)]}'
{"id":"openstack%2Fopenstack-helm-infra~772987","triplet_id":"openstack%2Fopenstack-helm-infra~master~I4de2ee4320efaa9569312016f4cca61c1f7636b2","project":"openstack/openstack-helm-infra","branch":"master","hashtags":[],"change_id":"I4de2ee4320efaa9569312016f4cca61c1f7636b2","subject":"Disallow privilege escalation in rabbitmq server container","status":"MERGED","created":"2021-01-29 09:51:17.000000000","updated":"2021-02-17 19:07:23.000000000","submitted":"2021-02-17 19:05:52.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"772987","meta_rev_id":"bc46098325c97042424d5b3f8ae16d2bfd5c40bb","_number":772987,"virtual_id_number":772987,"owner":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},{"value":0,"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-02-17 19:05:51.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"all":[{"value":0,"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},{"value":2,"date":"2021-02-17 18:02:42.000000000","_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2021-02-17 17:45:04.000000000","_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"all":[{"value":0,"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},{"value":1,"date":"2021-02-17 18:02:42.000000000","_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-01-29 10:41:38.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-02-08 08:44:58.000000000","updated_by":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"reviewer":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"state":"REVIEWER"},{"updated":"2021-02-16 15:02:28.000000000","updated_by":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"reviewer":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"state":"REVIEWER"},{"updated":"2021-02-17 17:45:04.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"}],"messages":[{"id":"56a45612fdc968ef891ee04f32e61bd71f20ad3a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-01-29 09:51:17.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"ce9af24d152e715770ebea57be68bb2550bec4ef","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-01-29 09:52:34.000000000","message":"Patch Set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"9e4a2074938053daef46c684d394322db4f664af","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-01-29 10:41:38.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/40a6a8ec72e544ca9ebcd8369ffb8223 : SUCCESS in 3m 31s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/5ee93759029545e8b4891133b1a08746 : FAILURE in 2m 57s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/3b26513b33674626abb7f731014bdd5f : SUCCESS in 34m 46s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/07eb795f4aa042ec8d321024f068bd9a : SUCCESS in 31m 40s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/364f4f13881242a69cf3d636922e6e48 : SUCCESS in 47m 18s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/9bec375c2b9e437ba1dad2d5d85d4807 : SUCCESS in 44m 21s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/dee5b6143ed24337951a48dec3f6e7ee : SUCCESS in 13m 29s","accounts_in_message":[],"_revision_number":2},{"id":"32e776ec57a05bc294661abb5798b63ec50f3f8d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-06 05:57:56.000000000","message":"Patch Set 3: Published edit on patch set 2.","accounts_in_message":[],"_revision_number":3},{"id":"89a717f6db5f50ca9a025d643469084a1f2a135f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-06 06:48:49.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e14a04c1a8d04706ae3c5a8144a9c824 : SUCCESS in 4m 29s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/6df6359b38fd4fe6ae78a2ca1153c7a4 : SUCCESS in 4m 16s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/2b65ea6ae9944ac5927b5dea6baa3107 : POST_FAILURE in 6m 08s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/5852d78cfaf6448f91ef731aaf6b87fc : POST_FAILURE in 6m 04s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/39fec516380f4b68a895c171917ae303 : FAILURE in 17m 51s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/1f2079e9813746e1bc07462ac51d5b90 : SUCCESS in 49m 45s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/d5496d99d56546069b4efa0f88d3d022 : POST_FAILURE in 44m 57s","accounts_in_message":[],"_revision_number":3},{"id":"48b1b34294baefdb34a792abb86f2edb83cce127","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-06 11:11:13.000000000","message":"Patch Set 3:\n\nrecheck","accounts_in_message":[],"_revision_number":3},{"id":"6505e13d88a3ce7c484a7b0204d634ee35c3461d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-06 11:11:47.000000000","message":"Patch Set 4: Commit message was updated.","accounts_in_message":[],"_revision_number":4},{"id":"4addd9b7783d40f9d681b3daa893658692c35e8c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-06 12:02:47.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/23c13356b07b445491374c31e094cedd : SUCCESS in 2m 54s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/79d9f7723bb142e28da187610b1b8065 : SUCCESS in 3m 09s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/2b45b77d297a46088b273814c45fe27f : SUCCESS in 35m 23s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/e0d3b702184d47a98564f743d2254122 : SUCCESS in 30m 03s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/0354d57a9a754778aff186d794e65db1 : SUCCESS in 45m 57s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/0085e11129bc4cd496cd49c442e158bd : SUCCESS in 44m 11s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/1e9609f0a444452b86766ad904d64cd7 : SUCCESS in 13m 50s","accounts_in_message":[],"_revision_number":4},{"id":"ae543e26eef41ec21f2a9f1cf61fd9549004e75e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-08 06:59:20.000000000","message":"Patch Set 5: Commit message was updated.","accounts_in_message":[],"_revision_number":5},{"id":"02a411cf786152c81022a3e74716e460ac373780","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-08 07:43:40.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/44e83be2eb644a419caf95c5809c2045 : SUCCESS in 3m 14s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/f024350623b941f4a0ef05a459737db2 : SUCCESS in 4m 35s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/89271db2f2d24444b98d93f1367f6294 : SUCCESS in 31m 24s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/c18d5c95db17433caee4c6a08bf58723 : SUCCESS in 37m 52s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/e5d4a7926af54351a6bcb4f8bc86c61a : SUCCESS in 43m 02s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/125e8164dd5740e297900b79a34cf02f : SUCCESS in 42m 20s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/009f61aec0aa4c53a9f0828b2385f1bf : SUCCESS in 13m 41s","accounts_in_message":[],"_revision_number":5},{"id":"51474a14d4a2b4162a17bd5ac46413b1309ace6b","author":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"date":"2021-02-08 08:44:58.000000000","message":"Patch Set 5: Code-Review+1\n\nLGTM","accounts_in_message":[],"_revision_number":5},{"id":"9753cfac2535fdd1e6d7c1c4d9a0ad9037ac1a89","tag":"autogenerated:gerrit:deleteVote","author":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"date":"2021-02-08 09:12:06.000000000","message":"Removed Code-Review+1 by jinyuanliu \u003cliujinyuan@inspur.com\u003e\n","accounts_in_message":[],"_revision_number":5},{"id":"3206fcd4a91622d53ea56ad328900fb4a1566714","author":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"date":"2021-02-08 09:17:31.000000000","message":"Patch Set 5: Code-Review-1\n\nIf you change it like this，Too high security control will lead to insufficient permissions\nThe result is the following error\n09:10:57.992 [error] Error when reading /var/lib/rabbitmq/.erlang.cookie: eacces\nIf you must want to，you should add permissions for file .erlang.cookie,when you building rabbitmq image","accounts_in_message":[],"_revision_number":5},{"id":"2580182feb4ce94ec8db4a9df90e96dc810ee293","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-08 11:43:37.000000000","message":"Patch Set 5:\n\n\u003e Patch Set 5: Code-Review-1\n\u003e \n\u003e If you change it like this，Too high security control will lead to insufficient permissions\n\u003e The result is the following error\n\u003e 09:10:57.992 [error] Error when reading /var/lib/rabbitmq/.erlang.cookie: eacces\n\u003e If you must want to，you should add permissions for file .erlang.cookie,when you building rabbitmq image\n\nrabbitmq chart deployment is successful with this PS in my local vm.