)]}'
{"id":"openstack%2Fkeystone~973223","triplet_id":"openstack%2Fkeystone~master~I31a1f11a181c11be7de631faf414bfdaf29dac42","project":"openstack/keystone","branch":"master","topic":"fix/project-policy-null-domain-match","attention_set":{},"removed_from_attention_set":{"9725":{"account":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"last_update":"2026-02-20 23:28:04.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I31a1f11a181c11be7de631faf414bfdaf29dac42","subject":"Fix project policy allowing unauthorized access to root domains","status":"MERGED","created":"2026-01-13 12:21:13.000000000","updated":"2026-02-20 23:29:08.000000000","submitted":"2026-02-20 23:28:04.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"973223-fix/project-policy-null-domain-match","meta_rev_id":"a9f04c471db2d005b037b64facb81d7a61920a81","_number":973223,"virtual_id_number":973223,"owner":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-02-20 23:28:03.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":2,"date":"2026-02-16 15:13:21.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":2,"date":"2026-02-17 16:26:02.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"all":[{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":1,"date":"2026-02-17 16:26:02.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-01-13 12:58:38.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-01-13 14:22:03.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-02-16 15:13:21.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-02-17 16:26:02.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"}],"messages":[{"id":"a34e78ce85cde2e776e9a2b7390a431838f3da11","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"date":"2026-01-13 12:21:13.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f39ac9c6a96838a8b6ab863a5b8c44d4ad19743b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"date":"2026-01-13 12:29:17.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"ac6ba9057d28ebdb0090879c409181735ac13487","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-01-13 12:58:38.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2637e647d8ca4ef1accbd823f7e0cfb3\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/b5c517582e3243f5be0dd91eef448309 : SUCCESS in 23m 39s (non-voting)\n- openstack-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/5cf1ff8049c64d549b971f65c7a2c421 : SUCCESS in 25m 57s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/4bbac020cd2545909b01b3ee70fda055 : SUCCESS in 27m 30s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"1b4ea616b7f8b5f0a460e4bab37f856a657f0422","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-01-13 14:22:03.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/3d43000827334ad2add1644bc826145a\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/554d1a9606014a568f977b7d96e248d6 : SUCCESS in 21m 18s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/cf780153053c45198453dc67c5d7cd37 : SUCCESS in 5m 09s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/9e631054e71847948d147494324c8936 : SUCCESS in 7m 25s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/5d79c3b664004b479f4cfc71c0219008 : SUCCESS in 16m 13s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/47427d2465624fa59d8bccb50cd72e5d : SUCCESS in 12m 05s\n- grenade https://zuul.opendev.org/t/openstack/build/cfbee108bdfb4e9e87e0b616553e0bdc : SUCCESS in 1h 12m 36s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/9c9e3074c4c54bda9be0bc18e39ec37a : SUCCESS in 1h 40m 31s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/928d5cee7bc543b2a3b9a53527bf6e29 : SUCCESS in 15m 19s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/0037a29736334b7692485d9607f487a2 : SUCCESS in 13m 52s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/03fbabfd49954d3e9167517a6ed15a95 : FAILURE in 20m 57s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/7e8bbc773a0a46d8b0f7dfbf35415399 : FAILURE in 24m 13s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/ad330a42a1794b759ccbf0cf16547aa9 : SUCCESS in 27m 29s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/c6674711dd554fffb517e3ed73bd3fd8 : SUCCESS in 14m 55s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/59d3c879804241669a91b4d55372afd1 : SUCCESS in 23m 41s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8ccc85c9fe9c4350b4960a2e410821ba : FAILURE in 31m 33s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/986f47d595d04552b6b4052818428f7a : FAILURE in 43m 26s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/3603d7458ab24203a270665477087dac : SUCCESS in 5m 45s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"8afba6ef672576a34844868ff0e37634fa925d5f","author":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"date":"2026-01-14 00:44:59.