)]}'
{"id":"openstack%2Fkeystone~990618","triplet_id":"openstack%2Fkeystone~stable%2F2025.2~Ic70d4756c121e3f096c372ee9b6f5314838e66de","project":"openstack/keystone","branch":"stable/2025.2","attention_set":{},"removed_from_attention_set":{"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-06-03 11:43:27.000000000","reason":"Change was submitted"},"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-06-03 08:48:54.000000000","reason":"\u003cGERRIT_ACCOUNT_14250\u003e replied on the change","reason_account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-06-03 11:43:27.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ic70d4756c121e3f096c372ee9b6f5314838e66de","subject":"Fix stable/2025.2 CI: nodeset, test skip, Keycloak audience mapper","status":"MERGED","created":"2026-05-29 09:30:31.000000000","updated":"2026-06-03 11:45:54.000000000","submitted":"2026-06-03 11:43:27.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"990618","cherry_pick_of_change":989615,"cherry_pick_of_patch_set":1,"meta_rev_id":"0465c2b532b01d5fec03c7454ca38b0021fc5575","_number":990618,"virtual_id_number":990618,"owner":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-03 11:43:27.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":2,"date":"2026-06-03 08:48:54.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":0,"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"value":1,"date":"2026-06-03 08:48:54.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-29 09:30:31.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"state":"CC"},{"updated":"2026-05-29 10:01:02.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-05-29 10:35:45.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-05-29 15:14:54.000000000","updated_by":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"}],"messages":[{"id":"a6dad13be400ab8f17bccf62a6085b1002a784f2","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-29 09:30:31.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"7b463825b1af672f1f762d1608380406ff8f4863","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-29 10:01:02.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"c1bedff7a3cd1ee36b25eb191b61696dc7355666","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-29 10:35:45.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/56376e83b3e4453f9cb44e12c799d5f8\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/55135a86e0dc44aa9e589f606594ff3f : SUCCESS in 18m 07s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8537b5761b1e4735b832b25373e3a647 : SUCCESS in 6m 45s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/68300a390e7c42bc95f1780569bc2848 : SUCCESS in 13m 37s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/ea10d624ce8742989d8838fdb1f0320c : SUCCESS in 13m 24s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/be97d6224f0f46e79630bf67a603c20d : SUCCESS in 15m 44s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c56f753b7b7d405987ff720b0e55cfa9 : SUCCESS in 10m 51s\n- grenade https://zuul.opendev.org/t/openstack/build/7a565d6f18a9479a922ab1918c3d8a13 : SUCCESS in 32m 52s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/3eb81c96790d467f9a78d55404fcdae5 : SUCCESS in 54m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/fe0a556c4096461f9396817906b61c63 : SUCCESS in 4m 54s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/213586ac6b794eb8938c5b00db36f467 : SUCCESS in 15m 03s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/bc2bb678a7a74954a6de347720c4362c : SUCCESS in 32m 48s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/fd450ce22deb411c8add9403bd1794e5 : FAILURE in 16m 24s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/6d4cd1977c66459e9936db166ef58b35 : FAILURE in 26m 10s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/b362a8ab55094bc5b9664fd926c04690 : FAILURE in 20m 49s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/f9db76f9a24547a4a68606988190c0c9 : SUCCESS in 24m 15s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/a262a73643ba43ada25ca14cbbbc57e7 : SUCCESS in 35m 34s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/389eff6fd088453a9dc272648d48f84e : SUCCESS in 1h 01m 11s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/2c8f33d122ae428bb460378591939c12 : FAILURE in 44m 17s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/b505aae4554248c1b38256ef46e7912e : FAILURE in 10m 37s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"a6ca740eacaea1fea7859cb9f18890de68d0b3c6","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-29 15:14:17.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"f99238ef2a071e292cae9942ad0f2264b6c6d33b","author":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"date":"2026-05-29 15:14:54.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"c951ae87491b45998924be9c3123b82f2b1e2827","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-29 16:59:36.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/abc84d173ca34ad0a31257e9e6aa1ea1\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/8356adc91d274b48a66557760ef8db65 : SUCCESS in 17m 41s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c853739488374f28ad02d6afff933072 : SUCCESS in 8m 57s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/69935ee899f842be9fc71652718d1639 : SUCCESS in 12m 52s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/c3d9169f301c4a978b746ad46ee4be7c : SUCCESS in 12m 34s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/929655da5466445cafaa57def0c69a67 : SUCCESS in 12m 17s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4d1ba5fad3c44f78ad3ac482545a3fab : SUCCESS in 10m 59s\n- grenade https://zuul.opendev.org/t/openstack/build/ac5d5480c0c3474f9a5a85e560ed38d0 : SUCCESS in 58m 20s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/c22fdf62fc934a9fa495c7f82c4c39cc : SUCCESS in 1h 42m 23s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/226b44f16a8948fdb35af705e428bcb5 : SUCCESS in 7m 08s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/d815c6a4059047899689649d08d916eb : SUCCESS in 18m 36s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/b84a884602c342c494ce3cce216d144e : SUCCESS in 33m 37s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/6b5372c969924970908776f9adf1ffde : FAILURE in 8m 17s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/1a35fac63ff94c6cbff54d4cca70bd39 : FAILURE in 21m 57s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/717e2c917bdd4f919b675f0b714fa5e0 : FAILURE in 24m 31s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/232ae20b32954b4790eb24501c45fcde : SUCCESS in 21m 05s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/999a0ca0f01d4a3e983729c0685ce79f : SUCCESS in 30m 19s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/c2a501d65e9f42129b5f598e747c21ec : SUCCESS in 39m 43s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/48b7f6b34926462899b7023d2e6d96ca : FAILURE in 41m 50s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/23195e4de6da4e909060bd1c3f900fcc : FAILURE in 9m 32s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"217c0d1c5d898d2f5ecf332b74287c060c87a185","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2026-06-01 09:57:33.000000000","message":"Patch Set 2: Patch Set 1 was rebased on behalf of \u003cGERRIT_ACCOUNT_27900\u003e\n\nCopied Votes:\n* Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n* Workflow+1 (copy condition: \"NEVER\")\n","accounts_in_message":[{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"_revision_number":2},{"id":"755f79337a348274ff21d95bfc2884464b9c8785","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 11:32:04.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/12fe629064ad41ef9e26666bffd24feb\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/942eb96c14f94439bdc9b465f0a94e70 : SUCCESS in 22m 03s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4b1e0420e71648ae9d2edf6f431eb2bc : SUCCESS in 5m 09s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/e89c1833ec624f8188df0c413ee04856 : SUCCESS in 9m 51s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/e8d84a2188524a52976960376ef40374 : SUCCESS in 9m 34s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/6f60bd41b1c94c9e90b8a957114af9f1 : SUCCESS in 13m 44s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d5d7d8929d5d4c13b1d2182b41f62490 : SUCCESS in 15m 23s\n- grenade https://zuul.opendev.org/t/openstack/build/4b141363a9334259914b0f4ab638aa1e : SUCCESS in 1h 15m 52s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/da8c2c18bb70462d9bf2344786d1c6e4 : SUCCESS in 1h 32m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2fc8bd8a3e5a44b0932b1b0b86ba8604 : SUCCESS in 12m 33s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/c17def2b2848468dba0f8b34ba8d8424 : SUCCESS in 14m 21s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/4bf848f2df04461391f691da59d6b06a : SUCCESS in 22m 36s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/90115538e19744f7b33a47fb6b52465d : FAILURE in 15m 29s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/700e8830ea7445c7bf38821ea33377e1 : FAILURE in 19m 18s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/38c818b9d8694da08a3c27adcba8e964 : SUCCESS in 28m 03s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/092eb77609824998a7a553e88cd0ed80 : FAILURE in 26m 31s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/71b256f6a0f94e0d97e8f16fef172e98 : SUCCESS in 22m 44s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/feefbce56b414049b8057865cc917086 : SUCCESS in 56m 17s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/7cd2d0c594a44dd9887093d87286b4fe : FAILURE in 17m 41s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/db8588781114455c8f3568e6141761cf : FAILURE in 4m 10s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"e04dac0b4335a7e623fbd5842e0e68a6522fd8a5","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-01 12:22:34.000000000","message":"Patch Set 3: Patch Set 2 was rebased on behalf of \u003cGERRIT_ACCOUNT_27900\u003e\n\nCopied Votes:\n* Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"_revision_number":3},{"id":"3859a4e528f504183b1db63eb82657f43d6135dc","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 14:24:35.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/2e3037d7f8d144cda5025452593fa21b\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c9c8f82f19694f5c806cc6395a896cf0 : SUCCESS in 17m 23s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8b6db51a872a4c1583dff16707e146b0 : SUCCESS in 6m 59s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/cbef9471f85049c4a7c71af2ac6d2745 : SUCCESS in 13m 20s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/483bb27b6aac43d1839ded9fc27d036f : SUCCESS in 13m 43s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/4c70470e06574ddb9753d6cfdb8ef916 : SUCCESS in 10m 28s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/82e3bb61e8dc43f19545f0fbe68de247 : SUCCESS in 14m 43s\n- grenade https://zuul.opendev.org/t/openstack/build/24f063c1a85c4617a147e8197d98bf49 : SUCCESS in 1h 19m 09s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/1a9f4624da444165a24350034f0f5306 : SUCCESS in 1h 41m 45s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b39f22e4c35d429796ec688cd05a570c : SUCCESS in 13m 19s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/9ecd1fa57c2345509a01306e82551551 : SUCCESS in 19m 50s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/f2f42713012042e0b01750bfecd1b267 : SUCCESS in 24m 28s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/1a980d4f23f74919ac2e3fcfd29ac1a3 : FAILURE in 19m 24s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/a35c6c7ed2134a029cf92a15bc91b173 : FAILURE in 33m 24s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/a6bf366c6700409d8d1e6ea091abb3a0 : SUCCESS in 29m 26s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/4572016019cf4feab77e224764e33caf : SUCCESS in 24m 54s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/343837ededc345bf906c1a9ba50114b2 : SUCCESS in 39m 28s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a99378824eec4647bf9b42365d6f787b : SUCCESS in 1h 01m 03s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/051e2cd09b714cdb80b59e26331af9c0 : FAILURE in 41m 24s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/69073e0719c84854b52b59a029ccef65 : FAILURE in 9m 57s (non-voting)","accounts_in_message":[],"_revision_number":3},{"id":"54d4441ea0ca39128fb1847a7c7b18712b3d8c9e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-02 07:14:57.000000000","message":"Patch Set 4: Patch Set 3 was rebased on behalf of \u003cGERRIT_ACCOUNT_27900\u003e\n\nCopied Votes:\n* Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}],"_revision_number":4},{"id":"9d3ee9b7d0267e7c134d6a2ce98deaeb55d0eb09","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 09:10:45.