)]}'
{"id":"openstack%2Foctavia~763821","triplet_id":"openstack%2Foctavia~master~Ic1ddae9cb043774c644880294929b8a06fc09c76","project":"openstack/octavia","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"Ic1ddae9cb043774c644880294929b8a06fc09c76","subject":"Implement secure RBAC for load balancers","status":"ABANDONED","created":"2020-11-23 17:51:11.000000000","updated":"2021-03-10 16:44:40.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"e5aeb765ea225241d380e5149afdda59564e1073","_number":763821,"virtual_id_number":763821,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"tag":"autogenerated:zuul:check","value":-1,"date":"2020-11-24 07:39:09.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"rejected":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"all":[{"value":-1,"date":"2021-03-02 18:48:24.000000000","permitted_voting_range":{"min":-1,"max":0},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do Not Backport","-1":"Not A Backport Candidate"," 0":"Backport Review Needed","+1":"Proposed Backport","+2":"Should Backport"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"}],"REVIEWER":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-23 21:37:59.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-02-24 21:58:43.000000000","updated_by":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"reviewer":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"state":"CC"}],"messages":[{"id":"5c3061fb5d6bf65af6c61a23579db907da12deff","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 17:51:11.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"e89f45e68fd1246b0490dcfbd3bad260fde1d5ec","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 17:55:19.000000000","message":"Topic set to secure-rbac","accounts_in_message":[],"_revision_number":1},{"id":"56ee4b669783fb7a12d82a2e8827ca89874f258b","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-23 21:37:59.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/461d61ec8a1349a6838b441c8d49800e : SUCCESS in 9m 26s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/e74ce0ae57464cc3847cdf216c85a4fa : FAILURE in 4m 52s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e609ceb6adf34875b0a4e7848ac7dd16 : SUCCESS in 5m 19s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/a560430c739e4043a15d83dfef9aa734 : SUCCESS in 4m 54s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/ead59a8ea0784ff68199525eb21a2102 : SUCCESS in 4m 47s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/5929474b0b9a4dc1a9615a515a54cf63 : SUCCESS in 5m 21s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/84d4ad73990f4169b283adacb951e75c : SUCCESS in 11m 00s\n- octavia-tox-py37-tips https://zuul.opendev.org/t/openstack/build/e47e1eb12e9140cb8414092cc1f56290 : SUCCESS in 5m 19s\n- octavia-tox-functional-py37-tips https://zuul.opendev.org/t/openstack/build/6cc66e26342d4987a5736be48ab27854 : SUCCESS in 7m 36s\n- openstack-tox-pip-check-reqs https://zuul.opendev.org/t/openstack/build/55bafeea1593441c9d9da802ad183df7 : SUCCESS in 5m 18s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/09069ee45322437a9497950863d42237 : SUCCESS in 7m 50s\n- octavia-v2-dsvm-noop-api https://zuul.opendev.org/t/openstack/build/c61a2a952ace4a8eb1fedf1bef53caa7 : FAILURE in 1h 27m 53s\n- octavia-v2-dsvm-scenario https://zuul.opendev.org/t/openstack/build/b7a8d5fae0964e5d98c8a1ffad1558fb : SUCCESS in 1h 48m 31s\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/3a2902b31a3c4d2dbb61790336a34b9c : SUCCESS in 41m 36s\n- octavia-v2-dsvm-spare-pool https://zuul.opendev.org/t/openstack/build/dfbcb88ff8b34d20853ad4921bef1ab7 : SUCCESS in 39m 07s\n- octavia-v2-act-stdby-dsvm-scenario https://zuul.opendev.org/t/openstack/build/12b299a8d96e4ad294dcd7240446fd92 : SUCCESS in 42m 16s\n- octavia-grenade https://zuul.opendev.org/t/openstack/build/3a1cd525aa004d53b96d232a87b6e5e1 : SUCCESS in 59m 22s\n- octavia-v2-dsvm-cinder-amphora https://zuul.opendev.org/t/openstack/build/0c2695f77b4f4556a0ee950be623237a : SUCCESS in 2h 02m 40s (non-voting)\n- octavia-v2-dsvm-scenario-two-node https://zuul.opendev.org/t/openstack/build/5f8d7e57de8f4261a24e03133fa6c5a3 : FAILURE in 2h 30m 50s (non-voting)\n- octavia-v2-dsvm-scenario-ipv6-only https://zuul.opendev.org/t/openstack/build/bba2ac96b60b4b63823619881ee72c4c : SUCCESS in 1h 53m 01s (non-voting)\n- octavia-v2-dsvm-scenario-amphora-v2 https://zuul.opendev.org/t/openstack/build/b03d4a6bfd5f475ca10e74e6ed8444b0 : SUCCESS in 1h 57m 57s (non-voting)\n- octavia-v2-dsvm-scenario-amphora-v2-no-jobboard https://zuul.opendev.org/t/openstack/build/0b277cfd30c34fa5b2e4154839235fc5 : SUCCESS in 2h 04m 09s (non-voting)\n- octavia-v2-dsvm-scenario-centos-8 https://zuul.opendev.org/t/openstack/build/0b093e24648b4d19abd9c2f05efb879d : FAILURE in 35m 22s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"a73f62133e6bfcf01d65dad4cdf576e93574ae11","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:44:03.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"41f03e84f0dd63349d7c4261ba3c7b40383cd05d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 07:39:09.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/9555980741dc4333974acbd2b3b26d02 : SUCCESS in 9m 21s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/4fab86c8f6094e77ad6eaf8bac1aef5c : SUCCESS in 8m 22s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/b7e9a35ff6af49b2b733118eef929073 : SUCCESS in 4m 52s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/0fa712a5a380440297540d844ab0b627 : SUCCESS in 4m 57s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8c23c1712a2c4d5ebc11319917d4f673 : SUCCESS in 4m 35s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/0c820d2904e64a88a461a0d0ed7820e5 : SUCCESS in 6m 00s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c64ac7c63d14491fa788154e536c18fd : SUCCESS in 10m 38s\n- octavia-tox-py37-tips https://zuul.opendev.org/t/openstack/build/90ebf1c56b0741ad9834aace0a6fa20b : SUCCESS in 6m 00s\n- octavia-tox-functional-py37-tips https://zuul.opendev.org/t/openstack/build/1f4840da0caa49e997c9ceca694892d3 : SUCCESS in 8m 11s\n- openstack-tox-pip-check-reqs https://zuul.opendev.org/t/openstack/build/c390ffb18f9943698a890abed99d7a26 : SUCCESS in 5m 13s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/3e3f097712054b41b802dbf7dc45907b : SUCCESS in 7m 19s\n- octavia-v2-dsvm-noop-api https://zuul.opendev.org/t/openstack/build/23c18e01fd5a4a7bbf24ff403c30a208 : FAILURE in 1h 18m 48s\n- octavia-v2-dsvm-scenario https://zuul.opendev.org/t/openstack/build/c4304edbadca42cda841f006986d3210 : SUCCESS in 1h 34m 43s\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/0e610bca625242ccbcf4519da35463be : SUCCESS in 41m 22s\n- octavia-v2-dsvm-spare-pool https://zuul.opendev.org/t/openstack/build/35c235c53c7f4850ad88734121753806 : SUCCESS in 38m 02s\n- octavia-v2-act-stdby-dsvm-scenario https://zuul.opendev.org/t/openstack/build/faa6fa3c59cc4181ac7b6318593bef70 : SUCCESS in 54m 37s\n- octavia-grenade https://zuul.opendev.org/t/openstack/build/94af1099e44e48dd94ad3c490a4b403c : SUCCESS in 1h 01m 27s\n- octavia-v2-dsvm-cinder-amphora https://zuul.opendev.org/t/openstack/build/c53a830bf1ce48a393287d64cbb4815a : TIMED_OUT in 2h 41m 11s (non-voting)\n- octavia-v2-dsvm-scenario-two-node https://zuul.opendev.org/t/openstack/build/dd8d31b5c6614cb682854463e3f33ac9 : FAILURE in 2h 28m 49s (non-voting)\n- octavia-v2-dsvm-scenario-ipv6-only https://zuul.opendev.org/t/openstack/build/c242d5f26c254d3a8555ee68f40af117 : SUCCESS in 1h 48m 09s (non-voting)\n- octavia-v2-dsvm-scenario-amphora-v2 https://zuul.opendev.org/t/openstack/build/d4f2cc95c2a14cbbaa44be88d23fb377 : SUCCESS in 2h 11m 07s (non-voting)\n- octavia-v2-dsvm-scenario-amphora-v2-no-jobboard https://zuul.opendev.org/t/openstack/build/4d9b6ad2d23447ff8944e6fbe5660321 : SUCCESS in 1h 37m 17s (non-voting)\n- octavia-v2-dsvm-scenario-centos-8 https://zuul.opendev.org/t/openstack/build/10067171afec45c9bca7504bf61d0508 : FAILURE in 44m 04s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"623018f180bf7364f75bfdf154b3ba4c095ceeb2","author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"date":"2021-02-24 21:58:43.000000000","message":"Patch Set 2:\n\nAn alternate approach has been proposed in https://review.opendev.org/c/openstack/octavia/+/775957\n\nPlease