)]}'
{"id":"openstack%2Fkeystone~983655","triplet_id":"openstack%2Fkeystone~master~Idb192a2fd370fc26c7d76788e9ad1856483d3239","project":"openstack/keystone","branch":"master","attention_set":{},"removed_from_attention_set":{"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-04-22 22:18:15.000000000","reason":"Change was submitted"},"13478":{"account":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"last_update":"2026-04-22 22:18:15.000000000","reason":"Change was submitted"},"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-04-21 06:46:22.000000000","reason":"\u003cGERRIT_ACCOUNT_14250\u003e replied on the change","reason_account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-04-22 17:22:31.000000000","reason":"\u003cGERRIT_ACCOUNT_27900\u003e replied on the change","reason_account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}}},"hashtags":[],"change_id":"Idb192a2fd370fc26c7d76788e9ad1856483d3239","subject":"Block restricted app creds from creating EC2 credentials via /credentials","status":"MERGED","created":"2026-04-07 21:57:03.000000000","updated":"2026-04-23 01:16:35.000000000","submitted":"2026-04-22 22:18:15.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"983655","meta_rev_id":"3cc9831894528d1129a985d871f39251d6d96299","_number":983655,"virtual_id_number":983655,"owner":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-04-22 22:18:15.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"all":[{"value":2,"date":"2026-04-22 19:05:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":2,"date":"2026-04-22 19:06:29.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":1,"date":"2026-04-22 19:05:06.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":1,"date":"2026-04-22 19:06:29.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"}],"CC":[{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-04-07 22:19:01.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-04-07 23:44:30.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-04-08 17:06:18.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"state":"CC"},{"updated":"2026-04-08 17:06:18.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"state":"CC"},{"updated":"2026-04-08 17:06:18.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"},{"updated":"2026-04-08 17:06:18.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-04-21 11:10:33.000000000","updated_by":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"reviewer":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"state":"REVIEWER"},{"updated":"2026-04-21 15:58:54.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"}],"messages":[{"id":"ba61ffb9d4073879baa40c26b613f5608aa089d6","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-04-07 21:57:03.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"ec2ee2fdd721fc19a1500ebb9ec9a0dc5902a7aa","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-07 22:19:01.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9fbceb84a0694e4fbe67f56be7cab80b\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/91e4cbc5ed1044ce8b346be231a3cb00 : SUCCESS in 16m 21s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/c1489c3ceaa74509bcafad75aafdffb3 : FAILURE in 12m 41s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/6ddfd84851c247aa9ab156bd923634b2 : SUCCESS in 20m 19s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"c026e2cfc2183e1934b1c6156a4508c23284c6ec","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-07 23:44:30.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/75433e6230d1418bab04145fdfe2affb\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/cee73b630871428c91c6a1a78bb2522d : SUCCESS in 11m 17s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/dbbb600e418548aba4e975677963f438 : SUCCESS in 3m 08s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/445db94d7f4f4a94a8a59d78884123be : SUCCESS in 8m 33s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/effcfe899b31498896819def5bb4f7cc : SUCCESS in 7m 01s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/ccaf49da958443d897dec4f0ae7e5cc2 : SUCCESS in 14m 37s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/374649aab1b84fb7a9b19dd045cf22bd : SUCCESS in 6m 31s\n- grenade https://zuul.opendev.org/t/openstack/build/e4aaf5be8ccb4765bb4ac773c99ed821 : SUCCESS in 1h 06m 00s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/53e5e8bde6b9470c970050db12202935 : SUCCESS in 1h 42m 34s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/58062590f8a34fae962f9f37bbc87cf0 : SUCCESS in 9m 35s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/16954aba64d2422ea85ea0d8a315a236 : SUCCESS in 31m 46s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/d92cec7f4b80479bb0e60b536f20702d : FAILURE in 9m 57s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/f4879f9c790c41009a47a38e3fdeda66 : FAILURE in 30m 29s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/260cb2fab66c422f87545f45bee72dcb : SUCCESS in 13m 53s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/68131f44ee634e6c83cab3e4b6f84b23 : SUCCESS in 14m 18s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/df0e616c844348d999202a5f2be8fe52 : SUCCESS in 21m 42s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a4e2d8ab07684d88bfda74e6c519b022 : SUCCESS in 1h 08m 42s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/f58e7ecb11b345f5b3b3956eadb1e0bb : FAILURE in 17m 05s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/f7a244a1cee34b22b0beb4daef1d91b7 : SUCCESS in 7m 10s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"3ca688fdd8243cabb10b970e74fe885dfbb79696","author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"date":"2026-04-08 15:32:26.