)]}'
{"id":"openstack%2Fnova~1010021","triplet_id":"openstack%2Fnova~master~I744ce2a6197e0084c6aa23f147f241ba9cdfeae5","project":"openstack/nova","branch":"master","topic":"bug/2169692","attention_set":{"4393":{"account":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"last_update":"2026-10-19 14:10:10.000000000","reason":"\u003cGERRIT_ACCOUNT_9708\u003e replied on the change","reason_account":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"}},"9708":{"account":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"last_update":"2026-10-19 16:22:37.000000000","reason":"Someone else replied on the change"}},"removed_from_attention_set":{"34420":{"account":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"last_update":"2026-10-13 17:11:55.000000000","reason":"removed on reply"},"8556":{"account":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"last_update":"2026-10-19 17:46:52.000000000","reason":"\u003cGERRIT_ACCOUNT_8556\u003e replied on the change","reason_account":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"}}},"hashtags":[],"change_id":"I744ce2a6197e0084c6aa23f147f241ba9cdfeae5","subject":"Reproduce and document trusted cert bugs","status":"NEW","created":"2026-10-12 14:18:53.000000000","updated":"2026-10-19 17:46:52.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":9,"unresolved_comment_count":2,"has_review_started":true,"meta_rev_id":"4e5f3479f5144b70520eea12b7879860329fc440","_number":1010021,"virtual_id_number":1010021,"owner":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"tag":"autogenerated:zuul:check","value":1,"date":"2026-10-19 16:17:40.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"all":[{"value":2,"date":"2026-10-19 17:46:52.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"permitted_voting_range":{"min":0,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{" 0":"Default Priority","+1":"Contributor Review Promise","+2":"Core Review Promise"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-10-12 15:15:22.000000000","updated_by":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-10-12 15:47:59.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-10-13 15:57:24.000000000","updated_by":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"reviewer":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"state":"CC"},{"updated":"2026-10-16 16:42:16.000000000","updated_by":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"reviewer":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"state":"CC"},{"updated":"2026-10-16 17:25:44.000000000","updated_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"reviewer":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"state":"CC"},{"updated":"2026-10-19 17:46:52.000000000","updated_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"reviewer":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"state":"REVIEWER"}],"messages":[{"id":"eebdb6ecb5802b5f8e916a688bf74debff59718f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-12 14:18:53.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"71f8481c196a403ba45e823c2d240a0007392678","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-10-12 15:15:22.000000000","message":"Patch Set 1:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/I744ce2a6197e0084c6aa23f147f241ba9cdfeae5 .","accounts_in_message":[],"_revision_number":1},{"id":"03eca412bab506a2f892b1e12bf1925c751d3e02","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-12 15:47:59.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/c25a025086ca48609abb0ff7c94e066b\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/ca6d029b69d646d4ad95960f70e9dffa : SUCCESS in 1h 20m 24s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/222409b0410446f68158e515a990d17e : FAILURE in 4m 06s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/a394be229d364411bfbd95fa3a21fb40 : SUCCESS in 11m 50s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/74f505d65590479a8a43c139dad45f28 : SUCCESS in 16m 13s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d44c3a7fee984bcda65771760b9bc7e4 : SUCCESS in 10m 24s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b5807b5df2da445cac4a7d55206f3eac : SUCCESS in 9m 04s\n- nova-tox-validate-backport https://zuul.opendev.org/t/openstack/build/c639d04be9f94cd1825feb3780d5ef09 : SUCCESS in 5m 44s (non-voting)\n- nova-tox-functional-py311 https://zuul.opendev.org/t/openstack/build/d74adc0f0223465c80ce8a9d72607ad5 : SUCCESS in 29m 06s\n- nova-tox-functional-py314 https://zuul.opendev.org/t/openstack/build/64f6348964724c3e80455d267e7aaea5 : SUCCESS in 33m 34s\n- nova-tox-functional-py314-threading https://zuul.opendev.org/t/openstack/build/075a03935f5a4a999971762dc6672117 : SUCCESS in 41m 56s\n- nova-tox-py314-threading https://zuul.opendev.org/t/openstack/build/573ad9e8c10a4be09cb1979f5d60447f : SUCCESS in 18m 27s","accounts_in_message":[],"_revision_number":1},{"id":"768b70b8a5512564a78197fcb16b1a7f77637501","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-12 17:05:08.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4a5293f282e04ccb88c7d220e7181212\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/892b8385831042ef98eb9be3618c42ea : SUCCESS in 29m 35s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/3341527e09a34554a311a9856884daa2 : SUCCESS in 45m 07s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"059efcbd757db4e67f0331920cdcf58192700b64","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-13 14:41:26.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"a70985311e8c5a174baef1350a1d6c14fe7cb275","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 15:19:12.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/190db653ad4c4d2e8a525493743a5118\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/d334ee4b484b41bd99323c72dadc195b : SUCCESS in 23m 24s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/fb8a918313c3477aaae463419f8f6305 : SUCCESS in 35m 28s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"268a1db727602b79d237b0b4637815a08bac4dc2","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-10-13 15:42:14.000000000","message":"Patch Set 2:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/I744ce2a6197e0084c6aa23f147f241ba9cdfeae5 .","accounts_in_message":[],"_revision_number":2},{"id":"2da0c696bbe1cb3a41bd268ac90bbcaeb0a6beab","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 15:48:23.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5866a3a8f2dc4edebd1a05d5ace582db\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/1420598d19b84431a1679bf197bad7ce : SUCCESS in 1h 05m 34s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c0cf4ac7acd046699b834137a54a87c9 : SUCCESS in 8m 39s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/12e4082226b54109817a3a33f29cbdb5 : SUCCESS in 13m 48s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/35a6de92508d4eda8df98a7c2f85962b : SUCCESS in 20m 02s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2fe9439428ba48998982a8ebac578296 : SUCCESS in 13m 07s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a69afddb710b4c018fc1a91da6a9eb46 : SUCCESS in 9m 06s\n- nova-tox-validate-backport https://zuul.opendev.org/t/openstack/build/90ea770685b44cebaec85e83ba02ccba : SUCCESS in 5m 38s (non-voting)\n- nova-tox-functional-py311 https://zuul.opendev.org/t/openstack/build/63e920e93f5142b187fb6214fd2075e4 : SUCCESS in 28m 50s\n- nova-tox-functional-py314 https://zuul.opendev.org/t/openstack/build/9ab4bd2e94694a6397360281c92254fb : SUCCESS in 25m 54s\n- nova-tox-functional-py314-threading https://zuul.opendev.org/t/openstack/build/4db275a99b7f4c5091f13ea3009ab900 : SUCCESS in 38m 44s\n- nova-tox-py314-threading https://zuul.opendev.org/t/openstack/build/81dc32ac22c94cabbcb2f70ab50bb85a : SUCCESS in 19m 11s","accounts_in_message":[],"_revision_number":2},{"id":"2158ca961e2804ce6c05305bf820198bcca1d793","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-13 16:00:45.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"344ebcb175052f1666648427c03b143aa9253c17","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"date":"2026-10-13 16:07:16.000000000","message":"Patch Set 2:\n\nBuild succeeded. log path: ${LOG_PATH}\nLeave a comment with","accounts_in_message":[],"_revision_number":2},{"id":"8522b73674768473fdceb381001c65ff5d50fba8","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 16:26:20.000000000","message":"Patch Set 3:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/03fbe09cdbb145319615372040310fee\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/909e982843604a16a9774f3c29a3aa0b : SUCCESS in 15m 00s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/32762916954b4723a9aaf008a26a2635 : SUCCESS in 23m 14s (non-voting)","accounts_in_message":[],"_revision_number":3},{"id":"643a1c93ce41b6afe11e3b923b7595ad243699b0","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-10-13 16:55:58.000000000","message":"Patch Set 3:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/I744ce2a6197e0084c6aa23f147f241ba9cdfeae5 .","accounts_in_message":[],"_revision_number":3},{"id":"1af6bf13210a520cbdbefdc6bf1541bc7e895753","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 17:11:45.