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"a440872b2717afac83e41229e79d13441eb54416","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-01-14 01:20:23.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b6eafaca5e304019b47e8e3a2583e801\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/c05b78ca0f544971a8442c0e4ea08208 : SUCCESS in 28m 57s (non-voting)\n- openstack-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/79b1ce2e3e344e04bd6cef26d82b3d7b : SUCCESS in 28m 47s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/e5098936102a4daebf8297cf25df5c58 : SUCCESS in 33m 12s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"ff7330686d03044b12b6765654571052a0bd994d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-01-14 02:08:50.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/8915dc0db63d4de6817e16328c0ebe42\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/9d4817013a424b13bf45ee6d7ec4f2ec : SUCCESS in 17m 14s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/573c5a22359c41d4bed52659dd56ca30 : SUCCESS in 3m 07s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/fae6e4ccbe914611a6d5abbdb011be95 : SUCCESS in 14m 14s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/bcab194b2a434e5eb54e8c1fb14d7428 : SUCCESS in 10m 26s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/58ea2bebc0034e79aba20dd59165a1b2 : SUCCESS in 10m 20s\n- grenade https://zuul.opendev.org/t/openstack/build/00c2c96f7cf34be0bdfd53d93a6c18dc : SUCCESS in 46m 12s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/d744d7585b0a4dd3a3f734ce7aaace14 : SUCCESS in 1h 22m 23s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/8481cc4d658d4580bf5f8b67110e8d38 : SUCCESS in 8m 41s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/d2a9e1ec2a7a4c3698d78dd29076c49c : SUCCESS in 13m 10s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/138121d341324b348b9dfd139f59804a : FAILURE in 20m 58s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/3e267e779a964d8c929a68d3c71d8d3e : FAILURE in 12m 42s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/bbaa638d61b848d88dc7fc00e91ad81c : SUCCESS in 28m 18s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/44b4612c8b2d43a696d430fe1b5a5446 : SUCCESS in 33m 04s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/73f1ad2247e9488c8cd3b17298a9cd6a : SUCCESS in 34m 30s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a2a77e2bdd6b47ed8c455fe730ed4a6a : SUCCESS in 54m 10s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/948161d11c4342a2a0c7a3423f5a9e89 : FAILURE in 38m 58s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/e9137d5d80364c78a570b8fda91a03bf : SUCCESS in 6m 23s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"9020b6d19bdb17e0909f7cffa0210468ea7a8146","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-02-16 15:13:21.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"a84b78a46c5cb9cba687c7dcaeba9ed1de40b63b","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-02-17 16:26:02.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"17fbdbc8512555952f6cbdfc57e0bf1b5415d403","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-17 16:26:31.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"79df2ab45cf8a5949e8d7b722baad5bbdcc3c1f9","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-17 18:24:03.000000000","message":"Patch Set 2: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/88f0123bf38049e6964041218d15af4b\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/58e29096328442b7ab6ad82ea2a10751 : SUCCESS in 3m 07s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/34d71106703e4c29bc1e7e4127f15d22 : SUCCESS in 12m 04s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/1ab3722b9ff8463f9e4f077cc0ce4f5b : SUCCESS in 7m 10s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/70520dcc12e6424db978a4daf5e8bcb5 : SUCCESS in 15m 15s\n- grenade https://zuul.opendev.org/t/openstack/build/0f9ac3b895584fdfb5140aa121f85e19 : SUCCESS in 56m 55s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/1270459daecb427e9596ab92786aac3b : SUCCESS in 56m 26s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/b6d1dc041a1944cbaaa7eea196059659 : SUCCESS in 29m 58s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/3267fcea489f486f91d21bea2044125d : FAILURE in 6m 38s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/44663a01a0e8474d975748e8949650f7 : SUCCESS in 31m 03s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/4b5ab55d3bb24c93ac3c30f783462d77 : FAILURE in 43m 49s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"b9efbac5e85dfdc9ab438c8c1f5f5a2dac7ee116","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-02-20 20:14:01.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"79289acd9508d4a675b7bb9c2095d7d330f963cc","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-20 20:46:12.