)]}'
{"id":"openstack%2Fkeystone~985886","triplet_id":"openstack%2Fkeystone~stable%2F2026.1~I733305ba61bd8362f0c9675e257b1d42a6ef4053","project":"openstack/keystone","branch":"stable/2026.1","attention_set":{},"removed_from_attention_set":{"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-04-27 12:42:01.000000000","reason":"Change was submitted"},"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-04-27 11:51:22.000000000","reason":"\u003cGERRIT_ACCOUNT_14250\u003e replied on the change","reason_account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},"37598":{"account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"last_update":"2026-04-27 12:42:01.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I733305ba61bd8362f0c9675e257b1d42a6ef4053","subject":"Add tests for restricted app cred guard","status":"MERGED","created":"2026-04-22 21:16:06.000000000","updated":"2026-04-27 12:43:49.000000000","submitted":"2026-04-27 12:42:01.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"985886","cherry_pick_of_change":983648,"cherry_pick_of_patch_set":3,"meta_rev_id":"980ea0a176e2ec1bd20ab14b407740f524c86b9a","_number":985886,"virtual_id_number":985886,"owner":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-04-27 12:42:00.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":2,"date":"2026-04-27 11:51:22.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":1,"date":"2026-04-27 11:51:22.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-04-22 21:16:06.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"state":"CC"},{"updated":"2026-04-22 22:00:43.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-04-24 14:03:37.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"},{"updated":"2026-04-24 14:03:37.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"}],"messages":[{"id":"c8a79ce4d9de76b05760727ec713f3a684e00359","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2026-04-22 21:16:06.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"176d0bba500a49b0ebfa4ee48d9a7bac4891d6e9","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-22 22:00:43.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b09ba032a9e741ffac38ae1e4b8fa443\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/95f381b56d5047f0a684c7a5ae629bed : SUCCESS in 17m 22s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/96dac776a8e143b695f3c4cb2dbeeb8b : SUCCESS in 5m 12s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/cc85a2ea723e4ccf943d2e54298f7047 : SUCCESS in 11m 38s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/d31a483b1a1849b4b3f3a6df5de9f745 : SUCCESS in 8m 08s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0dfb8687efa34272841fb9b6989d1f05 : SUCCESS in 10m 52s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/9249ada7b1d84cdc9a6a474afd958bb5 : FAILURE in 43m 28s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/03d4f5f01c554cebae05e547073c30de : SUCCESS in 7m 22s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"c1966fa394ad7a97fb5b4eb6a3ae5abe115eeb63","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-04-23 06:47:19.000000000","message":"Patch Set 2: Cherry Picked from branch master.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"9eab7b713ff37aed172f25bbf68838c08850465f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-23 07:27:56.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5e1e037a60784859904ed59d8fed2865\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/bb93ae51da7d4fefa2c20029b3154708 : SUCCESS in 12m 46s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4840546c798b44a5a712e29515b331bd : SUCCESS in 3m 19s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/4b589dbeaf75445abd24478f655d4ec0 : SUCCESS in 12m 04s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/09e0e91e315143abad655c1b9dea10a3 : SUCCESS in 12m 05s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2c15b32b9ed643658d5ae4a743a34b8d : SUCCESS in 13m 30s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/1981f215189b4703bcc9fde77dd28804 : FAILURE in 40m 06s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/f9ab41509ad7411c96e2c8cd2d712e32 : SUCCESS in 7m 18s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"72749dc16ca5908a45fd334d47520b4ccdcb320b","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-04-27 11:51:22.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"584ad2603ef1ffa241a967a748ba6d54b8b4df07","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-27 11:51:50.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"b3209b6a3392e59bf817783cc39a3fed2376e831","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-27 12:42:00.