)]}'
{"id":"openstack%2Foctavia-tempest-plugin~910659","triplet_id":"openstack%2Foctavia-tempest-plugin~master~Ib0d2224aea8d15f9a732d9eb9690208a0cab0029","project":"openstack/octavia-tempest-plugin","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"Ib0d2224aea8d15f9a732d9eb9690208a0cab0029","subject":"Add legacy \"creator\" role to lb_member user","status":"NEW","created":"2024-02-29 19:37:06.000000000","updated":"2024-03-01 18:56:46.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"5e04926586244e605b589c89208f7b0d0df39c51","_number":910659,"virtual_id_number":910659,"owner":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"tag":"autogenerated:zuul:check","value":1,"date":"2024-02-29 22:41:38.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"rejected":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"all":[{"value":-1,"date":"2024-03-01 18:56:46.000000000","permitted_voting_range":{"min":-1,"max":0},"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2024-02-29 22:41:38.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"cdd9777792dd4117ea336a5b4e8073dc40fb3aed","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2024-02-29 19:37:06.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"1dbd92dda3ca2cd2975f41ddcfb3937ecd96860f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2024-02-29 19:38:04.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"7407390b07e72c83cef1f53bb4e544ad3de5a83a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2024-02-29 22:41:38.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/daac87b30894491ab7da23920d1556b3\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/38e50c0bb9a94ca083a4453e1652ce7c : SUCCESS in 7m 22s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7a9f835b2fbc4104964f1517d3f9e865 : SUCCESS in 3m 35s\n- octavia-v2-dsvm-noop-api https://zuul.opendev.org/t/openstack/build/f48353d3f9934617b3636cafee125dfe : SUCCESS in 1h 16m 59s\n- octavia-v2-dsvm-noop-api-stable-2023-2 https://zuul.opendev.org/t/openstack/build/61772e945cde4a198a23191299ec1947 : SUCCESS in 1h 15m 55s\n- octavia-v2-dsvm-noop-api-stable-2023-1 https://zuul.opendev.org/t/openstack/build/5fd52bd8565142348d37f4beec944b5f : SUCCESS in 1h 06m 21s\n- octavia-v2-dsvm-noop-api-stable-zed https://zuul.opendev.org/t/openstack/build/2e44b193fa99423c9dbd7709499f7583 : SUCCESS in 1h 08m 34s\n- octavia-v2-dsvm-noop-api-keystone-default-roles https://zuul.opendev.org/t/openstack/build/cfaa30a168b24c999c46e092c6cffcf9 : SUCCESS in 1h 29m 19s\n- octavia-v2-dsvm-scenario-traffic-ops https://zuul.opendev.org/t/openstack/build/f4464248182d4cd9a78181253451ac38 : SUCCESS in 1h 42m 11s\n- octavia-v2-dsvm-scenario-non-traffic-ops https://zuul.opendev.org/t/openstack/build/a4e18cee6e3c40ab8c8b845646c8ee9f : SUCCESS in 1h 09m 59s\n- octavia-v2-dsvm-scenario-traffic-ops-stable-2023-2 https://zuul.opendev.org/t/openstack/build/068884be311a4feb8ad8b002d4686c9d : SUCCESS in 1h 22m 38s\n- octavia-v2-dsvm-scenario-non-traffic-ops-stable-2023-2 https://zuul.opendev.org/t/openstack/build/a69fa40424714ec3bd02e2ddbfbab3d2 : SUCCESS in 1h 03m 14s\n- octavia-v2-dsvm-scenario-traffic-ops-stable-2023-1 https://zuul.opendev.org/t/openstack/build/4c458df7b85f4198acbc85a7db98e20f : SUCCESS in 1h 25m 23s\n- octavia-v2-dsvm-scenario-non-traffic-ops-stable-2023-1 https://zuul.opendev.org/t/openstack/build/2f597b9f075f45d99fbc378fbae73adb : SUCCESS in 1h 26m 06s\n- octavia-v2-dsvm-scenario-traffic-ops-stable-zed https://zuul.opendev.org/t/openstack/build/66d8a045b5394fb089adf0eb8947e767 : SUCCESS in 1h 47m 01s\n- octavia-v2-dsvm-scenario-non-traffic-ops-stable-zed https://zuul.opendev.org/t/openstack/build/f2f9ac79f61b405fbbd37a04e707d702 : SUCCESS in 1h 35m 37s\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/72e61a1383564b41b67eecfb46fd6227 : SUCCESS in 50m 39s\n- octavia-v2-dsvm-tls-barbican-stable-2023-2 https://zuul.opendev.org/t/openstack/build/d1fb6091f04c4849866cb868f548d0ad : SUCCESS in 57m 08s\n- octavia-v2-dsvm-tls-barbican-stable-2023-1 https://zuul.opendev.org/t/openstack/build/9cec0b5e3aed4c989cf9e6c898558472 : SUCCESS in 53m 10s\n- octavia-v2-dsvm-tls-barbican-stable-zed https://zuul.opendev.org/t/openstack/build/588ac88b2ad341efad248b849f9f79c0 : SUCCESS in 48m 55s\n- octavia-v2-dsvm-scenario-ipv6-only https://zuul.opendev.org/t/openstack/build/0cb8336021b340c9bf4f8f87faac25ef : FAILURE in 31m 38s (non-voting)\n- octavia-v2-dsvm-scenario-centos-9-stream-traffic-ops https://zuul.opendev.org/t/openstack/build/1c99654c48754993b39f3b6fa84f6d3d : SUCCESS in 1h 52m 03s (non-voting)\n- octavia-v2-dsvm-scenario-centos-9-stream-non-traffic-ops https://zuul.opendev.org/t/openstack/build/b8241aadb4334423a943e75434a312db : SUCCESS in 1h 29m 18s (non-voting)\n- octavia-v2-act-stdby-dsvm-scenario-two-node https://zuul.opendev.org/t/openstack/build/2b72a4c30b3b41c3bb9e294966bed258 : SUCCESS in 3h 02m 05s (non-voting)\n- octavia-v2-act-stdby-dsvm-scenario https://zuul.opendev.org/t/openstack/build/72253442512c4fc4a41dff34f8dc2e3b : SUCCESS in 37m 15s (non-voting)\n- octavia-v2-act-stdby-dsvm-scenario-stable-2023-2 https://zuul.opendev.org/t/openstack/build/83344d000156426ebf3092fe9aca18dd : SUCCESS in 34m 57s (non-voting)\n- octavia-v2-act-stdby-dsvm-scenario-stable-2023-1 