)]}'
{"id":"openstack%2Fopenstack-helm~1010122","triplet_id":"openstack%2Fopenstack-helm~master~I5ab539601b369c9b53b01802236ea1e9c4397a49","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"7102":{"account":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"last_update":"2026-10-14 04:59:02.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I5ab539601b369c9b53b01802236ea1e9c4397a49","subject":"Add a designate deployment job","status":"MERGED","created":"2026-10-13 07:23:39.000000000","updated":"2026-10-14 05:00:35.000000000","submitted":"2026-10-14 04:59:02.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1010122","meta_rev_id":"92cfb3d19c7bb4ef8bf9016c2e6c4c7107150749","_number":1010122,"virtual_id_number":1010122,"owner":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":0,"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-10-14 04:59:02.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"all":[{"value":2,"date":"2026-10-13 15:14:55.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":2,"date":"2026-10-13 18:15:15.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"all":[{"value":0,"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":1,"date":"2026-10-13 18:15:15.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-10-13 08:22:55.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-10-13 15:14:55.000000000","updated_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"reviewer":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"state":"REVIEWER"},{"updated":"2026-10-13 18:15:15.000000000","updated_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"reviewer":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"state":"REVIEWER"}],"messages":[{"id":"de16911e631ba08f276d5cc341e1ae6b55e29649","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-13 07:23:39.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"00b4a6375ba36ade5db9943e45e0ce006b3b8e20","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-13 07:24:25.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"8aaf01eb7dc8a1da561884e26f78a2389a51326a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 08:22:55.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/5ab26d4da1ac4cfd887b283d4b121645\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fa73599024114a1d806aa24a76166761 : SUCCESS in 3m 40s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/70512f11fc2a4f1382232b1b6476ac40 : SUCCESS in 3m 08s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/143b8cb68b0941d897791b3b44265525 : SUCCESS in 2m 13s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/5472f32bb6ef47e5b12d4bf51fb65d7c : SUCCESS in 1m 32s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/b685a46e26cc4de69afbdbc4f8496ecc : SUCCESS in 2m 06s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/887e4174e3a44f609452e91fd391d5c3 : SUCCESS in 57m 01s\n- openstack-helm-designate-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/eb4d4250de414c9386fbebd8e948fae8 : FAILURE in 21m 39s","accounts_in_message":[],"_revision_number":2},{"id":"c6c73c36111bd08b679bc5573faeb3e544129186","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-13 08:32:53.000000000","message":"Uploaded patch set 3: Commit message was updated.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"8703e21b9223243a6ca1f3bd525ba3aef328bb26","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 09:31:38.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/358fa0248a7f4066937d9b545cac6f12\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/bf44a8107d724e33bbd94fe1cc0e6dc3 : SUCCESS in 3m 25s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/08f4effe237a4aa4a3b64f291760a7f8 : SUCCESS in 3m 29s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/7fb1391c63394d6290d5d534ef4f0055 : SUCCESS in 2m 47s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/005d604d77e14fb99251252018c32d04 : SUCCESS in 2m 58s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/12b41836f360441fb0a01b439a4d71e9 : SUCCESS in 2m 28s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f29c802619424011b8a622c64e72a0f5 : SUCCESS in 56m 53s\n- openstack-helm-designate-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c39b435a44c642a9bb4097cbc6c5370d : FAILURE in 27m 45s","accounts_in_message":[],"_revision_number":3},{"id":"d7d82f963faf9d72989d26712cdb2dde5e667c07","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-13 09:34:09.000000000","message":"Uploaded patch set 4.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":4},{"id":"f123f1154bcae79e0eafe7281a6bb5a529c722e6","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-13 10:33:13.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/1991426238ca4efe9f924dc781c8fbf0\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/649b47bd80a44f6cad2267f6bdf590b2 : SUCCESS in 4m 54s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/3b17960748de4a0898442f2863d6e322 : SUCCESS in 3m 43s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/7eb624b0667547a9b62a5bd743e145d1 : SUCCESS in 3m 10s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/06edf1c3aa914665a7f3d31d59107228 : SUCCESS in 2m 40s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/5d8d3c9532f54d0f94dfdcbb04f91b22 : SUCCESS in 3m 13s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/ca10d9e669614f989dafbdd456561f21 : SUCCESS in 57m 42s\n- openstack-helm-designate-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/aed3fb011f4e4c37b572431a4ed9adbe : SUCCESS in 25m 04s","accounts_in_message":[],"_revision_number":4},{"id":"a51576c83090174f412f345993d5605f0459478e","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-10-13 15:14:55.000000000","message":"Patch Set 4: Code-Review+2","accounts_in_message":[],"_revision_number":4},{"id":"7472a7fd615b2d94474fb188a97c17cbccb3a077","author":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"date":"2026-10-13 18:15:15.