f","subject":"Check timestamp of signed EC2 token request","status":"MERGED","created":"2020-05-06 23:30:33.000000000","updated":"2020-06-02 20:27:58.000000000","submitted":"2020-06-02 20:26:19.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"726025-1591129579295-e5f202f8","meta_rev_id":"2f04972a75725b1a12f0a39997405a3a358fa17e","_number":726025,"virtual_id_number":726025,"owner":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-06-02 20:26:19.000000000","post_submit":true,"permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"value":0,"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},{"value":0,"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":16310,"name":"Flávio","email":"framalho@suse.com","username":"flaviosr"},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"value":0,"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},{"value":0,"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":2,"date":"2020-06-02 15:42:14.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":16310,"name":"Flávio","email":"framalho@suse.com","username":"flaviosr"},{"value":2,"date":"2020-06-01 14:38:06.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"value":0,"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},{"value":0,"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":1,"date":"2020-06-02 15:42:14.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":16310,"name":"Flávio","email":"framalho@suse.com","username":"flaviosr"},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"_account_id":16310,"name":"Flávio","email":"framalho@suse.com","username":"flaviosr"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-05-06 23:31:09.000000000","updated_by":{"_account_id":16310,"name":"Flávio","email":"framalho@suse.com","username":"flaviosr"},"reviewer":{"_account_id":16310,"name":"Flávio","email":"framalho@suse.com","username":"flaviosr"},"state":"REVIEWER"},{"updated":"2020-05-07 10:27:50.000000000","updated_by":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"reviewer":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"state":"REVIEWER"},{"updated":"2020-05-08 14:19:39.000000000","updated_by":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"reviewer":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"state":"REVIEWER"},{"updated":"2020-05-08 19:00:52.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"},{"updated":"2020-05-10 12:09:43.000000000","updated_by":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"reviewer":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"state":"REVIEWER"},{"updated":"2020-05-29 15:33:09.000000000","updated_by":{"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},"reviewer":{"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},"state":"REVIEWER"},{"updated":"2020-06-01 14:38:06.000000000","updated_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"reviewer":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"state":"REVIEWER"},{"updated":"2020-06-02 15:42:14.000000000","updated_by":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"reviewer":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"state":"REVIEWER"},{"updated":"2020-06-02 20:26:19.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"962f19b4a0bd352cbf81ee41bb9527d28be02fe6","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-06 23:30:33.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"472ca33f125034af4e83ffb78d6b3d16d2fd6a92","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-07 01:15:09.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c05e9ff00ba24c29bbfa51bca29a8576 : SUCCESS in 6m 15s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/23c67db3b5bd46078d3b592df39dab64 : SUCCESS in 23m 36s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/061c5c956e064ac0876054f96c420174 : SUCCESS in 20m 53s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/5ee06ec9f8264f87b6fd568b73cd3954 : SUCCESS in 8m 57s\n- tempest-full https://zuul.opendev.org/t/openstack/build/9200766d6dab44a6b7ea2942c779946d : SUCCESS in 1h 43m 07s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/4b34bc8cec1e493bafe2cbcdff9e28a8 : FAILURE in 29m 14s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1ce51d73de00402ebb89c2ba578b555e : SUCCESS in 17m 47s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/ebd74b6be74841c7babbfdb692e37031 : FAILURE in 24m 54s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/30f684ce78ce4144adce31b83f40ee0a : SUCCESS in 18m 14s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/0036bffe9da446f6b81328719455abbc : SUCCESS in 32m 31s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"fc94adf414443b2cac8837c2d9245462197d4370","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-05-07 02:12:48.