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0b8591e38160498f86a7f9df13d70c51\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/db6ead7520f74cce9a032e73ca41d3d2 : SUCCESS in 17m 55s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/55432c971d9941f3ae3aaea303fe5cff : SUCCESS in 3m 35s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/e1613eb190bb4227a976a619628890a3 : SUCCESS in 12m 12s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/c66b4819ecc84009a4ccc47430e3b711 : SUCCESS in 7m 59s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/4dc00d6f428f490b99802c48fc2f02ad : SUCCESS in 13m 17s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b1477a49227047cf90e913eab0744aca : SUCCESS in 9m 05s\n- grenade https://zuul.opendev.org/t/openstack/build/9bd6786924464618aef4a408e46d9182 : SUCCESS in 1h 04m 05s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/7ea965b7b20345908a2a64e279c73b2f : SUCCESS in 1h 47m 07s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/dc9946d799144356a6f055e1a8a9b6b5 : SUCCESS in 12m 48s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/20f2440fb62943439004e0fc72f3ea29 : SUCCESS in 11m 20s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/dff26f421e5a42f792432a1f598d0aa3 : SUCCESS in 12m 59s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/5c0549c51adb449c80a70602f8300aab : FAILURE in 19m 36s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/e7b27d121b314ccba64878ed064ba2cd : FAILURE in 18m 14s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/d55dc1774c274aa1af59dd2fcab66c15 : SUCCESS in 19m 15s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/f611548cf05b43978691365a6ba25cd3 : SUCCESS in 13m 53s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/64af7b7987fe436f945addb7df25af8a : SUCCESS in 26m 55s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/d6ec8e5e05ae4c8e99d8f4dd46b2a26a : SUCCESS in 47m 17s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/f268051615074d489b445b9ce488272f : SUCCESS in 28m 19s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/164af634fcd84b188cecbf278d348ba8 : FAILURE in 8m 12s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"764ef339c9507835041c856c95b9f3a14012d73d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-02 10:42:35.000000000","message":"Uploaded patch set 5.\n\nOutdated Votes:\n* Code-Review+2 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":5},{"id":"07548978cfe14764bfd43c48d6e9002b6dd87cd7","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-02 10:46:43.000000000","message":"Patch Set 5: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":5},{"id":"ee5dde97b37a6b7e8da5f1871c6521448e09baaf","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 12:31:58.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/62abcf5dcb8040fbb87bf206ba09c759\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2def24a85c1649f7aef878605b373ed1 : SUCCESS in 17m 08s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3016e69e7fe34283be4c06daf22a4bbe : SUCCESS in 6m 19s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/73b27d1546d4404488b3f0a8bbc7a6c9 : SUCCESS in 7m 46s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/25c7aca05c0c42ca8b1fedc885d4ab23 : SUCCESS in 12m 04s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/158167be8fda49e68915422a6a28aec5 : SUCCESS in 13m 13s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b103b9cc1f694fbab9bc73cfabdf1ef9 : SUCCESS in 14m 42s\n- grenade https://zuul.opendev.org/t/openstack/build/0bcf459e895c4f9b9b5434c00b673d44 : SUCCESS in 1h 04m 04s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/0d76428df7c74b67b0243f6b2d9b3900 : SUCCESS in 1h 43m 44s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/7ba8053290a54e5780870f3886984807 : SUCCESS in 7m 44s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/446eb9f213cd4350848fba33e52b4c0c : SUCCESS in 10m 51s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/44afab797c384d43b995e7d2fa551f39 : SUCCESS in 28m 54s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/6ef498d119dd4244bea32bdc44d724de : FAILURE in 10m 15s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/030723f4b6624fa6a8ce1e9765c95444 : FAILURE in 17m 43s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/07f2265f5e3f4fda99c2361fe1169d39 : SUCCESS in 32m 13s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/e443d7d8eba74c6d843c5d7355c2063f : SUCCESS in 23m 16s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/828e24485b274900a2c691aa610cf676 : SUCCESS in 38m 08s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/155fff91ca554fdb8b4d842423304f4f : SUCCESS in 43m 51s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/cbefc88bbcc54775bee81efa4d2474b5 : FAILURE in 45m 38s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/63c2c68c8419402c98735cd819e24dbd : FAILURE in 7m 51s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"b0103a1851070631d8247d0393d8f82d1bc61794","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-02 14:51:40.000000000","message":"Patch Set 5:\n\nrecheck","accounts_in_message":[],"_revision_number":5},{"id":"a5e24111cc7eebe32d9138076d10d5efea3089ae","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 16:38:36.