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"a047ced29cf51388dd74b2029a91f1944bdc23a1","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-04-21 06:46:22.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"d0c95c41950cbd2dad82ee619d7fc584c94ffc2e","author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"date":"2026-04-21 11:10:33.000000000","message":"Patch Set 1: Code-Review+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"4e33e8f3a5b213034cec624ffc60b0e328f685b5","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-04-21 15:58:54.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"b2cfb083d1c7f24a3fc818736c3e168b4e828f68","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-04-22 17:22:31.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"eee6ce3accc41132d70f9fc7c8e9f1f2b4344adc","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 17:25:18.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"d096ced28dc8e6c57f1cea5119ad7819f1cd328f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-04-22 19:05:06.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.\n\nCopied Votes:\n* Code-Review+1, Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Workflow+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"1f46f2b659a44690493814b4e3a3236d19261025","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-04-22 19:06:29.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"350a9b6a21c1691687578aa2b3bc877d7bc14710","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 20:49:22.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ceab83b325184602992880a4adf337fe\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f3a31dcffdb6404787d806a116952132 : SUCCESS in 14m 51s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/57e4dcc378a5434eb89891d462016bd4 : SUCCESS in 7m 19s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/15fb7d67a840419ea4ff62076ddae44d : SUCCESS in 9m 45s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/ad67f487824349c199d329a66d002f9c : SUCCESS in 12m 14s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/8aa7b34a133e4bb3a11db9d3007ec566 : SUCCESS in 14m 48s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7951be37ecab406d8e11f46cd31f56e4 : SUCCESS in 12m 56s\n- grenade https://zuul.opendev.org/t/openstack/build/112813acb0ae49568c0cfe6c1cc22ea6 : SUCCESS in 58m 07s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/fa679fe8d0a2473286341e852fd0ef84 : SUCCESS in 1h 43m 14s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/99da51e5541a4f5b805dda5853e2124c : SUCCESS in 18m 15s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/7b54a7e9ec63438e9c2af6a642a0ff34 : SUCCESS in 24m 09s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/4d4bdeba6de14c1ea6e62db6b74eccb2 : FAILURE in 16m 09s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/48dc64f1332043ad88409d347655bb62 : FAILURE in 25m 54s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/41e3aed1eb5d4e55ad434ef8304fd5ee : SUCCESS in 31m 14s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/2e6d171a9a734236965a08ca91a33ffa : SUCCESS in 35m 03s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/7d607746939c43a9a0714887094f78f2 : SUCCESS in 48m 59s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/f4ece189328f4d52a65b3f7c12f12682 : SUCCESS in 54m 10s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/5d2ff94d7a5742c2aff023ffe744f780 : FAILURE in 42m 17s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/7fb3102398dc49ca923fa3115c95c86b : SUCCESS in 7m 20s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"4bd322bc18ad058f1279587cdb3abb156a092d3f","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 20:50:06.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"b2fb2f82c98fc6bc6bd6cc688a8e86550fab93eb","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 22:18:15.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d62afbe577de4cc6a68d306333e358e2\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/847fc1d522244eafb330200ff6afa913 : SUCCESS in 5m 33s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/773308f5ce454d819d75fb6715f1835b : SUCCESS in 12m 37s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/d21e4e19e6ae4a0bb7d57361c1a50720 : SUCCESS in 12m 03s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/242f15da492b45689d91e95016a796d8 : SUCCESS in 15m 16s\n- grenade https://zuul.opendev.org/t/openstack/build/5c1bb5dbd7d848d0bc99eead9ad4da79 : SUCCESS in 1h 11m 29s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/297291b3388a4503b9ba7bc2b0f523d2 : SUCCESS in 1h 26m 44s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/4fa4eb96dc794f2eacaf3ba215613476 : SUCCESS in 23m 38s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/3304ae39b4b1447bacfad8df17d27855 : SUCCESS in 34m 57s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/d135094e0fd94acdadb0b21361591026 : SUCCESS in 1h 05m 58s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/c36aca0dbd73407f86897b36111afc2e : FAILURE in 42m 25s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"6c66bfe1eaf87c106b765abb9dd914e29593a8ee","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 22:18:15.