)]}'
{"id":"openstack%2Fnova~1004767","triplet_id":"openstack%2Fnova~stable%2F2025.1~If1deb267668e16748778d3de0353c50eeeaf9fa6","project":"openstack/nova","branch":"stable/2025.1","topic":"bug/2161761","attention_set":{"16643":{"account":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"last_update":"2026-09-09 07:48:37.000000000","reason":"Someone else replied on the change"}},"removed_from_attention_set":{},"hashtags":[],"change_id":"If1deb267668e16748778d3de0353c50eeeaf9fa6","subject":"Use a per-instance cephx identity for CephFS shares","status":"NEW","created":"2026-09-09 05:21:41.000000000","updated":"2026-09-09 07:48:37.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"cherry_pick_of_change":1004766,"cherry_pick_of_patch_set":1,"meta_rev_id":"b1ba225f7c5544cb1cac8fbce819c16975b60214","_number":1004767,"virtual_id_number":1004767,"owner":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2026-09-09 07:48:29.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"permitted_voting_range":{"min":0,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{" 0":"Default Priority","+1":"Contributor Review Promise","+2":"Core Review Promise"},"default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"}],"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-09-09 06:17:19.000000000","updated_by":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-09-09 07:48:29.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-09-09 07:48:37.000000000","updated_by":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"reviewer":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"state":"CC"}],"messages":[{"id":"92de3151aab72d8fc64bd0bc24c7a5b4518aeaa8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-09-09 05:21:41.000000000","message":"Patch Set 1: Cherry Picked from branch stable/2025.2.","accounts_in_message":[],"_revision_number":1},{"id":"3b35c2d88843a81e5fcb5eca4df10d7a3ce349ea","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-09-09 05:21:49.000000000","message":"Topic bug/2161761-stable/2025.1 removed","accounts_in_message":[],"_revision_number":1},{"id":"6d570be481250a214b3608f46916033da6cf336f","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-09-09 05:21:54.000000000","message":"Topic set to bug/2161761","accounts_in_message":[],"_revision_number":1},{"id":"154b0384c2cebb2ac4e9a37234ca8cee2c96ad3b","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-09-09 06:17:19.000000000","message":"Patch Set 1:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/If1deb267668e16748778d3de0353c50eeeaf9fa6 .","accounts_in_message":[],"_revision_number":1},{"id":"51c2f840a11a0c21271fd67a1919820e1480975a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-09 07:48:29.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/73d167d00f654e4292d77b3871262613\n\n- grenade-skip-level-always https://zuul.opendev.org/t/openstack/build/d01cf44e0f5d425da3cee55abafa17ea : FAILURE in 49m 46s (non-voting)\n- tempest-integrated-compute https://zuul.opendev.org/t/openstack/build/0fe63a93e58e4bcc9c561787c17450d1 : SUCCESS in 1h 58m 43s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/6c0ceff9dc314a43bc7ad673c904e596 : SUCCESS in 1h 04m 52s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/7286e93a888944429ec9c418e3e175b4 : SUCCESS in 24m 03s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2c5f7586fe544a2a973f0043b4f38f93 : SUCCESS in 7m 41s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/f67295feb0dd467f8698e38ee92764c9 : SUCCESS in 11m 06s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/03a0893964d644b28a85654b7b5b7c02 : SUCCESS in 17m 16s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/75fba50d0d9f41f98e0adfc9f2b62746 : SUCCESS in 6m 52s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1abac21f1d504560b79227e7e7e71149 : SUCCESS in 11m 14s\n- ironic-tempest-ipa-wholedisk-bios-agent_ipmitool-tinyipa https://zuul.opendev.org/t/openstack/build/4ff1885d437f4bc5a92518eb00715585 : SUCCESS in 1h 03m 23s (non-voting)\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/2541dc21c374476484906c5323c0bd0c : SUCCESS in 1h 46m 56s\n- nova-live-migration https://zuul.opendev.org/t/openstack/build/f3f54324fcd54b9d82bab5334bb9d6ee : SUCCESS in 56m 51s\n- nova-live-migration-ceph https://zuul.opendev.org/t/openstack/build/dfd8b13b74b94178a0f614ef32a5f432 : SUCCESS in 57m 59s\n- nova-multi-cell https://zuul.opendev.org/t/openstack/build/a344a3d9675e4932a06a3bbf4b4aaeb9 : SUCCESS in 1h 55m 45s\n- nova-next