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"be5b9df6c92d3f988988b0ab7bdc9ceee700b073","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-07 03:46:58.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/205ce49402fa49b9a2f0077617bfe9ed : SUCCESS in 6m 06s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/91b4aaa6c64541f9b61658cd598f8e08 : SUCCESS in 17m 35s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/ed99d8b0dc0846adbeb14336fe39e441 : SUCCESS in 16m 24s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/a454ec8b16e64f648b9b8761deef77dd : SUCCESS in 7m 17s\n- tempest-full https://zuul.opendev.org/t/openstack/build/41e17ada871445ef925708823f48ce63 : SUCCESS in 1h 31m 42s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/a07628305a974f0092cd2f683c6908cd : FAILURE in 26m 51s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/63ff36dae80346fa91901f83bc5cfb4d : SUCCESS in 17m 06s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/5c9f8be670cb4b7ba36bc2586d07985b : FAILURE in 24m 56s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/d6eb6c9bd05949459023e21b7c47b64e : SUCCESS in 18m 39s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/0e336fd604c7401395460f65da8e1b2d : SUCCESS in 39m 23s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"e9d278ed46c51895931b23f36672af77a7d06216","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-07 05:07:48.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"a5d6277f4ed55d0dfdff333d3c81d78be002358b","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-07 06:31:46.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fa4748bfe2be4ab8983e3636f9579367 : SUCCESS in 6m 03s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/7d10d0e661074891ba5d20312b00ef67 : SUCCESS in 21m 28s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/497254aecc7d4b509111381fa3facf40 : SUCCESS in 16m 38s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/c78128068c344d099b76cd30e255bcc1 : SUCCESS in 8m 18s\n- tempest-full https://zuul.opendev.org/t/openstack/build/efbf79ec671b41dfa343d4f3a9ed8594 : SUCCESS in 1h 22m 45s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/78646da561ba4f14aa98320fed750a06 : FAILURE in 27m 28s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e35a82c356104eb98e0a3c515785af85 : SUCCESS in 14m 19s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/e1b6e97cda19424e8d9e61b41bcd66c4 : FAILURE in 27m 02s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2979bfe9a9854a77a544872f9f09d409 : SUCCESS in 15m 47s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/46c3094ceebe4ce48c64853ce67343a9 : SUCCESS in 38m 24s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"2eca0240d5a1fa95c15255c35f7489f2d1f33115","author":{"_account_id":6476,"name":"Thomas Goirand","email":"thomas@goirand.fr","username":"thomas-goirand"},"date":"2020-05-07 10:27:50.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"5c49742d1618233f4dbd00ae47e536f2aa612288","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-07 12:14:13.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f4f3ed6a94254ca0bc97fd8adf2f23c7 : SUCCESS in 6m 51s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/46611d6d110a498488bea9a87e26a172 : SUCCESS in 31m 09s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/251aa14fe84e4fcc8d6c21987440a51b : TIMED_OUT in 41m 57s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/52e36373bb5244fbb1afdcc4ccbcfcd9 : SUCCESS in 10m 31s\n- tempest-full https://zuul.opendev.org/t/openstack/build/981deeee1021468896f7136c9e3b823b : SUCCESS in 1h 24m 07s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/2594049b358f4c379069c4a076d258d5 : FAILURE in 29m 34s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/043393015fbb4e7d83aaf32acbf81862 : SUCCESS in 16m 59s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/c67ccc68058c4f4a8b5549fb39068902 : FAILURE in 26m 00s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f47f846dd88344708600336e3eba018d : SUCCESS in 15m 11s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/f31c32b0756c4e569987c7890cb7f5a0 : SUCCESS in 44m 28s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"4a6d99ab907cb189f24334418ee6925033cdb200","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-05-07 22:57:39.000000000","message":"Patch Set 1: Code-Review-1\n\nWhy do we skip stable/queens ?","accounts_in_message":[],"_revision_number":1},{"id":"0a422c422f6bb634d33f1cc9685da06e6371fbea","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-05-08 14:19:07.000000000","message":"Patch Set 1:\n\n\u003e Why do we skip stable/queens ?