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a113c13afe7e4f64a9e670a3b9406caf\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/b84535409be24b65ac950a73bb6121b9 : POST_FAILURE in 25m 29s (non-voting)\n- openstack-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/a365f13f9d7a4f179afad326c7731431 : SUCCESS in 19m 05s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/50939d98892b424197dcbc58831dfeb4 : RETRY_LIMIT in 5m 00s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"cd12aec8f06663f34d2bda8518f218dd5bb3a6f0","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-20 21:30:04.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2491d40408214b1c9cd2fd0613182cb2\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/4a6d93df422e4e5c9d2b3d7d738d68eb : SUCCESS in 18m 44s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6e36555da71e4fa99fdb82da18fd1be7 : SUCCESS in 5m 35s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/865fe3a0ab4b4f9581739bc8019a87b9 : SUCCESS in 12m 18s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/5d3897368e3b43e58808da49483779f4 : SUCCESS in 11m 48s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/747750249bea44ba90a6e4673c3be29b : SUCCESS in 15m 30s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3830352d864c4e1cbfd650b9fe366fc3 : SUCCESS in 13m 24s\n- grenade https://zuul.opendev.org/t/openstack/build/81f8776bc0ac43d386b82390df7e46fe : SUCCESS in 34m 25s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/20f82fbef71f4754ad6460bc237056d6 : SUCCESS in 1h 01m 33s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/1eec1ace58c848bca826978cce1c2a65 : SUCCESS in 8m 45s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/2334a58e0c9d4f41a309c64088146fca : SUCCESS in 28m 50s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/1cd467206c94443286ea84fadb0aac97 : FAILURE in 20m 23s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/9996252e85604b6d9deda5fb43a45ca2 : FAILURE in 25m 09s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/8782217722b54fa59b77e9c6a406ebf8 : SUCCESS in 28m 49s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/f5207009aa50466f8abd5671f2ff138a : SUCCESS in 30m 18s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/af130fcd85474d8f9879790b2026a1be : SUCCESS in 40m 19s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/4f4095cfe2e444cc956ec476a8e9c121 : SUCCESS in 1h 06m 25s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/0b65d98490ef4c8898d7cfdb625dd618 : FAILURE in 52m 53s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/9393637e6c9c47bea40da35a9206d606 : SUCCESS in 6m 32s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"56cc33da09bfddcad8678d078ed94ccd7b66a565","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-20 21:30:26.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"bb49706844ff73d2c2db3065b74eb4c69b03bcc8","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-20 23:28:03.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2cb67d043e3d43cb8cc90e770cb82fd3\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3bc5928fa8024e65bd057f498a90f786 : SUCCESS in 4m 49s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/afc8e602494d4d4a8ee42c3dad4f2078 : SUCCESS in 13m 14s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/f454ae4934f9497294efc6e9e1db20fc : SUCCESS in 10m 56s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4e62012e41bc41bcb2b2141c8196badf : SUCCESS in 13m 52s\n- grenade https://zuul.opendev.org/t/openstack/build/1196c96ef51a486ca6fb13c5de5e7649 : SUCCESS in 1h 04m 12s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e9f054420231429e85be5d0058c5c254 : SUCCESS in 1h 50m 50s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/359f03204ace486c870d96f46145492f : SUCCESS in 31m 20s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/05e6f208160b4147a94c075470c168b7 : SUCCESS in 12m 22s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6ea7be7d4a6745da96d8f6df7e400b7d : SUCCESS in 1h 01m 16s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/beba4a9efc2a463c814662969c89a2a2 : FAILURE in 39m 23s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"4beb2d86ecc97277e01fc6e39c26d3ad2c6e3ea6","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-20 23:28:04.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"a9f04c471db2d005b037b64facb81d7a61920a81","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-02-20 23:29:08.