\n\nkubectl get pods -n openstack | grep \"rabbitmq\" | grep \"Running\"\nrabbitmq-rabbitmq-0                            1/1     Running     1          6m22s\nrabbitmq-rabbitmq-1                            1/1     Running     0          6m22s\nrabbitmq-rabbitmq-exporter-7f6798784b-thfh2    1/1     Running     0          6m22s\n\n\nkubectl get pods rabbitmq-rabbitmq-0 -n openstack -o yaml | grep \"  containers:\" -A80 | grep \"name: rabbitmq\" -A30 | grep \"securityContext:\" -A3\n    securityContext:\n      allowPrivilegeEscalation: false\n      readOnlyRootFilesystem: false\n      runAsUser: 999\n\nI am able to access erlang.cookie file after logging into the rabbitmq pods.\nkubectl exec -it rabbitmq-rabbitmq-0 -n openstack bash\nrabbitmq@rabbitmq-rabbitmq-0:/$ cat /var/lib/rabbitmq/.erlang.cookie\nopenstack-cookierabbitmq@rabbitmq-rabbitmq-0:/$","accounts_in_message":[],"_revision_number":5},{"id":"bcc8032b5822f2d4050f6bb9f4c9f453585ffa51","author":{"_account_id":30449,"name":"jinyuanliu","email":"liujinyuan@inspur.com","username":"jinyuanliu"},"date":"2021-02-08 12:45:29.000000000","message":"Patch Set 5:\n\n\u003e Patch Set 5:\n\u003e \n\u003e \u003e Patch Set 5: Code-Review-1\n\u003e \u003e \n\u003e \u003e If you change it like this，Too high security control will lead to insufficient permissions\n\u003e \u003e The result is the following error\n\u003e \u003e 09:10:57.992 [error] Error when reading /var/lib/rabbitmq/.erlang.cookie: eacces\n\u003e \u003e If you must want to，you should add permissions for file .erlang.cookie,when you building rabbitmq image\n\u003e \n\u003e rabbitmq chart deployment is successful with this PS in my local vm.\n\u003e \n\u003e kubectl get pods -n openstack | grep \"rabbitmq\" | grep \"Running\"\n\u003e rabbitmq-rabbitmq-0                            1/1     Running     1          6m22s\n\u003e rabbitmq-rabbitmq-1                            1/1     Running     0          6m22s\n\u003e rabbitmq-rabbitmq-exporter-7f6798784b-thfh2    1/1     Running     0          6m22s\n\u003e \n\u003e \n\u003e kubectl get pods rabbitmq-rabbitmq-0 -n openstack -o yaml | grep \"  containers:\" -A80 | grep \"name: rabbitmq\" -A30 | grep \"securityContext:\" -A3\n\u003e     securityContext:\n\u003e       allowPrivilegeEscalation: false\n\u003e       readOnlyRootFilesystem: false\n\u003e       runAsUser: 999\n\u003e \n\u003e I am able to access erlang.cookie file after logging into the rabbitmq pods.\n\u003e kubectl exec -it rabbitmq-rabbitmq-0 -n openstack bash\n\u003e rabbitmq@rabbitmq-rabbitmq-0:/$ cat /var/lib/rabbitmq/.erlang.cookie\n\u003e openstack-cookierabbitmq@rabbitmq-rabbitmq-0:/$\n\nYou can check the rabbitmq cluster status，Not pod status","accounts_in_message":[],"_revision_number":5},{"id":"ade7d4c4ec77e8ce9d37ba15fe064bfc2967605b","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-08 13:32:24.000000000","message":"Patch Set 5:\n\n\u003e Patch Set 5:\n\u003e \n\u003e \u003e Patch Set 5:\n\u003e \u003e \n\u003e \u003e \u003e Patch Set 5: Code-Review-1\n\u003e \u003e \u003e \n\u003e \u003e \u003e If you change it like this，Too high security control will lead to insufficient permissions\n\u003e \u003e \u003e The result is the following error\n\u003e \u003e \u003e 09:10:57.992 [error] Error when reading /var/lib/rabbitmq/.erlang.cookie: eacces\n\u003e \u003e \u003e If you must want to，you should add permissions for file .erlang.cookie,when you building rabbitmq image\n\u003e \u003e \n\u003e \u003e rabbitmq chart deployment is successful with this PS in my local vm.\n\u003e \u003e \n\u003e \u003e kubectl get pods -n openstack | grep \"rabbitmq\" | grep \"Running\"\n\u003e \u003e rabbitmq-rabbitmq-0                            1/1     Running     1          6m22s\n\u003e \u003e rabbitmq-rabbitmq-1                            1/1     Running     0          6m22s\n\u003e \u003e rabbitmq-rabbitmq-exporter-7f6798784b-thfh2    1/1     Running     0          6m22s\n\u003e \u003e \n\u003e \u003e \n\u003e \u003e kubectl get pods rabbitmq-rabbitmq-0 -n openstack -o yaml | grep \"  containers:\" -A80 | grep \"name: rabbitmq\" -A30 | grep \"securityContext:\" -A3\n\u003e \u003e     securityContext:\n\u003e \u003e       allowPrivilegeEscalation: false\n\u003e \u003e       readOnlyRootFilesystem: false\n\u003e \u003e       runAsUser: 999\n\u003e \u003e \n\u003e \u003e I am able to access erlang.cookie file after logging into the rabbitmq pods.