)]}'
{"id":"openstack%2Fkeystone~990487","triplet_id":"openstack%2Fkeystone~master~I750156df18a1d6293ce99c42eb524575fcf16ea3","project":"openstack/keystone","branch":"master","topic":"review/990488","attention_set":{},"removed_from_attention_set":{"7973":{"account":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"last_update":"2026-06-01 11:08:13.000000000","reason":"Change was submitted"},"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-06-01 11:08:13.000000000","reason":"Change was submitted"},"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-06-01 08:55:02.000000000","reason":"\u003cGERRIT_ACCOUNT_14250\u003e replied on the change","reason_account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-06-01 11:08:13.000000000","reason":"Change was submitted"}},"hashtags":["CVE-2026-43000"],"change_id":"I750156df18a1d6293ce99c42eb524575fcf16ea3","subject":"Forbid trust operations using application credentials (CVE-2026-43000)","status":"MERGED","created":"2026-05-28 15:05:16.000000000","updated":"2026-06-01 11:08:13.000000000","submitted":"2026-06-01 11:08:13.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"990487-review/990488","meta_rev_id":"4b615438ce00694e6ca5075b084aa714b2641e75","_number":990487,"virtual_id_number":990487,"owner":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-01 11:08:13.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":2,"date":"2026-06-01 08:55:02.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-05-29 12:37:59.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":1,"date":"2026-06-01 08:55:02.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"CC":[{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-28 15:05:16.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-05-28 16:02:40.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"CC"},{"updated":"2026-05-28 17:55:24.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-05-28 18:03:15.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-05-28 19:41:49.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-05-28 20:06:59.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"state":"REVIEWER"},{"updated":"2026-05-28 20:06:59.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"},{"updated":"2026-05-29 10:00:09.000000000","updated_by":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"reviewer":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"state":"CC"}],"messages":[{"id":"2a4cfb8f35ff42933de787e753831f363268a485","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-28 15:05:16.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"9f4c08c5b4b9d340ce93ab83cd1d5722ceb53360","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-28 16:02:40.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"ad97b18f58961b13c76c2f0d81c9cc35bc8f27a9","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 17:55:24.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9eee09c2cbab4952ac86487553158b42\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/6aff937b130642af848a0a370ea369ab : NODE_FAILURE Node(set) request 34c378a5ab604478b446b21e04635700 failed in 0s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/620b6ed22a234b719ce7440d615644fd : NODE_FAILURE Node(set) request 6e0267c71e3849e5a5f4bfae2385bc55 failed in 0s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/bd84fc22931242b2a7fac865f19ba6f9 : NODE_FAILURE Node(set) request aeb136af255e4311812b25121fff270c failed in 0s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"414265e84f3ae909ee619d2e8b84ad6561b091aa","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 18:03:15.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/38e1b5cb0a4543e582c5d298b1383290\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/067df5b9cf82441f8a290173c295f814 : SUCCESS in 21m 47s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/100a7f42b8084f37bb5173aaf7b91a47 : FAILURE in 7m 00s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/ebdf05e5c8fe4bebb12feff63866c1ae : SUCCESS in 11m 58s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/7c58b922ccb44157b3b9726b7df493f0 : SUCCESS in 10m 52s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/92cbe8e3486e4442b6d8a2fcd64ee580 : SUCCESS in 9m 30s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e6eb1b6dd4c84a1aa9404b65631d4cf0 : SUCCESS in 13m 36s\n- grenade https://zuul.opendev.org/t/openstack/build/86a333aea90e4639b12faef2e52a0c67 : SUCCESS in 37m 24s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/82a5f23cc8c442b4bfa4fbdd9ad770ef : SUCCESS in 1h 49m 10s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/0756cc9d968f4714bf2c4d7a64979289 : SUCCESS in 13m 11s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/50d88f2f3436479881425aa426a4017a : SUCCESS in 18m 02s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/4ac37aeba20d47189147720334e2fbdd : SUCCESS in 34m 54s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/7033f8e1262b408ca77a60b24e5d0437 : FAILURE in 10m 25s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/5582229eb48847b8a905d3d319ae2f6c : FAILURE in 28m 25s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/c983bdbbb19c4ee595d60abe8f688a5a : SUCCESS in 29m 51s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/9f1cbdabc582463ba024eddcfa6fe7ab : FAILURE in 30m 57s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/3635e4cdad6d4e08ba095074190d8bac : SUCCESS in 30m 48s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/fa7a698a7a8a4236bdb888b1ea7f2bf0 : SUCCESS in 58m 03s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/8dd1ef5f028b43ba9eb96b570dfd5504 : SUCCESS in 42m 41s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/70b793b4164c42fb863b3765cee1d0cf : SUCCESS in 8m 15s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"1f3702561d1885ffd05dfa7d4675073d5d128abb","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 19:41:49.