)]}'
{"id":"openstack%2Fopenstack-helm~1012866","triplet_id":"openstack%2Fopenstack-helm~master~Icd2b3f47ea9b723b883012eaf68004afdebb039f","project":"openstack/openstack-helm","branch":"master","hashtags":[],"change_id":"Icd2b3f47ea9b723b883012eaf68004afdebb039f","subject":"ci: Verify a keystone database password rotation in the CRD job","status":"NEW","created":"2026-10-29 13:40:05.000000000","updated":"2026-10-31 05:47:20.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":false,"submittable":false,"total_comment_count":1,"unresolved_comment_count":0,"work_in_progress":true,"has_review_started":true,"meta_rev_id":"5358c781b3904a5e734dcc8e76ecbd6f7db760da","_number":1012866,"virtual_id_number":1012866,"owner":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2026-10-31 05:47:20.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"reviewer_updates":[{"updated":"2026-10-29 15:34:37.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"420b094931857b430d6f20bc0af79f03901aa30b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-29 13:40:05.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"644ebd5bc810b24169d8c6205764b7793b497d09","tag":"autogenerated:gerrit:setWorkInProgress","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-29 13:45:29.000000000","message":"Set Work In Progress","accounts_in_message":[],"_revision_number":1},{"id":"f189baf8a54b78eda0ed94da589db6325370426d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-29 15:34:37.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/3eadc62cd862455bade97371c23db2b9\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/091064a683734d669784130d14ff6b50 : SUCCESS in 3m 53s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/83557f2b9c0b46e4899cc8c4a6b3ffbb : SUCCESS in 3m 13s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/39f81c7d37b64d04b08a3312bf32f9be : SUCCESS in 4m 03s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/03c4d612978945318a3c56e8f1a035c0 : SUCCESS in 1m 15s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/0fd8ad1aa307497c8c7013ee8db34024 : SUCCESS in 2m 20s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0b5cff65fdf44638b413ea7c22e14db6 : SUCCESS in 1h 09m 51s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a475920ccdb64112a168077424b357ae : SUCCESS in 57m 13s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/cd5e34d4145249a58318273789f1e45a : SUCCESS in 1h 11m 00s\n- openstack-helm-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a62355dead1948c7a8e6ae0f7674de99 : SUCCESS in 1h 12m 25s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5b268179ba854b3ea018a664f133416d : SUCCESS in 1h 00m 04s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8ed7dd7a1aa54da39cd73736c51ebca1 : SUCCESS in 1h 28m 48s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9158a2eab0d1451bb565e6b5774e7e4b : SUCCESS in 1h 47m 31s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/4fcf71defa3648a79acdce7683d5538a : FAILURE in 1h 10m 07s\n\nWarning:\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/prepare-hosts.yaml for job openstack-helm-compute-kit-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/mount-volumes.yaml for job openstack-helm-compute-kit-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/use-buildset-registry.yaml for job openstack-helm-compute-kit-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/inject-keys.yaml for job openstack-helm-compute-kit-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/deploy-env.yaml for job openstack-helm-compute-kit-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.","accounts_in_message":[],"_revision_number":1},{"id":"e094505ce38f718d6c816c3b8436ab40f482e5dd","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-29 15:41:04.000000000","message":"Patch Set 1:\n\n(1 comment)\n\nThis change is ready for review.","accounts_in_message":[],"_revision_number":1},{"id":"3c426484188f8c4e2c11d01e18c3fb321b2a1d6b","tag":"autogenerated:gerrit:setWorkInProgress","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-29 15:41:08.000000000","message":"Set Work In Progress","accounts_in_message":[],"_revision_number":1},{"id":"f34d37397483fa0d8c1bcf2578ca6804bd3a30f3","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-29 17:32:26.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/15f58fe34d9546819d796e5037e767b8\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fa91a45974b4488eba8665f78f0b2bfb : SUCCESS in 5m 05s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/48140f58e6064a16b4fd1af5a846155e : SUCCESS in 2m 43s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/c027ea664cf14e7e87509ea2feb5d32a : SUCCESS in 3m 40s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/173dea9295f847cd883f16ff50f50973 : SUCCESS in 2m 02s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/a0e306ce31ee4d4c8a9bfbbe332b5b2a : SUCCESS in 2m 14s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4444b479a156487d855287c40be88159 : SUCCESS in 1h 44m 26s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/209ad6b67ca74fbf8acac154bfe7abc7 : SUCCESS in 1h 06m 