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"a2510516dd91adc4f08f56c1ed2defa489b9b088","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 22:19:22.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/43e0bcde501846a4958f50e4f0950979\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9cb0d75f5e0d4b20a1db8648389396a3 : SUCCESS in 55s","accounts_in_message":[],"_revision_number":2},{"id":"3cc9831894528d1129a985d871f39251d6d96299","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-23 01:16:35.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d4edbe04fc364247af5c09660826508b\n\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/da9092700e7740b5a4c0edc10421c464 : SUCCESS in 20m 22s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/5d3db326dae5487dadbc8eb2e381f014 : SUCCESS in 14m 13s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/91ae3088b65a49c29f60dd19e27a1973 : SUCCESS in 21m 41s (non-voting)","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"d6a3dc511057d6ac25bd2d75776a4233c5608684","revisions":{"f47aaa57e7250b3985d0a1cf2f745f9f476ab23a":{"kind":"REWORK","_number":1,"created":"2026-04-07 21:57:03.000000000","uploader":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"ref":"refs/changes/55/983655/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/55/983655/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/55/983655/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/55/983655/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/55/983655/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/55/983655/1"}}},"commit":{"parents":[{"commit":"8483c41fa7aba95835cb68553a571be9b3129131","subject":"Add tests for restricted app cred guard","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/8483c41fa7aba95835cb68553a571be9b3129131"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-04-07 21:45:15.000000000","tz":120},"committer":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-04-07 21:45:15.000000000","tz":120},"subject":"Block restricted app creds from creating EC2 credentials via /credentials","message":"Block restricted app creds from creating EC2 credentials via /credentials\n\nThe POST /v3/credentials endpoint accepted EC2 credential creation\nfrom restricted application credential tokens, bypassing the guard\non the dedicated OS-EC2 endpoint. Add the same unrestricted\napplication credential check to the generic credentials API for\nEC2-type credentials, and update the existing test to use an\nunrestricted application credential.\n\nRelated-Bug: #2142138\nGenerated-By: claude-opus-4-6 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: Idb192a2fd370fc26c7d76788e9ad1856483d3239\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f47aaa57e7250b3985d0a1cf2f745f9f476ab23a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f47aaa57e7250b3985d0a1cf2f745f9f476ab23a"}]},"branch":"refs/heads/master"},"d6a3dc511057d6ac25bd2d75776a4233c5608684":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-04-22 19:05:06.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/55/983655/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/55/983655/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/55/983655/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/55/983655/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/55/983655/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/55/983655/2"}}},"commit":{"parents":[{"commit":"c87ce6ed435f01431343d6b2bb6697a640514d27","subject":"Add tests for restricted app cred guard","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/c87ce6ed435f01431343d6b2bb6697a640514d27"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-04-07 21:45:15.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-04-22 19:04:35.000000000","tz":120},"subject":"Block restricted app creds from creating EC2 credentials via /credentials","message":"Block restricted app creds from creating EC2 credentials via /credentials\n\nThe POST /v3/credentials endpoint accepted EC2 credential creation\nfrom restricted application credential tokens, bypassing the guard\non the dedicated OS-EC2 endpoint. Add the same unrestricted\napplication credential check to the generic credentials API for\nEC2-type credentials, and update the existing test to use an\nunrestricted application credential.\n\nRelated-Bug: #2142138\nGenerated-By: claude-opus-4-6 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: Idb192a2fd370fc26c7d76788e9ad1856483d3239\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/d6a3dc511057d6ac25bd2d75776a4233c5608684"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/d6a3dc511057d6ac25bd2d75776a4233c5608684"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}