)]}'
{"id":"openstack%2Fkeystone~983591","triplet_id":"openstack%2Fkeystone~stable%2F2024.2~Ib6904ec9f1bc069a9f607d39814b1d2633c17f53","project":"openstack/keystone","branch":"stable/2024.2","topic":"bug/2142138","attention_set":{},"removed_from_attention_set":{"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-04-08 19:04:12.000000000","reason":"Change was submitted"},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-04-08 19:04:12.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ib6904ec9f1bc069a9f607d39814b1d2633c17f53","subject":"Prevent unauthorized EC2 credential creation and deletion","status":"MERGED","created":"2026-04-07 16:12:18.000000000","updated":"2026-04-08 19:07:31.000000000","submitted":"2026-04-08 19:04:12.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"983591-bug/2142138","meta_rev_id":"ea3260fbb95cb125fe071fe5de1d9db529054f00","_number":983591,"virtual_id_number":983591,"owner":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-04-08 19:04:12.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":2,"date":"2026-04-08 15:26:24.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-04-08 10:19:55.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":1,"date":"2026-04-08 15:26:24.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-04-07 16:12:18.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-04-07 17:47:46.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-04-08 15:26:24.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"}],"messages":[{"id":"7a77f18f1db8f63e6c636b5a14a288538f64c553","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-04-07 16:12:18.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f1ff655a852eceb192b302b3945ddfd6952c3789","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-04-07 16:27:47.000000000","message":"Topic 2142138_20242 removed","accounts_in_message":[],"_revision_number":1},{"id":"09b7c5c9d80ab6e8c12faa35543e4ffd397b8e7d","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-04-07 16:27:51.000000000","message":"Topic set to bug/2142138","accounts_in_message":[],"_revision_number":1},{"id":"18a00299a8a9e383c2d99e9f937332b451edd6fb","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-07 17:47:46.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/eb96f478de00448195ca52b4df2601e8\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/76d53b2a90ac42fa9f58b8a8518339e7 : FAILURE in 4m 28s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8a8fff7348e84f89ae66dea1e5023de7 : SUCCESS in 4m 52s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/5d1282b2dd5f4c25ae04320245e3872e : FAILURE in 5m 07s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/e1a860deff784a8a9e2631818ab43ff1 : FAILURE in 7m 37s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/38659d38c9814ad49c51b5946b446125 : FAILURE in 5m 03s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e7879044c4b049e39953765c6139cf34 : FAILURE in 4m 29s\n- grenade https://zuul.opendev.org/t/openstack/build/2b6b2a4f6d6b45f1bea1df252498c492 : SUCCESS in 1h 01m 50s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/1987f61c12e24b46b1105d5b310b870b : SUCCESS in 1h 32m 50s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/089cc2047da64ae88afaee95e43c04d2 : SUCCESS in 12m 40s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/77afe5f820504219b414fd0f55992adf : FAILURE in 18m 59s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy https://zuul.opendev.org/t/openstack/build/3e8b02bf6b7f4b97a1abf730a147bfa1 : FAILURE in 23m 14s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/68b25bddb81e42b38b9e5d1160176c32 : SUCCESS in 19m 38s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/eb49632025684c9d902fccdb1576308e : FAILURE in 12m 48s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ee89fe8989d249b3ab7fc5a91c2fc978 : SUCCESS in 17m 06s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/0d777d04b4014d84bc13ebc2692b5ba8 : SUCCESS in 31m 09s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/87d5433f11c843acad1bef1c0b903fa4 : RETRY_LIMIT in 3m 15s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"7ea22cead25f9000ade33c80b347e824b8c0e992","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2026-04-08 08:53:55.000000000","message":"Patch Set 2: Patch Set 1 was rebased on behalf of \u003cGERRIT_ACCOUNT_27900\u003e\n\nOutdated Votes:\n* Verified-1\n","accounts_in_message":[{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"_revision_number":2},{"id":"42129b4fbca0343a318493fa2d84b28683a26f98","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-04-08 10:19:55.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"899158e3adbc1d889d320f8427af781a9d3b6900","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-08 10:29:01.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/686e590122cb437ba1f58a751a396b1a\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/01d0aafa6cb74f8887642277cabf0d85 : SUCCESS in 13m 54s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/06d495d7fa704936826df2fad2b1f40f : SUCCESS in 5m 02s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/13471bb272174c2da29b5f50eb670b64 : SUCCESS in 11m 02s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/3fd304736fea4ff49871c5f65b4a4fbd : SUCCESS in 7m 02s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/7c03220740334886b517f2902ee53171 : SUCCESS in 11m 36s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4c7a1907781e4313842d8f578a776b9b : SUCCESS in 6m 49s\n- grenade https://zuul.opendev.org/t/openstack/build/4d0c6f1cf3df4f0dab77e91408519ed4 : SUCCESS in 1h 01m 05s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/ed4a43cf025c47df919a56c19f9f49bd : SUCCESS in 1h 32m 19s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/8826be4e89a4494a88048adc0a05642d : SUCCESS in 12m 02s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/ad7237b480654bb8be7aae2ef1acc12e : FAILURE in 24m 57s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy https://zuul.opendev.org/t/openstack/build/fd3f650bc09c4f9080a85a299fd5bc2b : FAILURE in 22m 31s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/2369ea7cf5c845c9b762270889b754d9 : SUCCESS in 26m 53s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/6f9b8f3faf92462aaa8bf1b0b40428c1 : FAILURE in 17m 20s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/eac52f6d789c476fbc6e285a148b9cbf : SUCCESS in 21m 07s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/9a4f34cc4e8143aead282c1d939b6e3c : SUCCESS in 54m 50s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/397d1de19f3740a8b79cc35e646ef60f : FAILURE in 6m 03s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"d4574d3336f0ff1a402d6e38028468310c087926","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-04-08 15:26:24.