consider if this is still necessary or a superior approach.","accounts_in_message":[],"_revision_number":2},{"id":"48f665d39da6fa86a6643ad5673532947bc005df","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-03-02 18:48:24.000000000","message":"Patch Set 2: Workflow-1\n\nMarking as WIP based on Michael\u0027s comment and approach. We can pursue these patches in the future if we want to, but it looks like Michael\u0027s approach delivers the functionality we want.","accounts_in_message":[],"_revision_number":2},{"id":"e5aeb765ea225241d380e5149afdda59564e1073","tag":"autogenerated:gerrit:abandon","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-03-10 16:44:40.000000000","message":"Abandoned","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"6bf0972c11f37bd5d7428d3d6becf119e0c9fecc","revisions":{"dc85851ccff08de672d33d66132fa8864592c05f":{"kind":"REWORK","_number":1,"created":"2020-11-23 17:51:11.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/763821/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/octavia","ref":"refs/changes/21/763821/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/octavia refs/changes/21/763821/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/octavia refs/changes/21/763821/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/octavia refs/changes/21/763821/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/octavia refs/changes/21/763821/1"}}},"commit":{"parents":[{"commit":"89689ddba4dd0917694c9019b45bcfa8dc8c4b47","subject":"Implement secure RBAC for listeners","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia/commit/89689ddba4dd0917694c9019b45bcfa8dc8c4b47"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 17:03:47.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 17:03:47.000000000","tz":0},"subject":"Implement secure RBAC for load balancers","message":"Implement secure RBAC for load balancers\n\nThis commit updates the policies for load balancers policies to understand\nscope checking and account for a read-only role. This is part of a broader\nseries of changes across OpenStack to provide a consistent RBAC experience and\nimprove security.\n\nChange-Id: Ic1ddae9cb043774c644880294929b8a06fc09c76\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia/commit/dc85851ccff08de672d33d66132fa8864592c05f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia/commit/dc85851ccff08de672d33d66132fa8864592c05f"}]},"branch":"refs/heads/master"},"6bf0972c11f37bd5d7428d3d6becf119e0c9fecc":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2020-11-24 04:44:03.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/763821/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/octavia","ref":"refs/changes/21/763821/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/octavia refs/changes/21/763821/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/octavia refs/changes/21/763821/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/octavia refs/changes/21/763821/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/octavia refs/changes/21/763821/2"}}},"commit":{"parents":[{"commit":"3652c94b802b3b325916c4cf563d567b702f810c","subject":"Implement secure RBAC for listeners","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia/commit/3652c94b802b3b325916c4cf563d567b702f810c"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 17:03:47.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-24 04:40:43.000000000","tz":0},"subject":"Implement secure RBAC for load balancers","message":"Implement secure RBAC for load balancers\n\nThis commit updates the policies for load balancers policies to understand\nscope checking and account for a read-only role. This is part of a broader\nseries of changes across OpenStack to provide a consistent RBAC experience and\nimprove security.\n\nChange-Id: Ic1ddae9cb043774c644880294929b8a06fc09c76\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia/commit/6bf0972c11f37bd5d7428d3d6becf119e0c9fecc"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/octavia/commit/6bf0972c11f37bd5d7428d3d6becf119e0c9fecc"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}