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/495536e6551a4ab297fc2f47029f083d\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/9f5b7de1cec54094a0004bbd65ad8ed3 : SUCCESS in 1h 07m 58s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6a88b2c672fa46e0ae381bf7f0314ab8 : SUCCESS in 4m 22s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/4b4b2e6a490648ff9351947fadd0c4a4 : SUCCESS in 14m 57s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/340a3320d02b448c8ea93bd39771b563 : SUCCESS in 12m 47s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/af62749d0811405ea773d7233bd5f58e : SUCCESS in 13m 15s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/68ad8294e29f45b1ae13ef15286d13a8 : SUCCESS in 9m 56s\n- nova-tox-validate-backport https://zuul.opendev.org/t/openstack/build/bdff0120da3a40309bc2e0664f5bf467 : SUCCESS in 4m 02s (non-voting)\n- nova-tox-functional-py311 https://zuul.opendev.org/t/openstack/build/71bbd9692d524edfa4c2255ad6445289 : SUCCESS in 29m 32s\n- nova-tox-functional-py314 https://zuul.opendev.org/t/openstack/build/904db0b9d04a44f8bc2dd5635ddb7367 : SUCCESS in 31m 59s\n- nova-tox-functional-py314-threading https://zuul.opendev.org/t/openstack/build/79cee6f89a064c5181e10d9642ca689a : SUCCESS in 34m 33s\n- nova-tox-py314-threading https://zuul.opendev.org/t/openstack/build/82d7ffedd48a4ebfbd7494fda1df9258 : SUCCESS in 18m 04s","accounts_in_message":[],"_revision_number":3},{"id":"5af0003c8ffd45f409db0046e462c4348acd45cf","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"date":"2026-10-13 17:21:45.000000000","message":"Patch Set 3:\n\nBuild succeeded. log path: ${LOG_PATH}\nLeave a comment with","accounts_in_message":[],"_revision_number":3},{"id":"8c0de6706b0e9ab92edbaff7747673903509278f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-16 16:31:50.000000000","message":"Uploaded patch set 4.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":4},{"id":"72590b4dfc8c2c5cf6f52562daf8b5fe46dbfc23","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-16 16:32:13.000000000","message":"Uploaded patch set 5: Commit message was updated.","accounts_in_message":[],"_revision_number":5},{"id":"7a9fecb2aabead85134d4d15385f7f0a88596af1","author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"date":"2026-10-16 16:42:16.000000000","message":"Patch Set 5:\n\n(3 comments)","accounts_in_message":[],"_revision_number":5},{"id":"35a6d42a65e39e910733def4ab35089949dd4363","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-16 17:12:50.000000000","message":"Patch Set 5:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/1b4db9f19fcb4710a0b4965966007293\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/396decad121b4887a8507009c82fe3a9 : SUCCESS in 23m 57s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/a396f772efa94577b34039ca663a3567 : SUCCESS in 38m 29s (non-voting)","accounts_in_message":[],"_revision_number":5},{"id":"73ed9e0dbb2f47cadc776457e02f38e0a781bf17","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-10-16 17:25:32.000000000","message":"Patch Set 4:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/I744ce2a6197e0084c6aa23f147f241ba9cdfeae5 .","accounts_in_message":[],"_revision_number":4},{"id":"fc4b540f65b98007249c7f712c7b05a9c8c7782b","author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"date":"2026-10-16 17:25:44.000000000","message":"Patch Set 5:\n\n(2 comments)","accounts_in_message":[],"_revision_number":5},{"id":"7837e066ed6fa2ef281ef3d1d51e3a7f0df6e48f","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-10-16 17:25:59.000000000","message":"Patch Set 5:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/I744ce2a6197e0084c6aa23f147f241ba9cdfeae5 .","accounts_in_message":[],"_revision_number":5},{"id":"d1b258724ca0b7134ddb1724f68d35d2980f35de","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-16 18:09:08.