)]}'
{"id":"openstack%2Fopenstack-helm~993027","triplet_id":"openstack%2Fopenstack-helm~master~I8067412384008d27345763c11c8c011594d8f718","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"3009":{"account":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"last_update":"2026-06-15 13:39:41.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I8067412384008d27345763c11c8c011594d8f718","subject":"Use mTLS and a shared client certificate for RabbitMQ","status":"MERGED","created":"2026-06-11 20:02:05.000000000","updated":"2026-06-15 13:42:54.000000000","submitted":"2026-06-15 13:39:41.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":1,"has_review_started":true,"submission_id":"993027","meta_rev_id":"c8a78ff50dac7e303e119098c3d5827aa2cbcfda","_number":993027,"virtual_id_number":993027,"owner":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-15 13:39:41.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"all":[{"value":2,"date":"2026-06-15 12:51:31.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":2,"date":"2026-06-12 22:19:53.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"all":[{"value":1,"date":"2026-06-15 12:51:31.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}],"CC":[{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-11 20:02:17.000000000","updated_by":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"reviewer":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"state":"CC"},{"updated":"2026-06-11 20:44:33.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-06-12 20:38:10.000000000","updated_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"reviewer":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"state":"REVIEWER"},{"updated":"2026-06-15 12:51:31.000000000","updated_by":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"reviewer":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"state":"REVIEWER"}],"messages":[{"id":"3f1fba43d1d8cce36fbacbad4969b68ff9753da9","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-11 20:02:05.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"25244bb731c0972bcfc1a441b12ea3a16bdc795f","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"date":"2026-06-11 20:02:17.000000000","message":"Patch Set 1:\n\nBuild Started","accounts_in_message":[],"_revision_number":1},{"id":"99fca67fa9f300c856ee02575873567530f0c4ce","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 20:44:33.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/30dbf6251ea1404ca44dfe36f2365ca9\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/affddfc4d59948f68d87122fa964dd6b : SUCCESS in 2m 21s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e324e39aad854503a254c450e04f2f37 : SUCCESS in 3m 25s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1b894efe2ac841faa18a686526469d5d : FAILURE in 36m 16s","accounts_in_message":[],"_revision_number":1},{"id":"1bc767cdd0c58a478f8d11c01436c5109fd3d647","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-11 22:04:18.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"abdc73f3b7cea92119a176c080ef8d18c2d36aa7","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"date":"2026-06-11 22:04:33.000000000","message":"Patch Set 2:\n\nBuild Started","accounts_in_message":[],"_revision_number":2},{"id":"cd2d095b6e9d0e760ed6044988cccc04773a435c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 22:41:47.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/c6aa64416f1145f6bc7e0b72ba343db8\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/6dd8570f44e74146b5fc39e78ab688f0 : SUCCESS in 3m 43s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d9141fa988154797be58a8df651541f2 : SUCCESS in 3m 34s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/cf42fe4644394e64879544abe238716e : FAILURE in 34m 02s","accounts_in_message":[],"_revision_number":2},{"id":"fcb1b6bd466b8d773b67cf87c0a8272976ee538a","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-11 22:53:11.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"64c254e0b3b2e13232487225dc5dab3d1a81730d","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"date":"2026-06-11 22:53:23.000000000","message":"Patch Set 3:\n\nBuild Started","accounts_in_message":[],"_revision_number":3},{"id":"4980502351fa0d398c56fc2b7f02f972026ae298","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 23:38:43.