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"593b65a1ac95e6246994579f904da484cef46ad5","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 20:06:59.000000000","message":"Patch Set 3:\n\nThis change is ready for review.","accounts_in_message":[],"_revision_number":3},{"id":"ef8fe2af832101448a802e52f4970ea725f18873","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 21:31:34.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"aaa8586da78fbab5fbf192cf1ad86453640d1220","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 21:33:23.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.","accounts_in_message":[],"_revision_number":5},{"id":"5f02e15a66ecb7219665aae35159d4ce22a95329","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 23:34:05.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/13bb80eba427401588de80f06e9ead97\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/0a6a59790f414f71ab101c9bcd94112c : SUCCESS in 17m 27s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/aa49be516d3e405ca9c7e66373369141 : SUCCESS in 5m 14s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/b7bda14e87fa4f97bada6247645adf9c : SUCCESS in 12m 08s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/d602f51d3bb741869804387d602a2a4b : SUCCESS in 11m 22s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/504e51aaa2364a1a8a9dc5614b40276a : SUCCESS in 16m 23s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f2fdf008c5744caabe2ad065b81b8d5c : SUCCESS in 13m 56s\n- grenade https://zuul.opendev.org/t/openstack/build/c580ed1556044f92899e7cb367e5bfba : SUCCESS in 1h 04m 00s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a369b84d1ea14548bb01786c9865aa7a : SUCCESS in 1h 56m 41s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/9266ab267c8c46f2a41c95ed2310fd19 : SUCCESS in 6m 17s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/c294a83beb73498388bd4e99f129f1ba : SUCCESS in 17m 28s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/2db8192f142c4c368a66786bc7b9066d : SUCCESS in 30m 15s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/5b2ec61ecc864a9e94e1e2aee2f7f8f5 : FAILURE in 9m 31s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/6182e7462d044814a6b8d081abb4c320 : FAILURE in 26m 34s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/8ca879d9bc4c46088b6fdd2674aac8b9 : SUCCESS in 31m 36s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/ea59270f19284eeab87f836c6a17125a : FAILURE in 29m 59s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/f833df86cc104014b9c375f5c649d02a : SUCCESS in 30m 00s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/d22bcd989c7b41a6a7c65bb0698f50ec : SUCCESS in 58m 54s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/35f4a912c73146a39fab728adfb2efd1 : SUCCESS in 31m 36s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/e3986371c90a40678e7a5325264293a5 : SUCCESS in 7m 14s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"91073cabf3144c8a33bf33565145dd905e1c2e05","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 23:57:10.000000000","message":"Patch Set 5:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2d1c7676e7284d64a60ac013cf85fa07\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/76f4752c3a8a405f9bd3e188bf73536e : SUCCESS in 25m 51s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/ee295c3b0ab24c70ae5d628368805624 : SUCCESS in 19m 42s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/b4f74d6106954c149a4842dcf3f4c44d : SUCCESS in 42m 39s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"597a8b04b3d86768678d6bfb65edc1ed39fd1fe1","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-05-29 06:39:11.000000000","message":"Hashtag added: CVE-2026-43000","accounts_in_message":[],"_revision_number":5},{"id":"646864a0dbbf5d329e3b16ce382563b8e1a28c14","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2026-05-29 10:00:09.000000000","message":"Patch Set 5:\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"0218d8b7287de44cb0ba8895b71682b40c4a092c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-29 11:07:37.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/511196c0f7ec41d5af9d80fc2bf96ced\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/b4cdc5263bb642ee9a0cbed2a8e5af3a : SUCCESS in 18m 23s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7ee8afa88a7f4cc4ae4a12f503a3b5aa : SUCCESS in 7m 08s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/7e16373b9e5040c3882de61939b1adf4 : SUCCESS in 11m 44s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/a2f69a72b3eb431796944b0278e8a6cd : SUCCESS in 9m 26s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/b3b4b01d688c484ba9952fd765d96fc7 : SUCCESS in 14m 19s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8de0fd24b14449f285f88ca11dd2839e : SUCCESS in 14m 10s\n- grenade https://zuul.opendev.org/t/openstack/build/d02a9b8a8e40408bab6b188897ae3c15 : SUCCESS in 32m 52s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a688067dade948049b9a428594627ded : SUCCESS in 1h 03m 03s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/68e63292acc24da99064947ee5c59ed2 : SUCCESS in 12m 37s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/61386cd307e14dd0b8f1b69d60c4fefa : SUCCESS in 8m 15s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/a82d8d36dd024f18819bcb209eff6fe2 : SUCCESS in 20m 29s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/ff24d5497a914f439145a4ad3780f7be : FAILURE in 9m 23s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/423d05f34fc74d03baa3f825353167f4 : FAILURE in 27m 44s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/2cdefb94138443a59c1c0c9f521a0a98 : SUCCESS in 21m 03s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/0b9510b77d2c422aa4b0de00ae37d412 : SUCCESS in 31m 24s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/f2f3d455ff8e4660bb4585c7ab6f86cb : SUCCESS in 21m 14s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/3373d152151b4c978e4b15c5710bd2cc : SUCCESS in 50m 04s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/d287d180e17649daa838526c123da9d2 : SUCCESS in 44m 06s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/fd4a20f18d9444d2a34ee6c3008a0f63 : SUCCESS in 7m 51s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"ed2f100c8535e8ddd49252b59f93186e0446e8c7","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-29 12:37:59.000000000","message":"Patch Set 5: Code-Review+2","accounts_in_message":[],"_revision_number":5},{"id":"5606476744f861aece7b4b3560859e0b72e8a0da","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-29 12:54:42.000000000","message":"Patch Set 5:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/68e78f46b5e44bbda3452904f46c8842\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/5537a8c68c5645219a8af3f952eb0404 : SUCCESS in 21m 55s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/7fc3e5a90802479c95aeeab59114d5c8 : SUCCESS in 12m 20s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/0614eacc4320426c98147b4124a33389 : SUCCESS in 30m 50s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"45922a1bf3f4c617005f3d702f28d731e63141f3","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-01 08:55:02.000000000","message":"Patch Set 5: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":5},{"id":"79adb5705eaaad5c66a38db8790a88ee11df9225","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 08:55:35.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"b1dee98cc62d522d1fe2d00f8cde1c95a84c5426","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 11:08:13.000000000","message":"Patch Set 5: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b8ae2d66d9624ad4b9a50c7075cab4dd\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1d45052826b14f84b0f4782557d80b28 : SUCCESS in 7m 04s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/4e2e8819e5554222ab258d89a0651c35 : SUCCESS in 8m 25s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/25b210acc31d45d888d49cf727da0b9b : SUCCESS in 7m 04s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1a6c0b35d2b148d1894ac72a2dc612f0 : SUCCESS in 7m 55s\n- grenade https://zuul.opendev.org/t/openstack/build/d2106e700a214092b93bf18193c01bb2 : SUCCESS in 52m 40s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e33fc365dbd74ec0921f7eefb2f8755f : SUCCESS in 55m 20s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/637b10f656d44d52ba9b258419d7546c : SUCCESS in 5m 11s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/5d1574b553364bfdb4c605907ad2797f : SUCCESS in 33m 30s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/dd824d250dd1467494ec82bffeddf195 : SUCCESS in 28m 21s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/39d4141a71914c82938820080fea2bec : SUCCESS in 1h 10m 57s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/d161aedb5d9444758b7e0fcc6ad5145c : SUCCESS in 54m 39s","accounts_in_message":[],"_revision_number":5},{"id":"4b615438ce00694e6ca5075b084aa714b2641e75","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 11:08:13.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":5}],"current_revision_number":5,"current_revision":"14a14473998e7bb2193d316039fde75412517b08","revisions":{"3e34867b5b29efdde37a68f38bd430aaa0de6a2b":{"kind":"REWORK","_number":1,"created":"2026-05-28 15:05:16.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/87/990487/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/87/990487/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/87/990487/1"}}},"commit":{"parents":[{"commit":"80a45d2251677540d582b6c9e52d82a347bce3b3","subject":"Fix user impersonation through application credentials (CVE-2026-42998)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/80a45d2251677540d582b6c9e52d82a347bce3b3"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:47.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-05-22 08:08:11.000000000","tz":120},"subject":"Forbid trust operations using application credentials (CVE-2026-43000)","message":"Forbid trust operations using application credentials (CVE-2026-43000)\n\nPreviously only restricted application credentials were blocked, and only\nfor trust create and delete. This change blocks all application credentials\n(restricted and unrestricted alike) from all trust operations: list, get,\ncreate, delete, list-roles, and get-role. The \u0027unrestricted\u0027 flag governs\ncredential management, not trust management.\n\nCloses-Bug: #2148477\nRelated-Bug: #2149789\nRelated-Bug: #2150089\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I750156df18a1d6293ce99c42eb524575fcf16ea3\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3e34867b5b29efdde37a68f38bd430aaa0de6a2b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3e34867b5b29efdde37a68f38bd430aaa0de6a2b"}]},"branch":"refs/heads/master"},"631c9e584008ea52484a1f9ce363b329716815f3":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-05-28 16:02:40.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/87/990487/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/87/990487/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/87/990487/2"}}},"commit":{"parents":[{"commit":"2930d92840b62f5a5953ba48df3fe14a4f950826","subject":"Fix user impersonation through application credentials (CVE-2026-42998)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2930d92840b62f5a5953ba48df3fe14a4f950826"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:47.