)]}'
{"id":"openstack%2Fopenstack-helm~1004387","triplet_id":"openstack%2Fopenstack-helm~master~Id7b1f2ee10fd4eb431b8494edbb7f6c17198de44","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"3009":{"account":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"last_update":"2026-09-14 16:11:20.000000000","reason":"\u003cGERRIT_ACCOUNT_3009\u003e replied on the change","reason_account":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}},"36710":{"account":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"last_update":"2026-09-15 05:18:56.000000000","reason":"removed on reply"},"34520":{"account":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"last_update":"2026-09-15 08:28:39.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Id7b1f2ee10fd4eb431b8494edbb7f6c17198de44","subject":"[designate] Render the bootstrap job with the helm-toolkit macro","status":"MERGED","created":"2026-09-07 07:52:21.000000000","updated":"2026-09-15 08:29:45.000000000","submitted":"2026-09-15 08:28:39.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1004387","meta_rev_id":"02842642224d4284ed922438fc00ba5b74dc06d2","_number":1004387,"virtual_id_number":1004387,"owner":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-09-15 08:28:39.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":2,"date":"2026-09-15 03:34:16.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":2,"date":"2026-09-14 23:26:54.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":1,"date":"2026-09-15 03:34:16.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-09-07 08:07:15.000000000","updated_by":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"reviewer":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"state":"REVIEWER"},{"updated":"2026-09-07 08:07:15.000000000","updated_by":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"reviewer":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"state":"REVIEWER"},{"updated":"2026-09-07 09:49:17.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"2aa6b357552d396705f0a1a8b1a5b1fb3fa1e6a6","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"date":"2026-09-07 07:52:21.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"e4b9de5ccafe6b04b58314a0ef48a565f58d5fd0","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"date":"2026-09-07 07:58:55.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"ee33cf1eb67188290c86f7616baea250a908f5c5","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-07 09:49:17.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/f703ae5486084c8ca49ac63882fa13ea\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e2bb77e671ec4a5eaf71465576e44d33 : SUCCESS in 2m 52s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/83170093f5de42cdbdeb3aebe171e4ad : SUCCESS in 4m 21s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/182d42ba82be43a39b3c8c011c67b992 : SUCCESS in 3m 11s\n- openstack-helm-mariadb-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a9bc0519401b44bab87ae2f0deb6b0dc : SUCCESS in 1h 40m 20s\n- openstack-helm-mariadb-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c832e3e045ca4c24952062671e510891 : SUCCESS in 1h 44m 33s\n- openstack-helm-rabbitmq-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/da66e97ad5e14cf88ba5910388349ab1 : SUCCESS in 1h 15m 44s\n- openstack-helm-rabbitmq-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/119b668d58b143709975ab703c9dae34 : SUCCESS in 1h 10m 17s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/14f28bbe27304cb7ba680d4c47cee54a : SUCCESS in 2m 55s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/ec2dbe2328f1470dac4dd99dfae8c17f : SUCCESS in 3m 00s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e0ceca07522b4aa684ff6eec50f97368 : SUCCESS in 45m 22s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7d6f001c937b48aaaafdf69dedc6bc36 : SUCCESS in 1h 13m 59s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0d7d95e21e2d426c804441f513ebb9e3 : SUCCESS in 45m 30s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9b221e0b1f974fdc81d960c69c3f2199 : SUCCESS in 1h 08m 04s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0ebaae0452a24e9fac2b62ff039031c4 : SUCCESS in 27m 34s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8d4e051a0a5647489193baecd87135be : SUCCESS in 1h 11m 01s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/cd48941e2b7647e5964dccf4862208ee : SUCCESS in 1h 08m 06s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/86d0b5615c70430bb8ee420c2498928e : SUCCESS in 1h 24m 11s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/28cf785f4bd44e5f99236d295aead031 : SUCCESS in 39m 14s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/6348978be8cf4e27b7ea49a001088735 : SUCCESS in 25m 05s","accounts_in_message":[],"_revision_number":2},{"id":"7ca75bf1174995ac7d222a318b907884daef8fdb","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-09-09 20:40:35.