)]}'
{"id":"openstack%2Fopenstack-helm~1008455","triplet_id":"openstack%2Fopenstack-helm~master~I8aafa8999fc6d433fb0922ff8074be9378503277","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"7102":{"account":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"last_update":"2026-10-09 16:38:21.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I8aafa8999fc6d433fb0922ff8074be9378503277","subject":"ci(barbican): give the gate a KEK and run barbican\u0027s helm test","status":"MERGED","created":"2026-10-02 12:51:51.000000000","updated":"2026-10-09 16:38:21.000000000","submitted":"2026-10-09 16:38:21.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1008455","meta_rev_id":"d7fad83b61444c7145ffcd572887cea6929e6092","_number":1008455,"virtual_id_number":1008455,"owner":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-10-09 16:38:21.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":2,"date":"2026-10-08 20:59:37.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":2,"date":"2026-10-09 13:46:49.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":1,"date":"2026-10-09 13:46:49.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-10-02 16:40:04.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-10-08 20:59:37.000000000","updated_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"reviewer":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"state":"REVIEWER"},{"updated":"2026-10-09 13:46:49.000000000","updated_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"reviewer":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"state":"REVIEWER"}],"messages":[{"id":"af7276444683d383eeee76e65db285aa9ded6eef","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-02 12:51:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"015505c32f9b0b0af975c5c0d0c8a8e822d56f10","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-02 16:40:04.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/3a7095466c7440188c82c3d3f0bd48f8\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c3edf4e3a6bb48fa9bf90781922791f4 : SUCCESS in 4m 00s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/4a656c490b7543d6acbad9b7734659d4 : SUCCESS in 3m 52s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/58b729d5e5754dda9c0a188c9036ee14 : SUCCESS in 4m 09s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/ae2d67972b2a4cb4b150089dbea891b3 : SUCCESS in 2m 46s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/9086049762d344e584fe8d06ce337716 : SUCCESS in 2m 37s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/57485c41a51448cb99922478b55cc08c : SUCCESS in 1h 48m 30s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b5f96b9b0887411ea4d63d1e5f918087 : SUCCESS in 1h 46m 09s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b64ffde120d84e0ab9f2acd4c796d5e9 : SUCCESS in 1h 57m 58s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f5b94f866be141258e309117b5834055 : SUCCESS in 1h 51m 07s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f6c951d198ec43718e570977a9594285 : SUCCESS in 1h 00m 12s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9fdd75a53e764b5bafa4a7043422c61b : SUCCESS in 1h 52m 25s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/45f86914599341e085e255905c31ba9a : SUCCESS in 1h 41m 46s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e3739a277c8a4ec19dfaab8756752059 : SUCCESS in 1h 23m 32s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/3586e95cd5954e058e2d1acc7f35180e : SUCCESS in 29m 05s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/4f43aff8af03487f959b2b0cf6cb7a93 : SUCCESS in 29m 12s","accounts_in_message":[],"_revision_number":1},{"id":"659a3ebaa83e925eebbef59bedff67f17029aef7","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-06 09:40:42.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"02a6d6b5687caf9a0c037ccaeeb210e7e22eba9f","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-10-08 20:59:37.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"057bb15b19b1bbbd752ac0f8c0eb7d4aed90bfe5","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-09 03:47:08.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"73395aa223093ca5e4d2105946d630e835bf577b","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-10-09 13:46:49.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"b1292356d199d84375dfed489f4ed3b66202b994","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-09 13:50:20.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"cfb2c92bdbf0ad3cb84b69299ca526d40e4e0404","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-09 16:38:21.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2973b7cf60ff49b38af18de2479ba3c1\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0efb17c05c0d4764b39d1881bcaf0947 : SUCCESS in 2m 55s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1753ea6859934dffa7caaae4417c5c97 : SUCCESS in 3m 16s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/4e36cf44efb64aa3b7c5fc50334dd664 : SUCCESS in 3m 17s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/06f4305a12534861b053e12cbb14f741 : SUCCESS in 1h 50m 31s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/f65708a074f943e38bfe260cf1180f15 : SUCCESS in 38m 24s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/f95dddbe677444aab4d2b5f70025b6fa : SUCCESS in 25m 56s","accounts_in_message":[],"_revision_number":1},{"id":"d7fad83b61444c7145ffcd572887cea6929e6092","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-09 16:38:21.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"b10d4e16100ea1217f23c1aece4c86ee29ce65ef","revisions":{"b10d4e16100ea1217f23c1aece4c86ee29ce65ef":{"kind":"REWORK","_number":1,"created":"2026-10-02 12:51:51.000000000","uploader":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"ref":"refs/changes/55/1008455/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/55/1008455/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/55/1008455/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/55/1008455/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/55/1008455/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/55/1008455/1"}}},"commit":{"parents":[{"commit":"b90fc589d0e6fdfa0614a056f674713182936658","subject":"Merge \"fix(neutron): gate the ovn-db-sync cron job on the db sync\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b90fc589d0e6fdfa0614a056f674713182936658"}]}],"author":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-02 12:40:41.000000000","tz":120},"committer":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-02 12:40:41.000000000","tz":120},"subject":"ci(barbican): give the gate a KEK and run barbican\u0027s helm test","message":"ci(barbican): give the gate a KEK and run barbican\u0027s helm test\n\nBarbican\u0027s simple_crypto plugin has had no built-in key encryption key\nsince 2025.2, and the chart sets none, so a default deployment cannot\nstore a secret: every POST /v1/secrets returns 500. The gate never\nnoticed because the barbican deploy task only installs the chart and\nwaits for its pods; nothing stores a secret and barbican\u0027s helm test is\nnever run.\n\nGenerate a random KEK on the node, pass it to the chart as an override\nand run the chart\u0027s helm test, which stores, reads back and deletes a\nsecret through keystone. The octavia and tacker jobs both deploy\nbarbican through this task. Add the task to the octavia job\u0027s files\nfilter, since that job is the only check-pipeline coverage barbican\nhas.\n\nAssisted-by: Claude Opus 5.5\nChange-Id: I8aafa8999fc6d433fb0922ff8074be9378503277\nSigned-off-by: Thomas Bechtold \u003cthomasbechtold@jpberlin.de\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b10d4e16100ea1217f23c1aece4c86ee29ce65ef"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b10d4e16100ea1217f23c1aece4c86ee29ce65ef"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}