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/795f19eab8714fe98f9108c75c42cda1\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d235f036a33d4d75b224ca1356630d26 : SUCCESS in 3m 20s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/04907376949e426d832264998dda0dd4 : SUCCESS in 2m 41s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/3055de10467e40779228e7f2400a9a5c : FAILURE in 43m 30s","accounts_in_message":[],"_revision_number":3},{"id":"d70a637f3c50822075cab654f1c749dbe0730012","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-11 23:49:51.000000000","message":"Uploaded patch set 4.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":4},{"id":"54b7f069ae6d7edda064e9bb34a81c49998c6cf7","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"date":"2026-06-11 23:50:03.000000000","message":"Patch Set 4:\n\nBuild Started","accounts_in_message":[],"_revision_number":4},{"id":"054ba2d5352f0525346e0fbc3655b01bb41333da","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 00:38:52.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/8979d40abf6c454983c9db18a6d9ce70\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3ec6400f34994918b18ab99a754a5396 : SUCCESS in 3m 13s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d2c98e6365264ec98bdba9ab744eb011 : SUCCESS in 2m 18s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4c43d2c1a08b48c9a69f56e0e47ed732 : SUCCESS in 46m 57s","accounts_in_message":[],"_revision_number":4},{"id":"a981d5b9e0fbedd156e147fa0b4b5a5b9f7384ce","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-12 15:40:51.000000000","message":"Uploaded patch set 5.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":5},{"id":"efbb46b4240ae10d751a074a7a0498c95df80615","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"date":"2026-06-12 15:41:05.000000000","message":"Patch Set 5:\n\nBuild Started","accounts_in_message":[],"_revision_number":5},{"id":"1e1e066383a875dea2708c90665b49258c6b9ee2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 17:06:40.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d3f90d97f5a949b2a78755fda1c7836e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a0f052223c864c138ecca4971d2e821f : SUCCESS in 3m 37s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/853203383c7a40fa9dcaad8f773096e8 : SUCCESS in 3m 26s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0fae5d02b4bc4f689cd91b6430d371f8 : SUCCESS in 1h 18m 16s","accounts_in_message":[],"_revision_number":5},{"id":"f0991fe7f43ee6754fcd37fa3861b0124a22d729","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-12 17:10:50.000000000","message":"Uploaded patch set 6.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":6},{"id":"f84489499f68d4deeefb87725a90ed24b4a137fa","tag":"autogenerated:jenkins-gerrit-trigger","author":{"_account_id":28237,"name":"att-airship-ci","email":"airship.jenkins@gmail.com","username":"ATT-airship-CI"},"date":"2026-06-12 17:11:01.000000000","message":"Patch Set 6:\n\nBuild Started","accounts_in_message":[],"_revision_number":6},{"id":"d53b5800014dcafb51929a7f2ada0526baa143dc","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 18:54:04.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/8c95e92ad9d54501b9362fcec9dc77ec\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/afd7248ebe02440b931ad6380ad8b7de : SUCCESS in 3m 36s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/09edf8d5fb5749b494028630295eb2b6 : SUCCESS in 3m 26s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/4956ce19bc954b00835a08ace78d975e : SUCCESS in 3m 29s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/ea2017c518b3409497a436fe32c1c98a : SUCCESS in 2m 49s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/05d4ed9024d8446582e0cc343487c96b : SUCCESS in 39m 35s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7c2a660c1eb14c99835d863c2a9c96dc : SUCCESS in 45m 42s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/12c95ad7f27344a7a8e513ae8c8a2c57 : SUCCESS in 1h 13m 40s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/66a67d7fca994d45b27c207bf70b9222 : SUCCESS in 49m 17s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b572d4d411f5432fa355e33b1277e155 : SUCCESS in 1h 14m 53s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/42288411a8f540b689cd9224943dc372 : SUCCESS in 44m 31s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/552acc202a1c4aff92bfc63a7ae9b675 : SUCCESS in 1h 12m 48s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1fa8873d00974955b8e6b5f53a69222d : SUCCESS in 1h 20m 34s\n- openstack-helm-compute-kit-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8e0afb5296a24913930c2671f5b8a613 : SUCCESS in 1h 05m 11s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/ad13567e8eb14c9f9e4d9315fc354d6a : SUCCESS in 56m 20s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/110f8925043a4bb2ad9e5f15ed2b35db : SUCCESS in 1h 17m 42s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/511a83c5978b409c9dbbbc10c0c62042 : SUCCESS in 56m 41s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/088a34f0ae5c46af9d923661c9974d02 : SUCCESS in 29m 14s\n- openstack-helm-horizon-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d74a0aa37d974aed9c60a062fd26f2b6 : SUCCESS in 24m 35s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/471db6c2516142d1b12357e4022eecb6 : SUCCESS in 1h 34m 49s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f59b2de8db4b4eb7974d0ad120bc93b0 : SUCCESS in 30m 40s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/78f30201105a4857b7c5aa9c348cdff4 : SUCCESS in 43m 13s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/9857b01c7277406991761df2c0693d62 : SUCCESS in 22m 27s","accounts_in_message":[],"_revision_number":6},{"id":"85b38fa899963855b892e5d61dac8bbfa4f8e342","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-12 20:34:42.000000000","message":"Patch Set 6:\n\nThis change is ready for review.","accounts_in_message":[],"_revision_number":6},{"id":"f803da99b52b70b6dbb581a54c68f8bda492d9a4","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-06-12 20:38:10.000000000","message":"Patch Set 6: Code-Review+2","accounts_in_message":[],"_revision_number":6},{"id":"46d61390596cd02917a3d01ad342a6f017ed5ac1","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-12 22:19:53.000000000","message":"Patch Set 7: Patch Set 6 was rebased\n\nCopied Votes:\n* Code-Review+2 (copy condition: \"**changekind:TRIVIAL_REBASE** OR is:MIN\")\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":7},{"id":"b449973b881217fabfa0061ca0c8e1eb17c556ec","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-13 01:46:47.000000000","message":"Patch Set 7: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/be6a94259c3e417985bf6a905f23e68c\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/aca32d04bb79449c9f363f7da8140e16 : SUCCESS in 2m 28s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e2ec0fb9edc84738b37091ed516674e9 : SUCCESS in 2m 13s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/decf16acfca041c6b09772d7350f0d56 : SUCCESS in 2m 25s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/dabf719ae29d4a0b8017d27a419d6d47 : SUCCESS in 1m 49s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/9d7626d93ca34d7eb18e8098a918037f : SUCCESS in 38m 24s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/94264b98a2894069a453c246b9412611 : SUCCESS in 45m 50s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a59b928435314463a8be5e9a90617098 : SUCCESS in 1h 11m 57s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b63341b748fd4851bee1692e43052888 : SUCCESS in 45m 55s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4ac6e8cea9e34a009ea9ddd55831be65 : SUCCESS in 46m 05s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/bafe80e4195f4df48ff3f870e07609be : SUCCESS in 46m 29s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b8b35f189f8b42e9aa758dfb9c4daa90 : SUCCESS in 1h 12m 49s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/68c18d194d2f44b7b985705da265f183 : SUCCESS in 47m 51s\n- openstack-helm-compute-kit-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6d2f17d3ae0e43e4b54d055559107acc : SUCCESS in 1h 12m 51s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/27b8807385f649edb8fd1522c8397b6c : SUCCESS in 53m 48s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4479aa6953b5407b807945a5308ec421 : SUCCESS in 1h 18m 49s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/39c339a4c6f9455b9b5017b79aa11766 : SUCCESS in 42m 12s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d09c63bea8684267bf7e467e47fa306c : SUCCESS in 18m 25s\n- openstack-helm-horizon-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0a66742059794c44bc1e30268a9ba802 : SUCCESS in 20m 51s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c8c426d84516454a8a5a8b9b066320c3 : TIMED_OUT in 3h 10m 51s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/abf9aaa8b8c64c11a3527b830c6f7770 : SUCCESS in 17m 31s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/9a4987eda19549619554d0118624a021 : SUCCESS in 37m 59s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/428889b4171049909412b7250f258fca : SUCCESS in 24m 34s","accounts_in_message":[],"_revision_number":7},{"id":"1d01feda827733a686709edf0a27a3aa0a595c8c","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-06-13 16:02:38.000000000","message":"Patch Set 7:\n\n(1 comment)","accounts_in_message":[],"_revision_number":7},{"id":"b16c9691690b738e7cf7d74a7cfbaf0abe1bcc8b","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-13 17:31:50.000000000","message":"Patch Set 7: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c361206fd9b24877be02bacf1d3d323e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7052efbdaa5f484c80612bd335f447ce : SUCCESS in 2m 42s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/ac8778b002e1454398c00240863daab0 : SUCCESS in 2m 20s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/9c7432aa5ad34bad9296af70a9395468 : SUCCESS in 2m 15s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/ef2d60b191014d21abfa41d73b90b745 : SUCCESS in 2m 37s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/97480e5f9c5b41c080501f6774fc8e83 : SUCCESS in 17m 05s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2c711568f1b24ded8b371e74e7796a98 : SUCCESS in 44m 03s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d3615ac1b7b84f59b43875954299e159 : SUCCESS in 44m 02s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/855cabb2df704f61ad84a461ad868110 : SUCCESS in 34m 55s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/befb53edb5e24755a82d18ecaed66ef8 : SUCCESS in 1h 16m 09s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/da1d79a2cc204edab0d5d6410f8be56f : SUCCESS in 29m 06s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5deac38ef29d435bab69f44037bdb51a : SUCCESS in 1h 17m 08s\n- openstack-helm-compute-kit-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/ae007550791e46a684d3240e2c715d77 : SUCCESS in 47m 50s\n- openstack-helm-compute-kit-ovn-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/07717e198ce54a1e954c645a8b3ddfc8 : SUCCESS in 47m 04s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f69b3f33acfd4ffdb26a62551c4e8941 : SUCCESS in 55m 22s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/48adf929a64c44038c836b2f633bc87d : SUCCESS in 1h 13m 15s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/22dc2b7d3e354d209db278f710d0eef0 : SUCCESS in 38m 26s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e48193c126e84f58992ca3bd6b59a046 : SUCCESS in 30m 17s\n- openstack-helm-horizon-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/567172a3c8994868bedbb42367e6c26a : SUCCESS in 22m 50s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2fec2dc6615540069c3235e5d2d20061 : SUCCESS in 47m 30s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/34e01d77ad424236a984d862d90230cd : SUCCESS in 22m 46s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/767670fc5dd4474fa794ceeb348b40c1 : SUCCESS in 41m 45s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/b96c26c1c93d4fd0aa8cdf159a7f2046 : SUCCESS in 24m 08s","accounts_in_message":[],"_revision_number":7},{"id":"c426e53108a72c388947c238422ce3d250430b92","author":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"date":"2026-06-15 12:51:31.000000000","message":"Patch Set 7: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":7},{"id":"760b33b6ff53a8d78cef18b2ffdfe47faea528a1","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-15 12:52:22.000000000","message":"Patch Set 7: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":7},{"id":"3180b0afd9996dc406b265863182a0d42866135c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-15 13:39:41.000000000","message":"Patch Set 7: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/f01d74fb690046e995e53cca47d4f26e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/535819eeb19d48feb43081c5e7441a67 : SUCCESS in 4m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/c94191d1e9804b639d021f00ec1181f9 : SUCCESS in 4m 00s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/8d29911f7cf5475ebc449f9a41b6a0bf : SUCCESS in 3m 26s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/26ba3ac7060845f5a9c8c2c7587a394f : SUCCESS in 31m 13s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6c06316f011b4b95ba16d3788bb54df8 : SUCCESS in 46m 13s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/4d7df6cf90b644169062b95ab8b216e7 : SUCCESS in 40m 39s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/a617538d8e3c47aea9f6e6255773eff0 : SUCCESS in 31m 17s","accounts_in_message":[],"_revision_number":7},{"id":"1f017a172091e32fa9ab6dfc3d3b26327898ca80","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-15 13:39:41.