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"a844b2cb67e3fac286c83906263c4177dc6eb50c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-08 16:57:20.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"1f8880ab09b0ff3a5024227563df56318913b012","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-08 19:04:12.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/eebba3b158f243eea1d70bdfdcc366ad\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e56cd9f9d52541cba40f586cfc0a8bde : SUCCESS in 6m 52s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/ecfb13a5d6c8434a9a21b3c903796b1e : SUCCESS in 17m 52s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/ff21034980c44f9ba43c3441d0328eb2 : SUCCESS in 12m 36s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7eb83bcb207542c9b8d2910f0c817795 : SUCCESS in 12m 39s\n- grenade https://zuul.opendev.org/t/openstack/build/8799cfe1df3b4ef1996243146d139a6f : SUCCESS in 1h 11m 51s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/2bd3672474314669ba5d819be694b0c2 : SUCCESS in 1h 26m 20s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/4e2197e07d1a4410b7e66821fc7139d4 : SUCCESS in 34m 59s\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/f54af83ab7c7451097aba25473b9625b : SUCCESS in 26m 24s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6e29a7d379864473ad7ddd268cacf986 : SUCCESS in 48m 20s","accounts_in_message":[],"_revision_number":2},{"id":"5d9ceeb149a05f45021255a3a5eb6618ceb0be7f","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-08 19:04:12.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"ea3260fbb95cb125fe071fe5de1d9db529054f00","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-08 19:07:31.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/f8595391b23446faa3d6650b518eeaf0\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e754b7e10e6d4224b71664d3447f1842 : SUCCESS in 53s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"e13e4667e3d2eea8e9d7b3e6c63ebb99c6a96213","revisions":{"e3ab7775846cf684f92a518788d38f9c8e8042ad":{"kind":"REWORK","_number":1,"created":"2026-04-07 16:12:18.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/91/983591/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/91/983591/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/983591/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/983591/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/983591/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/91/983591/1"}}},"commit":{"parents":[{"commit":"489e170f8161dac7c8388a9bd5864078a1338cc9","subject":"Invalidate token of user disabled in readonly backend","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/489e170f8161dac7c8388a9bd5864078a1338cc9"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-02-26 09:09:18.000000000","tz":60},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-04-07 16:12:14.000000000","tz":120},"subject":"Prevent unauthorized EC2 credential creation and deletion","message":"Prevent unauthorized EC2 credential creation and deletion\n\nA restricted application credential could be used to create EC2\ncredentials granting full user access to S3, bypassing the role\nrestriction. Add the same _check_unrestricted_application_credential\nguard that already protects application credential create/delete\nendpoints.\n\nAdditionally, tighten the ec2_create_credential and ec2_delete_credential\npolicies to require at least member role, as these are write operations\nthat should not be accessible to reader-role users regardless of whether\nthey are using an application credential.\n\nChange-Id: Ib6904ec9f1bc069a9f607d39814b1d2633c17f53\nCloses-Bug: #2142138\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e3ab7775846cf684f92a518788d38f9c8e8042ad"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e3ab7775846cf684f92a518788d38f9c8e8042ad"}]},"branch":"refs/heads/stable/2024.2"},"e13e4667e3d2eea8e9d7b3e6c63ebb99c6a96213":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-04-08 08:53:55.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_uploader":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"ref":"refs/changes/91/983591/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/91/983591/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/983591/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/983591/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/91/983591/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/91/983591/2"}}},"commit":{"parents":[{"commit":"db6e7fced15cb1fa622a3e421388475143989207","subject":"fix(pep8): pin setuptools\u003c82 for flake8-import-order compatibility","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/db6e7fced15cb1fa622a3e421388475143989207"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-02-26 09:09:18.000000000","tz":60},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-04-08 08:53:55.000000000","tz":0},"subject":"Prevent unauthorized EC2 credential creation and deletion","message":"Prevent unauthorized EC2 credential creation and deletion\n\nA restricted application credential could be used to create EC2\ncredentials granting full user access to S3, bypassing the role\nrestriction. Add the same _check_unrestricted_application_credential\nguard that already protects application credential create/delete\nendpoints.\n\nAdditionally, tighten the ec2_create_credential and ec2_delete_credential\npolicies to require at least member role, as these are write operations\nthat should not be accessible to reader-role users regardless of whether\nthey are using an application credential.\n\nChange-Id: Ib6904ec9f1bc069a9f607d39814b1d2633c17f53\nCloses-Bug: #2142138\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e13e4667e3d2eea8e9d7b3e6c63ebb99c6a96213"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/e13e4667e3d2eea8e9d7b3e6c63ebb99c6a96213"}]},"branch":"refs/heads/stable/2024.2","description":"Rebase"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{}}}]}