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/2e3533bd501e4a8e9eeec2867cc7366f\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/1f86a02ed37a48619eb81c9901345d98 : SUCCESS in 1h 31m 43s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6c1ce1eb9c2943e7a3a57e9ca9aadf3e : FAILURE in 5m 24s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/c6592e01b3af4516a72f3ad8105fa8cb : SUCCESS in 13m 55s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/4d43024db5424bb383fb316a0ac24efd : SUCCESS in 11m 37s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/290afe5d425646b59a10b091bd32b6df : SUCCESS in 13m 31s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5d575976302d4da7bda633d538f37691 : SUCCESS in 10m 14s\n- nova-tox-validate-backport https://zuul.opendev.org/t/openstack/build/aa1a900969f44f61a2b5663bcebdd09f : SUCCESS in 5m 38s (non-voting)\n- nova-tox-functional-py311 https://zuul.opendev.org/t/openstack/build/cf4c306922d14cf4967d2377a9500122 : SUCCESS in 29m 52s\n- nova-tox-functional-py314 https://zuul.opendev.org/t/openstack/build/399394e506c143a4bf0fce23a10fbffe : SUCCESS in 36m 23s\n- nova-tox-functional-py314-threading https://zuul.opendev.org/t/openstack/build/bc4fd1cbeccd409282f87007ab7bb632 : SUCCESS in 38m 51s\n- nova-tox-py314-threading https://zuul.opendev.org/t/openstack/build/cf0e157496354ad89eeae32b09620f44 : SUCCESS in 14m 13s","accounts_in_message":[],"_revision_number":5},{"id":"15d6beb9c5a0d1af9725e11475bd1935bdcfc3bf","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-19 14:10:00.000000000","message":"Uploaded patch set 6.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":6},{"id":"6aba8772d516d992d2485d4e3fd6e5c1dbf0c04e","author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"date":"2026-10-19 14:10:10.000000000","message":"Patch Set 5:\n\n(3 comments)","accounts_in_message":[],"_revision_number":5},{"id":"a5f25509d61c61b33a1c6e67bf51e8a67996ef90","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-19 14:51:36.000000000","message":"Patch Set 6:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/8631872e80b2458cbed0d2d906b6fa96\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/4db5c0eacc0747b78db6e5b0c1b8b8ab : SUCCESS in 22m 09s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/5f7fb10faa1b44b58cc8337bf415b675 : SUCCESS in 39m 12s (non-voting)","accounts_in_message":[],"_revision_number":6},{"id":"dabe45daee7696375052687993986b575f37afdf","author":{"_account_id":14384,"name":"Quobyte CI","email":"openstack-ci-external@quobyte.com","username":"quobyteci","tags":["SERVICE_USER"]},"date":"2026-10-19 15:05:21.000000000","message":"Patch Set 6:\n\nBuild Successful \n\n* quobyteci:  nova_quobyteci : SUCCESS, logs at: https://oscilogs.quobyte.com/logs/I744ce2a6197e0084c6aa23f147f241ba9cdfeae5 .","accounts_in_message":[],"_revision_number":6},{"id":"ca62589229567064a6988dd0b03569bbfbba35bd","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-19 16:17:40.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a6360079169f401b9a847a04a5b5ebeb\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/e35419683d3342d2bb9e768770777c23 : SUCCESS in 1h 19m 54s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fd27ea86855541f891c14d1f48671b01 : SUCCESS in 9m 14s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/30de04381a464937b94dc2b9c6d65005 : SUCCESS in 8m 22s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/0749591f9a7240f0a91770b08b226e59 : SUCCESS in 18m 56s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3f1f5fc8edad4f519b8a2b45cce53a13 : SUCCESS in 13m 04s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e378d43e9aee41a7a6cf6c4dbefd7b8f : SUCCESS in 9m 07s\n- nova-tox-validate-backport https://zuul.opendev.org/t/openstack/build/22635011d8334e809e23b799881e37ee : SUCCESS in 5m 12s (non-voting)\n- nova-tox-functional-py311 https://zuul.opendev.org/t/openstack/build/e28e182b649c40d1b37d938a3691bce6 : SUCCESS in 26m 55s\n- nova-tox-functional-py314 https://zuul.opendev.org/t/openstack/build/29dd674b11cc431292022e43d533e29c : SUCCESS in 36m 34s\n- nova-tox-functional-py314-threading https://zuul.opendev.org/t/openstack/build/9b410edd72184956b7e6b73ae47c8a17 : SUCCESS in 50m 17s\n- nova-tox-py314-threading