\n\u003e \u003e kubectl exec -it rabbitmq-rabbitmq-0 -n openstack bash\n\u003e \u003e rabbitmq@rabbitmq-rabbitmq-0:/$ cat /var/lib/rabbitmq/.erlang.cookie\n\u003e \u003e openstack-cookierabbitmq@rabbitmq-rabbitmq-0:/$\n\u003e \n\u003e You can check the rabbitmq cluster status，Not pod status\n\nkubectl exec -it rabbitmq-rabbitmq-0 -n openstack bash\nrabbitmq@rabbitmq-rabbitmq-0:/$ rabbitmqctl cluster_status\nCluster status of node rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local ...\n[{nodes,\n     [{disc,\n          [\u0027rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\u0027,\n           \u0027rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local\u0027]}]},\n {running_nodes,\n     [\u0027rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local\u0027,\n      \u0027rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\u0027]},\n {cluster_name,\n     \u003c\u003c\"rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\"\u003e\u003e},\n {partitions,[]},\n {alarms,\n     [{\u0027rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local\u0027,[]},\n      {\u0027rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\u0027,\n          []}]}]\nrabbitmq@rabbitmq-rabbitmq-0:/$ exit\n\n\nkubectl exec -it rabbitmq-rabbitmq-1 -n openstack bash\nrabbitmq@rabbitmq-rabbitmq-1:/$ rabbitmqctl cluster_status\nCluster status of node rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local ...\n[{nodes,\n     [{disc,\n          [\u0027rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\u0027,\n           \u0027rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local\u0027]}]},\n {running_nodes,\n     [\u0027rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\u0027,\n      \u0027rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local\u0027]},\n {cluster_name,\n     \u003c\u003c\"rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\"\u003e\u003e},\n {partitions,[]},\n {alarms,\n     [{\u0027rabbit@rabbitmq-rabbitmq-0.rabbitmq.openstack.svc.cluster.local\u0027,[]},\n      {\u0027rabbit@rabbitmq-rabbitmq-1.rabbitmq.openstack.svc.cluster.local\u0027,\n          []}]}]\nrabbitmq@rabbitmq-rabbitmq-1:/$ exit\n\nI don\u0027t have \"--erlang-cookie cookie\" optional parameter support. I am using {rabbit,\"RabbitMQ\",\"3.7.15\"} version.\nrabbitmqctl --help cluster_status\nshort            | long          | description\n-----------------|---------------|--------------------------------\n-?               | --help        | displays command help\n-n \u003cnode\u003e        | --node \u003cnode\u003e | connect to node \u003cnode\u003e\n-l               | --longnames   | use long host names\n-t               | --timeout \u003cn\u003e | for commands that support it, operation timeout in seconds\n-q               | --quiet       | suppress informational messages\n-s               | --silent      | suppress informational messages\n                                 | and table header row\n-p               | --vhost       | for commands that are scoped to a virtual host,\n                 |               | virtual host to use\n                 | --formatter   | alternative result formatter to use\n                                 | if supported: json, pretty_table, table, csv.\n                                   not all commands support all (or any) alternative formatters.","accounts_in_message":[],"_revision_number":5},{"id":"1ef5dd7978f7c048f960fb9898fa5bfa1ba3460b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-15 15:46:49.000000000","message":"Patch Set 6: Published edit on patch set 5.","accounts_in_message":[],"_revision_number":6},{"id":"f8db8b0dac51e0b483f4b6e79daadb24584635b2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-15 17:00:29.