https://zuul.opendev.org/t/openstack/build/92b2e6177322424581820fdb3be7f16a : SUCCESS in 2h 20m 49s\n- nova-ovs-hybrid-plug https://zuul.opendev.org/t/openstack/build/9a21a66b217342d8bca85fea0f6f9a0c : SUCCESS in 48m 43s\n- nova-tox-validate-backport https://zuul.opendev.org/t/openstack/build/c810dd0c82524bd2af05dbbc824d74e5 : FAILURE in 5m 24s (non-voting)\n- nova-tox-functional-py39 https://zuul.opendev.org/t/openstack/build/e84e8a71ebb84fcca7d9c0ad1ac2c4e4 : SUCCESS in 30m 59s\n- nova-tox-functional-py310 https://zuul.opendev.org/t/openstack/build/f8270ed4ef8444e7b8a9e88ace515685 : SUCCESS in 26m 38s\n- nova-tox-functional-py312 https://zuul.opendev.org/t/openstack/build/790d3f7cfa09497cb20cdafe13bd73a2 : SUCCESS in 29m 25s\n- nova-grenade-multinode https://zuul.opendev.org/t/openstack/build/6944fc825b05451ab37a9e7d2b89806f : SUCCESS in 59m 58s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/c0991c1e43e044f69b37f814f1e1a377 : SUCCESS in 1h 00m 34s\n- cyborg-tempest https://zuul.opendev.org/t/openstack/build/ec10c43935ed4d718e352a7f563d9134 : SUCCESS in 28m 58s (non-voting)\n- barbican-tempest-plugin-simple-crypto https://zuul.opendev.org/t/openstack/build/aad39d14ea544e309c5f208b3bd0ad7b : SUCCESS in 37m 08s (non-voting)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"da5078d49a1a635e2170e799b1387afae3fd842c","revisions":{"da5078d49a1a635e2170e799b1387afae3fd842c":{"kind":"REWORK","_number":1,"created":"2026-09-09 05:21:41.000000000","uploader":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"ref":"refs/changes/67/1004767/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/67/1004767/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/67/1004767/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/67/1004767/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/67/1004767/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/67/1004767/1"}}},"commit":{"parents":[{"commit":"ce37978276744e92d91251210a1d9c2784eea375","subject":"Merge \"Fix mutating global config in websocket proxy\" into stable/2025.1","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/ce37978276744e92d91251210a1d9c2784eea375"}]}],"author":{"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","date":"2026-08-21 17:42:37.000000000","tz":-420},"committer":{"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","date":"2026-09-09 05:21:41.000000000","tz":0},"subject":"Use a per-instance cephx identity for CephFS shares","message":"Use a per-instance cephx identity for CephFS shares\n\nCephFS Manila shares were authorized to a single\nhardcoded cephx identity (\"nova\") shared by every\ninstance on every compute host, so a cephx key\nrecovered from one host granted access to every\nCephFS share in the cloud.\n\nDerive the identity from the instance UUID and\nthe compute host name instead:\n\"nova-\" + sha256(\"\u003cinstance_uuid\u003e:\u003chost\u003e\")[:16].\n\nThe UUID bounds a leaked key to one instance\u0027s\nshares; the host component keeps grants independent\nacross hosts. The identity is deterministic and\nrecomputed wherever access is granted or revoked, so\nno new state is persisted.\n\nExisting \"nova\" grants are not revoked; they are\nreplaced when the instance next mounts the\nshare (start, reboot, or migration).\n\nBecause the identity is a one-way hash, a rule\u0027s\naccess_to no longer reveals which instance owns it.\nStamp the owning instance UUID into the Manila\naccess rule\u0027s lock_reason so operators can trace\neach grant back to an instance and track migration\noff the shared \"nova\" grant.\n\nCloses-Bug: #2161761\nSigned-off-by: Goutham Pacha Ravi \u003cgouthampravi@gmail.com\u003e\nAssisted-by: Claude Opus 4.8\nChange-Id: If1deb267668e16748778d3de0353c50eeeaf9fa6\n(cherry picked from commit 56825a650895008ba23e9af7713c9c2e7e3e052f)\n(cherry picked from commit a5b2716e0218468b1ca7d34f9b83935d7dbea74a)\n(cherry picked from commit 20934a7b1d1f536e99c8831f2687f4fecc71b6fa)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/da5078d49a1a635e2170e799b1387afae3fd842c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/da5078d49a1a635e2170e799b1387afae3fd842c"}]},"branch":"refs/heads/stable/2025.1","conflicts":{"base":"7a1a8a2325172a2f2a07b4447243b46e6959ed70","ours":"ce37978276744e92d91251210a1d9c2784eea375","theirs":"20934a7b1d1f536e99c8831f2687f4fecc71b6fa","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review Priority","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}