)]}'
{"id":"openstack%2Fkeystone~979393","triplet_id":"openstack%2Fkeystone~master~I1e06349fe8d9a9b19790c6d02ad25f0c134bfc38","project":"openstack/keystone","branch":"master","attention_set":{"13478":{"account":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"last_update":"2026-03-07 19:57:51.000000000","reason":"A robot voted negatively on a label"}},"removed_from_attention_set":{},"hashtags":[],"change_id":"I1e06349fe8d9a9b19790c6d02ad25f0c134bfc38","subject":"Default group domain to IdP domain in federation mappings","status":"NEW","created":"2026-03-07 17:59:46.000000000","updated":"2026-03-08 00:43:46.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"0e84bb264225b5f9e28583e33cd66fea28038605","_number":979393,"virtual_id_number":979393,"owner":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2026-03-08 00:43:46.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-03-07 18:31:48.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-03-07 19:57:51.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"1def8193993e09675a6f660b1b8f6fe694790b8e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-07 17:59:46.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"39e51de73921d51a5b103d93ede422a990a1caf5","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-07 18:31:48.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c7eed19978ec415c91bf4efdc390f643\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/5b089ecb71f3471c8c54bae982af1626 : SUCCESS in 19m 59s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/d6fa579e585f40549c336397a9cb432c : SUCCESS in 18m 53s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/d4808416e80c42239f05480f212380e9 : SUCCESS in 29m 44s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"6272df22eed5e9daf818e770e17050d3ccbfe914","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-07 19:57:51.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/8f891130e9e04458b639d6044471f496\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c40dad181fcc4f478f5842e7a9258cda : SUCCESS in 17m 17s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4d6300a552254e3f8abf75e6ee5fc0a0 : FAILURE in 3m 11s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/d34c45993add4f5096d6a594135ab928 : SUCCESS in 8m 25s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/7df4a95171d54bd18cf704ea6924aeec : SUCCESS in 7m 46s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/4ac0f606cdc4465ea45703cde5f8329a : SUCCESS in 10m 04s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a3445320124a4238a6bedcc5deb21706 : SUCCESS in 13m 21s\n- grenade https://zuul.opendev.org/t/openstack/build/4c804e0ee6014b889147f208017188a4 : SUCCESS in 1h 04m 57s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/65d9cf912e7e46e08c2f5d068605d8be : SUCCESS in 1h 53m 14s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/fcf942865c974074883858ebf492db98 : SUCCESS in 8m 57s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/746d2830dd7c4c9082dc8efe1e32c2e6 : SUCCESS in 15m 12s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/8e05ae2f2d9b4200b8769b0fc9295e54 : FAILURE in 9m 26s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/8e35ea369aa243a0863ae6c7d2af5a49 : FAILURE in 14m 18s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/c617551109724e458ec7ff213a8bd923 : SUCCESS in 30m 55s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/1bd3099af5554550aa753425ffe95be4 : SUCCESS in 33m 13s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/2a287793246e4c0c8df58a0b9b9c3eda : SUCCESS in 34m 26s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/baa9288e1c994fa7b0115de775393914 : SUCCESS in 1h 02m 23s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/9debdcb5cda14f4e9c2f06ffb0072446 : FAILURE in 42m 31s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/af736d771de64754ae82fca145b54191 : SUCCESS in 3m 56s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"a42b3860cea42db0ac3659645969577c883f61ff","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-03-07 23:07:19.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified-1\n","accounts_in_message":[],"_revision_number":2},{"id":"2996b2110944d3c95a205a82e0e49627fc13c19c","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-07 23:32:05.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d458ecd12f924a5eb1bd472cd429a7d3\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/860d4d1621284ce8938ae1e588626d96 : SUCCESS in 15m 07s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/1e2702cd70f34c63ae9c5c6dd154e5a2 : SUCCESS in 13m 45s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/bae3a454459343e9aea2476bcbf3f938 : SUCCESS in 23m 14s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"0e84bb264225b5f9e28583e33cd66fea28038605","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-03-08 00:43:46.