)]}'
{"id":"openstack%2Fopenstack-helm~1009671","triplet_id":"openstack%2Fopenstack-helm~master~I02f9d8e0ffb478fa9c43f8e63c755b11c17bbaae","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"5890":{"account":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"last_update":"2026-10-14 19:50:18.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I02f9d8e0ffb478fa9c43f8e63c755b11c17bbaae","subject":"fix(placement): run the log directory init container as root","status":"MERGED","created":"2026-10-09 04:24:05.000000000","updated":"2026-10-14 19:52:19.000000000","submitted":"2026-10-14 19:50:18.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1009671","meta_rev_id":"d42a1fb9279b99574dc656ff9350848c8ab4a780","_number":1009671,"virtual_id_number":1009671,"owner":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-10-14 19:50:18.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":2,"date":"2026-10-14 16:45:59.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":2,"date":"2026-10-14 16:03:43.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":1,"date":"2026-10-14 16:45:59.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-10-09 06:57:21.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-10-09 19:52:38.000000000","updated_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"reviewer":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"state":"REVIEWER"},{"updated":"2026-10-14 16:45:59.000000000","updated_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"reviewer":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"state":"REVIEWER"}],"messages":[{"id":"245d422560ad5806c1570122c8e7f6078b8178e5","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-10-09 04:24:05.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"4549bcdc13570f4bb41c90cc430dc37ca6b78835","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-09 06:57:21.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/1466580f29d44562ab0d21595167b3f5\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5eb4b7d1c6a340b69641627b93604db4 : SUCCESS in 2m 53s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d6fda76c701b4550abfc0594162cee6f : SUCCESS in 3m 03s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/07c88c618c09440e82f258ac40f729aa : SUCCESS in 3m 13s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/85d2cabd1c944ddd9cbd73309f13afa1 : SUCCESS in 2m 57s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/bd007d9fed3744a88686d615239bfcca : SUCCESS in 2m 18s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8502c7044bff4a1a878304bee9e59eeb : SUCCESS in 1h 32m 41s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1822b3e6a0eb4db2b10eb1178f4e62b7 : SUCCESS in 1h 39m 26s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/daede0c2fd1c4dd698d516004cd25b0b : SUCCESS in 1h 50m 21s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/36e1a19810e149efa0f7f724851bca10 : SUCCESS in 1h 39m 04s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/10360a4610364a3a82beb8881ab3a695 : SUCCESS in 1h 36m 50s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/0680638eb23646209102be102b867947 : SUCCESS in 1h 15m 22s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/3d1dddaa6c654307946215e514e3c78a : SUCCESS in 30m 46s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/08d7252b4604445680e833e72fbf9929 : SUCCESS in 25m 47s","accounts_in_message":[],"_revision_number":1},{"id":"093dfa2498a08b6d91d8c308311183e88c7f7282","author":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"date":"2026-10-09 19:52:38.000000000","message":"Patch Set 1: Code-Review-1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"8349cc0dd9d3e0feca239ccbf81f7dc4f0387dcb","author":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"date":"2026-10-09 19:58:56.000000000","message":"Patch Set 1: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"1ad0c9f999a60c1da76693afa80e570ea2fabb48","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-10-14 16:03:43.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.\n\nCopied Votes:\n* Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"94c63d994b8f49e6baedd5a62e995fae0f2b42f7","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-10-14 16:45:59.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"f0888c561c1a1d894b6e678eb98d76db43c0a1dc","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 17:54:10.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/769c96e042d24a5da17dfbf70e003eae\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0f81c0412cb9413cbcda99ca55c43f44 : SUCCESS in 3m 01s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/a4bddb6257f8476e8a52902906c58042 : SUCCESS in 3m 41s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/aaf3842a511645fabe947a59ca04c277 : SUCCESS in 2m 30s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/8e0d609da6e446fba4974f891f5d8929 : SUCCESS in 1m 40s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/da82d87066284551a8bb8606ba24b597 : SUCCESS in 2m 06s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d86e4eb25e9142d8ad2ba7206d40a1b9 : SUCCESS in 1h 44m 56s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/97dc15ba776541a5a7f078d68731298b : SUCCESS in 1h 37m 39s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b3fc2846a20e44baa511dae9790d6e1c : SUCCESS in 1h 29m 59s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/79e55e988cf340809ddf4950c53f0696 : SUCCESS in 55m 42s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fb5dd02a39c84449924cef63056b8c10 : SUCCESS in 1h 07m 37s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/7d98265c414c485d96cf80db2d198db6 : SUCCESS in 1h 15m 47s","accounts_in_message":[],"_revision_number":2},{"id":"0db67b1a55862a98da9b7521181af38de10aa267","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 17:54:20.