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c3084c52bd4b49b593ae3d035dbfe636\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/a27843863b044c4593e63bffe99473d8 : SUCCESS in 5m 51s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/fe135478f7ec45cab403960bc4296e6d : SUCCESS in 8m 17s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/701b6f9ccb994c8f93501bdc2975faa2 : SUCCESS in 7m 00s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/dcc04aa3358e4937bd6f6732754b069f : SUCCESS in 7m 06s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/7d74156c68b14e8e843317632fae65e2 : FAILURE in 45m 37s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"e1bed386e9950d6f10e233d3fd4950eec9c48ff7","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-27 12:42:01.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"980ea0a176e2ec1bd20ab14b407740f524c86b9a","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-27 12:43:49.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/19eb82ae8beb4005b484b10fc5479fb1\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fa8b9cb0a9f649ca90024771282b8821 : SUCCESS in 1m 29s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"8e1cba068e13cd340b3551645dc817cab10b0aa3","revisions":{"f8b23493d9e3bd4b58ab6c21140db0183c38be13":{"kind":"REWORK","_number":1,"created":"2026-04-22 21:16:06.000000000","uploader":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"ref":"refs/changes/86/985886/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/86/985886/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/985886/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/985886/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/985886/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/86/985886/1"}}},"commit":{"parents":[{"commit":"5d5ae3aea3b90fd7fa4eaf3d3b918418db138b2e","subject":"Prevent unauthorized EC2 credential creation and deletion","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5d5ae3aea3b90fd7fa4eaf3d3b918418db138b2e"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-04-07 21:33:18.000000000","tz":120},"committer":{"name":"Ivan Anfimov","email":"lazekteam@gmail.com","date":"2026-04-22 21:16:06.000000000","tz":0},"subject":"Add tests for restricted app cred guard","message":"Add tests for restricted app cred guard\n\nVerify that the _check_unrestricted_application_credential guard on\nthe OS-EC2 credential create endpoint blocks restricted application\ncredentials from creating EC2 credentials, while still allowing\nunrestricted application credentials to do so.\n\nGenerated-By: claude-opus-4-6 (OpenCode)\nRelated-Bug: #2142138\nChange-Id: I733305ba61bd8362f0c9675e257b1d42a6ef4053\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n(cherry picked from commit c87ce6ed435f01431343d6b2bb6697a640514d27)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f8b23493d9e3bd4b58ab6c21140db0183c38be13"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f8b23493d9e3bd4b58ab6c21140db0183c38be13"}]},"branch":"refs/heads/stable/2026.1","conflicts":{"ours":"5d5ae3aea3b90fd7fa4eaf3d3b918418db138b2e","theirs":"c87ce6ed435f01431343d6b2bb6697a640514d27","contains_conflicts":false}},"8e1cba068e13cd340b3551645dc817cab10b0aa3":{"kind":"NO_CHANGE","_number":2,"created":"2026-04-23 06:47:19.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/86/985886/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/86/985886/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/985886/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/985886/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/985886/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/86/985886/2"}}},"commit":{"parents":[{"commit":"5d5ae3aea3b90fd7fa4eaf3d3b918418db138b2e","subject":"Prevent unauthorized EC2 credential creation and deletion","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/5d5ae3aea3b90fd7fa4eaf3d3b918418db138b2e"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-04-07 21:33:18.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-04-23 06:47:19.000000000","tz":0},"subject":"Add tests for restricted app cred guard","message":"Add tests for restricted app cred guard\n\nVerify that the _check_unrestricted_application_credential guard on\nthe OS-EC2 credential create endpoint blocks restricted application\ncredentials from creating EC2 credentials, while still allowing\nunrestricted application credentials to do so.\n\nGenerated-By: claude-opus-4-6 (OpenCode)\nRelated-Bug: #2142138\nChange-Id: I733305ba61bd8362f0c9675e257b1d42a6ef4053\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\n(cherry picked from commit c87ce6ed435f01431343d6b2bb6697a640514d27)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/8e1cba068e13cd340b3551645dc817cab10b0aa3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/8e1cba068e13cd340b3551645dc817cab10b0aa3"}]},"branch":"refs/heads/stable/2026.1","conflicts":{"ours":"5d5ae3aea3b90fd7fa4eaf3d3b918418db138b2e","theirs":"c87ce6ed435f01431343d6b2bb6697a640514d27","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}