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"382f9c0507b54fd9be577b7f682de71ae9d25df9","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 03:10:26.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"3f88ebd24cdf7e433e03cafed699bd9db5eecbb3","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 04:59:02.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d56e03ec53b6474083c7583acc01422e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8436ad85ee9d4fa0ade4d65147398d2c : SUCCESS in 5m 38s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/fa2e4353f0cd4ebeaf783282128b3ee9 : SUCCESS in 2m 03s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/22d1f450b29f4c4aa842d58f4f967f32 : SUCCESS in 2m 38s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1f3386f289214a77b9d44354a0861db2 : SUCCESS in 1h 41m 18s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/f0e78a44212d4774a5467113ff3daf7d : SUCCESS in 30m 55s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/1e17400509ea4c6cb903f72500b3093e : SUCCESS in 29m 54s","accounts_in_message":[],"_revision_number":4},{"id":"b6353bd3110c3bbdce886de5f5db80494ec2922f","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 04:59:02.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"92cfb3d19c7bb4ef8bf9016c2e6c4c7107150749","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-14 05:00:35.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0e222be844ef43a5885effc381a04a1a\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0bbee398f96a4dbb9834b3c0db931cb7 : SUCCESS in 45s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"c3ecd98d900374697d661248b6b53ca3d35c8aea","revisions":{"438a995666fdaa8949c37ac1dedd6b609e662d27":{"kind":"REWORK","_number":1,"created":"2026-10-13 07:23:39.000000000","uploader":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"ref":"refs/changes/22/1010122/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/22/1010122/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/1"}}},"commit":{"parents":[{"commit":"b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e","subject":"[powerdns] Switch to the official PowerDNS image","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e"}]}],"author":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 06:52:43.000000000","tz":120},"committer":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 07:18:00.000000000","tz":120},"subject":"Add a designate deployment job","message":"Add a designate deployment job\n\nNo job deploys the designate or powerdns charts, so the chart could not\nstart designate-central on 2026.1 without anyone noticing. Deploy both\non a single node with Keystone and drive designate through the API: a\nzone must go ACTIVE and PowerDNS must serve its SOA, an A record added\nto it must go ACTIVE and resolve on PowerDNS, and once the zone is\ndeleted PowerDNS must stop serving it. That covers the pdns4 backend,\nthe AXFR from designate-mdns, the worker\u0027s NOTIFY and its serial poll.\n\nThe worker, not designate-mdns, sends the NOTIFY for a changed zone, and\nPowerDNS only accepts a NOTIFY from the zone\u0027s primary. The job lists the\npod network in PowerDNS\u0027s trusted-notification-proxy, which takes IP\nranges since PowerDNS 4.4; without it record changes would only reach\nPowerDNS at the SOA refresh, about an hour later.\n\nDepends-On: https://review.opendev.org/c/openstack/openstack-helm/+/970123\nAssisted-by: Claude Opus 5.5\nChange-Id: I5ab539601b369c9b53b01802236ea1e9c4397a49\nSigned-off-by: Thomas Bechtold \u003cthomasbechtold@jpberlin.de\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/438a995666fdaa8949c37ac1dedd6b609e662d27"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/438a995666fdaa8949c37ac1dedd6b609e662d27"}]},"branch":"refs/heads/master"},"ed8d2b2625c8d5b9593884a0a326621be223337b":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2026-10-13 07:24:25.000000000","uploader":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"ref":"refs/changes/22/1010122/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/22/1010122/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/2"}}},"commit":{"parents":[{"commit":"b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e","subject":"[powerdns] Switch to the official PowerDNS image","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e"}]}],"author":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 06:52:43.000000000","tz":120},"committer":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 07:24:23.000000000","tz":120},"subject":"Add a designate deployment job","message":"Add a designate deployment job\n\nNo job deploys the designate or powerdns charts, so the chart could not\nstart designate-central on 2026.1 without anyone noticing. Deploy both\non a single node with Keystone and drive designate through the API: a\nzone must go ACTIVE and PowerDNS must serve its SOA, an A record added\nto it must go ACTIVE and resolve on PowerDNS, and once the zone is\ndeleted PowerDNS must stop serving it. That covers the pdns4 backend,\nthe AXFR from designate-mdns, the worker\u0027s NOTIFY and its serial poll.