\n\nStable/queens review is here: https://review.opendev.org/#/c/726400/","accounts_in_message":[],"_revision_number":1},{"id":"c896bd0ed67e400b4aaf44db451d4ffa22697e83","author":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"date":"2020-05-08 14:19:39.000000000","message":"Patch Set 1:\n\nStable/Queens backport on https://review.opendev.org/#/c/726400/","accounts_in_message":[],"_revision_number":1},{"id":"407a9a6735df8e491904f071708b8f52cf695af0","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-05-08 14:45:22.000000000","message":"Patch Set 1:\n\n@Lance @Raildo thanks for the queens backport. I\u0027ll keep -1 because I believe that we still need to update the commit message, like adding that queens commit in cherry pick info line.","accounts_in_message":[],"_revision_number":1},{"id":"1f172dedf68ddbe99531e5aac972968dcd849377","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-08 17:05:18.000000000","message":"Patch Set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"5b7295b0b6b04199269320631fb2057b58878e0d","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-08 17:05:38.000000000","message":"Patch Set 2:\n\n\u003e @Lance @Raildo thanks for the queens backport. I\u0027ll keep -1 because\n \u003e I believe that we still need to update the commit message, like\n \u003e adding that queens commit in cherry pick info line.\n\ncommit msg updated, thanks for the reminder","accounts_in_message":[],"_revision_number":2},{"id":"b204317e3bba14adedb86bf156501cd8b08605ff","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-08 19:00:15.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f6ba312430274d739e84f475bbcb6c22 : SUCCESS in 7m 00s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/06f31db04c4047e597993d1e769b3424 : SUCCESS in 17m 02s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/0e3afc9bb64c4a46988615740043e238 : SUCCESS in 15m 00s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/01a61927dc1c472c96f7da1c30b45c7c : SUCCESS in 8m 15s\n- tempest-full https://zuul.opendev.org/t/openstack/build/363cc8c4eb3c4e0f9f020cf849ff7e5f : SUCCESS in 1h 53m 03s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/623c6ed9407e4b13a28c01b02f6669bb : FAILURE in 46m 53s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/96d31719c9e34bbb8110a4ae9afb0c9a : SUCCESS in 17m 21s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/4c904c1d56054390a2d955c86528710b : FAILURE in 27m 57s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c05f9b6cd7444112974844db6ce79c5a : SUCCESS in 19m 38s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ac25b871d3fa4a95a3664e73686e0c2b : SUCCESS in 33m 25s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"5b9ea50e17acf775a78c53798c40462e106bb1c2","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-05-08 19:00:52.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"3e38996f596fd19fda4b3b13b565f06c0b5a011e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-08 22:01:03.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/17cb66b35592434f9e4c21bb23533b3f : SUCCESS in 8m 42s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/56a958a925f9403bbb70c63c4838db85 : SUCCESS in 28m 29s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/38b218f0e1464b1cb76bb83cf153cf6c : TIMED_OUT in 41m 28s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/f8f3ada381a84c5b9e1bb33e7e1ee2c4 : SUCCESS in 10m 25s\n- tempest-full https://zuul.opendev.org/t/openstack/build/9b87add3548d4facbe1c385e16b8a13c : SUCCESS in 1h 42m 09s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/8e1668712cb6493f9ace169e95f97dbe : FAILURE in 34m 45s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/4e27d82dcc61411faa2072abbe4daa37 : SUCCESS in 16m 46s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/01a855341d01467ba8646ce45bbaf221 : FAILURE in 31m 45s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/47b1fbdb31fe4da2b1308a4eecd96745 : SUCCESS in 44m 41s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/68e50bc56b8c481b83d0ad316cefafe4 : SUCCESS in 41m 29s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"e2be508f6a9f80fed38a084929b6edaa0aeb8c9f","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2020-05-10 12:09:43.000000000","message":"Patch Set 2: Code-Review-1\n\nI\u0027m afraid the description about conflicts are not properly updated.","accounts_in_message":[],"_revision_number":2},{"id":"5cd2f1fc6566237408fdf80e571b24630d93bb86","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-11 16:38:15.000000000","message":"Patch Set 3: Commit message was updated.","accounts_in_message":[],"_revision_number":3},{"id":"293dc8016d1953b11a86a38885d865c6ef7c3b31","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-05-11 20:28:55.