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fad0c6f15a224589b1eb89e286e0f2d6 : SUCCESS in 5m 00s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/8a5f447ab54b4d5684adff6b0039f284 : SUCCESS in 4m 41s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/f19e5eb2e1f74b7289b3d8341b46f2b6 : SUCCESS in 42m 58s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/2976a3d4c5a64a24b39fad0ccefdb0b4 : SUCCESS in 57m 06s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/22ce5914eb9e4e4093ab7a082bedc922 : SUCCESS in 48m 03s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/4919a6d3e7644c1bb603152cc44a183a : SUCCESS in 45m 53s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/cd33af28d5164704b704afe17c313e82 : SUCCESS in 14m 11s","accounts_in_message":[],"_revision_number":6},{"id":"7797b4d8b9702324c8c059ac89a287c04bd9467f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-16 08:49:30.000000000","message":"Patch Set 7: Commit message was updated.","accounts_in_message":[],"_revision_number":7},{"id":"2476a00e5ac3bae963b35731ac9dedec695c26eb","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-16 09:36:30.000000000","message":"Patch Set 7: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9b533d8252a249b3a169a5e7b8a0bd73 : SUCCESS in 4m 00s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/11ef504b7b55403c8bd8fef962f05226 : SUCCESS in 4m 34s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/8bb5b695b3b940c89165d145fc073f0d : SUCCESS in 35m 35s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/014d33651fa44ab98f3b379624ff2f2c : SUCCESS in 33m 46s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/f95da50e4ebe4786a91bb0cbb759110d : SUCCESS in 46m 12s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/da553461744d4226a7fb60e7eef3a35f : SUCCESS in 45m 32s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/d31fee0a0bb54e24a9417f83b14f19b9 : SUCCESS in 14m 44s","accounts_in_message":[],"_revision_number":7},{"id":"ede42c9317fc7880d8ede8d078af7527e766be80","author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"date":"2021-02-16 15:02:28.000000000","message":"Patch Set 7: Code-Review-1\n\nPlease update release note","accounts_in_message":[],"_revision_number":7},{"id":"c37758fc8c1782df266c5a21d5906f0bcc363725","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-16 16:00:01.000000000","message":"Patch Set 8: Published edit on patch set 7.","accounts_in_message":[],"_revision_number":8},{"id":"d9b7d3d7b2840eb2d7213e612a61bafc4b2b0584","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-16 16:54:10.000000000","message":"Patch Set 8: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9d2b87203f60415f923d23f24f63432c : SUCCESS in 4m 38s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d4b3cf3b94e643719e213bfcd11b2204 : FAILURE in 3m 06s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/6dfcda47bfe54bba860922a512c9770a : SUCCESS in 3m 45s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/efc08b89346f491b865355c8b2cfdc34 : SUCCESS in 39m 17s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/7da09800210f4aeb95d6ac0cb22bdbf3 : SUCCESS in 30m 10s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/06e9ac99598b4fcf8ccb0d2bddef5bd2 : SUCCESS in 46m 20s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/e2bbf29943454a588fb3fce810b9e4fe : SUCCESS in 49m 43s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/902ee60c45b44fd7af103aafaa85ccff : SUCCESS in 17m 31s","accounts_in_message":[],"_revision_number":8},{"id":"25fbd02fab2c4d88ced1e4568582169feebccfe9","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-16 17:05:59.000000000","message":"Patch Set 9: Published edit on patch set 8.","accounts_in_message":[],"_revision_number":9},{"id":"40e5fdd2dd9cc4d2ee7830c0f649ab1d433d7934","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-16 20:20:11.000000000","message":"Patch Set 9: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4c2cc347bf8f4ac0a5e9383c782e095b : SUCCESS in 3m 24s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/200f7e5353944f6480415332378f79b8 : SUCCESS in 3m 38s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/e0bc630f80244d79bc2579195d20210a : SUCCESS in 3m 33s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/46756930ec204b5098ea84fbdd870785 : FAILURE in 8m 32s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/015ae50ebf1147a99e93aa6940fff6e8 : FAILURE in 7m 34s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/c732d73b4d0c49c5b1b95d77179b18af : SUCCESS in 48m 09s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/1d23051295744efeaf5c7e41f3313207 : SUCCESS in 45m 44s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/db6e9ae986b1417795a47eba88e22bd6 : SUCCESS in 13m 49s","accounts_in_message":[],"_revision_number":9},{"id":"84fea46160ad867aa9e9141f53af8efb3469429e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"date":"2021-02-17 08:34:03.000000000","message":"Patch Set 10: Patch Set 9 was rebased","accounts_in_message":[],"_revision_number":10},{"id":"ba6ece8be6f4df71c8544a598196ae657b6f6596","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-17 09:35:45.000000000","message":"Patch Set 10: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/59c1343a9c0343fa8a143672d395dc68 : SUCCESS in 5m 00s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b4404de3d6614de3ac5c4a16523415da : SUCCESS in 3m 26s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/d4d8da287ed54e5a904e090ec96ce87b : SUCCESS in 4m 23s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/74333542b5a14a27b199fc51cbe96083 : SUCCESS in 35m 45s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/a7d7439b2028409cbbffc59ccf16ba59 : SUCCESS in 36m 16s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/2ec15d2b7ccd41388419f58d903b95dc : SUCCESS in 55m 30s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/9e2b4fec14a9418da48b22951ca533fb : SUCCESS in 57m 31s\n- openstack-helm-infra-metacontroller https://zuul.opendev.org/t/openstack/build/1901a683e116455292ed27062dcfbbb9 : SUCCESS in 15m 58s","accounts_in_message":[],"_revision_number":10},{"id":"524e4828ad42746c342241608b23af8ee88d519a","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2021-02-17 17:45:04.000000000","message":"Patch Set 10: Code-Review+2","accounts_in_message":[],"_revision_number":10},{"id":"964b1c5f29a23b904495574e6b4eff58862bdc63","author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"date":"2021-02-17 18:02:42.000000000","message":"Patch Set 10: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":10},{"id":"24b174b8f1cc879b8154b0b4e7860944ebe97c0c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-17 18:02:55.000000000","message":"Patch Set 10: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":10},{"id":"6fd7e8981877539359e2108406bf0d7187bc6b5a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-17 19:05:51.000000000","message":"Patch Set 10: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/869957e34dc54d9aac0d1e5838558e8f : SUCCESS in 4m 37s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/200c5a68c9fc47fcb984e6a3ec8be948 : SUCCESS in 3m 49s\n- openstack-helm-lint https://zuul.opendev.org/t/openstack/build/67c523b43ae34d2bbd4e2f617c8c9909 : SUCCESS in 4m 08s\n- openstack-helm-infra-aio-logging https://zuul.opendev.org/t/openstack/build/db0c5cad392e47e2911d591211e614b1 : SUCCESS in 37m 06s\n- openstack-helm-infra-aio-monitoring https://zuul.opendev.org/t/openstack/build/11002367e41d4826921c68791616a2c3 : SUCCESS in 48m 04s\n- openstack-helm-infra-openstack-support https://zuul.opendev.org/t/openstack/build/37d0f80204e84a03a19355334adaedc9 : SUCCESS in 57m 37s\n- openstack-helm-infra-openstack-support-ssl https://zuul.opendev.org/t/openstack/build/68bd9d14068b449d968a9f77fb563069 : SUCCESS in 47m 46s","accounts_in_message":[],"_revision_number":10},{"id":"94724eb4238923f3a6e3a3171535f9bfa8c33c61","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-17 19:05:52.