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a5fac84de2f747b6afb33a64d985cadb\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2d58b1d2a488472390ed5ffd89cf5954 : SUCCESS in 17m 49s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/68b77fdf2e334cb88a700786bc3fa217 : SUCCESS in 7m 51s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/8c4167eabf274fde8c139af50db80a74 : SUCCESS in 11m 43s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/622e560fab6d41d49bb41a018a8ed79a : SUCCESS in 9m 21s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/2e00ffe26d08445da00951aba0318304 : SUCCESS in 14m 47s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b9db469ed52140548c93d586ebf525a2 : SUCCESS in 15m 11s\n- grenade https://zuul.opendev.org/t/openstack/build/c51aa830617d4c66a9e244d0e6d4216a : SUCCESS in 52m 31s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/d2b0814b8f4b444e95b2a0e74e04b181 : SUCCESS in 1h 38m 06s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/33c5480cae1340db8cd4ce582ffaf0d2 : SUCCESS in 8m 33s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/8276b7233c664cdcaba005926f44d333 : SUCCESS in 18m 39s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/f616a7e023b844d19e24a9d121f8c3ed : SUCCESS in 38m 17s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/02cd61595d844a4ea3809358bd4b281c : FAILURE in 20m 49s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/d5331087bc784206b840485c941b06dc : FAILURE in 17m 53s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/8ab58deff2774f0c97a86dedb70a30d5 : SUCCESS in 22m 19s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/e25d44f3e9cc40b097a325c11ed9d99a : SUCCESS in 32m 38s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ba275f25730846d495c01a1fffd8fc59 : SUCCESS in 30m 40s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/df45a7e170cc4edc8318a4ffc8de9f9a : SUCCESS in 54m 56s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/f5254e1ae7624bd691329ec1747fc005 : SUCCESS in 24m 41s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/d385e3b6329b4705a860f41eae3ac13a : RETRY_LIMIT Host unreachable in 29m 00s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"f94a46a6de8086d23c9ad5d8dc3554a6a1a58f1c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 16:41:13.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"6fdc0d393401d2d5b87f3c73c90e0e83e389d123","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 19:30:37.000000000","message":"Patch Set 5: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/055fd7ea92c043418e29d05e3ecffa97\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6b1089a52f81434e971a15104a845464 : SUCCESS in 4m 07s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/70468d402bbb4884b6f278cd2441fd29 : SUCCESS in 12m 27s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/8552381137cb42148916e5037fb1dc7f : SUCCESS in 8m 06s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ccb8462f84a04fe7a067c3ebf43dc65a : SUCCESS in 13m 58s\n- grenade https://zuul.opendev.org/t/openstack/build/d8c4f08a94904968b1f307171617322e : SUCCESS in 1h 12m 23s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/4733b7a79e434620aab1e3387976da32 : SUCCESS in 1h 46m 20s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e95c7d4cb5d947959d33af49bc1fc48c : SUCCESS in 14m 12s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/27c773140dd14524aa26636be0aece68 : SUCCESS in 23m 26s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/cd45c5f942a2417fa794a0b2548c40ab : SUCCESS in 21m 53s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/f46c9edf1123494688c25eb5bb35eee2 : SUCCESS in 43m 12s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/89232f545a674354ba96976d40b58e17 : FAILURE in 42m 57s","accounts_in_message":[],"_revision_number":5},{"id":"014a220db0790b5e862772b6851a68bba72423c4","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-02 21:37:01.000000000","message":"Patch Set 5:\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"aa614a4539f218eacc92888d573a53c8e03ec5c4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 22:53:44.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/326226d87bf54bdb8e806d9e570bd113\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f4f53ffd5fb7492d94afac5d991b6d63 : SUCCESS in 17m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/75d64aa6b8e44eb4a387469402bef72f : SUCCESS in 6m 17s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/068f8348b3e942eb81cc14fae300fcdd : SUCCESS in 10m 51s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/13b4f8ea337d4a5f906cf06d85947b40 : SUCCESS in 13m 38s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/88f8d8b4f56c40279cd5fe0ef6e037da : SUCCESS in 18m 06s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ab46c73fb2a54a12ae8e1e225c119acb : SUCCESS in 13m 24s\n- grenade https://zuul.opendev.org/t/openstack/build/b132529af04a4cf9ad303a5e0c2d6161 : SUCCESS in 1h 10m 33s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/bd3a3e9be7dc4932873eebe5d4d1ce43 : SUCCESS in 1h 05m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d2777c52f2b64b599380874176bb3418 : SUCCESS in 14m 27s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/f8830d82d2054507bd94092bc35bcde8 : SUCCESS in 8m 27s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/dd57b758a12b40c99ca895eaf88fc758 : SUCCESS in 31m 54s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/d7b2b48e2af6428da838ce07c595ffbf : FAILURE in 17m 18s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/7e30b914bbd941aaad14c802b45a245a : FAILURE in 25m 54s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/8563742052044383a6b1dc6ef487e758 : SUCCESS in 14m 29s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/6401d49df11e445ca6b2d13ec91d74f9 : SUCCESS in 30m 21s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/b27bb5a87fde45aa8e88583806fcd218 : SUCCESS in 39m 38s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/9693809265ca46ac8476192fe72427fa : SUCCESS in 1h 08m 48s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/582435a09f464c8bb5f5891f052b63c6 : SUCCESS in 45m 09s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/378107d5911b4f1ea91f959d2168e35f : FAILURE in 7m 40s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"eae30ad6342a12b6975395a59c0656b039e9178f","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 22:55:21.