)]}'
{"id":"openstack%2Fopenstack-helm~498218","triplet_id":"openstack%2Fopenstack-helm~master~Ia2be5fb4e460d41034fdadbbefc1e48d0869e023","project":"openstack/openstack-helm","branch":"master","topic":"gotpl-policy","hashtags":[],"change_id":"Ia2be5fb4e460d41034fdadbbefc1e48d0869e023","subject":"Security: Make policy fully configurable via helm values","status":"MERGED","created":"2017-08-26 22:52:17.000000000","updated":"2017-08-28 15:10:48.000000000","submitted":"2017-08-28 15:10:48.000000000","submitter":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"ff998d5456ee2f72f459a9285d2d84a3aba46f46","_number":498218,"virtual_id_number":498218,"owner":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"all":[{"value":0,"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"value":2,"date":"2017-08-28 15:10:48.000000000","post_submit":true,"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},{"value":0,"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},"recommended":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"all":[{"value":1,"date":"2017-08-26 23:14:08.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":2,"date":"2017-08-28 15:03:06.000000000","_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},{"value":2,"date":"2017-08-28 14:53:32.000000000","_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},"all":[{"value":0,"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":1,"date":"2017-08-28 15:03:06.000000000","_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},{"value":0,"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2017-08-26 23:14:08.000000000","updated_by":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"reviewer":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"state":"REVIEWER"},{"updated":"2017-08-28 14:53:32.000000000","updated_by":{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},"reviewer":{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},"state":"REVIEWER"},{"updated":"2017-08-28 15:03:06.000000000","updated_by":{"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},"reviewer":{"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},"state":"REVIEWER"},{"updated":"2017-08-28 15:10:48.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"}],"messages":[{"id":"1fb58d057e375765a179f6d909926e47a5b8260d","author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"date":"2017-08-26 22:52:17.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"aaa6bb81ab0a9be015af13c771d6dfbd42e4e904","author":{"_account_id":26201,"name":"AT\u0026T Openstack-Helm CI","email":"stacey.fletcher@att.com","username":"ATT-OSH-CI"},"date":"2017-08-26 22:52:26.000000000","message":"Patch Set 1:\n\nBuild Started http://10.24.20.18:30081/job/community-singlenode/job/osh-singlenode/506/ (1/2)","accounts_in_message":[],"_revision_number":1},{"id":"febfe421669eb59d22cb4e78bab243a9330f7f00","author":{"_account_id":26201,"name":"AT\u0026T Openstack-Helm CI","email":"stacey.fletcher@att.com","username":"ATT-OSH-CI"},"date":"2017-08-26 22:52:27.000000000","message":"Patch Set 1:\n\nBuild Started http://10.24.20.18:30081/job/OSH/job/openstack/job/openstack-helm/job/basic/383/ (2/2)","accounts_in_message":[],"_revision_number":1},{"id":"2b6046bdecf8593b20511af7384020be8dcbcfda","author":{"_account_id":26201,"name":"AT\u0026T Openstack-Helm CI","email":"stacey.fletcher@att.com","username":"ATT-OSH-CI"},"date":"2017-08-26 23:03:01.000000000","message":"Patch Set 1:\n\nBuild Failed \n\nhttp://10.24.20.18:30081/job/community-singlenode/job/osh-singlenode/506/ : FAILURE (skipped)\n\nhttp://10.24.20.18:30081/job/OSH/job/openstack/job/openstack-helm/job/basic/383/ : FAILURE","accounts_in_message":[],"_revision_number":1},{"id":"7aa825c2e5bac2a0652540df8ba7b62d55a60899","author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"date":"2017-08-26 23:14:08.000000000","message":"Patch Set 1: Code-Review+1\n\nNice.  Can we change the topic unless it is part of ceph/cinder-attach","accounts_in_message":[],"_revision_number":1},{"id":"9f82a19f7f6d25b8325fbc8802c5468cccc11af7","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2017-08-26 23:37:44.