44s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/86b46603af284693ae0508e773675a4b : SUCCESS in 1h 44m 52s\n- openstack-helm-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9e0a747f2e9e4b3d9c47282d2af3ff5c : SUCCESS in 1h 15m 47s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5c229e51e9bc458892a00013b922ceea : SUCCESS in 57m 02s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/15480c170f534d4880484065682e4d88 : SUCCESS in 1h 38m 38s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e2d50fd79da94b9785538c5ba546ddfb : SUCCESS in 1h 38m 52s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/06d738af6f374ea6aaa4063ddb37f340 : FAILURE in 1h 11m 13s","accounts_in_message":[],"_revision_number":1},{"id":"66caa7eee32ca7b46651673d538e6856924a2bec","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-29 19:46:53.000000000","message":"Patch Set 2: Patch Set 1 was rebased\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"bd9406683c12cc1870fde993180150447ca73712","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-29 21:38:04.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/12a0da50a96149dc8b3995d17d02b480\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/60302b38e1284465a058e4e8ac41a0de : SUCCESS in 4m 38s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/040e2b169af64f38afad477dab1a5a79 : SUCCESS in 2m 57s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/247be8ade0384ad9a61649fe6dc53006 : SUCCESS in 3m 34s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/f78cd5d82f4f45738b445919e59260b7 : SUCCESS in 3m 12s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/8ff4530a540c40728e3474a47de32ad2 : SUCCESS in 3m 40s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c15b144827e644d3b15671a1f6322425 : SUCCESS in 1h 39m 24s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/797bb7cbe00d40fe9bc9a51ed153149d : SUCCESS in 1h 06m 07s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1833ef1fea9c4c44b2dc64d576060729 : SUCCESS in 1h 01m 47s\n- openstack-helm-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/eb21ccdb8a924a1ca7d3c6967761d77f : SUCCESS in 47m 51s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/95dc3a3e8c044d50b9ff62add0cca1f3 : SUCCESS in 1h 00m 30s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4a71fbde787d45d4a7024c3c81ed8ffd : SUCCESS in 1h 34m 11s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/ce1fae822d664c6d99fa709a4f6db388 : SUCCESS in 58m 55s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/b60472b5559f4955ab509628148faa2e : FAILURE in 1h 10m 25s\n\nWarning:\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/prepare-hosts.yaml for job openstack-helm-operators-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/mount-volumes.yaml for job openstack-helm-operators-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/use-buildset-registry.yaml for job openstack-helm-operators-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/inject-keys.yaml for job openstack-helm-operators-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/deploy-env.yaml for job openstack-helm-operators-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/prepare-hosts.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/mount-volumes.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/use-buildset-registry.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/inject-keys.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/openstack/openstack-helm/playbooks/deploy-env.yaml for job openstack-helm-tls-2026-1-ubuntu_noble.  Add to preserve-home-paths if safe, or otherwise remove.","accounts_in_message":[],"_revision_number":2},{"id":"4eb820f618f78c33a5a7419c264c6a0c3325684c","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-30 17:17:56.000000000","message":"Patch Set 3: Patch Set 2 was rebased\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"2c8d6a32412854c1f6bc0aa13d5da42074478f46","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-30 17:25:56.000000000","message":"Patch Set 4: Patch Set 3 was rebased","accounts_in_message":[],"_revision_number":4},{"id":"167933e5e698e2a71f0e49af9e6f588799a3b56c","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-30 17:57:37.000000000","message":"Patch Set 5: Patch Set 4 was rebased","accounts_in_message":[],"_revision_number":5},{"id":"d0c584c68568ad18d03de4553e6edd2231099947","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-30 19:58:01.