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":7},{"id":"c8a78ff50dac7e303e119098c3d5827aa2cbcfda","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-15 13:42:54.000000000","message":"Patch Set 7:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9b155f1dfef44d23945bc991a2cb1c63\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8771723661fc4dd4ade7db5ec2d806ef : SUCCESS in 1m 02s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/38b31e5fa11d4d0c92c1220badd84e69 : SUCCESS in 53s","accounts_in_message":[],"_revision_number":7}],"current_revision_number":7,"current_revision":"9d891d3e679b522832c216f23e30e64a9b400681","revisions":{"3dc11c9a236d6b4d9d0e6d6eb608ee9cba28f118":{"kind":"REWORK","_number":1,"created":"2026-06-11 20:02:05.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/1"}}},"commit":{"parents":[{"commit":"a2a3439686403496cc8392914ef4e11db44bce06","subject":"Merge \"Use a dedicated client certificate for MariaDB TLS connections\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a2a3439686403496cc8392914ef4e11db44bce06"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"subject":"[WIP] Use mTLS and a shared client certificate for RabbitMQ","message":"[WIP] Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/3dc11c9a236d6b4d9d0e6d6eb608ee9cba28f118"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/3dc11c9a236d6b4d9d0e6d6eb608ee9cba28f118"}]},"branch":"refs/heads/master"},"f24d243908167ee5425d8469718742c32444be30":{"kind":"REWORK","_number":2,"created":"2026-06-11 22:04:18.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/2"}}},"commit":{"parents":[{"commit":"a2a3439686403496cc8392914ef4e11db44bce06","subject":"Merge \"Use a dedicated client certificate for MariaDB TLS connections\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a2a3439686403496cc8392914ef4e11db44bce06"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 22:04:15.000000000","tz":-300},"subject":"[WIP] Use mTLS and a shared client certificate for RabbitMQ","message":"[WIP] Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f24d243908167ee5425d8469718742c32444be30"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f24d243908167ee5425d8469718742c32444be30"}]},"branch":"refs/heads/master"},"f512c0fe9f8fdde611d607c891cd60a8167779a9":{"kind":"REWORK","_number":3,"created":"2026-06-11 22:53:11.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/3"}}},"commit":{"parents":[{"commit":"a2a3439686403496cc8392914ef4e11db44bce06","subject":"Merge \"Use a dedicated client certificate for MariaDB TLS connections\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a2a3439686403496cc8392914ef4e11db44bce06"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 22:53:08.000000000","tz":-300},"subject":"[WIP] Use mTLS and a shared client certificate for RabbitMQ","message":"[WIP] Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f512c0fe9f8fdde611d607c891cd60a8167779a9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/f512c0fe9f8fdde611d607c891cd60a8167779a9"}]},"branch":"refs/heads/master"},"4aeef468c29108c69a0e63f1756e2839f66c945e":{"kind":"REWORK","_number":4,"created":"2026-06-11 23:49:51.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/4"}}},"commit":{"parents":[{"commit":"a2a3439686403496cc8392914ef4e11db44bce06","subject":"Merge \"Use a dedicated client certificate for MariaDB TLS connections\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a2a3439686403496cc8392914ef4e11db44bce06"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 23:49:49.000000000","tz":-300},"subject":"[WIP] Use mTLS and a shared client certificate for RabbitMQ","message":"[WIP] Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/4aeef468c29108c69a0e63f1756e2839f66c945e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/4aeef468c29108c69a0e63f1756e2839f66c945e"}]},"branch":"refs/heads/master"},"18675ef0606a722645b85dd75da3b7ebdba69fa7":{"kind":"REWORK","_number":5,"created":"2026-06-12 15:40:51.