)]}'
{"id":"openstack%2Fkeystone~986499","triplet_id":"openstack%2Fkeystone~stable%2F2026.1~I795bfb7c5dad8949c9879e06ae36784f7856deb8","project":"openstack/keystone","branch":"stable/2026.1","attention_set":{},"removed_from_attention_set":{"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-05-06 12:38:41.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I795bfb7c5dad8949c9879e06ae36784f7856deb8","subject":"Include system scope in rescope guard","status":"MERGED","created":"2026-04-28 08:42:48.000000000","updated":"2026-05-06 12:38:41.000000000","submitted":"2026-05-06 12:38:41.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"986499","cherry_pick_of_change":982172,"cherry_pick_of_patch_set":3,"meta_rev_id":"788875bdbaa880d8f29780b3b37f04194122582c","_number":986499,"virtual_id_number":986499,"owner":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-05-06 12:38:41.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"all":[{"value":2,"date":"2026-05-06 08:48:46.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"all":[{"value":1,"date":"2026-05-06 08:48:46.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"}],"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-04-28 08:42:48.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"state":"CC"},{"updated":"2026-04-28 10:37:55.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-05-06 08:48:46.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"}],"messages":[{"id":"306701413ff2a769c5d4d540362ffc3c7ee507e7","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-04-28 08:42:48.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"561ed56f87a42532177354eba85a8beb959b7081","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-04-28 10:37:55.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/70f48debf69c44ed99bfbb1f4bdd20a4\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/4adafab29d834606949995fcb65f2e0c : SUCCESS in 13m 45s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/37ca40dbf6b24126a97a69aebee1f4b6 : SUCCESS in 5m 33s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/804fd4caa7644ab09ec5c443bd95ceca : SUCCESS in 11m 01s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/f5a173e630e04bc585b4f36165346b4c : SUCCESS in 11m 26s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/057ce9895de54fdbbc4489d6ce99f5aa : SUCCESS in 13m 40s\n- grenade https://zuul.opendev.org/t/openstack/build/aa1d8a1c86cf4b2995bf43e8ca0c1e86 : SUCCESS in 1h 00m 13s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a44abfa7d35348e993c978be66ea37d7 : SUCCESS in 1h 44m 38s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/eab0dc54f2c4435a9b5e23dd51aa22e2 : SUCCESS in 11m 14s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/b98deaf68f324a6796aa7b9178b87924 : SUCCESS in 24m 04s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/5798c132e92d4904b4994d665e4d6ede : FAILURE in 16m 08s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/93478642bd404946bdcbea140523d445 : FAILURE in 26m 38s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/220a909fd02e4f8ab7446bbde2f7f073 : SUCCESS in 28m 23s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/6dbaaab12b2c468da6b2d9490feab6fc : SUCCESS in 31m 43s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/725b919ef1854d668987622b6565480f : SUCCESS in 37m 55s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a764c7122fdc4537a0c8a25872132d3f : SUCCESS in 55m 27s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/fbcbdf2054fc40a4863190f28a9751f0 : FAILURE in 52m 54s (non-voting)\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/cace07f850af482e835a89db9e6eec65 : SUCCESS in 8m 31s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"6c4526252af2854dd09569dbc2e4197c55954053","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-06 08:48:46.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"a826bac5ba8e1556fcc9ba597cf8052bbe5d9f37","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-06 08:49:40.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"1996516fd7925d43b4bf560bde1bf0d2aab503c5","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-06 12:38:41.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/3c79dcd45a8d46f49b3895cea2b5f5c3\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/cdb4735c0c8243b89621f8e9b1ea4175 : SUCCESS in 3m 27s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/7c13d26fec0446fd9d444a3582cdd83d : SUCCESS in 13m 27s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/e52a5c9604114099b5c83ab2d3bc9b3e : SUCCESS in 12m 17s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3c74a36771de40629d4924c88ef3e153 : SUCCESS in 13m 36s\n- grenade https://zuul.opendev.org/t/openstack/build/5abc4af2555a405e8b8dacd9d529a8e7 : SUCCESS in 1h 03m 18s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/63157ac9ae4147189dce7c9695031fe4 : SUCCESS in 57m 03s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/500c2fd470244ffb821c26d09cd50f1f : SUCCESS in 29m 53s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/09b7abf05c46416392572e037b2e10a4 : SUCCESS in 30m 13s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/b3961278b0a44b54b12b441f94169bb6 : SUCCESS in 51m 01s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/631079347786413e999b033a0c7cb90a : FAILURE in 42m 30s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"788875bdbaa880d8f29780b3b37f04194122582c","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-06 12:38:41.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"60fdde686f006b02a51656c596a3ce505a9292a5","revisions":{"60fdde686f006b02a51656c596a3ce505a9292a5":{"kind":"REWORK","_number":1,"created":"2026-04-28 08:42:48.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/99/986499/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/99/986499/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/99/986499/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/99/986499/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/99/986499/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/99/986499/1"}}},"commit":{"parents":[{"commit":"88b5d90203900e3785321723d382ad84000a6aaa","subject":"Block app credential token rescoping","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/88b5d90203900e3785321723d382ad84000a6aaa"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-25 21:53:32.000000000","tz":60},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-04-28 08:42:48.000000000","tz":0},"subject":"Include system scope in rescope guard","message":"Include system scope in rescope guard\n\nThe allow_rescope_scoped_token\u003dFalse configuration option is\nmeant to prevent any scoped token from being used to create\nanother token. The check only covered project-scoped and\ndomain-scoped tokens but not system-scoped tokens, allowing\na system-scoped token to be rescoped despite the setting.\n\nGenerated-By: claude-opus-4-6 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I795bfb7c5dad8949c9879e06ae36784f7856deb8\n(cherry picked from commit bcc8e819a8611e2f5a8bc1a61cfa792269106c1a)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/60fdde686f006b02a51656c596a3ce505a9292a5"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/60fdde686f006b02a51656c596a3ce505a9292a5"}]},"branch":"refs/heads/stable/2026.1","conflicts":{"ours":"88b5d90203900e3785321723d382ad84000a6aaa","theirs":"bcc8e819a8611e2f5a8bc1a61cfa792269106c1a","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}