)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":7730,"name":"Sahid Orentino Ferdjaoui","email":"sahid.ferdjaoui@industrialdiscipline.com","username":"sahid"},"change_message_id":"2e2b52c0ac3f99d853ca92c5f08e9d04792a279b","unresolved":true,"context_lines":[{"line_number":14,"context_line":""},{"line_number":15,"context_line":"[1]https://review.opendev.org/c/openstack/neutron-lib/+/870887"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Closes-Bug: #2098109"},{"line_number":18,"context_line":"Related-Bug: #2002687"},{"line_number":19,"context_line":"Change-Id: Idc502903fe6a45c9a18798b8d76036a8a1b7236a"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"ede8f7a8_2d1ca4e2","line":17,"updated":"2025-02-13 08:11:26.000000000","message":"The bug id does not seem to be correct","commit_id":"179807f417b50928af7e9821b843ca044e5e3216"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"7ab41be73fa71c50123bb1faac52b338f6465467","unresolved":false,"context_lines":[{"line_number":14,"context_line":""},{"line_number":15,"context_line":"[1]https://review.opendev.org/c/openstack/neutron-lib/+/870887"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Closes-Bug: #2098109"},{"line_number":18,"context_line":"Related-Bug: #2002687"},{"line_number":19,"context_line":"Change-Id: Idc502903fe6a45c9a18798b8d76036a8a1b7236a"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"581270f5_be0aac19","line":17,"in_reply_to":"ede8f7a8_2d1ca4e2","updated":"2025-02-13 08:18:55.000000000","message":"The bug is correct but is private. In any case, because I\u0027ve proposed this patch, the embargo will be removed soon.","commit_id":"179807f417b50928af7e9821b843ca044e5e3216"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"da514f29ff1d42bfc7d3924b3ccf82f539329172","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"1a496739_8ad13210","updated":"2025-03-02 19:24:14.000000000","message":"The tempest failures seem related?\n\nhttps://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_c76/941511/6/check/neutron-tempest-plugin-ovn/c76d736/testr_results.html\n\nFor example:\n\nDetails: {\u0027type\u0027: \u0027PolicyNotAuthorized\u0027, \u0027message\u0027: \u0027(rule:add_external_gateways and ((rule:add_external_gateways:external_gateways and (rule:add_external_gateways:external_gateways:network_id and rule:add_external_gateways:external_gateways:enable_snat)) and (rule:add_external_gateways:external_gateways:network_id and rule:add_external_gateways:external_gateways:enable_snat))) is disallowed by policy\u0027, \u0027detail\u0027: \u0027\u0027}","commit_id":"415e918beff58e0b44bbad84f13bcb1c24f09103"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"e04134badc155d91b57551987b51981b6ee554ff","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"4808fc6c_eade971a","updated":"2025-03-03 00:13:45.000000000","message":"We have to stop with the re-checks, there is something broken here as both the tempest OVN jobs are failing with a Forbidden setting gateway info.","commit_id":"415e918beff58e0b44bbad84f13bcb1c24f09103"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"c6da5ccab636b489e751e2e07f7e2bab9e2764d3","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"7986f86d_fa1d6dca","updated":"2025-02-19 15:48:29.000000000","message":"recheck neutron-fullstack unrelated error","commit_id":"415e918beff58e0b44bbad84f13bcb1c24f09103"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"874cbc9016412cab1c63997ad5b0e3ee836839a1","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"dbf396df_08591970","updated":"2025-02-19 13:47:54.000000000","message":"recheck unrelated errors","commit_id":"415e918beff58e0b44bbad84f13bcb1c24f09103"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"0a273dd5920bd550ae9fac71767c8c57ae1ce09b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"ba8b9ab0_fa6faa50","updated":"2025-02-28 15:52:17.000000000","message":"recheck unrelated test_east_west failure","commit_id":"415e918beff58e0b44bbad84f13bcb1c24f09103"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"03b9998488abf0c3b3233a3a63ef93bb7b49ef8d","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"5b280a38_5938ca1d","in_reply_to":"4808fc6c_eade971a","updated":"2025-03-03 06:38:23.000000000","message":"Due to the instability of our CI, I used a script during the weekend to re-check. I know this is not recommended but sometimes useful for urgent patches.","commit_id":"415e918beff58e0b44bbad84f13bcb1c24f09103"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"20bccd816e256ef283843dc1a4a9c0baf7ee5908","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"5db8ca72_8fb5f919","updated":"2025-03-03 20:12:28.000000000","message":"Failing test is now passing","commit_id":"0eb4bed921f755517c15e123f17dfb72eaccd355"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"dbfd4d27c3fbf554da571d2f9ef5bc8c5bc871f2","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"7de9c978_b01ba6b3","updated":"2025-03-04 