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"8efcf219b0af5cfd747c60af565885c2427c060b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"date":"2026-09-14 01:58:10.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"88dbc0d29d577ceb1d5ba1a918efa3dca2b006b6","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"date":"2026-09-14 02:01:18.000000000","message":"Patch Set 2:\n\n(1 comment)\n\nDone in patch set 3 - thanks. I have reverted the Chart.yaml version line, so the file is no longer touched by this change. Patch set 3 is otherwise identical to patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"02614acbb3433fd1b2c12a85517e147bebc74349","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-14 04:29:48.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/595638a3ddc64104904283f98c083af0\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/99a62e7ddd8c4ca6b7e27ec9c46a758d : SUCCESS in 3m 07s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2e887b89e5f042c7966ac613c34f6c17 : SUCCESS in 3m 32s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/1f28e889a09944c4845ec205b41a5a2b : SUCCESS in 1m 54s\n- openstack-helm-mariadb-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1eb4313cfd9d4f32938d6f4194174628 : SUCCESS in 1h 45m 35s\n- openstack-helm-mariadb-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/48ec584940fa4368ab5b16517249f971 : SUCCESS in 1h 47m 22s\n- openstack-helm-rabbitmq-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c8595b9dab644b8f8c7cf1a31de72289 : SUCCESS in 45m 19s\n- openstack-helm-rabbitmq-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/160e885da6bc4781a13bf2314cdb4edc : SUCCESS in 1h 19m 10s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/907b8a6f44a74454a0a8ebf24fa8331a : SUCCESS in 3m 17s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/2c5b7cdc59cb4e17975e0e638ce9f3e7 : SUCCESS in 2m 58s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/75fcc85e5116465bb6efc9501799436e : FAILURE in 28m 35s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/08363f4111144d108198c37069550ad0 : SUCCESS in 1h 15m 28s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2789b5ce5eb247089f7bbb707e2f91d2 : SUCCESS in 41m 03s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c94811782f634b1ea43f77f45e95bd52 : SUCCESS in 1h 01m 48s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c8780f3c22bf44f6b12125b71632c809 : SUCCESS in 31m 03s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/cedc6bc9625e445191784a292a7ca535 : SUCCESS in 46m 52s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2f73b74a67dd423c87682ae313b454c0 : SUCCESS in 1h 32m 51s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f2b51e4be8d54873ac30f4fa15578c23 : SUCCESS in 1h 09m 46s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/8b3601f8ef4143e29af7bb0da4e9826a : SUCCESS in 26m 12s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/d92f18a030674211a141e8fa8cbcbcbb : SUCCESS in 30m 25s","accounts_in_message":[],"_revision_number":3},{"id":"a762aa2042e2d84dd713c2f069c779fb02e71c1b","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"date":"2026-09-14 10:07:37.000000000","message":"Patch Set 3:\n\nrecheck","accounts_in_message":[],"_revision_number":3},{"id":"d3090337e703939f8221881d4db2feaad0804a85","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-14 11:56:55.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/3e96ab2b53e84bbeb87488853d540e10\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/37c5013e7289472a929f6eb18e924aab : SUCCESS in 4m 12s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1e6a622c63f849f8a533956f1d7ca2cb : SUCCESS in 3m 45s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/524f56f7ba4947ffb877a5a613fe6bbb : SUCCESS in 3m 10s\n- openstack-helm-mariadb-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0c80b1afeafb4a0ca44c7ac5853b84c8 : SUCCESS in 1h 35m 17s\n- openstack-helm-mariadb-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/3e36ab04e0a34032b0ea4522144a77e7 : SUCCESS in 1h 42m 29s\n- openstack-helm-rabbitmq-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8121eda869664d63b3e4c34109e760a5 : SUCCESS in 1h 11m 43s\n- openstack-helm-rabbitmq-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b9e247b70bdd4bb9928aa08b56194a1f : SUCCESS in 1h 05m 01s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/cab29724396f4781b38ede0ec059ec3f : SUCCESS in 2m 55s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/c2237d599a90467e933cc6d806fed18c : SUCCESS in 3m 02s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9e7f959ae1b543c5b59631372afe9db4 : SUCCESS in 45m 57s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/471699a1211745c89a2d54846cdc6fdd : SUCCESS in 59m 09s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5169e49f8ab94d6db44c3d4af6f61d0c : SUCCESS in 37m 51s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/19b5ab30859245f1aef24c36e0aea48e : SUCCESS in 1h 17m 11s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5ac6721deb5a4d2f97ea0d485a689bc9 : SUCCESS in 38m 05s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/dc7b84e068ae43769375c06f152e35f0 : SUCCESS in 1h 16m 28s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0c1201b0d683428eaee540b6749772d7 : SUCCESS in 1h 28m 47s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/51fce7b6184a484b8077e8b22a04c961 : SUCCESS in 1h 06m 50s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/dbd2616dedea445cbb86697e67545ddf : SUCCESS in 39m 35s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/7c27c27dcf7e4125986e8e9fc8ff6287 : SUCCESS in 30m 01s","accounts_in_message":[],"_revision_number":3},{"id":"0c47925378bb1f8594613b454ba1d62ab8b61230","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-09-14 16:11:20.000000000","message":"Patch Set 3: Code-Review+2","accounts_in_message":[],"_revision_number":3},{"id":"6be6a63cda0f1de38d7c1fe3858727f52224e5c0","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-09-14 21:29:06.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"7d3618c9063587b0b2de29f61d33a8a40b2b2859","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-14 21:29:23.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"edcd2036ea10a3fdae3785e7de5ccc8c5325b0f7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-14 22:31:10.000000000","message":"Patch Set 3: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/17157875511f4a1d97a3e922ebd0dff2\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/edabf5c7138948d08a5c7015fcedd578 : SUCCESS in 3m 26s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/84ba0bf43f9740bc9b7a42df791e7b7b : SUCCESS in 4m 36s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/284d7b2a4cd9460884226b54fcae51b0 : SUCCESS in 2m 59s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/64c37944808441c98e2495afa448fec0 : SUCCESS in 47m 24s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/364f9b0c000348379c7bc4c3823395cc : SUCCESS in 1h 01m 23s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/c9a5dd40d41e4f959848e85632575860 : FAILURE in 23m 49s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/4b3e9aca2dfb4aafaa61de3849b40371 : SUCCESS in 34m 13s","accounts_in_message":[],"_revision_number":3},{"id":"aa4bd261085540ef6e7ca8eff09b9e753ddefe77","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"real_author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-09-14 23:26:54.000000000","message":"Patch Set 4: Patch Set 3 was rebased on behalf of \u003cGERRIT_ACCOUNT_36710\u003e\n\nCopied Votes:\n* Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Verified-2 (copy condition: \"NEVER\")\n* Workflow+1 (copy condition: \"NEVER\")\n","accounts_in_message":[{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"}],"_revision_number":4},{"id":"87a13faca81ebe7e77d37074464b5f9e91de8aa1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 01:11:48.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/54a2b85ca47f470abe66dd2858fb3a8a\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/6950b60e4a6c4f608364c92a14b2eac8 : SUCCESS in 3m 55s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/39fb6c874c79426b84fa7c182241a953 : SUCCESS in 3m 08s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/1c675c229a5d4784a3f9f08f6a13453c : SUCCESS in 3m 12s\n- openstack-helm-mariadb-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/55490c7e516440098d7ef968a08bc424 : SUCCESS in 1h 36m 25s\n- openstack-helm-mariadb-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/86e1256b2b54411fa82d56a14d860f46 : SUCCESS in 1h 39m 16s\n- openstack-helm-rabbitmq-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c148ae3ac0314c9aa3d295902ba5c03b : SUCCESS in 48m 04s\n- openstack-helm-rabbitmq-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d419e2d983df440eb485431460d1e739 : SUCCESS in 1h 22m 33s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/4caac5ee903a4d39b1de4cde47e6f0e4 : SUCCESS in 2m 58s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/9017edfea3f140ae80377389a8db0fe5 : SUCCESS in 2m 36s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b6d941948ba74f92ae1c6e548f90883d : SUCCESS in 35m 22s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/79ffcd1fd1bd40b18467b50db13ec864 : SUCCESS in 59m 08s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/07214dda6a6a43e78979cde81433b67d : SUCCESS in 35m 33s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/cc0982f6f5404da886a1000b67fc56b8 : SUCCESS in 1h 03m 06s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7edbe12bfa82411dba24346ba4758f0c : SUCCESS in 44m 54s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/ba68abbf49f44dc38bd4194796836ba4 : SUCCESS in 1h 14m 12s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/18530be67763435d9c9dd3a32b1baac6 : SUCCESS in 1h 21m 07s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e4995991f7814ab4b892b3556d689d4c : SUCCESS in 1h 17m 51s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/9ba5591c13bf4923a9933584c0a36bd4 : SUCCESS in 40m 12s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/5597452b6c3f444aae9e9a74ce80fb6c : SUCCESS in 28m 59s","accounts_in_message":[],"_revision_number":4},{"id":"f7a777bbf165e7dce39f63a9e6a6a346b3a37839","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-09-15 03:34:16.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"01e0e2ac4fb4c36cfc15a04e847d463e921309a7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 03:34:35.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"da21fa9ba5bb2a928990fe344905d4e87aab80f5","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 04:21:02.000000000","message":"Patch Set 4: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/b709c4c08ac54a35b7c8592ed8ab27ae\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fe0e8f1441fd4455bc801be10708a603 : SUCCESS in 3m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/0b2823d4b22c499cb8c0649593e32fda : SUCCESS in 3m 29s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/1ae0dedbd5504fc18378abd42eeefde0 : SUCCESS in 2m 59s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/48f809cec98248f4b67b24a0b72085be : FAILURE in 16m 25s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/82abe07aa1a9468189f34b516a4b75b1 : SUCCESS in 45m 25s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/7c558ad7934a4b7ca32e3329524bf7c2 : SUCCESS in 23m 10s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/972c76f8c1554d5fb7e6cdd87bd49095 : SUCCESS in 21m 19s","accounts_in_message":[],"_revision_number":4},{"id":"7a7c3214038c01c9de126e78bc327705047f11e4","author":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"date":"2026-09-15 05:18:56.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"1b42015e8f808f8a5741f856d5130fd016156944","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 07:07:42.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/03bed83c1585416c969926f31e47accf\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/702e73e18e7c4701b9f9e2805d880627 : SUCCESS in 3m 13s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/18ecbb7baad54fa1a542642842680148 : SUCCESS in 3m 01s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/666e797d0f3d4c91a92c1ebe9b4c2fa2 : SUCCESS in 2m 36s\n- openstack-helm-mariadb-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/258b8e9e213745d08b29886c610d1883 : SUCCESS in 1h 19m 36s\n- openstack-helm-mariadb-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9eecb630c55f4c0fa6087317a0fdf121 : SUCCESS in 1h 23m 36s\n- openstack-helm-rabbitmq-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a2187654ce97451888916898902fb390 : SUCCESS in 1h 00m 28s\n- openstack-helm-rabbitmq-operator-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7b8453b79cc14616a1985b63ddd5c0b9 : SUCCESS in 48m 41s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/580164e818fe4e8b966f628f44745f82 : SUCCESS in 2m 48s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/e66301bb137f4abb97c54a287de32ffb : SUCCESS in 2m 55s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0133bf8e0de4487f8d4d6653ff1dc3ad : SUCCESS in 46m 12s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b64017961c274621baa333009444f7b8 : SUCCESS in 43m 07s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/54f865bd17044aa28dd920f33bb31c81 : SUCCESS in 43m 47s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/eefdc2b2790f402f9eb2449ec5827c63 : SUCCESS in 1h 05m 26s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6e438a8167d245d0b62689c2cd339c84 : SUCCESS in 42m 01s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d3f746dce416479cacc354ec93080e4b : SUCCESS in 1h 10m 50s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/293ca0356fec409a92edfca2253400d5 : SUCCESS in 1h 44m 52s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a34bb738b16346ba8de8387d7d213aa5 : SUCCESS in 1h 17m 17s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/187cfaa4a62749baa2605758aa5e88aa : SUCCESS in 33m 08s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/3c4ce3bc8bf14ac9b2d5d9fa54b9fa96 : SUCCESS in 29m 01s","accounts_in_message":[],"_revision_number":4},{"id":"1cf306057c6f2418a5464c7fb13d0b8d98bd4db4","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 07:08:01.