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/7f3e4eb1a9364bb58e37d35fa4ec5b72\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ffb95b60200642fda0610fb4b0c7cf63 : SUCCESS in 3m 56s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/7e2fb3742a474a42875f965490a4facb : SUCCESS in 2m 43s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/1a41f8df00aa4d088e1838ee58622ff6 : SUCCESS in 2m 45s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/b7f4fff897054e89a3a0dd1519c9fe2f : SUCCESS in 2m 07s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/3cf0f59e143740e98be47c472515a45e : SUCCESS in 3m 12s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/265aabba5328482b8a9e88bdf4a42517 : SUCCESS in 1h 35m 24s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/14dff684f59e48e0a41f7ab200a72b8d : SUCCESS in 1h 45m 03s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/149651cc8bee4a289d6f1556b8ed2bb1 : SUCCESS in 1h 06m 36s\n- openstack-helm-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/bbefaf318a14419f94db7ffa466c61aa : SUCCESS in 52m 36s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/57b9b1eae16b4aa3ae0ab89319e6865a : SUCCESS in 58m 08s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/65fa1c013c57442dacc9ab05cc85f62f : FAILURE in 1h 26m 10s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f199dea4826c4f8b9743c85d16997573 : SUCCESS in 1h 32m 02s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/596d168fd8e84056a361fdcd6c8960c0 : FAILURE in 1h 08m 04s","accounts_in_message":[],"_revision_number":5},{"id":"8a1b5fe93940c8bdf2050808fa7301a10a18d278","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-30 22:38:39.000000000","message":"Patch Set 6: Patch Set 5 was rebased\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":6},{"id":"37e3adc77731838f0c242c29d6eebaf7ce8cf4ba","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-31 00:35:39.000000000","message":"Patch Set 6: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/37b3de3b1e3b4ed2800d52ddb8c654a7\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1762818fdf8f4ab29741be5b03a6d754 : SUCCESS in 3m 21s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/dc1972f6e13c4f85bb1569a6a36e886b : SUCCESS in 1m 59s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/0bd874ba27e44060afe23a6a578859f5 : SUCCESS in 4m 00s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/61023307c7544dbeb14a5018d8f46e5d : SUCCESS in 1m 36s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/8685f48adb8643dda75bbf570c4b3b0c : SUCCESS in 2m 01s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4f74e6d1bc2d4c06a0052e956428e5ce : SUCCESS in 1h 40m 49s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0dd897128d3e436eb01a91f5d2c9c2ef : FAILURE in 1h 46m 18s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/3b37dfe0b3ad4d3baa1ed22c33c77a88 : FAILURE in 1h 48m 40s\n- openstack-helm-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/85a2c563f45d4338b44802a1b0a33132 : SUCCESS in 47m 27s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b09ad0f53e9547e9aa2728cef8d2e576 : SUCCESS in 58m 10s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b5169669e4904deeb4d0c063c46e4908 : FAILURE in 1h 30m 40s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/41367f5041114011b2dbceef769f369d : FAILURE in 1h 46m 22s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/b59ddc084329452da8831b8608b792b7 : FAILURE in 1h 06m 54s","accounts_in_message":[],"_revision_number":6},{"id":"10cfee6c8670195c17941f4c251c6ac8c1c8a4d4","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-31 03:43:48.000000000","message":"Uploaded patch set 7.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":7},{"id":"96a4f3a3a361b731b77da215fbe395c78b01aed1","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-10-31 03:44:09.000000000","message":"Patch Set 8: Patch Set 7 was rebased","accounts_in_message":[],"_revision_number":8},{"id":"5358c781b3904a5e734dcc8e76ecbd6f7db760da","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-10-31 05:47:20.000000000","message":"Patch Set 8: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4edb1626986e4939bb54b197d1bc3e5a\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1e81d2a003384a6b830e4b1a595c5ff5 : SUCCESS in 4m 15s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/416686283ea14eee9505fdf9bcebee71 : SUCCESS in 3m 13s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/8a981a3d8a124f7d9a32925aedb97104 : SUCCESS in 3m 27s\n- openstack-helm-release-notes https://zuul.opendev.org/t/openstack/build/95b02106b88d45ae9d12aa1d9a3b83be : SUCCESS in 2m 41s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/3bf86e903635441b970c473415cb2256 : SUCCESS in 3m 24s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e8ac96b55d2f4742a7f299d9274d9396 : SUCCESS in 1h 48m 32s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/73af0e6d4e1145c497b75f7fe7d8821b : SUCCESS in 1h 33m 07s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/26ec702ee16046ac9eb09d5b521035bc : SUCCESS in 1h 54m 05s\n- openstack-helm-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/97e0f04d670840a6bff8587aaad512cc : SUCCESS in 1h 15m 05s\n- openstack-helm-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d6677e4e0abf4c6384e99ae9ae96074c : SUCCESS in 58m 21s\n- openstack-helm-crd-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a2fb0e44548946df9b30fd812959e89f : SUCCESS in 1h 39m 58s\n- openstack-helm-operators-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1ff644cf95ee432e8a98e4fa5749bf64 : SUCCESS in 1h 06m 15s\n- openstack-helm-compute-kit-2026-2-ubuntu_resolute https://zuul.opendev.org/t/openstack/build/8e5cc03674574fd68cc3417389c8c73a : SUCCESS in 1h 17m 30s","accounts_in_message":[],"_revision_number":8}],"current_revision_number":8,"current_revision":"477eb36c688eab445531251820625aa30b5eeb81","revisions":{"78560888fec51533f865a27cb7a5ea97f38b972e":{"kind":"REWORK","_number":1,"created":"2026-10-29 13:40:05.