)]}'
{"id":"openstack%2Fkeystone~987627","triplet_id":"openstack%2Fkeystone~stable%2F2025.1~I795bfb7c5dad8949c9879e06ae36784f7856deb8","project":"openstack/keystone","branch":"stable/2025.1","attention_set":{"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-05-20 09:32:58.000000000","reason":"Added by \u003cGERRIT_ACCOUNT_37598\u003e using the hovercard menu","reason_account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}},"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-05-12 09:41:15.000000000","reason":"\u003cGERRIT_ACCOUNT_37598\u003e replied on the change","reason_account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-05-20 09:32:50.000000000","reason":"Added by \u003cGERRIT_ACCOUNT_37598\u003e using the hovercard menu","reason_account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}}},"removed_from_attention_set":{"37598":{"account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"last_update":"2026-06-09 14:12:47.000000000","reason":"Removed by \u003cGERRIT_ACCOUNT_37598\u003e by clicking the attention icon","reason_account":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}}},"hashtags":[],"change_id":"I795bfb7c5dad8949c9879e06ae36784f7856deb8","subject":"Include system scope in rescope guard","status":"NEW","created":"2026-05-07 11:45:23.000000000","updated":"2026-06-09 14:12:47.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"cherry_pick_of_change":987478,"cherry_pick_of_patch_set":2,"meta_rev_id":"e4533f483308ff6039a0fd89fcb65054b23951e4","_number":987627,"virtual_id_number":987627,"owner":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"tag":"autogenerated:zuul:check","value":-1,"date":"2026-05-28 11:24:35.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"CC":[{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-07 11:45:23.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"state":"CC"},{"updated":"2026-05-07 11:45:58.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"},{"updated":"2026-05-07 13:34:29.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-05-12 09:41:15.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-05-12 10:38:51.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"},{"updated":"2026-05-28 10:16:46.000000000","updated_by":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"reviewer":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"state":"CC"}],"messages":[{"id":"3bb7e5d452b2a4c23c004073e06fe83f712c1cda","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2026-05-07 11:45:23.000000000","message":"Patch Set 1: Cherry Picked from branch stable/2025.2.","accounts_in_message":[],"_revision_number":1},{"id":"b2d713396cbb29384b5693ffc8ba69c7ac1c2777","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2026-05-07 11:45:52.000000000","message":"Patch Set 2: Patch Set 1 was rebased","accounts_in_message":[],"_revision_number":2},{"id":"8385a9c867fa47db64de32d305e117ea3883b642","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-07 13:34:29.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/91ec1bd804b843d3808b0edd2a71eccd\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/1085b54ec90d4419b48f7e7d319384d4 : SUCCESS in 16m 38s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/29df13f9e23c44b185f2792ec916fd04 : SUCCESS in 3m 30s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/aef5c4957efe4df3b787233094751a90 : SUCCESS in 13m 04s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/614dd19ba81446df8708e69c95bab4f2 : SUCCESS in 7m 26s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e5b0816778844b80963977882f5224fb : SUCCESS in 15m 08s\n- grenade https://zuul.opendev.org/t/openstack/build/d3d741614b794e8f85b50ec049f4c947 : SUCCESS in 56m 17s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/43c071ed5336488bb372003dcd4bc0f0 : SUCCESS in 1h 43m 05s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/1570387e8f2a4d45a83552a1fe5b8f44 : SUCCESS in 13m 05s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/a0743dde3c5d4938af42bc6dfe9dd561 : FAILURE in 16m 05s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy https://zuul.opendev.org/t/openstack/build/dd6530d061f24c38b5b6425a13d0a005 : FAILURE in 12m 37s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/4994715dc17c43a7b5db614befdc37a8 : SUCCESS in 26m 09s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/afee14511c354f69b02d92cfe2315b20 : SUCCESS in 17m 16s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/1f52ae11a32c4be5a1b9177e9f9918bf : SUCCESS in 35m 10s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/10c22a998deb45e1a9a2c076119b2ef6 : SUCCESS in 58m 26s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/471583a075d642149a9849c931f126cb : FAILURE in 3m 13s (non-voting)\n- keystone-dsvm-functional-oidc-federation https://zuul.opendev.org/t/openstack/build/af14c4afff9d48f7a4ce5132dba4e72e : SUCCESS in 23m 49s","accounts_in_message":[],"_revision_number":2},{"id":"b424ad9a9ecbc5a466c625b86073d8119966cb7b","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2026-05-28 10:16:46.