)]}'
{"id":"openstack%2Fopenstack-helm~1010599","triplet_id":"openstack%2Fopenstack-helm~master~Iae62fc4887b3d4dfa623be5d68d6c92327bdd0f7","project":"openstack/openstack-helm","branch":"master","topic":"tls-sidecar-nonroot","attention_set":{},"removed_from_attention_set":{"7102":{"account":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"last_update":"2026-10-15 22:13:44.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Iae62fc4887b3d4dfa623be5d68d6c92327bdd0f7","subject":"Run the nginx TLS sidecars unprivileged","status":"MERGED","created":"2026-10-15 05:50:59.000000000","updated":"2026-10-15 22:14:34.000000000","submitted":"2026-10-15 22:13:44.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1010599-tls-sidecar-nonroot","meta_rev_id":"5ccde2f6c6b226aea891de9fa6082a4fdbc74eae","_number":1010599,"virtual_id_number":1010599,"owner":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":0,"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-10-15 22:13:44.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"all":[{"value":2,"date":"2026-10-15 16:49:34.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":2,"date":"2026-10-15 17:01:42.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"all":[{"value":0,"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"value":1,"date":"2026-10-15 17:01:42.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-10-15 08:04:02.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-10-15 16:49:34.000000000","updated_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"reviewer":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"state":"REVIEWER"},{"updated":"2026-10-15 17:01:42.000000000","updated_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"reviewer":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"state":"REVIEWER"}],"messages":[{"id":"e90677b82a6ffba3e8912d9e76df00d41e2c43ff","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-15 05:50:59.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"044cd291e00b0f10770af1e1da40e451059f45b4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 08:04:02.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/43ce6c06d97a47908ee2896a8b94c145\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8e376615072a46ac907f527db1611a1d : SUCCESS in 3m 26s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/8d43aa1583ca44b98c36d749ef1938cc : SUCCESS in 3m 15s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/a0e48cac7fa8493db7c31d423f3961d1 : SUCCESS in 2m 36s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/ca919ebaa8c44707b320483a2bc9dfbc : SUCCESS in 1m 35s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/8b882ee61a424eb88c1c56a4a02ed61a : SUCCESS in 2m 14s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f7285c08014747f1a444d871de8b8f07 : SUCCESS in 2h 10m 10s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/36e7fb3cfd4e4f7393a597153aa3f992 : FAILURE in 43m 20s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2041d86536944e4caeb6794fe17cc40d : SUCCESS in 1h 34m 32s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c154f9e094bb4eb4a2c62090e2528962 : SUCCESS in 1h 27m 04s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2a76566fe4154a5aad87182b7bb99f12 : SUCCESS in 59m 56s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/e98ee0dbcbd04c399b6a257e663e32cf : SUCCESS in 1h 18m 27s","accounts_in_message":[],"_revision_number":1},{"id":"b6a61bb635647bb08d1512f39132cd723c88cfa4","author":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"date":"2026-10-15 08:05:06.000000000","message":"Patch Set 1:\n\nrecheck compute-kit-2026-1 hit a cinder startup race in verify-cinder-backends.sh (empty pool list accepted as final), unrelated to this change; fix in https://review.opendev.org/c/openstack/openstack-helm/+/1010606","accounts_in_message":[],"_revision_number":1},{"id":"cda243b993cc070d97fc1382eba2fcce68fd4465","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 10:06:42.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c29b9be0d5bc44e3aefca0e58590feba\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2eed4f6ea24d4a96b79bec3a6c20aea6 : SUCCESS in 3m 33s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/55cef53b814947a98a2be93dddfa3874 : SUCCESS in 4m 11s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/103c13c3bce24d94a0e93e2a29146ad2 : SUCCESS in 3m 54s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/6212d252151b47438d951709530cde29 : SUCCESS in 2m 32s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/2fae9cfee5f244698c72e203bd2d509a : SUCCESS in 2m 07s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fc922e78ce6f4f30814ebaa33e164f6c : SUCCESS in 1h 38m 33s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/671e8999dadd4c6085594bc719a3d9e0 : SUCCESS in 1h 03m 51s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f51c1835f8b64f74a748c6d1007332c8 : SUCCESS in 1h 53m 15s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/48ab273f3c5941a6a0ebac8167bf2b37 : SUCCESS in 1h 33m 36s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/39fcf1027f6b453ba2022502d1ec3c44 : SUCCESS in 58m 20s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/2a8d8503dff54077b86a64f137f5634c : SUCCESS in 1h 14m 07s","accounts_in_message":[],"_revision_number":1},{"id":"c9c42e49c17d6a58932a54cd90136a2a2ed002da","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-10-15 16:49:34.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"199b9bce9a6d898697cdb47aa619bf1518a90a83","author":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"},"date":"2026-10-15 17:01:42.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"e7ef03fb72c8e8f363d5bf3a16b1305ff5bf5531","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 17:01:52.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"d8ce9c489db99a4a13fe9eb1fc0e8ac87af1ab22","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 18:37:09.000000000","message":"Patch Set 1: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/247823c54cbb43c89e57a76a15fcea4b\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/57277f55326d4dd48000ddff052e7a00 : SUCCESS in 3m 32s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/ba310d98a33047c8887f7201e8fc4964 : SUCCESS in 3m 15s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/caa88b97a1254ea19bd0bdc9eb1de312 : SUCCESS in 1m 42s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2c1f67a1d62043a587acc4a86f4060de : FAILURE in 1h 30m 08s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/c42b099d7ffe4303b55d58fc686e09ce : SUCCESS in 30m 53s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/43d34bf9f7734cb699f304b65530cd42 : SUCCESS in 28m 15s","accounts_in_message":[],"_revision_number":1},{"id":"e26a1f8d177c05e4dbecec2ea6cbbc9bfd3ca38b","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-10-15 18:40:32.