)]}'
{"id":"openstack%2Fkeystone~906891","triplet_id":"openstack%2Fkeystone~stable%2F2023.1~I31b5a1f85d994a90578657bc77fa46ace0748582","project":"openstack/keystone","branch":"stable/2023.1","topic":"secure-rbac-stable/2023.2-stable/2023.1","attention_set":{},"removed_from_attention_set":{"7973":{"account":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"last_update":"2024-01-30 14:43:00.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I31b5a1f85d994a90578657bc77fa46ace0748582","subject":"Consistent and Secure RBAC (Phase 1)","status":"MERGED","created":"2024-01-30 00:59:20.000000000","updated":"2024-01-30 14:45:32.000000000","submitted":"2024-01-30 14:43:00.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"906891-secure-rbac-stable/2023.2-stable/2023.1","cherry_pick_of_change":906402,"cherry_pick_of_patch_set":1,"meta_rev_id":"0a16d30bc8fe8a5a95f9584bda2b610fb5ba8b65","_number":906891,"virtual_id_number":906891,"owner":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2024-01-30 14:43:00.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":2,"date":"2024-01-30 13:16:48.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":2,"date":"2024-01-30 12:32:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":1,"date":"2024-01-30 13:16:48.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2024-01-30 01:14:57.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2024-01-30 02:06:48.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2024-01-30 12:32:06.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2024-01-30 13:16:48.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"}],"messages":[{"id":"61e3e2988bed076a7e6d585f6df27d73b16177aa","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2024-01-30 00:59:20.000000000","message":"Patch Set 1: Cherry Picked from branch stable/2023.2.","accounts_in_message":[],"_revision_number":1},{"id":"ed18994257eabf751512231bdeb07ef1537ea237","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-30 01:14:57.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/45599540d860444794eecaa7e54960f2\n\n- openstack-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/c205ec0409304bb181d54069aeac183e : SUCCESS in 14m 19s (non-voting)\n- openstack-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/5e54857ad6d44a17a203a9e7eb85fc14 : SUCCESS in 10m 34s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"33bef995dfb10139d3f480ecb2e3425cc80d9278","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-30 02:06:48.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/bb38e6aac0dc454ba263317d78ae60e0\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/3842e9ca6a284091ba79faed5964326b : SUCCESS in 13m 03s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d501bab927db48b3982c4a4ee0dba7cf : SUCCESS in 4m 01s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/d66eac5a8a714ee7856cf69835a047ec : SUCCESS in 11m 48s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2c99709c63f64044bac68420a33d6512 : SUCCESS in 11m 28s\n- grenade https://zuul.opendev.org/t/openstack/build/e23e9afdad954a079d8295c574a997c8 : SUCCESS in 1h 01m 20s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/afe707e13b914846b019bcf7b3c9c858 : SUCCESS in 57m 30s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/4b57612fb2784b15b887906127d51fad : SUCCESS in 35m 53s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/7d09f069a3ad43d9968cb5720df258ab : SUCCESS in 29m 45s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/74f7a356b9844fdf933682af67c1c1ee : FAILURE in 37m 10s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/b88f98197a8249c7be8bac286296d941 : SUCCESS in 29m 54s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/ccedcbe320b44608a6cff9d5ad52cece : SUCCESS in 21m 30s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/6369638310c44fe2afb7d5c4ac448cbd : FAILURE in 26m 00s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a560654f22404ac58c4959475aa49e06 : SUCCESS in 52m 10s","accounts_in_message":[],"_revision_number":1},{"id":"8dcc2860b04e291ad26a5fa3fce4024e18b6bbc4","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2024-01-30 12:32:06.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"7f3689fdcb8a4c34ae4db9755756e7eb4a9aca9a","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2024-01-30 13:16:48.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"4f8e364bdf464ca4581bde09fc1fa0287d8b6602","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-30 13:17:27.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"ca0d5a7680e415c90d6fed333ecde05ab87deffe","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-30 14:43:00.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/00e1e13697c045b68a8dc96cf56214f6\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d081c4d5113745e58fc1c4754fe23cf5 : SUCCESS in 6m 18s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/dde875d7f82c4b8c87d47dced9991d1e : SUCCESS in 12m 29s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0de21152ddca41a7b3be36a80734f00e : SUCCESS in 12m 37s\n- grenade https://zuul.opendev.org/t/openstack/build/0eeafd9274bd4d01afed05e93ab9ffa0 : SUCCESS in 1h 15m 53s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/774c5818ce2e46d881381dab087c9d03 : SUCCESS in 1h 18m 02s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/fe240b0a414740168aad0693f6ce1df1 : SUCCESS in 38m 32s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/730bbda53cf943fcb65ccecc92614af5 : SUCCESS in 36m 55s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/9e71de6c812444a9aab0860be56bc79a : SUCCESS in 55m 03s","accounts_in_message":[],"_revision_number":1},{"id":"3f29eab69d6c7ca52c36cba12d91d7f7236e3f95","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-30 14:43:00.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"0a16d30bc8fe8a5a95f9584bda2b610fb5ba8b65","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-01-30 14:45:32.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2905c1b8f23f434a976b007636df80f8\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/26a482a61e9b476f81d2d17ca9f95b14 : SUCCESS in 52s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"658fd7d584ee6ce5fa4365e137fdf4d92861b22d","revisions":{"658fd7d584ee6ce5fa4365e137fdf4d92861b22d":{"kind":"REWORK","_number":1,"created":"2024-01-30 00:59:20.000000000","uploader":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"ref":"refs/changes/91/906891/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/91/906891/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/906891/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/906891/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/906891/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/91/906891/1"}}},"commit":{"parents":[{"commit":"087fca14bcdeb1dfabeba8d3b465037bc0d6db0d","subject":"Merge \"docs: Clarify lack of LDAP assignment back end\" into stable/2023.1","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/087fca14bcdeb1dfabeba8d3b465037bc0d6db0d"}]}],"author":{"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","date":"2023-12-05 21:41:28.000000000","tz":-300},"committer":{"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","date":"2024-01-30 00:59:20.000000000","tz":0},"subject":"Consistent and Secure RBAC (Phase 1)","message":"Consistent and Secure RBAC (Phase 1)\n\nThis patch updates system-scoped policies to also accept project-admin\ntokens so that operators can continue to use the \"admin\" role to access\nsystem level APIs.\n\nThe protection test job is marked non-voting since tempest does not yet\nexpect these policy changes.  A follow-up patch will make it voting\nagain after the test changes have merged into tempest.\n\n[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#phase-1\n\nChange-Id: I31b5a1f85d994a90578657bc77fa46ace0748582\n(cherry picked from commit f2f1a5c38847ddc5aa28eec9722885d9c64c6e7b)\n(cherry picked from commit 991662c666b6dcb410a622c9ec32e18a094757b2)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/658fd7d584ee6ce5fa4365e137fdf4d92861b22d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/658fd7d584ee6ce5fa4365e137fdf4d92861b22d"}]},"branch":"refs/heads/stable/2023.1"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}