https://zuul.opendev.org/t/openstack/build/6f03ede0ad74404a95677f0b9748b85d : SUCCESS in 17m 53s","accounts_in_message":[],"_revision_number":6},{"id":"c98fa0f5e83b1972691e91412424983318994687","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":34420,"name":"openstack lightbits","display_name":"Lightbits CI","email":"openstack@lightbitslabs.com","username":"openstack_lightbits"},"date":"2026-10-19 16:32:30.000000000","message":"Patch Set 6:\n\nBuild succeeded. log path: ${LOG_PATH}\nLeave a comment with","accounts_in_message":[],"_revision_number":6},{"id":"4e5f3479f5144b70520eea12b7879860329fc440","author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"date":"2026-10-19 17:46:52.000000000","message":"Patch Set 6: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":6}],"current_revision_number":6,"current_revision":"12b231120f140bbfd27187ff8de1f47ab0748e4b","revisions":{"f470f974cfad639ea724d54781178f604cb22f1e":{"kind":"REWORK","_number":1,"created":"2026-10-12 14:18:53.000000000","uploader":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"ref":"refs/changes/21/1010021/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/21/1010021/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/21/1010021/1"}}},"commit":{"parents":[{"commit":"2b5fedace12dba41600bec10ca73476dbcfc7d10","subject":"Merge \"Declare Python 3.14 support\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/2b5fedace12dba41600bec10ca73476dbcfc7d10"}]}],"author":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:14:25.000000000","tz":120},"committer":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:18:48.000000000","tz":120},"subject":"Reproduce cross cell move losing trusted certs","message":"Reproduce cross cell move losing trusted certs\n\nWhen a VM is created with trusted_image_certificates provided and the\nimage the VM uses has the signature added nova verifies the signature\nagainst the provided certificate. However if the VM later moved across\ncells nova does not copy the trusted_certs field of the instance to the\ndestination cell database.\n\nRelated-Bug: #2169692\nAssisted-By: Codex GPT-6\nChange-Id: I744ce2a6197e0084c6aa23f147f241ba9cdfeae5\nSigned-off-by: Balazs Gibizer \u003cgibi@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/f470f974cfad639ea724d54781178f604cb22f1e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/f470f974cfad639ea724d54781178f604cb22f1e"}]},"branch":"refs/heads/master"},"dc2598e47a51ad2feefb45fc4f3ce248f0707f7a":{"kind":"REWORK","_number":2,"created":"2026-10-13 14:41:26.000000000","uploader":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"ref":"refs/changes/21/1010021/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/21/1010021/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/21/1010021/2"}}},"commit":{"parents":[{"commit":"2b5fedace12dba41600bec10ca73476dbcfc7d10","subject":"Merge \"Declare Python 3.14 support\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/2b5fedace12dba41600bec10ca73476dbcfc7d10"}]}],"author":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:14:25.000000000","tz":120},"committer":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:33:48.000000000","tz":120},"subject":"Reproduce cross cell move losing trusted certs","message":"Reproduce cross cell move losing trusted certs\n\nWhen a VM is created with trusted_image_certificates provided and the\nimage the VM uses has the signature added nova verifies the signature\nagainst the provided certificate. However if the VM later moved across\ncells nova does not copy the trusted_certs field of the instance to the\ndestination cell database.\n\nRelated-Bug: #2169692\nAssisted-By: Codex GPT-6\nChange-Id: I744ce2a6197e0084c6aa23f147f241ba9cdfeae5\nSigned-off-by: Balazs Gibizer \u003cgibi@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/dc2598e47a51ad2feefb45fc4f3ce248f0707f7a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/dc2598e47a51ad2feefb45fc4f3ce248f0707f7a"}]},"branch":"refs/heads/master"},"8b9bedd9dfd074ae0b1bb02ff978dcef156c2231":{"kind":"REWORK","_number":3,"created":"2026-10-13 16:00:45.000000000","uploader":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"ref":"refs/changes/21/1010021/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/21/1010021/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/21/1010021/3"}}},"commit":{"parents":[{"commit":"2b5fedace12dba41600bec10ca73476dbcfc7d10","subject":"Merge \"Declare Python 3.14 support\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/2b5fedace12dba41600bec10ca73476dbcfc7d10"}]}],"author":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:14:25.000000000","tz":120},"committer":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-13 15:56:10.000000000","tz":120},"subject":"Reproduce trusted cert bugs in cross-cell move and shelve","message":"Reproduce trusted cert bugs in cross-cell move and shelve\n\nWhen a VM is created with trusted_image_certificates provided and the\nimage the VM uses has the signature added nova verifies the signature\nagainst the provided certificate. However if the VM later moved across\ncells nova does not copy the trusted_certs field of the instance to the\ndestination cell database.\n\nShelving also creates an unsigned snapshot despite the instance having\ntrusted certificates. So unshelve would not assert image signatures.\n\nThis patch adds a regression test showing both behaviors\n\nRelated-Bug: #2169692\nAssisted-By: Codex GPT-6\nChange-Id: I744ce2a6197e0084c6aa23f147f241ba9cdfeae5\nSigned-off-by: Balazs Gibizer \u003cgibi@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/8b9bedd9dfd074ae0b1bb02ff978dcef156c2231"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/8b9bedd9dfd074ae0b1bb02ff978dcef156c2231"}]},"branch":"refs/heads/master"},"d4ca38f84eef9c75116d8e3863a070a72fa1fd2e":{"kind":"REWORK","_number":4,"created":"2026-10-16 16:31:50.000000000","uploader":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"ref":"refs/changes/21/1010021/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/21/1010021/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/21/1010021/4"}}},"commit":{"parents":[{"commit":"2b5fedace12dba41600bec10ca73476dbcfc7d10","subject":"Merge \"Declare Python 3.14 support\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/2b5fedace12dba41600bec10ca73476dbcfc7d10"}]}],"author":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:14:25.000000000","tz":120},"committer":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-16 16:31:23.000000000","tz":120},"subject":"Reproduce trusted cert bugs","message":"Reproduce trusted cert bugs\n\nWhen a VM is created with trusted_image_certificates provided and the\nimage the VM uses has the signature added nova verifies the signature\nagainst the provided certificate. However there is a list of edge cases\nwhere such verification is skipped:\n\n1. If the compute\u0027s image cache already contain the image then the new\n   VM creation on the compute will not trigger the verification of the\n   cached image regardless of the VM having trusted certifications\n   provided.\n\n2. Similarly during cold migration if the destination compute already\n   has the base image cached then the image is not downloaded from\n   glance for the incoming cold migration and therefore the image is\n   not verified.\n\n3. If the VM later moved across cells nova does not copy the trusted_certs\n   field of the instance to the destination cell database.\n\n4. Shelving also creates an unsigned snapshot despite the instance having\n   trusted certificates. So unshelve would not assert image signatures.\n\nThis patch adds a regression test showing the wrong behavior\n\nRelated-Bug: #2169692\nAssisted-By: Codex GPT-6\nChange-Id: I744ce2a6197e0084c6aa23f147f241ba9cdfeae5\nSigned-off-by: Balazs Gibizer \u003cgibi@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/d4ca38f84eef9c75116d8e3863a070a72fa1fd2e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/d4ca38f84eef9c75116d8e3863a070a72fa1fd2e"}]},"branch":"refs/heads/master"},"7f5481e62d5c5418370ed85c85b1044fd403c923":{"kind":"NO_CODE_CHANGE","_number":5,"created":"2026-10-16 16:32:13.000000000","uploader":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"ref":"refs/changes/21/1010021/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/21/1010021/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/21/1010021/5"}}},"commit":{"parents":[{"commit":"2b5fedace12dba41600bec10ca73476dbcfc7d10","subject":"Merge \"Declare Python 3.14 support\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/2b5fedace12dba41600bec10ca73476dbcfc7d10"}]}],"author":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:14:25.000000000","tz":120},"committer":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-16 