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/311ef3ae05474499ac732b8052406e82\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/ff068151536941e7abe7d3564f89a48d : SUCCESS in 17m 12s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/37ddefaaf2414c7991d06822a1a2897a : SUCCESS in 5m 01s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/0ef86505151848c28758b62d7d0dd589 : SUCCESS in 13m 52s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/d9f30f360c3942dcbbe43716332860f7 : SUCCESS in 10m 19s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/4e55e4c97bcb46809d1e2410f8e7be50 : SUCCESS in 14m 34s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/289407ac477a417d9840b15bde66c367 : SUCCESS in 14m 42s\n- grenade https://zuul.opendev.org/t/openstack/build/3c6af7b422c74eeebbde96e33c361737 : SUCCESS in 1h 28m 09s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/7107848f02d246d198ad22404948be48 : SUCCESS in 56m 08s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/2157cdcb51424935aaf70efd0906935d : SUCCESS in 11m 05s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/24add83ed46b468394c16d40dc436b20 : SUCCESS in 30m 46s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/3261c3c815eb48c5ba1dc09faead260c : FAILURE in 18m 19s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/9fa384d412834dcc831186fcefb0c4c3 : FAILURE in 27m 12s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/29cbd7da376b42888a3a1b8cfce5d171 : SUCCESS in 28m 49s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/3a392de69f8b4f15a964e42f3ed01e02 : SUCCESS in 22m 43s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/704eb753a44c41478225c66737512487 : SUCCESS in 21m 08s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/095e83f0b5944861912b2e0156bcacf5 : SUCCESS in 1h 00m 29s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/5926d7ab61384ff180cefea0a3dcbe9a : FAILURE in 16m 50s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/fcb2a80f04564fa7811ce95b56220317 : SUCCESS in 7m 18s (non-voting)","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"1f3655159c53383d203ea4d62d14cf75cb34c050","revisions":{"fd40a2e07119750016315ee435f8a3f62f32f303":{"kind":"REWORK","_number":1,"created":"2026-03-07 17:59:46.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/93/979393/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/93/979393/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/979393/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/979393/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/979393/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/93/979393/1"}}},"commit":{"parents":[{"commit":"3eed64a23c2f8574d8a30bab21c521df40bde294","subject":"Widen OIDC Apache Location directives to match any identity provider","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3eed64a23c2f8574d8a30bab21c521df40bde294"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-05 21:59:24.000000000","tz":60},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-07 17:47:37.000000000","tz":60},"subject":"Default group domain to IdP domain in federation mappings","message":"Default group domain to IdP domain in federation mappings\n\nWhen a federation mapping specifies groups by name without an explicit\ndomain, the group domain now defaults to the Identity Provider\u0027s\ndomain_id. This mirrors the existing user domain defaulting behavior\n(mapped.py:463) and eliminates the need for per-customer mappings in\nmulti-tenant deployments.\n\nPreviously, omitting the group domain raised a ValidationError in the\nmapping engine (_normalize_groups). Now the mapping engine produces\ngroup dicts without a domain, and apply_mapping_filter injects the\nIdP\u0027s domain_id as a fallback before group name resolution.\n\nGenerated-By: Claude (Anthropic)\nCloses-Bug: 2143399\nChange-Id: I1e06349fe8d9a9b19790c6d02ad25f0c134bfc38\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/fd40a2e07119750016315ee435f8a3f62f32f303"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/fd40a2e07119750016315ee435f8a3f62f32f303"}]},"branch":"refs/heads/master"},"1f3655159c53383d203ea4d62d14cf75cb34c050":{"kind":"REWORK","_number":2,"created":"2026-03-07 23:07:19.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/93/979393/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/93/979393/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/979393/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/979393/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/93/979393/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/93/979393/2"}}},"commit":{"parents":[{"commit":"e3d560e08dea70e7458e87fd36f820f08bc07e8d","subject":"Widen OIDC Apache Location directives to match any identity provider","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e3d560e08dea70e7458e87fd36f820f08bc07e8d"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-05 21:59:24.000000000","tz":60},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-07 22:37:40.000000000","tz":60},"subject":"Default group domain to IdP domain in federation mappings","message":"Default group domain to IdP domain in federation mappings\n\nWhen a federation mapping specifies groups by name without an explicit\ndomain, the group domain now defaults to the Identity Provider\u0027s\ndomain_id. This mirrors the existing user domain defaulting behavior\n(mapped.py:463) and eliminates the need for per-customer mappings in\nmulti-tenant deployments.\n\nPreviously, omitting the group domain raised a ValidationError in the\nmapping engine (_normalize_groups). Now the mapping engine produces\ngroup dicts without a domain, and apply_mapping_filter injects the\nIdP\u0027s domain_id as a fallback before group name resolution.\n\nGenerated-By: Claude (Anthropic)\nCloses-Bug: 2143399\nChange-Id: I1e06349fe8d9a9b19790c6d02ad25f0c134bfc38\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/1f3655159c53383d203ea4d62d14cf75cb34c050"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/1f3655159c53383d203ea4d62d14cf75cb34c050"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}