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"93fe0b4d6eda40200fb5069d3f20258204d1373a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 08:28:39.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/6f307b2894284875bb88bcfec8fcc2d2\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d800522296dc430bb0324e387a2d6bee : SUCCESS in 2m 21s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/95400b72263a4a268099085b4d9f85fd : SUCCESS in 3m 09s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/f8111eb2ace84951a7500fad29c0fbea : SUCCESS in 3m 23s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/354367a8847a4fcc9c828371382c067b : SUCCESS in 35m 10s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7197a6651afc4fac84cf34cfa7693ab7 : SUCCESS in 1h 18m 29s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/63c1e394a20a4224afd29faeb6b98bef : SUCCESS in 23m 02s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/602e8f37b8644fadb0a91d5d5390079b : SUCCESS in 26m 27s","accounts_in_message":[],"_revision_number":4},{"id":"3a66eebb84e91cf4152a4ee584d62899caee13e0","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 08:28:39.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"02842642224d4284ed922438fc00ba5b74dc06d2","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-09-15 08:29:45.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/869cbd204ec34d18b9cedc1064339a3a\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/bb4f457b49ac48ccaa1a6882499242a6 : SUCCESS in 49s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/f1ab6929162a40ba86e21f59434a5f54 : SUCCESS in 50s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"59165c3ed3b603a47e1b1b588b0de41237267db4","revisions":{"49de838e10a757c43b7cd4e415d0eb3821ee8de4":{"kind":"REWORK","_number":1,"created":"2026-09-07 07:52:21.000000000","uploader":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"ref":"refs/changes/87/1004387/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/87/1004387/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/1"}}},"commit":{"parents":[{"commit":"c73f68ac866aeedbec2784c16e6a45b215664112","subject":"Merge \"ovn: fix liveness probe to check as ovs user, not root\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c73f68ac866aeedbec2784c16e6a45b215664112"}]}],"author":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-07 06:42:02.000000000","tz":540},"committer":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-07 07:50:08.000000000","tz":540},"subject":"[designate] Render the bootstrap job with the helm-toolkit macro","message":"[designate] Render the bootstrap job with the helm-toolkit macro\n\ndesignate/templates/job-bootstrap.yaml is the only pod template in the\nchart that is hand-written, and it is the only one without a\nServiceAccount. The six deployments use\nhelm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount and the other\nsix jobs use the helm-toolkit manifests.job_* macros. Bootstrap uses\nneither.\n\nThree problems follow from that, none of which upstream CI exercises\nbecause bootstrap.enabled defaults to false.\n\n1. The chart does not template at all when the job is enabled, because\n   values.yaml has no pod.mounts.designate_bootstrap:\n\n     $ helm template designate ./designate --set bootstrap.enabled\u003dtrue\n     Error: template: designate/templates/job-bootstrap.yaml:16:42:\n       executing \"designate/templates/job-bootstrap.yaml\" at\n       \u003c.Values.pod.mounts.designate_bootstrap.designate_bootstrap\u003e:\n       nil pointer evaluating interface {}.designate_bootstrap\n\n2. Worked around, the Job then runs under the namespace default\n   ServiceAccount. Its kubernetes-entrypoint init container has to read\n   Services and Endpoints, so it fails with\n\n     endpoints \"...\" is forbidden: User\n     \"system:serviceaccount:openstack:default\" cannot get resource\n     \"endpoints\" in API group \"\" in the namespace \"openstack\"\n\n   and the Job hangs in Init state.\n\n3. dependencies.static.bootstrap is missing as well, so even once a\n   ServiceAccount exists the dependency-aware RBAC snippet renders no\n   Role, and the init container waits for nothing.