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/5"}}},"commit":{"parents":[{"commit":"a2a3439686403496cc8392914ef4e11db44bce06","subject":"Merge \"Use a dedicated client certificate for MariaDB TLS connections\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a2a3439686403496cc8392914ef4e11db44bce06"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-12 15:40:49.000000000","tz":-300},"subject":"[WIP] Use mTLS and a shared client certificate for RabbitMQ","message":"[WIP] Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/18675ef0606a722645b85dd75da3b7ebdba69fa7"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/18675ef0606a722645b85dd75da3b7ebdba69fa7"}]},"branch":"refs/heads/master"},"929e023e86e1002c36cf625470cb54c60fb04f3c":{"kind":"REWORK","_number":6,"created":"2026-06-12 17:10:50.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/6"}}},"commit":{"parents":[{"commit":"a2a3439686403496cc8392914ef4e11db44bce06","subject":"Merge \"Use a dedicated client certificate for MariaDB TLS connections\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/a2a3439686403496cc8392914ef4e11db44bce06"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-12 17:09:59.000000000","tz":-300},"subject":"Use mTLS and a shared client certificate for RabbitMQ","message":"Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/929e023e86e1002c36cf625470cb54c60fb04f3c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/929e023e86e1002c36cf625470cb54c60fb04f3c"}]},"branch":"refs/heads/master"},"9d891d3e679b522832c216f23e30e64a9b400681":{"kind":"TRIVIAL_REBASE","_number":7,"created":"2026-06-12 22:19:53.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/27/993027/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/27/993027/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/27/993027/7"}}},"commit":{"parents":[{"commit":"bad57716b722f22734bd7dd6e7420d91ed3b67b2","subject":"feat(glance): Adds pvc for glance image staging tmp directory and functionality","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/bad57716b722f22734bd7dd6e7420d91ed3b67b2"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-11 20:01:50.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-06-12 22:19:53.000000000","tz":0},"subject":"Use mTLS and a shared client certificate for RabbitMQ","message":"Use mTLS and a shared client certificate for RabbitMQ\n\nConfigure RabbitMQ to require mutual TLS (ssl_options.fail_if_no_peer_cert\n\u003d true) so every service must present a client certificate, the messaging\nanalog of the MariaDB REQUIRE X509 change.\n\nInstead of rendering separate MariaDB and RabbitMQ client certificates, each\nchart now renders a single per-chart client certificate (\u003cchart\u003e-client) used\nfor all mTLS backend connections. The MariaDB client certificate secret is\nrenamed from \u003cchart\u003e-mariadb-client to \u003cchart\u003e-client and the\nsecrets.tls.oslo_db.\u003cchart\u003e value moves to secrets.tls.client.\u003cchart\u003e.\n\nThe RabbitMQ client certificate mount is gated on tls.oslo_messaging so\nmessaging TLS can be toggled independently of API and DB TLS, and uses the\nshared client certificate. A distinct pod volume name (rabbitmq-certs) lets\nthe same secret be mounted alongside the MariaDB certificate without a\nduplicate volume.\n\nThe helm-toolkit rabbit-init job manifest gates its client certificate mount\nand the REQUIRE X509 environment on the presence of a TLS secret instead of\nmanifests.certificates.\n\nAdd values_overrides/\u003cchart\u003e/messaging-tls.yaml, the server-side\nvalues_overrides/rabbitmq/messaging-tls.yaml with mTLS enforced, and\ntools/deployment/common/verify-rabbitmq-tls.sh wired into the compute-kit-tls\ngate.\n\nApplied to keystone, nova, neutron, glance, cinder, heat, barbican, manila and\nblazar (messaging) and freezer, horizon, placement and zaqar (cert rename).\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I8067412384008d27345763c11c8c011594d8f718\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/9d891d3e679b522832c216f23e30e64a9b400681"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/9d891d3e679b522832c216f23e30e64a9b400681"}]},"branch":"refs/heads/master","description":"Rebase","conflicts":{"base":"a2a3439686403496cc8392914ef4e11db44bce06","ours":"929e023e86e1002c36cf625470cb54c60fb04f3c","theirs":"bad57716b722f22734bd7dd6e7420d91ed3b67b2","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}