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/1"}}},"commit":{"parents":[{"commit":"bfdf95da442f217b5af21ebf09cddc4cb02e9c6e","subject":"feat(mariadb): Collect the Connection secrets superseded by a new name","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/bfdf95da442f217b5af21ebf09cddc4cb02e9c6e"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the job changes a database password, so the path the\nprevious changes fix was never exercised: the CRD job passed before\nthem and passes after them alike. A keystone left on the old password\neven keeps working right after the rotation, on the database sessions\nit opened before ALTER USER, which the statement does not close.\n\nAdd a last step to the compute kit playbook that rotates keystone\u0027s\ndatabase password through helm upgrade, then checks that the\nConnection writes a secret named after the new credentials, that\nkeystone-api rolled over onto it, that MariaDB accepts only the new\npassword and that the superseded secret was collected. It drops\nkeystone\u0027s database sessions before using keystone, so a keystone\nholding the old password fails here rather than at its next reconnect.\n\nThe step skips itself unless keystone\u0027s database is reconciled by the\nmariadb chart\u0027s db controller: the db-init path has no Connection, and\nthe upstream mariadb-operator only re-reads a password from a secret\nlabelled k8s.mariadb.com/watch, which the chart does not set yet.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/78560888fec51533f865a27cb7a5ea97f38b972e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/78560888fec51533f865a27cb7a5ea97f38b972e"}]},"branch":"refs/heads/master"},"a6adef4273ace288a062d60d7a324499a7ea907b":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-10-29 19:46:53.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/2"}}},"commit":{"parents":[{"commit":"e67f3e13d5c658fb461a2ef08d47ece9bda941f3","subject":"feat(mariadb): Collect the Connection secrets superseded by a new name","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e67f3e13d5c658fb461a2ef08d47ece9bda941f3"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 19:46:53.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the job changes a database password, so the path the\nprevious changes fix was never exercised: the CRD job passed before\nthem and passes after them alike. A keystone left on the old password\neven keeps working right after the rotation, on the database sessions\nit opened before ALTER USER, which the statement does not close.\n\nAdd a last step to the compute kit playbook that rotates keystone\u0027s\ndatabase password through helm upgrade, then checks that the\nConnection writes a secret named after the new credentials, that\nkeystone-api rolled over onto it, that MariaDB accepts only the new\npassword and that the superseded secret was collected. It drops\nkeystone\u0027s database sessions before using keystone, so a keystone\nholding the old password fails here rather than at its next reconnect.\n\nThe step skips itself unless keystone\u0027s database is reconciled by the\nmariadb chart\u0027s db controller: the db-init path has no Connection, and\nthe upstream mariadb-operator only re-reads a password from a secret\nlabelled k8s.mariadb.com/watch, which the chart does not set yet.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a6adef4273ace288a062d60d7a324499a7ea907b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a6adef4273ace288a062d60d7a324499a7ea907b"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"bfdf95da442f217b5af21ebf09cddc4cb02e9c6e","ours":"78560888fec51533f865a27cb7a5ea97f38b972e","theirs":"e67f3e13d5c658fb461a2ef08d47ece9bda941f3","merge_strategy":"recursive","contains_conflicts":false}},"f47fb8f22b8c48dc5ad99bd280cb42f875b1b6eb":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2026-10-30 17:17:56.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/3"}}},"commit":{"parents":[{"commit":"2c6bb199b829619136686d9ae1bcec96e0dddad2","subject":"feat(keystone): Start the API on the database connection of its upgrade","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/2c6bb199b829619136686d9ae1bcec96e0dddad2"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-30 17:17:56.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the job changes a database password, so the path the\nprevious changes fix was never exercised: the CRD job passed before\nthem and passes after them alike. A keystone left on the old password\neven keeps working right after the rotation, on the database sessions\nit opened before ALTER USER, which the statement does not close.\n\nAdd a last step to the compute kit playbook that rotates keystone\u0027s\ndatabase password through helm upgrade, then checks that the\nConnection writes a secret named after the new credentials, that\nkeystone-api rolled over onto it, that MariaDB accepts only the new\npassword and that the superseded secret was collected. It drops\nkeystone\u0027s database sessions before using keystone, so a keystone\nholding the old password fails here rather than at its next reconnect.