)]}'
{"id":"openstack%2Fkeystone~966069","triplet_id":"openstack%2Fkeystone~master~Ic84b84247e05f29874e2c5636a033aaedd4de83c","project":"openstack/keystone","branch":"master","attention_set":{},"removed_from_attention_set":{"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2025-11-04 14:11:53.000000000","reason":"\u003cGERRIT_ACCOUNT_14250\u003e replied on the change","reason_account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2025-11-04 22:01:18.000000000","reason":"Change was submitted"},"5263":{"account":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"last_update":"2025-11-04 22:01:18.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ic84b84247e05f29874e2c5636a033aaedd4de83c","subject":"Add service user authentication to ec2 and s3 endpoints","status":"MERGED","created":"2025-11-04 14:07:43.000000000","updated":"2025-11-04 22:02:22.000000000","submitted":"2025-11-04 22:01:18.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":2,"has_review_started":true,"submission_id":"966069","meta_rev_id":"cecac801af43a9b7f96cd1fa38bb1f48b0e74d11","_number":966069,"virtual_id_number":966069,"owner":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2025-11-04 22:01:18.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":2,"date":"2025-11-04 14:11:53.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":1,"date":"2025-11-04 20:07:57.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}],"reviewers":{"REVIEWER":[{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2025-11-04 14:07:43.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"state":"REVIEWER"},{"updated":"2025-11-04 14:07:43.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2025-11-04 15:17:39.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2025-11-04 16:01:24.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2025-11-04 16:34:26.000000000","updated_by":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"reviewer":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"state":"CC"},{"updated":"2025-11-04 18:30:41.000000000","updated_by":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"reviewer":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"state":"CC"}],"messages":[{"id":"6a31b73958c225afafd0aa86e0e0033fa4930754","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2025-11-04 14:07:43.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"146f7d3996e469e88f200eaa3afd78d3d3b0ea84","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2025-11-04 14:11:53.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"5889b667a29326351b7941a1a5ccee5cb922b712","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-11-04 15:17:39.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4b3f3dbfd4ed4cfaa13406b3f3a0a2bf\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/ffa0613280054f61ac0980d5b5be408b : SUCCESS in 24m 16s (non-voting)\n- openstack-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/6284ac80266c49c39cf5b291b17f1f45 : SUCCESS in 18m 07s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/701fb54eab3945139b8fb9056641a05e : SUCCESS in 37m 15s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"d84b0475f989550c6d08c8085e55923379ed85a5","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-11-04 16:01:24.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/8b9dd792db2d4b3b8b4c9b7c29194de1\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/490a3adfb95c40e4b6e1f2d0d6ad6a90 : SUCCESS in 12m 21s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9892a9c755604a898da0a4ae4328bc4e : SUCCESS in 6m 57s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/955c541ce8874fd0b90876f98899a2a8 : SUCCESS in 11m 12s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/fc68acf72b85416184d6bfb7d6aa8aca : SUCCESS in 18m 30s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f3447062c9da48efbc0e78cad1bc9901 : SUCCESS in 13m 07s\n- grenade https://zuul.opendev.org/t/openstack/build/3decd0c5b2c74a6f9920c6f5820b2b9a : SUCCESS in 1h 05m 41s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/1eb45508a24a47f7b82e687b5a467f76 : SUCCESS in 1h 48m 02s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/6fd048f9a48b4ff8b95ea201bef23552 : SUCCESS in 15m 19s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/d138115d10c948728f90751de88293ad : SUCCESS in 24m 46s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/154dd6ce253f41fdb6748a8eedc569e6 : FAILURE in 21m 04s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/b037f0ab5bdd4d0393bc8cca0f220583 : FAILURE in 26m 13s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/4cfe6538e49141d2a8d1ed74da3f1b01 : SUCCESS in 19m 50s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/6da9dee8bb5d4089ade0d1621b42b3cf : SUCCESS in 31m 11s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/e6d376f01f33413ea80e8697dd8ce890 : SUCCESS in 25m 25s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/232e33579d914f47b886ab9131119d03 : SUCCESS in 59m 17s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/0c47f3af42164806a4724df79419f0a1 : FAILURE in 44m 12s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/ee0847e511ab4ad1aefb0da0c73d94a4 : RETRY_LIMIT in 5m 38s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"b730db2642c5dffbd3ec8b0b0fe4689be89ca9a6","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2025-11-04 16:34:26.000000000","message":"Patch Set 1:\n\n(2 comments)","accounts_in_message":[],"_revision_number":1},{"id":"f8c199f11b6d558df832b8948af6f46999dd21d9","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2025-11-04 18:30:41.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"d46d3549b476f6c427e5166051c367cdca9f0dbe","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2025-11-04 20:07:57.000000000","message":"Patch Set 1: Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"35f868365290f1c18ea1dfafe5b55d24810f2ee1","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-11-04 20:08:20.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"2292e5fb1729283c4b4e076d460e7f3a3195eff4","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-11-04 22:01:18.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/e27fd04f1d6b4d8191ce1593fb2cea3f\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ec4a810301c14dce891d74c3446b5a03 : SUCCESS in 4m 10s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/cb96959221a24f7898923a6362853dd9 : SUCCESS in 12m 47s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/4f8d464ad7f5467899b1b08de31fb975 : SUCCESS in 16m 35s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/30836830deb04194acb0aee9b361bfc3 : SUCCESS in 17m 09s\n- grenade https://zuul.opendev.org/t/openstack/build/4ea5b4a39e7a4fdaa79d2651e75e5155 : SUCCESS in 1h 03m 48s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/4d7629a708a14d6d8dc8106ffb7b4350 : SUCCESS in 1h 48m 29s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/dd0884614ea0427a9bc4d7f57bd97eee : SUCCESS in 29m 13s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/23a3a21581ea45f2bdc191b2e6bbb458 : SUCCESS in 28m 08s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/7712f452d0074c2b8147df55bd38ebfb : SUCCESS in 56m 56s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/772725c919d6437abd4788c54c57f3a6 : FAILURE in 44m 55s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"7b28e70430a08ef7200a245017512e3b924c92c6","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-11-04 22:01:18.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"cecac801af43a9b7f96cd1fa38bb1f48b0e74d11","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-11-04 22:02:22.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d3b5cb2dd19e4e379e7fce0558ca62d0\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/927a608eeab54ada886e970ff44ed0fe : SUCCESS in 52s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"5a8e4443d8607cc96de38c5609a9ed979f11f944","revisions":{"5a8e4443d8607cc96de38c5609a9ed979f11f944":{"kind":"REWORK","_number":1,"created":"2025-11-04 14:07:43.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/69/966069/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/69/966069/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/69/966069/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/69/966069/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/69/966069/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/69/966069/1"}}},"commit":{"parents":[{"commit":"f7ebcd8a5af5235aa9e6bfeddc2b4965347105e4","subject":"Minor fixes in trust schema","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f7ebcd8a5af5235aa9e6bfeddc2b4965347105e4"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2025-09-19 12:02:18.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2025-11-04 14:04:25.000000000","tz":60},"subject":"Add service user authentication to ec2 and s3 endpoints","message":"Add service user authentication to ec2 and s3 endpoints\n\nAdd a policy to enforce authentication with a user in the service\ngroup. This maintains AWS compatibility with the added security\nlayer.\n\nCloses-Bug: 2119646\nChange-Id: Ic84b84247e05f29874e2c5636a033aaedd4de83c\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Jeremy Stanley \u003cfungi@yuggoth.org\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5a8e4443d8607cc96de38c5609a9ed979f11f944"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5a8e4443d8607cc96de38c5609a9ed979f11f944"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}