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"e77ae7451fff1b4af04250e707a242dc70d92576","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-11 22:15:34.000000000","message":"Patch Set 4: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/175f2cb8f7b8413f99004c8c593bf8f4 : SUCCESS in 7m 56s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/25303f7f04894a059d5ad8f09dfeca93 : SUCCESS in 16m 09s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/b246d036d7d741f5939c9b45d328e003 : SUCCESS in 15m 00s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/df86d18b9cf54bed89d6d5466f8b5292 : SUCCESS in 8m 58s\n- tempest-full https://zuul.opendev.org/t/openstack/build/5d79246bb5e543ae924f08017f053625 : SUCCESS in 1h 39m 09s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/12f5e357556e4581b3967e5974d69bf5 : FAILURE in 34m 25s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/523c1354a49f4d9e8be1907af9da7ab7 : SUCCESS in 24m 24s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/f5208d2ad10c442d8b8520866522281d : FAILURE in 32m 57s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/d06080d4c77b4f39acf9153c3a63dc86 : SUCCESS in 29m 14s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/35ad30e999cb494e8f301dcf07c6d329 : SUCCESS in 37m 00s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"9aca4a56a9a6b8dea3c17cbb34d2f3b320812c1a","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-05-26 18:59:26.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"00804f7eaea75b5ae8a346c0460a3df518983cfe","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-05-26 20:40:24.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/06c114541b45487a9cf8d1445cf9410f : SUCCESS in 6m 33s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/5471dbe07edc4ce69613e7ca4484219c : SUCCESS in 16m 13s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/01926315c32844ecbd99223109a97e22 : SUCCESS in 17m 21s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/29877a2f08a44e95be1ac1f88ef82a87 : SUCCESS in 8m 42s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b9cd96a4663e4fb5a992312de2eb0d84 : SUCCESS in 10m 10s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/4a7d0a40e4b747ae91c0340dbe0a8057 : FAILURE in 32m 10s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/fd6fe5cc811247d3b861ad9ccbe669c6 : SUCCESS in 20m 52s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/cc8c10dd471449b6ab7a393ef55e130e : SUCCESS in 38m 38s (non-voting)\n- tempest-full https://zuul.opendev.org/t/openstack/build/e37a46443f5d48b08f261fb91318606f : SUCCESS in 1h 35m 21s","accounts_in_message":[],"_revision_number":4},{"id":"5709273651502210bb6551419c0220a42588674a","author":{"_account_id":1736,"name":"Ivan Kolodyazhny","email":"e0ne@e0ne.info","username":"e0ne"},"date":"2020-05-29 15:33:09.000000000","message":"Patch Set 4: Code-Review+1","accounts_in_message":[],"_revision_number":4},{"id":"569f9bfe8517aec100c00a3f0ea86ccccd33affd","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-05-29 20:19:44.000000000","message":"Patch Set 4: Code-Review-1\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"af017002f0f2791c7243d3327ef901fbf0fb25e4","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-06-01 05:13:58.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"964398abe76a3554c95276c64126b92b8a15ba6a","author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"date":"2020-06-01 05:16:06.000000000","message":"Uploaded patch set 5.","accounts_in_message":[],"_revision_number":5},{"id":"64b4f742525321c1df413c9def6c84601f640431","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-01 06:47:35.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c088fe37f450407e9a77391f55e12219 : SUCCESS in 5m 54s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/4f045210f0a14d239f66df0b1a0e198b : SUCCESS in 11m 46s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/13db07db156e47fabc062a5d63d19794 : SUCCESS in 12m 22s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/59c49fb8c86441f586d94c83b0a11194 : SUCCESS in 9m 05s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/fa9c128650864a628d795ebd5bf9a122 : SUCCESS in 7m 35s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/4643bd4422854c7088005543886cad05 : FAILURE in 28m 58s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/024339740bae41fcb8d0a1ace6511cf7 : SUCCESS in 17m 38s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/0ec859b767574cd399afd0861aa829bb : SUCCESS in 35m 10s (non-voting)\n- tempest-full https://zuul.opendev.org/t/openstack/build/f87134a6420c45f49dbf1011d5a54c06 : FAILURE in 1h 19m 35s","accounts_in_message":[],"_revision_number":5},{"id":"3cbde33115a6cf70df57c173853521817efd6f53","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-06-01 14:37:07.000000000","message":"Patch Set 5:\n\nrecheck","accounts_in_message":[],"_revision_number":5},{"id":"e6ed08a149c8c892c83049a387ee0fa1630c8c3c","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-06-01 14:38:06.000000000","message":"Patch Set 5: Code-Review+2","accounts_in_message":[],"_revision_number":5},{"id":"32bdb70557e514e755d1a06cc44e0a48364e840e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-01 16:29:44.