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":10},{"id":"bc46098325c97042424d5b3f8ae16d2bfd5c40bb","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-17 19:07:23.000000000","message":"Patch Set 10:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/db808da2e68f4bd2bcfa1f7ad90b8425 : SUCCESS in 59s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/6a94df11c8b94e569a08e117b595dcef : SUCCESS in 1m 01s","accounts_in_message":[],"_revision_number":10}],"current_revision_number":10,"current_revision":"bf41f10068ed942f0ab97cfdfbb1b2df5f84db0c","revisions":{"35fd879ce73e82fed76ed0211101ff419981073f":{"kind":"REWORK","_number":1,"created":"2021-01-29 09:51:17.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/1"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"subject":"Disallow privilege escalation in rabbitmq server container","message":"Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices  in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/35fd879ce73e82fed76ed0211101ff419981073f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/35fd879ce73e82fed76ed0211101ff419981073f"}]},"branch":"refs/heads/master"},"16aa6634f74bb8e53079f92d0d4f1ad776b741ce":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2021-01-29 09:52:34.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/2"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:52:18.000000000","tz":0},"subject":"[wip] Disallow privilege escalation in rabbitmq server container","message":"[wip] Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices  in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/16aa6634f74bb8e53079f92d0d4f1ad776b741ce"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/16aa6634f74bb8e53079f92d0d4f1ad776b741ce"}]},"branch":"refs/heads/master","description":"Edit commit message"},"425f5e98167bc3fceff85e94afc0136c28355f1b":{"kind":"REWORK","_number":3,"created":"2021-02-06 05:57:56.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/3"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-02-06 05:57:49.000000000","tz":0},"subject":"[wip] Disallow privilege escalation in rabbitmq server container","message":"[wip] Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices  in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/425f5e98167bc3fceff85e94afc0136c28355f1b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/425f5e98167bc3fceff85e94afc0136c28355f1b"}]},"branch":"refs/heads/master"},"921ff9d6681d5bdd87084693fa18d01cf79e1898":{"kind":"NO_CODE_CHANGE","_number":4,"created":"2021-02-06 11:11:47.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/4"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-02-06 11:11:04.000000000","tz":0},"subject":"[DNM] [wip] Disallow privilege escalation in rabbitmq server container","message":"[DNM] [wip] Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices  in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/921ff9d6681d5bdd87084693fa18d01cf79e1898"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/921ff9d6681d5bdd87084693fa18d01cf79e1898"}]},"branch":"refs/heads/master","description":"Edit commit message"},"6a29bc9079986a9e89ed20979577ef1966c2f146":{"kind":"NO_CODE_CHANGE","_number":5,"created":"2021-02-08 06:59:20.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/5"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-02-08 06:59:13.000000000","tz":0},"subject":"[DNM] [wip] Disallow privilege escalation in rabbitmq server container","message":"[DNM] [wip] Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/6a29bc9079986a9e89ed20979577ef1966c2f146"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/6a29bc9079986a9e89ed20979577ef1966c2f146"}]},"branch":"refs/heads/master","description":"Edit commit message"},"2e578f5f43f15203a0083f455f05cbb4ebd2f0e3":{"kind":"REWORK","_number":6,"created":"2021-02-15 15:46:49.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/6"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-02-15 15:46:37.000000000","tz":0},"subject":"[DNM] [wip] Disallow privilege escalation in rabbitmq server container","message":"[DNM] [wip] Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/2e578f5f43f15203a0083f455f05cbb4ebd2f0e3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/2e578f5f43f15203a0083f455f05cbb4ebd2f0e3"}]},"branch":"refs/heads/master"},"2cd7c8a88c72d9a79396ee1dd3ecf54810f225db":{"kind":"NO_CODE_CHANGE","_number":7,"created":"2021-02-16 08:49:30.