16:32:01.000000000","tz":120},"subject":"Reproduce and document trusted cert bugs","message":"Reproduce and document trusted cert bugs\n\nWhen a VM is created with trusted_image_certificates provided and the\nimage the VM uses has the signature added nova verifies the signature\nagainst the provided certificate. However there is a list of edge cases\nwhere such verification is skipped:\n\n1. If the compute\u0027s image cache already contain the image then the new\n   VM creation on the compute will not trigger the verification of the\n   cached image regardless of the VM having trusted certifications\n   provided.\n\n2. Similarly during cold migration if the destination compute already\n   has the base image cached then the image is not downloaded from\n   glance for the incoming cold migration and therefore the image is\n   not verified.\n\n3. If the VM later moved across cells nova does not copy the trusted_certs\n   field of the instance to the destination cell database.\n\n4. Shelving also creates an unsigned snapshot despite the instance having\n   trusted certificates. So unshelve would not assert image signatures.\n\nThis patch adds a regression test showing the wrong behavior\n\nRelated-Bug: #2169692\nAssisted-By: Codex GPT-6\nChange-Id: I744ce2a6197e0084c6aa23f147f241ba9cdfeae5\nSigned-off-by: Balazs Gibizer \u003cgibi@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/7f5481e62d5c5418370ed85c85b1044fd403c923"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/7f5481e62d5c5418370ed85c85b1044fd403c923"}]},"branch":"refs/heads/master"},"12b231120f140bbfd27187ff8de1f47ab0748e4b":{"kind":"REWORK","_number":6,"created":"2026-10-19 14:10:00.000000000","uploader":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"ref":"refs/changes/21/1010021/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/nova","ref":"refs/changes/21/1010021/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/nova refs/changes/21/1010021/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/nova refs/changes/21/1010021/6"}}},"commit":{"parents":[{"commit":"2b5fedace12dba41600bec10ca73476dbcfc7d10","subject":"Merge \"Declare Python 3.14 support\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/2b5fedace12dba41600bec10ca73476dbcfc7d10"}]}],"author":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-12 14:14:25.000000000","tz":120},"committer":{"name":"Balazs Gibizer","email":"gibi@redhat.com","date":"2026-10-19 14:03:50.000000000","tz":120},"subject":"Reproduce and document trusted cert bugs","message":"Reproduce and document trusted cert bugs\n\nWhen a VM is created with trusted_image_certificates provided and the\nimage the VM uses has the signature added nova verifies the signature\nagainst the provided certificate. However there is a list of edge cases\nwhere such verification is skipped:\n\n1. If the compute\u0027s image cache already contain the image then the new\n   VM creation on the compute will not trigger the verification of the\n   cached image regardless of the VM having trusted certifications\n   provided.\n\n2. Similarly during cold migration if the destination compute already\n   has the base image cached then the image is not downloaded from\n   glance for the incoming cold migration and therefore the image is\n   not verified.\n\n3. If the VM later moved across cells nova does not copy the trusted_certs\n   field of the instance to the destination cell database.\n\n4. Shelving also creates an unsigned snapshot despite the instance having\n   trusted certificates. So unshelve would not assert image signatures.\n\nThis patch adds a regression test showing the wrong behavior\n\nRelated-Bug: #2169692\nAssisted-By: Codex GPT-6\nChange-Id: I744ce2a6197e0084c6aa23f147f241ba9cdfeae5\nSigned-off-by: Balazs Gibizer \u003cgibi@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/12b231120f140bbfd27187ff8de1f47ab0748e4b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/nova/commit/12b231120f140bbfd27187ff8de1f47ab0748e4b"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"}},{"label":"Workflow","status":"MAY"},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review Priority","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}