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3154972caf65420197144d48622a4c28 : SUCCESS in 6m 45s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/1ec545280062412481a89f1d041f13f4 : SUCCESS in 12m 19s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/ae3c1935fc404d41bcdff6809a18f66c : SUCCESS in 21m 57s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/8846a04c905449bc81acf343ebcccf5c : SUCCESS in 9m 24s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/bc00d3761aa14bf6ac52aad9078419f4 : SUCCESS in 8m 48s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/6fbb8414fbe9433f92939e978a556411 : FAILURE in 27m 57s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/0bbbe54e03e8480691d0fdc84d70fcc3 : SUCCESS in 15m 01s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/9bdd28c44e264080ad99ac140a120dee : SUCCESS in 42m 18s (non-voting)\n- tempest-full https://zuul.opendev.org/t/openstack/build/ed33f518678a4c1aba6d3f916a384579 : SUCCESS in 1h 33m 14s","accounts_in_message":[],"_revision_number":5},{"id":"a8130a793656c0b4c822740b1211c13eb812194b","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-06-02 15:42:14.000000000","message":"Patch Set 5: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":5},{"id":"173c19e5906b7c0c157f0759de770dcef62e7144","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 15:42:39.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"384bc62ade3ef2d4a4150bb56ee7d13ef45f10cb","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 17:15:01.000000000","message":"Patch Set 5: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1e9416c22a30404f8f94385c81966048 : SUCCESS in 4m 52s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/d3c4464376b941e686e3e5cc6b33143c : SUCCESS in 20m 09s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/c372374ab2054eafb9d9f9b4b0fec2b4 : SUCCESS in 20m 31s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/e35bc3df3d0c4da09118227aadf747b1 : SUCCESS in 7m 59s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/c0d66f175cfa40eeacab18f40c6f7935 : SUCCESS in 7m 58s\n- tempest-full https://zuul.opendev.org/t/openstack/build/8eb66deaee94466f851eb5893fdafd3b : FAILURE in 1h 30m 35s","accounts_in_message":[],"_revision_number":5},{"id":"04b48035da3f56d354412fd917fb2f11a72d40e9","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-06-02 17:27:51.000000000","message":"Patch Set 5:\n\nrecheck","accounts_in_message":[],"_revision_number":5},{"id":"619ed16e4a9174be8ef11064db36318a54dea5f1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 19:13:45.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8d04be2ed4974dd7a74ec0b73f8eaa77 : SUCCESS in 9m 25s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/dcb56993a7f54ab0ae5b951c1933cc4a : SUCCESS in 11m 38s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/8313b6afcd5d496cbd9c3d924cbda465 : SUCCESS in 13m 27s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/5ce17e4445a8460fb94282a769a988ae : SUCCESS in 7m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2251c4433c7941c4a49bacdea2d55d6f : SUCCESS in 7m 42s\n- legacy-keystoneclient-dsvm-functional https://zuul.opendev.org/t/openstack/build/45a8901e70184cd785d513aba1f54a8b : FAILURE in 30m 13s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/eef97023587b437d8eda53ee7efb5d44 : SUCCESS in 11m 52s\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/87548b201cfe4d9389424c05f9e9dfb7 : SUCCESS in 36m 15s (non-voting)\n- tempest-full https://zuul.opendev.org/t/openstack/build/7eefc75d9d4842afae7ebdfcd982b011 : SUCCESS in 1h 41m 02s","accounts_in_message":[],"_revision_number":5},{"id":"fd0d6f31081ccb9c8f2fc1d93aaa5ecc3eb877af","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 19:13:59.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"27fee5526ac097f493debb6531594a09ac6fc95c","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 20:26:19.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":5},{"id":"9467a53b132eedaf1d562db4ee5e062e9f7831a3","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 20:26:19.000000000","message":"Patch Set 5: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d025f7c7601746bf85d0f0cf1107d4d6 : SUCCESS in 6m 25s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/9c5c27113ae342fe84f8e57a521b1c96 : SUCCESS in 13m 17s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/58ee2e595b9e4adda4bbe98afcb72d32 : SUCCESS in 13m 22s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/021257416200475eb7e48b9eb8bea434 : SUCCESS in 8m 17s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8c762329f78b450bb41fe61b581db6b9 : SUCCESS in 7m 13s\n- tempest-full https://zuul.opendev.org/t/openstack/build/a7168d7db5b942028050c9eeb1629b97 : SUCCESS in 1h 10m 42s","accounts_in_message":[],"_revision_number":5},{"id":"d5f5060a0f548e66a3787bd90b12f1ad07fea554","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-02 20:27:58.000000000","message":"Patch Set 5:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/f0731cdb5ed14fb7948d4ba281df391e : SUCCESS in 1m 18s","accounts_in_message":[],"_revision_number":5}],"current_revision_number":5,"current_revision":"1c1cf556f81058a63ea0bd5138540b0e6795f7a0","revisions":{"65cc44bd26be4f88ed9431dfc43f7a27558954cd":{"kind":"REWORK","_number":1,"created":"2020-05-06 23:30:33.