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/7"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-02-16 08:49:24.000000000","tz":0},"subject":"Disallow privilege escalation in rabbitmq server container","message":"Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/2cd7c8a88c72d9a79396ee1dd3ecf54810f225db"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/2cd7c8a88c72d9a79396ee1dd3ecf54810f225db"}]},"branch":"refs/heads/master","description":"Edit commit message"},"bf008863bebb7e2d814433638c268945619a541e":{"kind":"REWORK","_number":8,"created":"2021-02-16 16:00:01.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/8","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/8","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/8 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/8 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/8 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/8"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","date":"2021-02-16 15:59:55.000000000","tz":0},"subject":"Disallow privilege escalation in rabbitmq server container","message":"Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/bf008863bebb7e2d814433638c268945619a541e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/bf008863bebb7e2d814433638c268945619a541e"}]},"branch":"refs/heads/master"},"046c94d744794f28688025fb6020d8e0fa4bddc8":{"kind":"REWORK","_number":9,"created":"2021-02-16 17:05:59.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/9","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/9","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/9 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/9 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/9 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/9"}}},"commit":{"parents":[{"commit":"ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad","subject":"Allow openstack service list to retry in event of keystone connection issues","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/ff3b0aa9e0c19a034f005cde6c4d9b1d225a54ad"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","date":"2021-02-16 17:05:52.000000000","tz":0},"subject":"Disallow privilege escalation in rabbitmq server container","message":"Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/046c94d744794f28688025fb6020d8e0fa4bddc8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/046c94d744794f28688025fb6020d8e0fa4bddc8"}]},"branch":"refs/heads/master"},"bf41f10068ed942f0ab97cfdfbb1b2df5f84db0c":{"kind":"TRIVIAL_REBASE","_number":10,"created":"2021-02-17 08:34:03.000000000","uploader":{"_account_id":31479,"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","username":"gayathri"},"ref":"refs/changes/87/772987/10","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm-infra","ref":"refs/changes/87/772987/10","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/10 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/10 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/10 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm-infra refs/changes/87/772987/10"}}},"commit":{"parents":[{"commit":"39173f27a8fe0a5e9bbf2f131284b83c4c39ea2e","subject":"Alertmanager: Add Prometheus Scrape Annotation","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/39173f27a8fe0a5e9bbf2f131284b83c4c39ea2e"}]}],"author":{"name":"Gayathri Devi Kathiri","email":"gayathri.devi@imaginea.com","date":"2021-01-29 09:37:37.000000000","tz":0},"committer":{"name":"Gayathri Devi Kathiri","email":"kathirigayathri48@gmail.com","date":"2021-02-17 08:34:03.000000000","tz":0},"subject":"Disallow privilege escalation in rabbitmq server container","message":"Disallow privilege escalation in rabbitmq server container\n\nThis PS is to address security best practices in rabbitmq\nserver containers by disabling allowPrivilegeEscalation flag\n\nChange-Id: I4de2ee4320efaa9569312016f4cca61c1f7636b2\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/bf41f10068ed942f0ab97cfdfbb1b2df5f84db0c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm-infra/commit/bf41f10068ed942f0ab97cfdfbb1b2df5f84db0c"}]},"branch":"refs/heads/master","description":"Rebase"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}