\n\nSwitch the template to helm-toolkit.manifests.job_bootstrap, as the\ntwenty other OpenStack service charts already do, and add the values it\nneeds. The macro renders the ServiceAccount, Role and RoleBinding, sets\nspec.serviceAccountName, and honours pod.image_pull_secrets, which the\nhand-written Job did not, so there was previously no way to attach a\npull secret to this Job through values.\n\nbootstrap.ks_user defaults to admin, so the Job keeps using\nsecrets.identity.admin as before.\n\nVerified with helm template. The default render, with bootstrap\ndisabled, is unchanged except for the randomly generated memcache key,\nwhich differs between any two renders of the unpatched chart as well.\nWith bootstrap.enabled\u003dtrue the chart now renders the ServiceAccount, a\nRole granting get/list on services, endpoints and endpointslices, the\nRoleBinding, and the Job with spec.serviceAccountName set and\nDEPENDENCY_SERVICE listing keystone-api and designate-api.\n\nThe Job\u0027s pod spec does change shape: it gains the pod-tmp, etc-service\nand bootstrap-conf mounts, the latter carrying designate.conf and\nlogging.conf from the designate-etc Secret, and it runs the script\nthrough /bin/bash -c. That matches every other bootstrap job in the\ntree.\n\nStory: 2011877\nTask: 55594\nChange-Id: Id7b1f2ee10fd4eb431b8494edbb7f6c17198de44\nSigned-off-by: JeongJiho \u003cjiho.jeong@samsung.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/49de838e10a757c43b7cd4e415d0eb3821ee8de4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/49de838e10a757c43b7cd4e415d0eb3821ee8de4"}]},"branch":"refs/heads/master"},"f4397bfccb7b063d0ad146d62b191acb68f426b3":{"kind":"REWORK","_number":2,"created":"2026-09-07 07:58:55.000000000","uploader":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"ref":"refs/changes/87/1004387/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/87/1004387/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/2"}}},"commit":{"parents":[{"commit":"c73f68ac866aeedbec2784c16e6a45b215664112","subject":"Merge \"ovn: fix liveness probe to check as ovs user, not root\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c73f68ac866aeedbec2784c16e6a45b215664112"}]}],"author":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-07 06:42:02.000000000","tz":540},"committer":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-07 07:57:10.000000000","tz":540},"subject":"[designate] Render the bootstrap job with the helm-toolkit macro","message":"[designate] Render the bootstrap job with the helm-toolkit macro\n\ndesignate/templates/job-bootstrap.yaml is the only pod template in the\nchart that is hand-written, and it is the only one without a\nServiceAccount. The six deployments use\nhelm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount and the other\nsix jobs use the helm-toolkit manifests.job_* macros. Bootstrap uses\nneither.\n\nThree problems follow from that, none of which upstream CI exercises\nbecause bootstrap.enabled defaults to false.\n\n1. The chart does not template at all when the job is enabled, because\n   values.yaml has no pod.mounts.designate_bootstrap:\n\n     $ helm template designate ./designate --set bootstrap.enabled\u003dtrue\n     Error: template: designate/templates/job-bootstrap.yaml:16:42:\n       executing \"designate/templates/job-bootstrap.yaml\" at\n       \u003c.Values.pod.mounts.designate_bootstrap.designate_bootstrap\u003e:\n       nil pointer evaluating interface {}.designate_bootstrap\n\n2. Worked around, the Job then runs under the namespace default\n   ServiceAccount. Its kubernetes-entrypoint init container has to read\n   Services and Endpoints, so it fails with\n\n     endpoints \"...\" is forbidden: User\n     \"system:serviceaccount:openstack:default\" cannot get resource\n     \"endpoints\" in API group \"\" in the namespace \"openstack\"\n\n   and the Job hangs in Init state.\n\n3. dependencies.static.bootstrap is missing as well, so even once a\n   ServiceAccount exists the dependency-aware RBAC snippet renders no\n   Role, and the init container waits for nothing.\n\nSwitch the template to helm-toolkit.manifests.job_bootstrap, as the\ntwenty other OpenStack service charts already do, and add the values it\nneeds. The macro renders the ServiceAccount, Role and RoleBinding, sets\nspec.serviceAccountName, and honours pod.image_pull_secrets, which the\nhand-written Job did not, so there was previously no way to attach a\npull secret to this Job through values.\n\nbootstrap.ks_user defaults to admin, so the Job keeps using\nsecrets.identity.admin as before.\n\nVerified with helm template. The default render, with bootstrap\ndisabled, is unchanged except for the randomly generated memcache key,\nwhich differs between any two renders of the unpatched chart as well.