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"44eb9da318faf6a2d6b385a03014fcf024d08ee3","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 01:20:21.000000000","message":"Patch Set 5: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/ac0660ac633349f3a0e3fb0f619c0789\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6eeb72fc7f1f46c59ece8ee360b8a35c : SUCCESS in 6m 07s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/fb91bc91bbb54c328b7b11e3fa1b766e : SUCCESS in 9m 18s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/b4f797f2d5a14578b07622ef6504097f : SUCCESS in 11m 34s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f71ba0cff2fb487195e37313f8448df0 : SUCCESS in 13m 38s\n- grenade https://zuul.opendev.org/t/openstack/build/9de53bcbaf964c05b9b2d2a48b182aa9 : SUCCESS in 1h 03m 51s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/ae4308e9c4fe4fa2a9ee153cf366f842 : SUCCESS in 1h 39m 10s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/9303084751924636ac425837a5b184dc : SUCCESS in 4m 32s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/cd51ebfdb98245e1a00a5a713c2486df : SUCCESS in 20m 24s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/2b02f4d20e014dd298178936dc89ecca : SUCCESS in 19m 50s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/89b2064a9eed468f82afd27f6cee93ce : SUCCESS in 28m 48s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/d7bea276fcb148d79a8b451c0e41d9a5 : FAILURE in 38m 43s","accounts_in_message":[],"_revision_number":5},{"id":"b7a01c2401541cfb534f27de4e5664046394232f","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-03 06:37:54.000000000","message":"Patch Set 5:\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"d93a64b26a478fd4d2cd612572dff54da8d9b105","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 08:36:38.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/59f4ea3d9b644fb2b7729c3e9e0e340f\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/a6371c7f9cc84224b9f33742451028d1 : SUCCESS in 19m 10s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fe2e92b38149446fabd32664c212515b : SUCCESS in 7m 20s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/306c35307df34e589c02a70b5e754be3 : SUCCESS in 12m 55s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/582fd01e59bc4804b8595e6bf72eb4a1 : SUCCESS in 13m 12s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/a81e0386e05c4dbcb92049f703f5e733 : SUCCESS in 15m 24s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/323e22b0e4d744dd9db348ccffc34236 : SUCCESS in 14m 02s\n- grenade https://zuul.opendev.org/t/openstack/build/73d270fe8653497c8f2dc3511c68ae48 : SUCCESS in 1h 07m 27s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/ca46d64d4f9a4a2897953f09b4c82485 : SUCCESS in 1h 51m 24s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/90d602a9f1ba49b884554ec41eb21c3d : SUCCESS in 13m 28s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/b69c22caa2bd43bbb0db1c413b630db6 : SUCCESS in 7m 48s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/ebbbfa8cb84c47a0bfaad955b90fd09e : SUCCESS in 17m 41s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/87e5db07fe6a443b8e9397e86344a81a : FAILURE in 17m 44s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/727438a2d4384fe9aeaa718c44b4d905 : FAILURE in 27m 43s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/902efc5796a04b5d8a90b2e95c083eea : SUCCESS in 31m 03s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/899f8d279ba3468ea68b618b07a965e3 : SUCCESS in 32m 53s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/0f06e0a58a624803ba0c90d5d4a250f0 : SUCCESS in 34m 55s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/97383839333c45b08c873118e380f1cb : SUCCESS in 1h 01m 29s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/8ddcf68ae5c4434bb71f609338c850a9 : SUCCESS in 23m 40s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/c05b776c5916403c86fc4576f9ec093c : FAILURE in 5m 02s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"f84ef161cc17ae5530ba72b3b16f8aee84cae7bc","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 08:37:25.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"78340d45c6da08716afd3074d1a5b1f17c6c96b0","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-03 08:48:14.000000000","message":"Uploaded patch set 6.\n\nOutdated Votes:\n* Code-Review+2 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Workflow+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":6},{"id":"6a9bc2d873d0851a9bd2e11f5f6b7409184ebb30","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-03 08:48:54.000000000","message":"Patch Set 6: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":6},{"id":"b23aa45ad5138cc92023607277f6b1b2be592e49","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 10:43:55.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/73d24115bd9747b6971ff816df40896d\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c758da612bb34b8f83db3f01b161deae : SUCCESS in 19m 08s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6e3b8cdf30e6477981c267de78aa95e3 : SUCCESS in 8m 23s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/a264891a453141978084a66214100ffa : SUCCESS in 12m 47s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/38fcb8ac997c4c6c841a1a93f161f7bb : SUCCESS in 12m 56s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/5619484451a14d409ca889192a727185 : SUCCESS in 10m 06s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1ba36a6306ed42e38dd0086f59f90186 : SUCCESS in 13m 24s\n- grenade https://zuul.opendev.org/t/openstack/build/43715d403c2d4ddebd2432926e105993 : SUCCESS in 1h 09m 42s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/164b5a17561d4358a917e79811e3f6ef : SUCCESS in 1h 54m 28s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b1174a5d1fdc4496925871f35e9c6906 : SUCCESS in 13m 22s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/388351cb13a74ffb8a7b8d1e4820ed1e : SUCCESS in 20m 57s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/33b22b089f5144db8709d543aa299fd8 : SUCCESS in 29m 55s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/9aaab8eb499042bdb2e1aeea7f47a99e : FAILURE in 18m 28s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/5ef12d2402e4420c8ddb554b8f7608cc : FAILURE in 13m 15s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/66c6443d9f4b4f0486ddc3bc10e216b5 : SUCCESS in 29m 02s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/4f41ed3d214245d0b99c08b2c776d803 : SUCCESS in 15m 54s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/0ba5314402aa47f1b895a56e6f554cd7 : SUCCESS in 37m 19s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/3d7854475a48494293b0d1b62e5d5cf1 : SUCCESS in 57m 03s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/e69b3e41b86b46f180b90642736bbd3e : SUCCESS in 50m 21s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/47981819b7344c4497d53867252fb8b4 : FAILURE in 4m 40s (non-voting)","accounts_in_message":[],"_revision_number":6},{"id":"70a05debdec8a695e93af5c276f1f2c8e8773289","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 10:44:38.000000000","message":"Patch Set 