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"1e95e84b370b9f63e837c545a9682d3542eeff98","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 11:24:35.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/e23e9f286b414250b6f6b43a48fc59c9\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/70ac9c3feaf640e58392652d408f8300 : SUCCESS in 20m 07s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c287c2b92d6143c897bfddc8042d3186 : SUCCESS in 6m 48s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/21696d545da04477af06da405326e0a7 : SUCCESS in 13m 37s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/618517552973416493c6aeecf6f24bfd : SUCCESS in 12m 43s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/04d7ef5bd41d4720afdd18145e30e9dc : SUCCESS in 6m 35s\n- grenade https://zuul.opendev.org/t/openstack/build/99033083e2604780af0331d198219d85 : FAILURE in 15m 16s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/2dc9f36d2d984daf8e1d0dc8534aa902 : SUCCESS in 1h 05m 52s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/3136fc84321840a1b2ff5f0154c36c43 : SUCCESS in 13m 13s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/847edf1f6272408ea93cb7c25ff693de : SUCCESS in 16m 50s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/ddd1a22f046a4d21b0e5eed6fa058782 : FAILURE in 29m 48s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy https://zuul.opendev.org/t/openstack/build/d3fa271682a94d479d8b3065cb7c3f2f : FAILURE in 26m 58s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/cfb0cd043b134dbdadef431878e1f4d9 : FAILURE in 27m 53s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/b73c96162d314b12b32f1a888fe7c392 : SUCCESS in 19m 21s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/7cd4ab6cf9f740a681ceba2897e74903 : SUCCESS in 39m 01s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/e030d5530e4b4ab6a30d36ed6a290f44 : SUCCESS in 58m 45s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/7ac0d930d6104c20a0a35aba7bb06f8b : FAILURE in 6m 37s (non-voting)\n- keystone-dsvm-functional-oidc-federation https://zuul.opendev.org/t/openstack/build/d2712fec975640e3a5d608cd7019f0b3 : FAILURE in 30m 24s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"f001e2e5e20ccfe1975a55f069f4f40b478045fc","author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2026-06-05 21:24:05.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"99c28c8966ce4d72757d944e820c2e2596275681","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-05 22:26:59.000000000","message":"Patch Set 2:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/0c3234f9e149495a83465148b9ba2a30\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f8362f5c81c44b39a67a0a1dd46d25fa : SUCCESS in 19m 19s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/cf43ea98067047829d60a2af5be9932e : SUCCESS in 7m 03s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/c5db4d3fdfcd40788576fc41bbdad0a2 : SUCCESS in 9m 32s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/2362c635732a4acda174bdde41252089 : SUCCESS in 8m 55s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9a63b38654d749af98726a603b27272b : SUCCESS in 17m 10s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/89d557ca69064c9daaa1ccc72d585a58 : SUCCESS in 13m 51s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/eb6f544f311940218ad531c75da2dc09 : SUCCESS in 24m 39s\n- keystone-dsvm-py3-functional-fips https://zuul.opendev.org/t/openstack/build/9c492a28e631490cb55346ba6adfc3ff : FAILURE in 37m 33s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy https://zuul.opendev.org/t/openstack/build/78c31ba1593e4856a757bf5804400715 : FAILURE in 24m 36s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k https://zuul.opendev.org/t/openstack/build/ad729323e22f46a889529dab652e949b : FAILURE in 27m 36s (non-voting)\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/a9224a3a042540eead9d930d86db0201 : SUCCESS in 8m 37s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/d6ac776f786b445f859820f32f20f7e1 : SUCCESS in 31m 46s (non-voting)\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/bce5d9e425d64d30bd3ac1cebb3d0f0e : FAILURE in 32m 40s\n- grenade https://zuul.opendev.org/t/openstack/build/884a4ca3229f409e9963d0a8d2d68a42 : FAILURE in 56m 53s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/25071a7a8f3d405fa27c51754861a8da : FAILURE in 29m 57s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/3e616a1a3d784aa7911f2c03445bd832 : FAILURE in 6m 35s (non-voting)\n- keystone-dsvm-functional-oidc-federation https://zuul.opendev.org/t/openstack/build/6c12ada616ab4697996b33fb0d7446d2 : SUCCESS in 30m 19s (non-voting)","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"beb63338dd81b919498819d08c73374057621f6c","revisions":{"07fa372cb9ef3b3d068f244970d0fbefc368520f":{"kind":"REWORK","_number":1,"created":"2026-05-07 11:45:23.000000000","uploader":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"ref":"refs/changes/27/987627/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/27/987627/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/27/987627/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/27/987627/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/27/987627/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/27/987627/1"}}},"commit":{"parents":[{"commit":"125efe4b59ca7de4089d188d549fde0fbcc989b3","subject":"Merge \"Fix OIDC federation UTF-8 double-encoding of non-ASCII characters\" into stable/2025.1","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/125efe4b59ca7de4089d188d549fde0fbcc989b3"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-25 21:53:32.000000000","tz":60},"committer":{"name":"Ivan Anfimov","email":"lazekteam@gmail.com","date":"2026-05-07 11:45:23.000000000","tz":0},"subject":"Include system scope in rescope guard","message":"Include system scope in rescope guard\n\nThe allow_rescope_scoped_token\u003dFalse configuration option is\nmeant to prevent any scoped token from being used to create\nanother token. The check only covered project-scoped and\ndomain-scoped tokens but not system-scoped tokens, allowing\na system-scoped token to be rescoped despite the setting.\n\nGenerated-By: claude-opus-4-6 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I795bfb7c5dad8949c9879e06ae36784f7856deb8\n(cherry picked from commit bcc8e819a8611e2f5a8bc1a61cfa792269106c1a)\n(cherry picked from commit 549a704284269f6bc78367814a172deacf832be1)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/07fa372cb9ef3b3d068f244970d0fbefc368520f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/07fa372cb9ef3b3d068f244970d0fbefc368520f"}]},"branch":"refs/heads/stable/2025.1","conflicts":{"ours":"125efe4b59ca7de4089d188d549fde0fbcc989b3","theirs":"549a704284269f6bc78367814a172deacf832be1","contains_conflicts":false}},"beb63338dd81b919498819d08c73374057621f6c":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-05-07 11:45:52.000000000","uploader":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"ref":"refs/changes/27/987627/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/27/987627/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/27/987627/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/27/987627/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/27/987627/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/27/987627/2"}}},"commit":{"parents":[{"commit":"1d0fc882efa4f14934cf1dd28b62971687bf79fe","subject":"Block app credential token rescoping","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/1d0fc882efa4f14934cf1dd28b62971687bf79fe"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-03-25 21:53:32.000000000","tz":60},"committer":{"name":"Ivan Anfimov","email":"lazekteam@gmail.com","date":"2026-05-07 11:45:52.000000000","tz":0},"subject":"Include system scope in rescope guard","message":"Include system scope in rescope guard\n\nThe allow_rescope_scoped_token\u003dFalse configuration option is\nmeant to prevent any scoped token from being used to create\nanother token. The check only covered project-scoped and\ndomain-scoped tokens but not system-scoped tokens, allowing\na system-scoped token to be rescoped despite the setting.\n\nGenerated-By: claude-opus-4-6 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I795bfb7c5dad8949c9879e06ae36784f7856deb8\n(cherry picked from commit bcc8e819a8611e2f5a8bc1a61cfa792269106c1a)\n(cherry picked from commit 549a704284269f6bc78367814a172deacf832be1)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/beb63338dd81b919498819d08c73374057621f6c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/beb63338dd81b919498819d08c73374057621f6c"}]},"branch":"refs/heads/stable/2025.1","description":"Rebase","conflicts":{"ours":"07fa372cb9ef3b3d068f244970d0fbefc368520f","theirs":"1d0fc882efa4f14934cf1dd28b62971687bf79fe","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}