\nWith bootstrap.enabled\u003dtrue the chart now renders the ServiceAccount, a\nRole granting get/list on services, endpoints and endpointslices, the\nRoleBinding, and the Job with spec.serviceAccountName set and\nDEPENDENCY_SERVICE listing keystone-api and designate-api.\n\nThe Job\u0027s pod spec does change shape: it gains the pod-tmp, etc-service\nand bootstrap-conf mounts, the latter carrying designate.conf and\nlogging.conf from the designate-etc Secret, and it runs the script\nthrough /bin/bash -c. That matches every other bootstrap job in the\ntree.\n\nStory: 2011877\nTask: 55594\nChange-Id: Id7b1f2ee10fd4eb431b8494edbb7f6c17198de44\nSigned-off-by: JeongJiho \u003cjiho.jeong@samsung.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f4397bfccb7b063d0ad146d62b191acb68f426b3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f4397bfccb7b063d0ad146d62b191acb68f426b3"}]},"branch":"refs/heads/master"},"831c23d271a6656a289d796bd9a19d5bc4ce3ec3":{"kind":"REWORK","_number":3,"created":"2026-09-14 01:58:10.000000000","uploader":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"ref":"refs/changes/87/1004387/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/87/1004387/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/3"}}},"commit":{"parents":[{"commit":"c73f68ac866aeedbec2784c16e6a45b215664112","subject":"Merge \"ovn: fix liveness probe to check as ovs user, not root\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c73f68ac866aeedbec2784c16e6a45b215664112"}]}],"author":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-07 06:42:02.000000000","tz":540},"committer":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-14 01:57:25.000000000","tz":540},"subject":"[designate] Render the bootstrap job with the helm-toolkit macro","message":"[designate] Render the bootstrap job with the helm-toolkit macro\n\ndesignate/templates/job-bootstrap.yaml is the only pod template in the\nchart that is hand-written, and it is the only one without a\nServiceAccount. The six deployments use\nhelm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount and the other\nsix jobs use the helm-toolkit manifests.job_* macros. Bootstrap uses\nneither.\n\nThree problems follow from that, none of which upstream CI exercises\nbecause bootstrap.enabled defaults to false.\n\n1. The chart does not template at all when the job is enabled, because\n   values.yaml has no pod.mounts.designate_bootstrap:\n\n     $ helm template designate ./designate --set bootstrap.enabled\u003dtrue\n     Error: template: designate/templates/job-bootstrap.yaml:16:42:\n       executing \"designate/templates/job-bootstrap.yaml\" at\n       \u003c.Values.pod.mounts.designate_bootstrap.designate_bootstrap\u003e:\n       nil pointer evaluating interface {}.designate_bootstrap\n\n2. Worked around, the Job then runs under the namespace default\n   ServiceAccount. Its kubernetes-entrypoint init container has to read\n   Services and Endpoints, so it fails with\n\n     endpoints \"...\" is forbidden: User\n     \"system:serviceaccount:openstack:default\" cannot get resource\n     \"endpoints\" in API group \"\" in the namespace \"openstack\"\n\n   and the Job hangs in Init state.\n\n3. dependencies.static.bootstrap is missing as well, so even once a\n   ServiceAccount exists the dependency-aware RBAC snippet renders no\n   Role, and the init container waits for nothing.\n\nSwitch the template to helm-toolkit.manifests.job_bootstrap, as the\ntwenty other OpenStack service charts already do, and add the values it\nneeds. The macro renders the ServiceAccount, Role and RoleBinding, sets\nspec.serviceAccountName, and honours pod.image_pull_secrets, which the\nhand-written Job did not, so there was previously no way to attach a\npull secret to this Job through values.\n\nbootstrap.ks_user defaults to admin, so the Job keeps using\nsecrets.identity.admin as before.\n\nVerified with helm template. The default render, with bootstrap\ndisabled, is unchanged except for the randomly generated memcache key,\nwhich differs between any two renders of the unpatched chart as well.\nWith bootstrap.enabled\u003dtrue the chart now renders the ServiceAccount, a\nRole granting get/list on services, endpoints and endpointslices, the\nRoleBinding, and the Job with spec.serviceAccountName set and\nDEPENDENCY_SERVICE listing keystone-api and designate-api.\n\nThe Job\u0027s pod spec does change shape: it gains the pod-tmp, etc-service\nand bootstrap-conf mounts, the latter carrying designate.conf and\nlogging.conf from the designate-etc Secret, and it runs the script\nthrough /bin/bash -c. That matches every other bootstrap job in the\ntree.\n\nStory: 2011877\nTask: 55594\nChange-Id: Id7b1f2ee10fd4eb431b8494edbb7f6c17198de44\nSigned-off-by: JeongJiho \u003cjiho.jeong@samsung.