\n\nThe step skips itself unless keystone\u0027s database is reconciled by the\nmariadb chart\u0027s db controller: the db-init path has no Connection, and\nthe upstream mariadb-operator only re-reads a password from a secret\nlabelled k8s.mariadb.com/watch, which the chart does not set yet.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f47fb8f22b8c48dc5ad99bd280cb42f875b1b6eb"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f47fb8f22b8c48dc5ad99bd280cb42f875b1b6eb"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"e67f3e13d5c658fb461a2ef08d47ece9bda941f3","ours":"a6adef4273ace288a062d60d7a324499a7ea907b","theirs":"2c6bb199b829619136686d9ae1bcec96e0dddad2","merge_strategy":"recursive","contains_conflicts":false}},"79a02f9fe9614a01cf6f17f3c6abb542b6fcaf02":{"kind":"NO_CHANGE","_number":4,"created":"2026-10-30 17:25:56.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/4"}}},"commit":{"parents":[{"commit":"02c1dd7cc46d53afd42c0146bebcd8c1d97fdb43","subject":"feat(keystone): Start the API on the database connection of its upgrade","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/02c1dd7cc46d53afd42c0146bebcd8c1d97fdb43"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-30 17:25:56.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the job changes a database password, so the path the\nprevious changes fix was never exercised: the CRD job passed before\nthem and passes after them alike. A keystone left on the old password\neven keeps working right after the rotation, on the database sessions\nit opened before ALTER USER, which the statement does not close.\n\nAdd a last step to the compute kit playbook that rotates keystone\u0027s\ndatabase password through helm upgrade, then checks that the\nConnection writes a secret named after the new credentials, that\nkeystone-api rolled over onto it, that MariaDB accepts only the new\npassword and that the superseded secret was collected. It drops\nkeystone\u0027s database sessions before using keystone, so a keystone\nholding the old password fails here rather than at its next reconnect.\n\nThe step skips itself unless keystone\u0027s database is reconciled by the\nmariadb chart\u0027s db controller: the db-init path has no Connection, and\nthe upstream mariadb-operator only re-reads a password from a secret\nlabelled k8s.mariadb.com/watch, which the chart does not set yet.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/79a02f9fe9614a01cf6f17f3c6abb542b6fcaf02"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/79a02f9fe9614a01cf6f17f3c6abb542b6fcaf02"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"2c6bb199b829619136686d9ae1bcec96e0dddad2","ours":"f47fb8f22b8c48dc5ad99bd280cb42f875b1b6eb","theirs":"02c1dd7cc46d53afd42c0146bebcd8c1d97fdb43","merge_strategy":"recursive","contains_conflicts":false}},"bb7731b95ba625ac5174c975aeb46f37eb90509d":{"kind":"NO_CHANGE","_number":5,"created":"2026-10-30 17:57:37.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/5"}}},"commit":{"parents":[{"commit":"6f325e69039e125eb30b2f4bb39f94fae03952c0","subject":"feat(keystone): Start the API on the database connection of its upgrade","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/6f325e69039e125eb30b2f4bb39f94fae03952c0"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-30 17:57:37.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the job changes a database password, so the path the\nprevious changes fix was never exercised: the CRD job passed before\nthem and passes after them alike. A keystone left on the old password\neven keeps working right after the rotation, on the database sessions\nit opened before ALTER USER, which the statement does not close.\n\nAdd a last step to the compute kit playbook that rotates keystone\u0027s\ndatabase password through helm upgrade, then checks that the\nConnection writes a secret named after the new credentials, that\nkeystone-api rolled over onto it, that MariaDB accepts only the new\npassword and that the superseded secret was collected. It drops\nkeystone\u0027s database sessions before using keystone, so a keystone\nholding the old password fails here rather than at its next reconnect.\n\nThe step skips itself unless keystone\u0027s database is reconciled by the\nmariadb chart\u0027s db controller: the db-init path has no Connection, and\nthe upstream mariadb-operator only re-reads a password from a secret\nlabelled k8s.mariadb.com/watch, which the chart does not set yet.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/bb7731b95ba625ac5174c975aeb46f37eb90509d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/bb7731b95ba625ac5174c975aeb46f37eb90509d"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"02c1dd7cc46d53afd42c0146bebcd8c1d97fdb43","ours":"79a02f9fe9614a01cf6f17f3c6abb542b6fcaf02","theirs":"6f325e69039e125eb30b2f4bb39f94fae03952c0","merge_strategy":"recursive","contains_conflicts":false}},"ba6207e06383f52eaac8d84f964f556d04136117":{"kind":"TRIVIAL_REBASE","_number":6,"created":"2026-10-30 22:38:39.