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/25/726025/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/25/726025/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/25/726025/1"}}},"commit":{"parents":[{"commit":"5ba1b6ace597e9ce5fd25edac874c73abfabf743","subject":"Import LDAP job into project","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5ba1b6ace597e9ce5fd25edac874c73abfabf743"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-17 00:05:43.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2020-05-06 23:30:32.000000000","tz":-420},"subject":"Check timestamp of signed EC2 token request","message":"Check timestamp of signed EC2 token request\n\nEC2 token requests contain a signature that signs the entire request,\nincluding the access timestamp. While the signature is checked, the\ntimestamp is not, and so these signed requests remain valid\nindefinitely, leaving the token API vulnerable to replay attacks. This\nchange introduces a configurable TTL for signed token requests and\nensures that the timestamp is actually validated against it.\n\nThe check will work for either an AWS Signature v1/v2 \u0027Timestamp\u0027\nparameter[1] or the AWS Signature v4 \u0027X-Aws-Date\u0027 header or\nparameter[2].\n\nAlthough this technically adds a new feature and the default value of\nthe feature changes behavior, this change is required to protect\ncredential holders and therefore must be backported to all supported\nbranches.\n\n[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\n[2] https://docs.aws.amazon.com/general/latest/gr/sigv4-date-handling.html\n\nConflicts due to six removal in e2d83ae9:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to flask reorg:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\nChange-Id: Idb10267338b4204b435df233c636046a1ce5711f\nCloses-bug: #1872737\n(cherry picked from commit ab89ea749013e7f2c46260f68504f5687763e019)\n(cherry picked from commit 8d5becbe4b463f6a5a24a1929dd0f48dab6ae027)\n(cherry picked from commit e3f65d6fbcd18032a8ad3dfa3aaded264a282158)\n(cherry picked from commit 1ef3828516c1b87a8ca84acca73ec593b0b8591d)\n(cherry picked from commit 35f09e2b7c00e03cd1d52a2337b51be38dd79480)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/65cc44bd26be4f88ed9431dfc43f7a27558954cd"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/65cc44bd26be4f88ed9431dfc43f7a27558954cd"}]},"branch":"refs/heads/stable/pike"},"f54f4567115621acaf855440b4516c0a5d509270":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2020-05-08 17:05:18.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/25/726025/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/25/726025/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/25/726025/2"}}},"commit":{"parents":[{"commit":"5ba1b6ace597e9ce5fd25edac874c73abfabf743","subject":"Import LDAP job into project","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5ba1b6ace597e9ce5fd25edac874c73abfabf743"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-17 00:05:43.000000000","tz":-420},"committer":{"name":"guang-yee","email":"gyee@suse.com","date":"2020-05-08 17:04:13.000000000","tz":0},"subject":"Check timestamp of signed EC2 token request","message":"Check timestamp of signed EC2 token request\n\nEC2 token requests contain a signature that signs the entire request,\nincluding the access timestamp. While the signature is checked, the\ntimestamp is not, and so these signed requests remain valid\nindefinitely, leaving the token API vulnerable to replay attacks. This\nchange introduces a configurable TTL for signed token requests and\nensures that the timestamp is actually validated against it.\n\nThe check will work for either an AWS Signature v1/v2 \u0027Timestamp\u0027\nparameter[1] or the AWS Signature v4 \u0027X-Aws-Date\u0027 header or\nparameter[2].\n\nAlthough this technically adds a new feature and the default value of\nthe feature changes behavior, this change is required to protect\ncredential holders and therefore must be backported to all supported\nbranches.