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/831c23d271a6656a289d796bd9a19d5bc4ce3ec3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/831c23d271a6656a289d796bd9a19d5bc4ce3ec3"}]},"branch":"refs/heads/master"},"59165c3ed3b603a47e1b1b588b0de41237267db4":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2026-09-14 23:26:54.000000000","uploader":{"_account_id":36710,"name":"Jeong Jiho","display_name":"jiho","email":"jiho.jeong@samsung.com","username":"jihoJeong"},"real_uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/87/1004387/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/87/1004387/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/87/1004387/4"}}},"commit":{"parents":[{"commit":"66da70d45d8d96cb8afe79d34d6a70025b09add2","subject":"Merge \"Fix Octavia driver agent socket sharing\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/66da70d45d8d96cb8afe79d34d6a70025b09add2"}]}],"author":{"name":"JeongJiho","email":"jiho.jeong@samsung.com","date":"2026-09-07 06:42:02.000000000","tz":540},"committer":{"name":"Jeong Jiho","email":"jiho.jeong@samsung.com","date":"2026-09-14 23:26:54.000000000","tz":0},"subject":"[designate] Render the bootstrap job with the helm-toolkit macro","message":"[designate] Render the bootstrap job with the helm-toolkit macro\n\ndesignate/templates/job-bootstrap.yaml is the only pod template in the\nchart that is hand-written, and it is the only one without a\nServiceAccount. The six deployments use\nhelm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount and the other\nsix jobs use the helm-toolkit manifests.job_* macros. Bootstrap uses\nneither.\n\nThree problems follow from that, none of which upstream CI exercises\nbecause bootstrap.enabled defaults to false.\n\n1. The chart does not template at all when the job is enabled, because\n   values.yaml has no pod.mounts.designate_bootstrap:\n\n     $ helm template designate ./designate --set bootstrap.enabled\u003dtrue\n     Error: template: designate/templates/job-bootstrap.yaml:16:42:\n       executing \"designate/templates/job-bootstrap.yaml\" at\n       \u003c.Values.pod.mounts.designate_bootstrap.designate_bootstrap\u003e:\n       nil pointer evaluating interface {}.designate_bootstrap\n\n2. Worked around, the Job then runs under the namespace default\n   ServiceAccount. Its kubernetes-entrypoint init container has to read\n   Services and Endpoints, so it fails with\n\n     endpoints \"...\" is forbidden: User\n     \"system:serviceaccount:openstack:default\" cannot get resource\n     \"endpoints\" in API group \"\" in the namespace \"openstack\"\n\n   and the Job hangs in Init state.\n\n3. dependencies.static.bootstrap is missing as well, so even once a\n   ServiceAccount exists the dependency-aware RBAC snippet renders no\n   Role, and the init container waits for nothing.\n\nSwitch the template to helm-toolkit.manifests.job_bootstrap, as the\ntwenty other OpenStack service charts already do, and add the values it\nneeds. The macro renders the ServiceAccount, Role and RoleBinding, sets\nspec.serviceAccountName, and honours pod.image_pull_secrets, which the\nhand-written Job did not, so there was previously no way to attach a\npull secret to this Job through values.\n\nbootstrap.ks_user defaults to admin, so the Job keeps using\nsecrets.identity.admin as before.\n\nVerified with helm template. The default render, with bootstrap\ndisabled, is unchanged except for the randomly generated memcache key,\nwhich differs between any two renders of the unpatched chart as well.\nWith bootstrap.enabled\u003dtrue the chart now renders the ServiceAccount, a\nRole granting get/list on services, endpoints and endpointslices, the\nRoleBinding, and the Job with spec.serviceAccountName set and\nDEPENDENCY_SERVICE listing keystone-api and designate-api.\n\nThe Job\u0027s pod spec does change shape: it gains the pod-tmp, etc-service\nand bootstrap-conf mounts, the latter carrying designate.conf and\nlogging.conf from the designate-etc Secret, and it runs the script\nthrough /bin/bash -c. That matches every other bootstrap job in the\ntree.\n\nStory: 2011877\nTask: 55594\nChange-Id: Id7b1f2ee10fd4eb431b8494edbb7f6c17198de44\nSigned-off-by: JeongJiho \u003cjiho.jeong@samsung.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/59165c3ed3b603a47e1b1b588b0de41237267db4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/59165c3ed3b603a47e1b1b588b0de41237267db4"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"c73f68ac866aeedbec2784c16e6a45b215664112","ours":"831c23d271a6656a289d796bd9a19d5bc4ce3ec3","theirs":"66da70d45d8d96cb8afe79d34d6a70025b09add2","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}