)]}'
{"id":"openstack%2Fopenstack-helm~1009684","triplet_id":"openstack%2Fopenstack-helm~master~I9a917740bfee634006da3a259de0e0b606c17f67","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"5890":{"account":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"last_update":"2026-10-13 14:40:19.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I9a917740bfee634006da3a259de0e0b606c17f67","subject":"fix(octavia): give the get-port init containers a security context","status":"MERGED","created":"2026-10-09 04:26:37.000000000","updated":"2026-10-13 14:41:29.000000000","submitted":"2026-10-13 14:40:19.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1009684","meta_rev_id":"5172f019a37e8172137aa51d2829777f5a04e8b6","_number":1009684,"virtual_id_number":1009684,"owner":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-10-13 14:40:18.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":2,"date":"2026-10-12 10:42:29.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":2,"date":"2026-10-13 13:03:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":1,"date":"2026-10-13 13:03:06.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-10-09 08:12:16.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-10-09 20:30:43.000000000","updated_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"reviewer":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"state":"CC"},{"updated":"2026-10-12 10:42:29.000000000","updated_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"reviewer":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"state":"REVIEWER"},{"updated":"2026-10-13 13:03:06.000000000","updated_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"reviewer":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"state":"REVIEWER"}],"messages":[{"id":"79cdd131a30c1d8af6ba80b555b1e08afaba9090","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-10-09 04:26:37.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"aea403e12701bcdbc411ebcdd9ae4ed65c040da3","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-09 08:12:16.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/7e8772a259b1474db9ae838383846916\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d55f9a77739e40ebaaf804266b64a532 : SUCCESS in 5m 37s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/7d7e59b20141479aacd16d14d62bebda : SUCCESS in 3m 24s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/3db625fe263941f3bd30bff4d5bd6424 : SUCCESS in 1m 55s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/814f87aa5cd542dd8c90e47a6cc973f2 : SUCCESS in 2m 34s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/720ae1d128b0478780229966fd232951 : SUCCESS in 1m 47s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c7c5a9b57fe744878deb8e8043a85f6e : FAILURE in 5m 46s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1ea2ef51e34f461592d112f18a2c4b9e : SUCCESS in 1h 08m 58s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/529940394c86461d8844902d6f3170a0 : SUCCESS in 1h 10m 43s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fea2cae5d9534131a16dcdb0a101da11 : SUCCESS in 1h 47m 16s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b6f5d53a6be24087bd826ce474256cf8 : SUCCESS in 1h 04m 31s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a586441e3dbb4f76b191186a5c193635 : SUCCESS in 49m 02s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/8f9ee48fcb08478bad39c37c3ffba323 : SUCCESS in 1h 20m 02s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/14847457b3b7432a9a37c57daf23db1f : SUCCESS in 33m 00s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/fb1732211cac488fa87eea12e4da022d : SUCCESS in 21m 18s\n\nWarning:\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/prepare-hosts.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/mount-volumes.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/use-buildset-registry.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/inject-keys.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/deploy-env.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.","accounts_in_message":[],"_revision_number":1},{"id":"bc0397e2580f09fd6e9368f4780b6b6422c13510","author":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"date":"2026-10-09 20:30:43.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"4363f872c259312eb898b015026609ec829f7d55","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-09 22:56:50.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c4195d5fc7184efebb81d3754b6bab0b\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/75279d9c920649028bb85be1ddabc93d : SUCCESS in 3m 14s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8a12586a44bf4567a0574c99849693d7 : SUCCESS in 3m 22s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/338993399bc64e1a9e90ff00cf420319 : SUCCESS in 2m 17s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/7ea3e02812d346a095810ed741737e2c : SUCCESS in 2m 24s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/87c28a6851fa428a9722f38eaef51193 : SUCCESS in 2m 39s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9db56d0586f54caa9fe6e6dd59b64acb : SUCCESS in 1h 26m 54s","accounts_in_message":[],"_revision_number":1},{"id":"1d1e987832d55b196d77ddd94863ffb4efac457b","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-10-12 10:42:29.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"a5f3489a1acae9ab363bea46b4b225ad62957b79","author":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"date":"2026-10-13 13:03:06.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"117560c191d05155f3e1cd53aefe8b8f38eab77a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 13:03:17.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"a566534dcb0f9a8b53f6249d684bdfb2d43c4fde","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 14:40:18.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ea3ba5c63ebf4d89a2b25bfccfae331b\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/66db852dfde84a03ae765c2c858bca8c : SUCCESS in 3m 15s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/a7dcde3642d64351b51bd918ff256e04 : SUCCESS in 3m 11s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/1e11385d164141878167e281302e005a : SUCCESS in 2m 00s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a91c57426e2f462dba6731142d458b78 : SUCCESS in 1h 28m 04s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/190f8008e2884376858da1fc80e2bee9 : SUCCESS in 41m 05s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/a9900258489e418e8ea1f98579c41cb6 : SUCCESS in 27m 50s","accounts_in_message":[],"_revision_number":1},{"id":"846fec02864158f0ff48d7e5bba038b4db2abccd","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 14:40:19.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"5172f019a37e8172137aa51d2829777f5a04e8b6","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 14:41:29.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/25ac0cf5b8d24a25a99e9d1ddbf0b48f\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/23c11aa916414e7c8049464198676f13 : SUCCESS in 52s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"f81a7e0c0d8ab50307915bfb7c0352e07002b09c","revisions":{"f81a7e0c0d8ab50307915bfb7c0352e07002b09c":{"kind":"REWORK","_number":1,"created":"2026-10-09 04:26:37.000000000","uploader":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"ref":"refs/changes/84/1009684/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/84/1009684/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/84/1009684/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/84/1009684/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/84/1009684/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/84/1009684/1"}}},"commit":{"parents":[{"commit":"b685576c74d5e6c73e3b6949bafb10514739c768","subject":"fix(octavia): define the missing worker daemonset upgrade policy","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b685576c74d5e6c73e3b6949bafb10514739c768"}]}],"author":{"name":"Doug Goldstein","email":"cardoe@cardoe.com","date":"2026-10-01 00:51:57.000000000","tz":-300},"committer":{"name":"Doug Goldstein","email":"cardoe@cardoe.com","date":"2026-10-09 04:26:22.000000000","tz":-300},"subject":"fix(octavia): give the get-port init containers a security context","message":"fix(octavia): give the get-port init containers a security context\n\nThe worker and health-manager get-port init containers were the only\ncontainers in their pods that rendered no container security context.\nAdd the snippet and define readOnlyRootFilesystem and\nallowPrivilegeEscalation: false for them, since the script only runs\nopenstack port show and writes to the pod-shared volume, the same\nsettings other charts use for openstack-client keystone jobs.\n\nAssisted-by: Claude Opus 5.5\nChange-Id: I9a917740bfee634006da3a259de0e0b606c17f67\nSigned-off-by: Doug Goldstein \u003ccardoe@cardoe.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f81a7e0c0d8ab50307915bfb7c0352e07002b09c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f81a7e0c0d8ab50307915bfb7c0352e07002b09c"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}