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"d7c2b4e46f44d894b4f8d9fcad85969fac609d37","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 20:31:01.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/eb1d4e20d56943b397f0602b8052a67d\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/13512a231c6144259c84e65f959a3997 : SUCCESS in 3m 14s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/3eb17664b66e4e4cbab2ac067c3b792d : SUCCESS in 2m 58s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/b33afa3550c1434bb4e63b61aeb8cfd5 : SUCCESS in 2m 35s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/474ba934ea2442f3a37501d6ebd634aa : SUCCESS in 1m 46s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/ca85e8af595e4c2ca573d4aa66d79383 : SUCCESS in 2m 22s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fe3efe7d82ab4bbe89dc523c7289d40f : SUCCESS in 1h 36m 53s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5b7c1793e5a34070b7fac66430b99e7d : SUCCESS in 1h 47m 46s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d3897509327b46569c32471a95bd3253 : SUCCESS in 1h 33m 28s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fd466086a48041ae91a1ce5775de4606 : SUCCESS in 1h 26m 25s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/88cc2c82fddb484cb06d7c487fad0c91 : SUCCESS in 1h 25m 35s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/3128ae25fc994e788dba6879c2745e6f : SUCCESS in 1h 15m 51s","accounts_in_message":[],"_revision_number":1},{"id":"c3ca74ee83faa6732a77d4341168afccc5e3212f","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 20:31:09.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"b69975946823015b0fd0f90784e8cf2b9dae5d1e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 22:13:44.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/404ec68ebc9f4ff994e85b18b66c9e3b\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e11d53519e174144ae1fd6e41bb69516 : SUCCESS in 3m 11s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/3099fa813fae44f6a235f363c14bec7a : SUCCESS in 3m 04s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/3631cbb77f5447a89f1636af33ca9edd : SUCCESS in 1m 34s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/53012457104941538232bc954c32b964 : SUCCESS in 1h 37m 21s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/25e2b810f4314ac992c3a58a3be2286e : SUCCESS in 33m 10s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/d0a2ee7a8ea546fd93843e93248de8a6 : SUCCESS in 19m 28s","accounts_in_message":[],"_revision_number":1},{"id":"91f96e39126f078c16f4df2c801d6c7d9d6a738c","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 22:13:44.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"5ccde2f6c6b226aea891de9fa6082a4fdbc74eae","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-15 22:14:34.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a9d30b2a796a4307a571094d84f2ff9c\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/509b1546f4e54b4983c502cbac193cf2 : SUCCESS in 42s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"27c720bf797fefdf00e6e3fba442318069220c89","revisions":{"27c720bf797fefdf00e6e3fba442318069220c89":{"kind":"REWORK","_number":1,"created":"2026-10-15 05:50:59.000000000","uploader":{"_account_id":7102,"name":"Thomas Bechtold","email":"thomas.bechtold@chainguard.dev","username":"toabctl"},"ref":"refs/changes/99/1010599/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/99/1010599/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/99/1010599/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/99/1010599/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/99/1010599/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/99/1010599/1"}}},"commit":{"parents":[{"commit":"1275eff8c720d7271363ae42cb2360fcbd8e870a","subject":"Render the API extraContainers and extraVolumes through tpl","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/1275eff8c720d7271363ae42cb2360fcbd8e870a"}]}],"author":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-15 04:43:54.000000000","tz":120},"committer":{"name":"Thomas Bechtold","email":"thomasbechtold@jpberlin.de","date":"2026-10-15 05:50:45.000000000","tz":120},"subject":"Run the nginx TLS sidecars unprivileged","message":"Run the nginx TLS sidecars unprivileged\n\nThe nginx sidecars in the tls-gateway-and-sidecar.yaml overrides run\nas root with a writable root filesystem so that nginx can bind port\n443. An nginx image that runs as an unprivileged user cannot be used\nthere, it exits at startup:\n\n  nginx: [emerg] bind() to 0.0.0.0:443 failed (13: Permission denied)\n\nThe CI containerd does not allow unprivileged ports\n(enable_unprivileged_ports \u003d false), so this is not just a local\nsetting.\n\nListen on 8443 and point network.*.target_port there; the Services and\nthe BackendTLSPolicies keep their ports. Run the sidecars as 65534 with\na read-only root filesystem and no capabilities. nginx writes its pid\nto /run and its request buffers to a temp directory that differs\nbetween images (/var/cache/nginx in docker.io/nginx, /var/lib/nginx/tmp\nin others), so mount emptyDirs on /run and /tmp and set the temp paths\nto /tmp. They are set in the server block, not the http block:\nnginx-unprivileged already sets them there and nginx refuses the\nduplicate.\n\nThe image now comes from images.tags.nginx_tls_sidecar, set in each\noverride, so switching to another nginx image is a single value.\n\nChecked with nginx -t on every rendered config, as uid 65534 on a\nread-only root filesystem, with docker.io/nginx:1.27-alpine,\nnginxinc/nginx-unprivileged and a distroless nginx 1.31 image. The\nrendered placement sidecar also ran on a k3s cluster with\ndocker.io/nginx and the distroless image: requests through the\nService reach the backend via 8443, request bodies are buffered in\n/tmp, and the service account token still mounts under /run.\n\nAssisted-by: Claude Opus 5.5\nChange-Id: Iae62fc4887b3d4dfa623be5d68d6c92327bdd0f7\nSigned-off-by: Thomas Bechtold \u003cthomasbechtold@jpberlin.de\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/27c720bf797fefdf00e6e3fba442318069220c89"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/27c720bf797fefdf00e6e3fba442318069220c89"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":5890,"name":"Doug Goldstein","email":"cardoe@cardoe.com","username":"cardoe"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}