06:33:59.000000000","message":"recheck neutron-ovs-tempest-dvr-ha-multinode-full","commit_id":"0eb4bed921f755517c15e123f17dfb72eaccd355"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"a30d420c87deea81d84f1000af6463aebee914f1","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"62da793a_3688e720","updated":"2025-03-03 18:01:25.000000000","message":"recheck ubuntu-jammy","commit_id":"0eb4bed921f755517c15e123f17dfb72eaccd355"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"d8bbe653d5a2b428be8a414dfd29b92960a7af6b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"e5937fcc_1144f393","updated":"2025-03-03 20:58:52.000000000","message":"recheck unrelated multinode failure","commit_id":"0eb4bed921f755517c15e123f17dfb72eaccd355"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"3c5f00132e7126b5281989d86423df810c658988","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"d5435477_1e5664d6","updated":"2025-03-03 14:09:16.000000000","message":"recheck unrelated neutron-ovs-tempest-dvr-ha-multinode-full (legit)","commit_id":"0eb4bed921f755517c15e123f17dfb72eaccd355"}],"neutron/conf/policies/router.py":[{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"cbadb562a8ecf49b4291daf7b936057571572e89","unresolved":true,"context_lines":[{"line_number":342,"context_line":"        check_str\u003dbase.ADMIN,"},{"line_number":343,"context_line":"        scope_types\u003d[\u0027project\u0027],"},{"line_number":344,"context_line":"        description\u003d(\u0027Add router external gateways\u0027),"},{"line_number":345,"context_line":"        operations\u003dACTION_PUT,"},{"line_number":346,"context_line":"    ),"},{"line_number":347,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":348,"context_line":"        name\u003d\u0027update_external_gateways\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"d456f4c7_59b7f12d","line":345,"updated":"2025-02-13 15:28:12.000000000","message":"So maybe the coffee hasn\u0027t kicked-in yet, but this seems different than what I would expect based on above policies. For example,\n\n create_router:external_gateway_info is ADMIN_OR_PROJECT_MEMBER\n create_router:external_gateway_info:enable_snat is ADMIN\n\nShouldn\u0027t the project owner be able to update the gateways, just not specify the enable_snat flag?","commit_id":"b8ac1febdb16a2caf9189f969da3532be5f7e1cd"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"4f0618ae3c8cab38f7e5e10e15a45643c5105956","unresolved":true,"context_lines":[{"line_number":342,"context_line":"        check_str\u003dbase.ADMIN,"},{"line_number":343,"context_line":"        scope_types\u003d[\u0027project\u0027],"},{"line_number":344,"context_line":"        description\u003d(\u0027Add router external gateways\u0027),"},{"line_number":345,"context_line":"        operations\u003dACTION_PUT,"},{"line_number":346,"context_line":"    ),"},{"line_number":347,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":348,"context_line":"        name\u003d\u0027update_external_gateways\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"f260f889_b5039c45","line":345,"in_reply_to":"d456f4c7_59b7f12d","updated":"2025-02-13 15:55:53.000000000","message":"That\u0027s a problem we need to discuss in a drivers meeting. Without the \"external-gateway-multihoming\" extension, we don\u0027t call ``add_external_gateways``/``update_external_gateways``/``remove_external_gateways`` when using the CLI but we are always \"update_router:external_gateway_info\" rule. This is allowed for a non-admin user; that means it can change, for example, the ``enable_snat`` flag always, regardless of the ``update_router:external_gateway_info:enable_snat`` rule, that is for admin only.\n\nWe should check how the policy engine works when the extension is no loaded and how the policy engine checks the attributes passed in the PUT call.","commit_id":"b8ac1febdb16a2caf9189f969da3532be5f7e1cd"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"81a6937382e7656f8c24fc8fcdae22b382c99793","unresolved":false,"context_lines":[{"line_number":342,"context_line":"        check_str\u003dbase.ADMIN,"},{"line_number":343,"context_line":"        scope_types\u003d[\u0027project\u0027],"},{"line_number":344,"context_line":"        description\u003d(\u0027Add router external gateways\u0027),"},{"line_number":345,"context_line":"        operations\u003dACTION_PUT,"},{"line_number":346,"context_line":"    ),"},{"line_number":347,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":348,"context_line":"        name\u003d\u0027update_external_gateways\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"8746c552_84b52fcd","line":345,"in_reply_to":"f260f889_b5039c45","updated":"2025-02-19 07:03:37.000000000","message":"Done","commit_id":"b8ac1febdb16a2caf9189f969da3532be5f7e1cd"}]}