\n\n[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\n[2] https://docs.aws.amazon.com/general/latest/gr/sigv4-date-handling.html\n\nConflicts due to six removal in e2d83ae9:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to flask reorg:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\nChange-Id: Idb10267338b4204b435df233c636046a1ce5711f\nCloses-bug: #1872737\n(cherry picked from commit ab89ea749013e7f2c46260f68504f5687763e019)\n(cherry picked from commit 8d5becbe4b463f6a5a24a1929dd0f48dab6ae027)\n(cherry picked from commit e3f65d6fbcd18032a8ad3dfa3aaded264a282158)\n(cherry picked from commit 1ef3828516c1b87a8ca84acca73ec593b0b8591d)\n(cherry picked from commit 35f09e2b7c00e03cd1d52a2337b51be38dd79480)\n(cherry picked from commit d6f1006dd0ca8f7999f32133d348fcec8f2299d3)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f54f4567115621acaf855440b4516c0a5d509270"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f54f4567115621acaf855440b4516c0a5d509270"}]},"branch":"refs/heads/stable/pike"},"43593982a5591fd3da1bae07c4d9c5d223bf7c6d":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2020-05-11 16:38:15.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/25/726025/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/25/726025/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/25/726025/3"}}},"commit":{"parents":[{"commit":"5ba1b6ace597e9ce5fd25edac874c73abfabf743","subject":"Import LDAP job into project","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5ba1b6ace597e9ce5fd25edac874c73abfabf743"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-17 00:05:43.000000000","tz":-420},"committer":{"name":"guang-yee","email":"gyee@suse.com","date":"2020-05-11 16:37:53.000000000","tz":0},"subject":"Check timestamp of signed EC2 token request","message":"Check timestamp of signed EC2 token request\n\nEC2 token requests contain a signature that signs the entire request,\nincluding the access timestamp. While the signature is checked, the\ntimestamp is not, and so these signed requests remain valid\nindefinitely, leaving the token API vulnerable to replay attacks. This\nchange introduces a configurable TTL for signed token requests and\nensures that the timestamp is actually validated against it.\n\nThe check will work for either an AWS Signature v1/v2 \u0027Timestamp\u0027\nparameter[1] or the AWS Signature v4 \u0027X-Aws-Date\u0027 header or\nparameter[2].\n\nAlthough this technically adds a new feature and the default value of\nthe feature changes behavior, this change is required to protect\ncredential holders and therefore must be backported to all supported\nbranches.\n\n[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\n[2] https://docs.aws.amazon.com/general/latest/gr/sigv4-date-handling.html\n        \nConflicts due to six removal in e2d83ae9:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to v2.0 API testing in stable/queens. The v2.0 tests were\nremoved in Rocky but in earlier releases we tested similar functionality\nbetween v3 and v2.0. This conflict was resolved by porting the timestamp\nto the v2.0 API test:\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to flask reorg:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\nChange-Id: Idb10267338b4204b435df233c636046a1ce5711f\nCloses-bug: #1872737\n(cherry picked from commit ab89ea749013e7f2c46260f68504f5687763e019)\n(cherry picked from commit 8d5becbe4b463f6a5a24a1929dd0f48dab6ae027)\n(cherry picked from commit e3f65d6fbcd18032a8ad3dfa3aaded264a282158)\n(cherry picked from commit 1ef3828516c1b87a8ca84acca73ec593b0b8591d)\n(cherry picked from commit 35f09e2b7c00e03cd1d52a2337b51be38dd79480)\n(cherry picked from commit d6f1006dd0ca8f7999f32133d348fcec8f2299d3)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/43593982a5591fd3da1bae07c4d9c5d223bf7c6d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/43593982a5591fd3da1bae07c4d9c5d223bf7c6d"}]},"branch":"refs/heads/stable/pike"},"a99a1e3f973a2dd617fd3532d521f76e6c95bc6f":{"kind":"REWORK","_number":4,"created":"2020-05-11 20:28:55.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/25/726025/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/25/726025/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/25/726025/4"}}},"commit":{"parents":[{"commit":"5ba1b6ace597e9ce5fd25edac874c73abfabf743","subject":"Import LDAP job into project","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5ba1b6ace597e9ce5fd25edac874c73abfabf743"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-17 00:05:43.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2020-05-11 20:28:47.000000000","tz":-420},"subject":"Check timestamp of signed EC2 token request","message":"Check timestamp of signed EC2 token request\n\nEC2 token requests contain a signature that signs the entire request,\nincluding the access timestamp. While the signature is checked, the\ntimestamp is not, and so these signed requests remain valid\nindefinitely, leaving the token API vulnerable to replay attacks. This\nchange introduces a configurable TTL for signed token requests and\nensures that the timestamp is actually validated against it.