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/6"}}},"commit":{"parents":[{"commit":"2d8397d93c220744d67e92901adba244976622d5","subject":"feat(keystone): Start the API on the database connection of its upgrade","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/2d8397d93c220744d67e92901adba244976622d5"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-30 22:38:39.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the job changes a database password, so the path the\nprevious changes fix was never exercised: the CRD job passed before\nthem and passes after them alike. A keystone left on the old password\neven keeps working right after the rotation, on the database sessions\nit opened before ALTER USER, which the statement does not close.\n\nAdd a last step to the compute kit playbook that rotates keystone\u0027s\ndatabase password through helm upgrade, then checks that the\nConnection writes a secret named after the new credentials, that\nkeystone-api rolled over onto it, that MariaDB accepts only the new\npassword and that the superseded secret was collected. It drops\nkeystone\u0027s database sessions before using keystone, so a keystone\nholding the old password fails here rather than at its next reconnect.\n\nThe step skips itself unless keystone\u0027s database is reconciled by the\nmariadb chart\u0027s db controller: the db-init path has no Connection, and\nthe upstream mariadb-operator only re-reads a password from a secret\nlabelled k8s.mariadb.com/watch, which the chart does not set yet.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ba6207e06383f52eaac8d84f964f556d04136117"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/ba6207e06383f52eaac8d84f964f556d04136117"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"6f325e69039e125eb30b2f4bb39f94fae03952c0","ours":"bb7731b95ba625ac5174c975aeb46f37eb90509d","theirs":"2d8397d93c220744d67e92901adba244976622d5","merge_strategy":"recursive","contains_conflicts":false}},"166d54e34a06348a6c8871ddeae97e0234005186":{"kind":"REWORK","_number":7,"created":"2026-10-31 03:43:48.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/7"}}},"commit":{"parents":[{"commit":"2d8397d93c220744d67e92901adba244976622d5","subject":"feat(keystone): Start the API on the database connection of its upgrade","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/2d8397d93c220744d67e92901adba244976622d5"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-31 03:43:24.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the CRD job changes a database password, so the path that\nrotates one was never exercised.\n\nAs the last step of the job, rotate keystone\u0027s database password with\nhelm upgrade and check that keystone still issues tokens and lists\nendpoints.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/166d54e34a06348a6c8871ddeae97e0234005186"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/166d54e34a06348a6c8871ddeae97e0234005186"}]},"branch":"refs/heads/master"},"477eb36c688eab445531251820625aa30b5eeb81":{"kind":"TRIVIAL_REBASE","_number":8,"created":"2026-10-31 03:44:09.000000000","uploader":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"ref":"refs/changes/66/1012866/8","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/66/1012866/8","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/8 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/8 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/8 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/66/1012866/8"}}},"commit":{"parents":[{"commit":"51017214690c270b0fe5e25de5146fa2499c285e","subject":"feat(keystone): Start the API on the database connection of its upgrade","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/51017214690c270b0fe5e25de5146fa2499c285e"}]}],"author":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-29 13:39:28.000000000","tz":0},"committer":{"name":"Sergiy Markin","email":"smarkin@mirantis.com","date":"2026-10-31 03:44:09.000000000","tz":0},"subject":"ci: Verify a keystone database password rotation in the CRD job","message":"ci: Verify a keystone database password rotation in the CRD job\n\nNothing in the CRD job changes a database password, so the path that\nrotates one was never exercised.\n\nAs the last step of the job, rotate keystone\u0027s database password with\nhelm upgrade and check that keystone still issues tokens and lists\nendpoints.\n\nChange-Id: Icd2b3f47ea9b723b883012eaf68004afdebb039f\nSigned-off-by: Sergiy Markin \u003csmarkin@mirantis.com\u003e\nAssisted-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/477eb36c688eab445531251820625aa30b5eeb81"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/477eb36c688eab445531251820625aa30b5eeb81"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"2d8397d93c220744d67e92901adba244976622d5","ours":"166d54e34a06348a6c8871ddeae97e0234005186","theirs":"51017214690c270b0fe5e25de5146fa2499c285e","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}