https://zuul.opendev.org/t/openstack/build/9d092e69f26f4d2683cc0a0ebb0b40d5 : SUCCESS in 35m 04s (non-voting)\n- octavia-v2-act-stdby-dsvm-scenario-stable-zed https://zuul.opendev.org/t/openstack/build/fdfa5dc8a2c84bb09b8d6973a56e2de1 : SUCCESS in 43m 53s (non-voting)\n- octavia-v2-dsvm-cinder-amphora https://zuul.opendev.org/t/openstack/build/6db9db1aea754cfeb1660a2dfc2bda87 : TIMED_OUT in 2h 32m 36s (non-voting)\n- neutron-ovn-provider-v2-api https://zuul.opendev.org/t/openstack/build/8f712e04c1204e809079ecef6ee49350 : SUCCESS in 48m 20s (non-voting)\n- neutron-ovn-provider-v2-scenario https://zuul.opendev.org/t/openstack/build/ea58b9e98964422eacafb64ce62ec7fc : SUCCESS in 43m 44s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"5e04926586244e605b589c89208f7b0d0df39c51","author":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"date":"2024-03-01 18:56:46.000000000","message":"Patch Set 2: Workflow-1","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"8c1c7bcd6f0a81d7de45186b39f4dd57baba8d9e","revisions":{"b0640eeb5ea5ba712604d30c482647fda1da01a2":{"kind":"REWORK","_number":1,"created":"2024-02-29 19:37:06.000000000","uploader":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"ref":"refs/changes/59/910659/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/octavia-tempest-plugin","ref":"refs/changes/59/910659/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/1"}}},"commit":{"parents":[{"commit":"427701e77666955407ebe615437c368ed5f2232c","subject":"Add missing cleanups after octavia resources creation","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia-tempest-plugin/commit/427701e77666955407ebe615437c368ed5f2232c"}]}],"author":{"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","date":"2024-02-29 18:30:09.000000000","tz":-300},"committer":{"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","date":"2024-02-29 19:37:02.000000000","tz":-300},"subject":"Add legacy \"creator\" role to lb_member user","message":"Add legacy \"creator\" role to lb_member user\n\nThe Barbican legacy policies require that the user have the \u0027creator\u0027\nrole assigned to them to upload secrets.\n\nCurrently, the integration job with Barbican works because the Barbican\ndevstack plugin adds the [auth] tempest_roles \u003d creator option to\ntempest.conf, which assigns this role to all users created by the\ndynamic credentials provider.\n\nHowever, the devstack plugin for Barbican is being refactored to remove this\noption in tempest.conf by default [1], thus requiring that we assign the role\nhere to ensure that the lb_member user can still create a secret when using\nthe legacy policies for barbican.\n\nChange-Id: Ib0d2224aea8d15f9a732d9eb9690208a0cab0029\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia-tempest-plugin/commit/b0640eeb5ea5ba712604d30c482647fda1da01a2"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia-tempest-plugin/commit/b0640eeb5ea5ba712604d30c482647fda1da01a2"}]},"branch":"refs/heads/master"},"8c1c7bcd6f0a81d7de45186b39f4dd57baba8d9e":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2024-02-29 19:38:04.000000000","uploader":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"ref":"refs/changes/59/910659/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/octavia-tempest-plugin","ref":"refs/changes/59/910659/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/octavia-tempest-plugin refs/changes/59/910659/2"}}},"commit":{"parents":[{"commit":"427701e77666955407ebe615437c368ed5f2232c","subject":"Add missing cleanups after octavia resources creation","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia-tempest-plugin/commit/427701e77666955407ebe615437c368ed5f2232c"}]}],"author":{"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","date":"2024-02-29 18:30:09.000000000","tz":-300},"committer":{"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","date":"2024-02-29 19:37:40.000000000","tz":-300},"subject":"Add legacy \"creator\" role to lb_member user","message":"Add legacy \"creator\" role to lb_member user\n\nThe Barbican legacy policies require that the user have the \u0027creator\u0027\nrole assigned to them to upload secrets.\n\nCurrently, the integration job with Barbican works because the Barbican\ndevstack plugin adds the [auth] tempest_roles \u003d creator option to\ntempest.conf, which assigns this role to all users created by the\ndynamic credentials provider.\n\nHowever, the devstack plugin for Barbican is being refactored to remove this\noption in tempest.conf by default [1], thus requiring that we assign the role\nhere to ensure that the lb_member user can still create a secret when using\nthe legacy policies for barbican.\n\n[1] https://review.opendev.org/c/openstack/barbican/+/908858\n\nChange-Id: Ib0d2224aea8d15f9a732d9eb9690208a0cab0029\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia-tempest-plugin/commit/8c1c7bcd6f0a81d7de45186b39f4dd57baba8d9e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia-tempest-plugin/commit/8c1c7bcd6f0a81d7de45186b39f4dd57baba8d9e"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":["label:Workflow\u003dMIN"],"failing_atoms":["label:Workflow\u003dMAX"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}