6: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":6},{"id":"5b28ff02aab58cea34e3ed149f74d7779cb14bbe","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 11:43:27.000000000","message":"Patch Set 6: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/51faf456aaed4c4cb05dee53ca1a4443\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/dbb8c7b7fc554fc9b1140256d5e8a664 : SUCCESS in 3m 41s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/ca2a2a91c2e54878937a380cb26c76de : SUCCESS in 8m 07s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/8f65fc93a16f459a863de0f664b322cd : SUCCESS in 13m 33s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/561d2bf88ce543ef83b6b0715e8e4c2d : SUCCESS in 7m 08s\n- grenade https://zuul.opendev.org/t/openstack/build/560284008fec465fb55ccded69acc239 : SUCCESS in 33m 47s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/85fb4714e4b44a68b1ad82eacdfa2c13 : SUCCESS in 57m 53s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/3c3f2c35778b4d0bb955496f90cbfac8 : SUCCESS in 13m 22s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/861fcf077d314090b6f58267d2a733cd : SUCCESS in 29m 05s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/2d4cbfedb63a4178a2beb443203e33ee : SUCCESS in 14m 50s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/85b18b02f3584f92a735c9f982efbb4b : SUCCESS in 42m 54s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/7a2df2c948b04baa8bc069e01c93a8a9 : SUCCESS in 27m 50s","accounts_in_message":[],"_revision_number":6},{"id":"65c686c984a4bc8d634efa70af5b7de7c3e2a956","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 11:43:27.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":6},{"id":"0465c2b532b01d5fec03c7454ca38b0021fc5575","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 11:45:54.000000000","message":"Patch Set 6:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/790aac407bb24af1b52f6cdb33e759d4\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/75cfadc05d224e2a8867a5e3e201c589 : SUCCESS in 57s","accounts_in_message":[],"_revision_number":6}],"current_revision_number":6,"current_revision":"98b2c8dea5d5be7f30a17d9ee7fc629794b205ed","revisions":{"09f692e74d6606d73394092dfb3379f95f316ceb":{"kind":"REWORK","_number":1,"created":"2026-05-29 09:30:31.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/18/990618/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/18/990618/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/18/990618/1"}}},"commit":{"parents":[{"commit":"b433d009eaa6287f398cbca27e97c01cac77de58","subject":"Merge \"Enforce app cred project boundary on EC2 credential paths\" into stable/2025.2","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b433d009eaa6287f398cbca27e97c01cac77de58"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-05-21 20:19:22.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-05-29 09:30:31.000000000","tz":0},"subject":"Add audience mapper to devstack Keycloak client","message":"Add audience mapper to devstack Keycloak client\n\nKeycloak 26.6.2 fixed CVE-2026-37979 by requiring the authenticated\nclient at the OAuth2 token introspection endpoint to be listed in the\nintrospected token\u0027s \"aud\" claim. The devstack OIDC plugin uses the\n\"devstack\" client both to issue user access tokens (via Keycloak\u0027s\nROPC flow) and to introspect those same tokens (via Apache\nmod_auth_openidc\u0027s OIDCOAuthIntrospectionEndpoint).\n\nWithout an audience mapper, the access tokens issued by Keycloak do\nnot list \"devstack\" in \"aud\", so introspection returns\n{\"active\": false} and Apache responds with HTTP 401, breaking the\nkeystone-tempest-oidc-federation job.\n\nAdd an audience protocol mapper to the \"devstack\" client so that\n\"devstack\" is included in the access token\u0027s audience. This is\nupstream\u0027s recommended fix and lets us continue tracking\nquay.io/keycloak/keycloak:latest.\n\nAlso handle the 409 Conflict that Keycloak returns when the client or\nmapper already exists from a previous setup run, so the script is\nidempotent.\n\nGenerated-By: claude-opus-4-7 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: Ic70d4756c121e3f096c372ee9b6f5314838e66de\n(cherry picked from commit b698f56afd33aae53d6c0c665956e209eff02591)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/09f692e74d6606d73394092dfb3379f95f316ceb"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/09f692e74d6606d73394092dfb3379f95f316ceb"}]},"branch":"refs/heads/stable/2025.2","conflicts":{"ours":"b433d009eaa6287f398cbca27e97c01cac77de58","theirs":"b698f56afd33aae53d6c0c665956e209eff02591","contains_conflicts":false}},"3747afa8b67fcfc2cd0b7c76d54f68f29e21f665":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-06-01 09:57:33.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_uploader":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"ref":"refs/changes/18/990618/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/18/990618/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/18/990618/2"}}},"commit":{"parents":[{"commit":"43c79cc765453dc1fddb4dc5f3202c000a708615","subject":"Move keystone-tempest-federation to noble","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/43c79cc765453dc1fddb4dc5f3202c000a708615"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-05-21 20:19:22.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-06-01 09:57:33.000000000","tz":0},"subject":"Add audience mapper to devstack Keycloak client","message":"Add audience mapper to devstack Keycloak client\n\nKeycloak 26.6.2 fixed CVE-2026-37979 by requiring the authenticated\nclient at the OAuth2 token introspection endpoint to be listed in the\nintrospected token\u0027s \"aud\" claim. The devstack OIDC plugin uses the\n\"devstack\" client both to issue user access tokens (via Keycloak\u0027s\nROPC flow) and to introspect those same tokens (via Apache\nmod_auth_openidc\u0027s OIDCOAuthIntrospectionEndpoint).\n\nWithout an audience mapper, the access tokens issued by Keycloak do\nnot list \"devstack\" in \"aud\", so introspection returns\n{\"active\": false} and Apache responds with HTTP 401, breaking the\nkeystone-tempest-oidc-federation job.\n\nAdd an audience protocol mapper to the \"devstack\" client so that\n\"devstack\" is included in the access token\u0027s audience. This is\nupstream\u0027s recommended fix and lets us continue tracking\nquay.io/keycloak/keycloak:latest.