\n\nThe check will work for either an AWS Signature v1/v2 \u0027Timestamp\u0027\nparameter[1] or the AWS Signature v4 \u0027X-Aws-Date\u0027 header or\nparameter[2].\n\nAlthough this technically adds a new feature and the default value of\nthe feature changes behavior, this change is required to protect\ncredential holders and therefore must be backported to all supported\nbranches.\n\n[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\n[2] https://docs.aws.amazon.com/general/latest/gr/sigv4-date-handling.html\n\nConflicts due to six removal in e2d83ae9:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to v2.0 API testing in stable/queens. The v2.0 tests were\nremoved in Rocky but in earlier releases we tested similar functionality\nbetween v3 and v2.0. This conflict was resolved by porting the timestamp\nto the v2.0 API test:\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to flask reorg:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\nChange-Id: Idb10267338b4204b435df233c636046a1ce5711f\nCloses-bug: #1872737\n(cherry picked from commit ab89ea749013e7f2c46260f68504f5687763e019)\n(cherry picked from commit 8d5becbe4b463f6a5a24a1929dd0f48dab6ae027)\n(cherry picked from commit e3f65d6fbcd18032a8ad3dfa3aaded264a282158)\n(cherry picked from commit 1ef3828516c1b87a8ca84acca73ec593b0b8591d)\n(cherry picked from commit 35f09e2b7c00e03cd1d52a2337b51be38dd79480)\n(cherry picked from commit d6f1006dd0ca8f7999f32133d348fcec8f2299d3)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a99a1e3f973a2dd617fd3532d521f76e6c95bc6f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a99a1e3f973a2dd617fd3532d521f76e6c95bc6f"}]},"branch":"refs/heads/stable/pike"},"1c1cf556f81058a63ea0bd5138540b0e6795f7a0":{"kind":"REWORK","_number":5,"created":"2020-06-01 05:16:06.000000000","uploader":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"ref":"refs/changes/25/726025/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/25/726025/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/25/726025/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/25/726025/5"}}},"commit":{"parents":[{"commit":"5ba1b6ace597e9ce5fd25edac874c73abfabf743","subject":"Import LDAP job into project","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5ba1b6ace597e9ce5fd25edac874c73abfabf743"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-17 00:05:43.000000000","tz":-420},"committer":{"name":"Guang Yee","email":"guang.yee@suse.com","date":"2020-06-01 05:16:05.000000000","tz":-420},"subject":"Check timestamp of signed EC2 token request","message":"Check timestamp of signed EC2 token request\n\nEC2 token requests contain a signature that signs the entire request,\nincluding the access timestamp. While the signature is checked, the\ntimestamp is not, and so these signed requests remain valid\nindefinitely, leaving the token API vulnerable to replay attacks. This\nchange introduces a configurable TTL for signed token requests and\nensures that the timestamp is actually validated against it.\n\nThe check will work for either an AWS Signature v1/v2 \u0027Timestamp\u0027\nparameter[1] or the AWS Signature v4 \u0027X-Aws-Date\u0027 header or\nparameter[2].\n\nAlthough this technically adds a new feature and the default value of\nthe feature changes behavior, this change is required to protect\ncredential holders and therefore must be backported to all supported\nbranches.\n\n[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\n[2] https://docs.aws.amazon.com/general/latest/gr/sigv4-date-handling.html\n\nConflicts due to six removal in e2d83ae9:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to v2.0 API testing in stable/queens. The v2.0 tests were\nremoved in Rocky but in earlier releases we tested similar functionality\nbetween v3 and v2.0. This conflict was resolved by porting the timestamp\nto the v2.0 API test:\n\tkeystone/tests/unit/test_contrib_ec2_core.py\n\nConflicts due to flask reorg:\n\tkeystone/api/_shared/EC2_S3_Resource.py\n\nChange-Id: Idb10267338b4204b435df233c636046a1ce5711f\nCloses-bug: #1872737\n(cherry picked from commit ab89ea749013e7f2c46260f68504f5687763e019)\n(cherry picked from commit 8d5becbe4b463f6a5a24a1929dd0f48dab6ae027)\n(cherry picked from commit e3f65d6fbcd18032a8ad3dfa3aaded264a282158)\n(cherry picked from commit 1ef3828516c1b87a8ca84acca73ec593b0b8591d)\n(cherry picked from commit 35f09e2b7c00e03cd1d52a2337b51be38dd79480)\n(cherry picked from commit d6f1006dd0ca8f7999f32133d348fcec8f2299d3)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/1c1cf556f81058a63ea0bd5138540b0e6795f7a0"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/1c1cf556f81058a63ea0bd5138540b0e6795f7a0"}]},"branch":"refs/heads/stable/pike"}},"requirements":[],"submit_records":[],"submit_requirements":[]}