\n\nThe worker, not designate-mdns, sends the NOTIFY for a changed zone, and\nPowerDNS only accepts a NOTIFY from the zone\u0027s primary. The job lists the\npod network in PowerDNS\u0027s trusted-notification-proxy, which takes IP\nranges since PowerDNS 4.4; without it record changes would only reach\nPowerDNS at the SOA refresh, about an hour later.\n\nDepends-On: https://review.opendev.org/c/openstack/openstack-helm/+/1010123\nAssisted-by: Claude Opus 5.5\nChange-Id: I5ab539601b369c9b53b01802236ea1e9c4397a49\nSigned-off-by: Thomas Bechtold \u003cthomasbechtold@jpberlin.de\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ed8d2b2625c8d5b9593884a0a326621be223337b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ed8d2b2625c8d5b9593884a0a326621be223337b"}]},"branch":"refs/heads/master"},"e9d3196be5f7a4af65d2dd765ca2e00ba63c9fed":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2026-10-13 08:32:53.000000000","uploader":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"ref":"refs/changes/22/1010122/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/22/1010122/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/3"}}},"commit":{"parents":[{"commit":"b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e","subject":"[powerdns] Switch to the official PowerDNS image","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e"}]}],"author":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 06:52:43.000000000","tz":120},"committer":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 08:32:51.000000000","tz":120},"subject":"Add a designate deployment job","message":"Add a designate deployment job\n\nNo job deploys the designate or powerdns charts, so the chart could not\nstart designate-central on 2026.1 without anyone noticing. Deploy both\non a single node with Keystone and drive designate through the API: a\nzone must go ACTIVE and PowerDNS must serve its SOA, an A record added\nto it must go ACTIVE and resolve on PowerDNS, and once the zone is\ndeleted PowerDNS must stop serving it. That covers the pdns4 backend,\nthe AXFR from designate-mdns, the worker\u0027s NOTIFY and its serial poll.\n\nThe worker, not designate-mdns, sends the NOTIFY for a changed zone, and\nPowerDNS only accepts a NOTIFY from the zone\u0027s primary. The job lists the\npod network in PowerDNS\u0027s trusted-notification-proxy, which takes IP\nranges since PowerDNS 4.4; without it record changes would only reach\nPowerDNS at the SOA refresh, about an hour later.\n\nDepends-On: https://review.opendev.org/c/openstack/openstack-helm/+/1010123\nDepends-On: https://review.opendev.org/c/openstack/openstack-helm/+/1010131\nAssisted-by: Claude Opus 5.5\nChange-Id: I5ab539601b369c9b53b01802236ea1e9c4397a49\nSigned-off-by: Thomas Bechtold \u003cthomasbechtold@jpberlin.de\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e9d3196be5f7a4af65d2dd765ca2e00ba63c9fed"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e9d3196be5f7a4af65d2dd765ca2e00ba63c9fed"}]},"branch":"refs/heads/master"},"c3ecd98d900374697d661248b6b53ca3d35c8aea":{"kind":"REWORK","_number":4,"created":"2026-10-13 09:34:09.000000000","uploader":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"ref":"refs/changes/22/1010122/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/22/1010122/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/22/1010122/4"}}},"commit":{"parents":[{"commit":"b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e","subject":"[powerdns] Switch to the official PowerDNS image","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/b6dcccde5bb2e61c2017dfbf1727af15b8b79c8e"}]}],"author":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 06:52:43.000000000","tz":120},"committer":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-13 09:34:08.000000000","tz":120},"subject":"Add a designate deployment job","message":"Add a designate deployment job\n\nNo job deploys the designate or powerdns charts, so the chart could not\nstart designate-central on 2026.1 without anyone noticing. Deploy both\non a single node with Keystone and drive designate through the API: a\nzone must go ACTIVE and PowerDNS must serve its SOA, an A record added\nto it must go ACTIVE and resolve on PowerDNS, and once the zone is\ndeleted PowerDNS must stop serving it. That covers the pdns4 backend,\nthe AXFR from designate-mdns, the worker\u0027s NOTIFY and its serial poll.\n\nThe worker, not designate-mdns, sends the NOTIFY for a changed zone, and\nPowerDNS only accepts a NOTIFY from the zone\u0027s primary. The job lists the\npod network in PowerDNS\u0027s trusted-notification-proxy, which takes IP\nranges since PowerDNS 4.4; without it record changes would only reach\nPowerDNS at the SOA refresh, about an hour later.\n\nThe job also enables the powerdns chart\u0027s manifests.service_api. The\npdns4 backend creates zones through the PowerDNS API, which designate\u0027s\ndefault pool reaches through the powerdns Service, but that Service only\nexposes the API port with service_api, which defaults to false.\n\nDepends-On: https://review.opendev.org/c/openstack/openstack-helm/+/1010123\nDepends-On: https://review.opendev.org/c/openstack/openstack-helm/+/1010131\nAssisted-by: Claude Opus 5.5\nChange-Id: I5ab539601b369c9b53b01802236ea1e9c4397a49\nSigned-off-by: Thomas Bechtold \u003cthomasbechtold@jpberlin.de\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c3ecd98d900374697d661248b6b53ca3d35c8aea"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/c3ecd98d900374697d661248b6b53ca3d35c8aea"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}