\n\nAlso handle the 409 Conflict that Keycloak returns when the client or\nmapper already exists from a previous setup run, so the script is\nidempotent.\n\nGenerated-By: claude-opus-4-7 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: Ic70d4756c121e3f096c372ee9b6f5314838e66de\n(cherry picked from commit b698f56afd33aae53d6c0c665956e209eff02591)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3747afa8b67fcfc2cd0b7c76d54f68f29e21f665"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/3747afa8b67fcfc2cd0b7c76d54f68f29e21f665"}]},"branch":"refs/heads/stable/2025.2","description":"Rebase","conflicts":{"ours":"09f692e74d6606d73394092dfb3379f95f316ceb","theirs":"43c79cc765453dc1fddb4dc5f3202c000a708615","contains_conflicts":false}},"cd561a48a17c616d4f1a2cebe23eb3b45c644bd4":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2026-06-01 12:22:34.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/18/990618/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/18/990618/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/18/990618/3"}}},"commit":{"parents":[{"commit":"4abe1bb0b6de191b9bfce62607fe9ccb6ea1009d","subject":"Update hard-coded policy for GET /v3/limits","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/4abe1bb0b6de191b9bfce62607fe9ccb6ea1009d"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-05-21 20:19:22.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-06-01 12:22:34.000000000","tz":0},"subject":"Add audience mapper to devstack Keycloak client","message":"Add audience mapper to devstack Keycloak client\n\nKeycloak 26.6.2 fixed CVE-2026-37979 by requiring the authenticated\nclient at the OAuth2 token introspection endpoint to be listed in the\nintrospected token\u0027s \"aud\" claim. The devstack OIDC plugin uses the\n\"devstack\" client both to issue user access tokens (via Keycloak\u0027s\nROPC flow) and to introspect those same tokens (via Apache\nmod_auth_openidc\u0027s OIDCOAuthIntrospectionEndpoint).\n\nWithout an audience mapper, the access tokens issued by Keycloak do\nnot list \"devstack\" in \"aud\", so introspection returns\n{\"active\": false} and Apache responds with HTTP 401, breaking the\nkeystone-tempest-oidc-federation job.\n\nAdd an audience protocol mapper to the \"devstack\" client so that\n\"devstack\" is included in the access token\u0027s audience. This is\nupstream\u0027s recommended fix and lets us continue tracking\nquay.io/keycloak/keycloak:latest.\n\nAlso handle the 409 Conflict that Keycloak returns when the client or\nmapper already exists from a previous setup run, so the script is\nidempotent.\n\nGenerated-By: claude-opus-4-7 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: Ic70d4756c121e3f096c372ee9b6f5314838e66de\n(cherry picked from commit b698f56afd33aae53d6c0c665956e209eff02591)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/cd561a48a17c616d4f1a2cebe23eb3b45c644bd4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/cd561a48a17c616d4f1a2cebe23eb3b45c644bd4"}]},"branch":"refs/heads/stable/2025.2","description":"Rebase","conflicts":{"ours":"3747afa8b67fcfc2cd0b7c76d54f68f29e21f665","theirs":"4abe1bb0b6de191b9bfce62607fe9ccb6ea1009d","contains_conflicts":false}},"6faa25b869101732d9e4342f36558b664c72ad3d":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2026-06-02 07:14:57.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"real_uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/18/990618/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/18/990618/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/18/990618/4"}}},"commit":{"parents":[{"commit":"56983bd7b64a12cbe3caff8c4fdb901681fe66a5","subject":"Skip test_identity_list_limits on stable/2025.2","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/56983bd7b64a12cbe3caff8c4fdb901681fe66a5"}]}],"author":{"name":"Boris Bobrov","email":"b.bobrov@sap.com","date":"2026-05-21 20:19:22.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-06-02 07:14:57.000000000","tz":0},"subject":"Add audience mapper to devstack Keycloak client","message":"Add audience mapper to devstack Keycloak client\n\nKeycloak 26.6.2 fixed CVE-2026-37979 by requiring the authenticated\nclient at the OAuth2 token introspection endpoint to be listed in the\nintrospected token\u0027s \"aud\" claim. The devstack OIDC plugin uses the\n\"devstack\" client both to issue user access tokens (via Keycloak\u0027s\nROPC flow) and to introspect those same tokens (via Apache\nmod_auth_openidc\u0027s OIDCOAuthIntrospectionEndpoint).\n\nWithout an audience mapper, the access tokens issued by Keycloak do\nnot list \"devstack\" in \"aud\", so introspection returns\n{\"active\": false} and Apache responds with HTTP 401, breaking the\nkeystone-tempest-oidc-federation job.\n\nAdd an audience protocol mapper to the \"devstack\" client so that\n\"devstack\" is included in the access token\u0027s audience. This is\nupstream\u0027s recommended fix and lets us continue tracking\nquay.io/keycloak/keycloak:latest.\n\nAlso handle the 409 Conflict that Keycloak returns when the client or\nmapper already exists from a previous setup run, so the script is\nidempotent.\n\nGenerated-By: claude-opus-4-7 (OpenCode)\nSigned-off-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: Ic70d4756c121e3f096c372ee9b6f5314838e66de\n(cherry picked from commit b698f56afd33aae53d6c0c665956e209eff02591)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6faa25b869101732d9e4342f36558b664c72ad3d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6faa25b869101732d9e4342f36558b664c72ad3d"}]},"branch":"refs/heads/stable/2025.2","description":"Rebase","conflicts":{"ours":"cd561a48a17c616d4f1a2cebe23eb3b45c644bd4","theirs":"56983bd7b64a12cbe3caff8c4fdb901681fe66a5","contains_conflicts":false}},"054ca037bccd721cb942bedea835a4965a8fc757":{"kind":"REWORK","_number":5,"created":"2026-06-02 10:42:35.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/18/990618/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/18/990618/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/18/990618/5"}}},"commit":{"parents":[{"commit":"b433d009eaa6287f398cbca27e97c01cac77de58","subject":"Merge \"Enforce app cred project boundary on EC2 credential paths\" into stable/2025.2","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b433d009eaa6287f398cbca27e97c01cac77de58"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-06-02 10:42:17.