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-openstack-helm-docs-ubuntu-xenial http://docs-draft.openstack.org/18/498218/1/check/gate-openstack-helm-docs-ubuntu-xenial/927f867//doc/build/html/ : SUCCESS in 1m 57s\n- gate-openstack-helm-nocluster-linter-ubuntu-xenial http://logs.openstack.org/18/498218/1/check/gate-openstack-helm-nocluster-linter-ubuntu-xenial/f26c2c6/ : SUCCESS in 2m 33s\n- gate-openstack-helm-aio-basic-ubuntu-xenial-nv http://logs.openstack.org/18/498218/1/check/gate-openstack-helm-aio-basic-ubuntu-xenial-nv/2231853/ : SUCCESS in 24m 38s (non-voting)\n- gate-openstack-helm-aio-basic-centos-7-nv http://logs.openstack.org/18/498218/1/check/gate-openstack-helm-aio-basic-centos-7-nv/636bd17/ : SUCCESS in 30m 04s (non-voting)\n- gate-openstack-helm-aio-basic-fedora-26-nv http://logs.openstack.org/18/498218/1/check/gate-openstack-helm-aio-basic-fedora-26-nv/cfd7c1b/ : SUCCESS in 29m 58s (non-voting)\n- gate-openstack-helm-multi-basic-ubuntu-xenial-3-node-nv http://logs.openstack.org/18/498218/1/check/gate-openstack-helm-multi-basic-ubuntu-xenial-3-node-nv/1541103/ : SUCCESS in 40m 25s (non-voting)\n- gate-openstack-helm-multi-armada-ubuntu-xenial-3-node-nv http://logs.openstack.org/18/498218/1/check/gate-openstack-helm-multi-armada-ubuntu-xenial-3-node-nv/72b9344/ : SUCCESS in 39m 42s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"feff28aa88942d0e8dfd96f81826a7ebe7adff9c","author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"date":"2017-08-27 01:43:30.000000000","message":"Topic changed from ceph/cinder-attach to gotpl-policy","accounts_in_message":[],"_revision_number":1},{"id":"12d31cd1eb34e8a858fbb82a7b0087d15bc1b901","author":{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},"date":"2017-08-28 14:53:32.000000000","message":"Patch Set 1: Code-Review+2\n\nGood work Pete. I like this approach better","accounts_in_message":[],"_revision_number":1},{"id":"bbc6894167ef462d52cc23a26770158032394537","author":{"_account_id":17589,"name":"Darla Ahlert","email":"da741q@att.com","username":"darla.ahlert"},"date":"2017-08-28 15:03:06.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"695b2edef7e3723d715c6cf437b5e43ef0eca432","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2017-08-28 15:03:16.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.\nhttp://status.openstack.org/zuul/","accounts_in_message":[],"_revision_number":1},{"id":"ca1d46784079518b19c58c47769267bb5a822c9c","date":"2017-08-28 15:10:48.000000000","message":"Change has been successfully merged into the git repository by Jenkins","accounts_in_message":[],"_revision_number":1},{"id":"ff998d5456ee2f72f459a9285d2d84a3aba46f46","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2017-08-28 15:10:48.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- gate-openstack-helm-docs-ubuntu-xenial http://docs-draft.openstack.org/18/498218/1/gate/gate-openstack-helm-docs-ubuntu-xenial/cde80fd//doc/build/html/ : SUCCESS in 2m 31s\n- gate-openstack-helm-nocluster-linter-ovs-ubuntu-xenial http://logs.openstack.org/18/498218/1/gate/gate-openstack-helm-nocluster-linter-ovs-ubuntu-xenial/5da2f4a/ : SUCCESS in 2m 53s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"7cfd182929d6ee931ad74681c0b56f003d2b45d5","revisions":{"7cfd182929d6ee931ad74681c0b56f003d2b45d5":{"kind":"REWORK","_number":1,"created":"2017-08-26 22:52:17.000000000","uploader":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"ref":"refs/changes/18/498218/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/18/498218/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/18/498218/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/18/498218/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/18/498218/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/18/498218/1"}}},"commit":{"parents":[{"commit":"27864cec04cf16609b2abece5bc4f2bb6129797b","subject":"Security: Container user for support openstack services","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/27864cec04cf16609b2abece5bc4f2bb6129797b"}]}],"author":{"name":"Pete Birley","email":"pete@port.direct","date":"2017-08-26 22:50:22.000000000","tz":-300},"committer":{"name":"Pete Birley","email":"pete@port.direct","date":"2017-08-26 22:50:22.000000000","tz":-300},"subject":"Security: Make policy fully configurable via helm values","message":"Security: Make policy fully configurable via helm values\n\nThis PS moves the policy.json to be fully driven by gotpl,\nallowing full configuration without editing the template.\n\nNova and Cinder are addressed in the seperate patchsets:\n * https://review.openstack.org/#/c/498215/\n * https://review.openstack.org/#/c/498216/\n\nChange-Id: Ia2be5fb4e460d41034fdadbbefc1e48d0869e023\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/7cfd182929d6ee931ad74681c0b56f003d2b45d5"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/7cfd182929d6ee931ad74681c0b56f003d2b45d5"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}