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-05-28 16:02:23.000000000","tz":120},"subject":"Forbid trust operations using application credentials (CVE-2026-43000)","message":"Forbid trust operations using application credentials (CVE-2026-43000)\n\nPreviously only restricted application credentials were blocked, and only\nfor trust create and delete. This change blocks all application credentials\n(restricted and unrestricted alike) from all trust operations: list, get,\ncreate, delete, list-roles, and get-role. The \u0027unrestricted\u0027 flag governs\ncredential management, not trust management.\n\nCloses-Bug: #2148477\nRelated-Bug: #2149789\nRelated-Bug: #2150089\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I750156df18a1d6293ce99c42eb524575fcf16ea3\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/631c9e584008ea52484a1f9ce363b329716815f3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/631c9e584008ea52484a1f9ce363b329716815f3"}]},"branch":"refs/heads/master"},"98979c60331a963209c1d58d5f7097d2b5491803":{"kind":"REWORK","_number":3,"created":"2026-05-28 19:41:49.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/87/990487/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/87/990487/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/87/990487/3"}}},"commit":{"parents":[{"commit":"db9331272d0a93c632fa130991523bc4c3ea70b1","subject":"Fix user impersonation through application credentials (CVE-2026-42998)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/db9331272d0a93c632fa130991523bc4c3ea70b1"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:47.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-28 19:40:18.000000000","tz":120},"subject":"Forbid trust operations using application credentials (CVE-2026-43000)","message":"Forbid trust operations using application credentials (CVE-2026-43000)\n\nPreviously only restricted application credentials were blocked, and only\nfor trust create and delete. This change blocks all application credentials\n(restricted and unrestricted alike) from all trust operations: list, get,\ncreate, delete, list-roles, and get-role. The \u0027unrestricted\u0027 flag governs\ncredential management, not trust management.\n\nCloses-Bug: #2148477\nRelated-Bug: #2149789\nRelated-Bug: #2150089\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I750156df18a1d6293ce99c42eb524575fcf16ea3\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/98979c60331a963209c1d58d5f7097d2b5491803"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/98979c60331a963209c1d58d5f7097d2b5491803"}]},"branch":"refs/heads/master"},"3628ea05b2a7bb61761cbe4b624def5383524685":{"kind":"REWORK","_number":4,"created":"2026-05-28 21:31:34.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/87/990487/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/87/990487/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/87/990487/4"}}},"commit":{"parents":[{"commit":"db9331272d0a93c632fa130991523bc4c3ea70b1","subject":"Fix user impersonation through application credentials (CVE-2026-42998)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/db9331272d0a93c632fa130991523bc4c3ea70b1"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:47.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-28 21:31:28.000000000","tz":120},"subject":"Forbid trust operations using application credentials (CVE-2026-43000)","message":"Forbid trust operations using application credentials (CVE-2026-43000)\n\nPreviously only restricted application credentials were blocked, and only\nfor trust create and delete. This change blocks all application credentials\n(restricted and unrestricted alike) from all trust operations: list, get,\ncreate, delete, list-roles, and get-role. The \u0027unrestricted\u0027 flag governs\ncredential management, not trust management.\n\nCloses-Bug: #2148477\nRelated-Bug: #2149789\nRelated-Bug: #2150089\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I750156df18a1d6293ce99c42eb524575fcf16ea3\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3628ea05b2a7bb61761cbe4b624def5383524685"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3628ea05b2a7bb61761cbe4b624def5383524685"}]},"branch":"refs/heads/master"},"14a14473998e7bb2193d316039fde75412517b08":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2026-05-28 21:33:23.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/87/990487/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/87/990487/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/87/990487/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/87/990487/5"}}},"commit":{"parents":[{"commit":"b4f1eb1f13a7559f771b0f4d46c4c59917e82f01","subject":"Fix user impersonation through application credentials (CVE-2026-42998)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b4f1eb1f13a7559f771b0f4d46c4c59917e82f01"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:47.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-28 21:32:50.000000000","tz":120},"subject":"Forbid trust operations using application credentials (CVE-2026-43000)","message":"Forbid trust operations using application credentials (CVE-2026-43000)\n\nPreviously only restricted application credentials were blocked, and only\nfor trust create and delete. This change blocks all application credentials\n(restricted and unrestricted alike) from all trust operations: list, get,\ncreate, delete, list-roles, and get-role. The \u0027unrestricted\u0027 flag governs\ncredential management, not trust management.\n\nCloses-Bug: #2148477\nRelated-Bug: #2149789\nRelated-Bug: #2150089\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I750156df18a1d6293ce99c42eb524575fcf16ea3\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/14a14473998e7bb2193d316039fde75412517b08"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/14a14473998e7bb2193d316039fde75412517b08"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}