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ecb2349dc025421e8e3a7a63b574b20d\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/54135605fd3740d88ecfbbf47536e714 : SUCCESS in 53s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"57a0a59cce0aad4fdd9d42390ee61c8c28f16590","revisions":{"53673273a13dc54989980959e4f7a3fabad0452b":{"kind":"REWORK","_number":1,"created":"2026-01-13 12:21:13.000000000","uploader":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"ref":"refs/changes/23/973223/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/23/973223/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/23/973223/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/23/973223/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/23/973223/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/23/973223/1"}}},"commit":{"parents":[{"commit":"a903b505429410435aab4c96db6e89413929fcf3","subject":"Merge \"Improve federated mapping documentation clarity\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a903b505429410435aab4c96db6e89413929fcf3"}]}],"author":{"name":"Dong Ma","email":"winterma.dong@gmail.com","date":"2026-01-13 12:19:42.000000000","tz":480},"committer":{"name":"Dong Ma","email":"winterma.dong@gmail.com","date":"2026-01-13 12:20:55.000000000","tz":480},"subject":"Fix project policy allowing unauthorized access to root domains","message":"Fix project policy allowing unauthorized access to root domains\n\nThe project policy rules using domain_id matching were vulnerable to\na None \u003d\u003d None match condition. When a user has a project-scoped token\n(domain_id \u003d None in credentials) and the target is a root domain\n(domain_id \u003d null), the policy check would incorrectly pass.\n\nThis allowed any user with a reader/admin/manager role on any project\nto access details of root domains (projects with is_domain\u003dtrue and\ndomain_id\u003dnull), such as the default domain.\n\nThe fix adds an explicit check to ensure the target project domain_id\nis not null, preventing the accidental None \u003d\u003d None match. This follows\nthe same pattern used in grant.py for handling null domain_id values.\n\nAffected policy rules:\n- SYSTEM_READER_OR_DOMAIN_READER_OR_PROJECT_USER\n- SYSTEM_ADMIN_OR_DOMAIN_ADMIN_OR_PROJECT_ADMIN\n- ADMIN_OR_DOMAIN_MANAGER\n\nChange-Id: I31a1f11a181c11be7de631faf414bfdaf29dac42\nSigned-off-by: Dong Ma \u003cwinterma.dong@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/53673273a13dc54989980959e4f7a3fabad0452b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/53673273a13dc54989980959e4f7a3fabad0452b"}]},"branch":"refs/heads/master"},"57a0a59cce0aad4fdd9d42390ee61c8c28f16590":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2026-01-13 12:29:17.000000000","uploader":{"_account_id":9725,"name":"Dong Ma","email":"winterma.dong@gmail.com","username":"larainema"},"ref":"refs/changes/23/973223/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/23/973223/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/23/973223/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/23/973223/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/23/973223/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/23/973223/2"}}},"commit":{"parents":[{"commit":"a903b505429410435aab4c96db6e89413929fcf3","subject":"Merge \"Improve federated mapping documentation clarity\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/a903b505429410435aab4c96db6e89413929fcf3"}]}],"author":{"name":"Dong Ma","email":"winterma.dong@gmail.com","date":"2026-01-13 12:19:42.000000000","tz":480},"committer":{"name":"Dong Ma","email":"winterma.dong@gmail.com","date":"2026-01-13 12:28:58.000000000","tz":480},"subject":"Fix project policy allowing unauthorized access to root domains","message":"Fix project policy allowing unauthorized access to root domains\n\nThe project policy rules using domain_id matching were vulnerable to\na None \u003d\u003d None match condition. When a user has a project-scoped token\n(domain_id \u003d None in credentials) and the target is a root domain\n(domain_id \u003d null), the policy check would incorrectly pass.\n\nThis allowed any user with a reader/admin/manager role on any project\nto access details of root domains (projects with is_domain\u003dtrue and\ndomain_id\u003dnull), such as the default domain.\n\nThe fix adds an explicit check to ensure the target project domain_id\nis not null, preventing the accidental None \u003d\u003d None match. This follows\nthe same pattern used in grant.py for handling null domain_id values.\n\nAffected policy rules:\n- SYSTEM_READER_OR_DOMAIN_READER_OR_PROJECT_USER\n- SYSTEM_ADMIN_OR_DOMAIN_ADMIN_OR_PROJECT_ADMIN\n- ADMIN_OR_DOMAIN_MANAGER\n\nCloses-Bug: #2138295\nChange-Id: I31a1f11a181c11be7de631faf414bfdaf29dac42\nSigned-off-by: Dong Ma \u003cwinterma.dong@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/57a0a59cce0aad4fdd9d42390ee61c8c28f16590"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/57a0a59cce0aad4fdd9d42390ee61c8c28f16590"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}