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"2834e0cc0c3818e1acfc15c08eef51a5a46ec48f","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 19:50:18.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2eec338c3bed42b682052c0d90b5725e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2b591bace07b46e4831e381f00aa7fed : SUCCESS in 3m 38s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/bf677046770e435da0a43d60874bb02c : SUCCESS in 1m 54s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/7e6d2d222a0849a3972b53df28c59569 : SUCCESS in 1m 33s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d6ded17585c24747b183e1cf6790fe34 : SUCCESS in 1h 49m 28s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/892b94779869425abbc7c0cc03d4b6c6 : SUCCESS in 35m 50s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/10058a826e9041a18137199c381e2dc6 : SUCCESS in 28m 52s","accounts_in_message":[],"_revision_number":2},{"id":"8a84411eb187dd0d46ec5863bb0f6e67706ca13b","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 19:50:18.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"d42a1fb9279b99574dc656ff9350848c8ab4a780","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 19:52:19.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/09cc9e7260574226895aec633f26d602\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8606438cdecc42388cba915e09838e8f : SUCCESS in 46s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"d360f858f736d4a1bd60acd995185aae5561aec4","revisions":{"f080b7eede4a6d4d3fe3b79c0373876c8f6bca44":{"kind":"REWORK","_number":1,"created":"2026-10-09 04:24:05.000000000","uploader":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"ref":"refs/changes/71/1009671/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/71/1009671/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/1"}}},"commit":{"parents":[{"commit":"40267837a892866662100b2dd0364a0fe26aa060","subject":"fix(placement): annotate the log directory init container","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/40267837a892866662100b2dd0364a0fe26aa060"}]}],"author":{"name":"Doug Goldstein","email":"cardoe@cardoe.com","date":"2026-10-01 00:50:45.000000000","tz":-300},"committer":{"name":"Doug Goldstein","email":"cardoe@cardoe.com","date":"2026-10-09 04:22:31.000000000","tz":-300},"subject":"fix(placement): run the log directory init container as root","message":"fix(placement): run the log directory init container as root\n\nThe placement-api-init-log init container chowns the log_dir hostPath\nto the placement user, but it reused the placement_api security context\nand so ran as uid 42424. A non-root user cannot chown the root-owned\ndirectory that DirectoryOrCreate makes, so enabling log_dir left the pod\nstuck in its init container. Nothing caught it because log_dir is unset\nby default.\n\nGive it its own placement_api_init_log key with runAsUser: 0 and a\nread-only root filesystem, mirroring glance_perms, the equivalent\nchown init container in the glance chart, and add the key to the\napparmor override.\n\nAssisted-by: Claude Opus 5.5\nChange-Id: I02f9d8e0ffb478fa9c43f8e63c755b11c17bbaae\nSigned-off-by: Doug Goldstein \u003ccardoe@cardoe.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f080b7eede4a6d4d3fe3b79c0373876c8f6bca44"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f080b7eede4a6d4d3fe3b79c0373876c8f6bca44"}]},"branch":"refs/heads/master"},"d360f858f736d4a1bd60acd995185aae5561aec4":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-10-14 16:03:43.000000000","uploader":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"ref":"refs/changes/71/1009671/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/71/1009671/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/71/1009671/2"}}},"commit":{"parents":[{"commit":"03d4cf24b08f8bf06c960d6befe0dbe87146b050","subject":"Merge \"fix(magnum): render the missing conductor pod annotations\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/03d4cf24b08f8bf06c960d6befe0dbe87146b050"}]}],"author":{"name":"Doug Goldstein","email":"cardoe@cardoe.com","date":"2026-10-01 00:50:45.000000000","tz":-300},"committer":{"name":"Doug Goldstein","email":"cardoe@cardoe.com","date":"2026-10-14 16:03:21.000000000","tz":-300},"subject":"fix(placement): run the log directory init container as root","message":"fix(placement): run the log directory init container as root\n\nThe placement-api-init-log init container chowns the log_dir hostPath\nto the placement user, but it reused the placement_api security context\nand so ran as uid 42424. A non-root user cannot chown the root-owned\ndirectory that DirectoryOrCreate makes, so enabling log_dir left the pod\nstuck in its init container. Nothing caught it because log_dir is unset\nby default.\n\nGive it its own placement_api_init_log key with runAsUser: 0 and a\nread-only root filesystem, mirroring glance_perms, the equivalent\nchown init container in the glance chart, and add the key to the\napparmor override.\n\nAssisted-by: Claude Opus 5.5\nChange-Id: I02f9d8e0ffb478fa9c43f8e63c755b11c17bbaae\nSigned-off-by: Doug Goldstein \u003ccardoe@cardoe.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/d360f858f736d4a1bd60acd995185aae5561aec4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/d360f858f736d4a1bd60acd995185aae5561aec4"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}