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-06-02 10:42:17.000000000","tz":120},"subject":"Fix stable/2025.2 CI: nodeset, test skip, Keycloak audience mapper","message":"Fix stable/2025.2 CI: nodeset, test skip, Keycloak audience mapper\n\nMove keystone-tempest-federation to noble:\nSupport for Ubuntu Jammy was removed from devstack by [1].\n\n[1] ea0fdd2c806cf93e48a698e68165306da45314a2\n\n(cherry picked from commit 456c24bbd334026392401fd2771a0e86b4ec04c9)\n\nSkip test_identity_list_limits on stable/2025.2:\nThe master keystone-tempest-plugin test\nDomainAdminTests.test_identity_list_limits expects domain admins to\nsee limits for projects outside their domain. The stable/2025.2\nimplementation correctly filters GET /v3/limits to domain scope only,\nwhich is the expected secure behaviour on this branch.\n\nThe proposed backport (I8f59c59b4edd233e173274f1979e9a3ff0f3cfa5) was\nrejected by reviewers as it grants project admins access to all limits\nregardless of token scope, which is a controversial policy change for\na stable branch.\n\nSkip the incompatible test until the policy discrepancy is resolved\nupstream.\n\nAdd audience mapper to devstack Keycloak client:\nKeycloak 26.6.2 fixed CVE-2026-37979 by requiring the authenticated\nclient at the OAuth2 token introspection endpoint to be listed in the\nintrospected token\u0027s \"aud\" claim. The devstack OIDC plugin uses the\n\"devstack\" client both to issue user access tokens (via Keycloak\u0027s\nROPC flow) and to introspect those same tokens (via Apache\nmod_auth_openidc\u0027s OIDCOAuthIntrospectionEndpoint).\n\nWithout an audience mapper, the access tokens issued by Keycloak do\nnot list \"devstack\" in \"aud\", so introspection returns\n{\"active\": false} and Apache responds with HTTP 401, breaking the\nkeystone-tempest-oidc-federation job.\n\nAdd an audience protocol mapper to the \"devstack\" client so that\n\"devstack\" is included in the access token\u0027s audience. This is\nupstream\u0027s recommended fix and lets us continue tracking\nquay.io/keycloak/keycloak:latest.\n\nAlso handle the 409 Conflict that Keycloak returns when the client or\nmapper already exists from a previous setup run, so the script is\nidempotent.\n\n(cherry picked from commit b698f56afd33aae53d6c0c665956e209eff02591)\n\nCo-Authored-By: Takashi Kajinami \u003ckajinamit@oss.nttdata.com\u003e\nCo-Authored-By: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nChange-Id: Ic70d4756c121e3f096c372ee9b6f5314838e66de\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/054ca037bccd721cb942bedea835a4965a8fc757"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/054ca037bccd721cb942bedea835a4965a8fc757"}]},"branch":"refs/heads/stable/2025.2"},"98b2c8dea5d5be7f30a17d9ee7fc629794b205ed":{"kind":"REWORK","_number":6,"created":"2026-06-03 08:48:14.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/18/990618/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/18/990618/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/18/990618/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/18/990618/6"}}},"commit":{"parents":[{"commit":"b433d009eaa6287f398cbca27e97c01cac77de58","subject":"Merge \"Enforce app cred project boundary on EC2 credential paths\" into stable/2025.2","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b433d009eaa6287f398cbca27e97c01cac77de58"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-06-02 10:42:17.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-06-03 08:48:11.000000000","tz":120},"subject":"Fix stable/2025.2 CI: nodeset, test skip, Keycloak audience mapper","message":"Fix stable/2025.2 CI: nodeset, test skip, Keycloak audience mapper\n\nMove keystone-tempest-federation to noble:\nSupport for Ubuntu Jammy was removed from devstack by [1].\n\n[1] ea0fdd2c806cf93e48a698e68165306da45314a2\n\n(cherry picked from commit 456c24bbd334026392401fd2771a0e86b4ec04c9)\n\nSkip test_identity_list_limits on stable/2025.2:\nThe master keystone-tempest-plugin test\nDomainAdminTests.test_identity_list_limits expects domain admins to\nsee limits for projects outside their domain. The stable/2025.2\nimplementation correctly filters GET /v3/limits to domain scope only,\nwhich is the expected secure behaviour on this branch.\n\nThe proposed backport (I8f59c59b4edd233e173274f1979e9a3ff0f3cfa5) was\nrejected by reviewers as it grants project admins access to all limits\nregardless of token scope, which is a controversial policy change for\na stable branch.\n\nSkip the incompatible test until the policy discrepancy is resolved\nupstream.\n\nAdd audience mapper to devstack Keycloak client:\nKeycloak 26.6.2 fixed CVE-2026-37979 by requiring the authenticated\nclient at the OAuth2 token introspection endpoint to be listed in the\nintrospected token\u0027s \"aud\" claim. The devstack OIDC plugin uses the\n\"devstack\" client both to issue user access tokens (via Keycloak\u0027s\nROPC flow) and to introspect those same tokens (via Apache\nmod_auth_openidc\u0027s OIDCOAuthIntrospectionEndpoint).\n\nWithout an audience mapper, the access tokens issued by Keycloak do\nnot list \"devstack\" in \"aud\", so introspection returns\n{\"active\": false} and Apache responds with HTTP 401, breaking the\nkeystone-tempest-oidc-federation job.\n\nAdd an audience protocol mapper to the \"devstack\" client so that\n\"devstack\" is included in the access token\u0027s audience. This is\nupstream\u0027s recommended fix and lets us continue tracking\nquay.io/keycloak/keycloak:latest.\n\nAlso handle the 409 Conflict that Keycloak returns when the client or\nmapper already exists from a previous setup run, so the script is\nidempotent.\n\n(cherry picked from commit b698f56afd33aae53d6c0c665956e209eff02591)\n\nCo-Authored-By: Takashi Kajinami \u003ckajinamit@oss.nttdata.com\u003e\nCo-Authored-By: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nChange-Id: Ic70d4756c121e3f096c372ee9b6f5314838e66de\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/98b2c8dea5d5be7f30a17d9ee7fc629794b205ed"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/98b2c8dea5d5be7f30a17d9ee7fc629794b205ed"}]},"branch":"refs/heads/stable/2025.2"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}