)]}'
{"id":"openstack%2Fopenstack-helm~998552","triplet_id":"openstack%2Fopenstack-helm~master~I6f469987c9e75ed926126232ffa779a0d489be92","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"3009":{"account":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"last_update":"2026-07-30 04:28:55.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I6f469987c9e75ed926126232ffa779a0d489be92","subject":"Remove unused non-admin oslo_db user secrets","status":"MERGED","created":"2026-07-23 18:58:25.000000000","updated":"2026-07-30 04:30:02.000000000","submitted":"2026-07-30 04:28:55.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"998552","meta_rev_id":"6525029578c49600cc0434482d3ab5e655fe95c0","_number":998552,"virtual_id_number":998552,"owner":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-07-30 04:28:55.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"all":[{"value":2,"date":"2026-07-28 19:33:33.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":2,"date":"2026-07-30 03:26:27.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"all":[{"value":0,"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"value":1,"date":"2026-07-30 03:26:27.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-23 20:55:33.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-07-28 19:33:33.000000000","updated_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"reviewer":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"state":"REVIEWER"},{"updated":"2026-07-30 03:26:27.000000000","updated_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"reviewer":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"state":"REVIEWER"}],"messages":[{"id":"2cf441dad0ce883113252946c3e14b796864b528","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-23 18:58:25.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"ed0f9bf1c19ca7c2c23952aeb8063aa5ba997d75","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 20:55:33.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/d5a148238f0b485f848b82e80f517b52\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8b660fa9c9df437d858c01c3259c09c4 : SUCCESS in 3m 39s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d8fd9f1026e847a3827792cf364e8a8e : SUCCESS in 3m 01s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/1abf1e979e4b4c109dbe1f269fbfeb07 : SUCCESS in 2m 02s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/e89ae5bd48574899957f37246f87efb2 : SUCCESS in 1m 49s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/9c36a63493b443f2b902087b89caea06 : SUCCESS in 14m 58s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6bd676cbdadd4a3abc9edcabb9a75e57 : SUCCESS in 46m 08s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f380310e086a45dba26a7c29a2c20d1c : FAILURE in 1h 03m 13s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e4e1c09658594258a2b3c790b0ed972f : SUCCESS in 29m 11s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c72a798d669e45eb929adc8fea0717c0 : FAILURE in 1h 12m 22s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0825968a800948a58edfe9a2bc870090 : SUCCESS in 48m 59s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/d4bda85932f04dd2aeec4ecb5161cb05 : FAILURE in 1h 08m 15s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f19b3cf1087044e8943e68d17336e671 : FAILURE in 1h 41m 43s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/86828b58bad04c31a03b81954df18177 : FAILURE in 49m 25s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/75f4dff7e4d943f684080949080a3385 : SUCCESS in 44m 06s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/abe391cb10264df3aa8223fca43a1a34 : SUCCESS in 50m 15s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/80a1f51846ce4ed983f22a86f4909778 : SUCCESS in 19m 37s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/51189fcd417d41d98714ece9c6cb538e : SUCCESS in 1h 31m 13s\n- openstack-helm-tacker-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c8533971549842c395593cfc93f02f0e : SUCCESS in 50m 11s\n- openstack-helm-trove-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/de40ff79faf94d99a2cd95f8806ff41e : SUCCESS in 1h 14m 20s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/86586c6ac21e4666af3234afbf79c5a1 : SUCCESS in 25m 45s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/4ec59fcd14cb4ba2b3662b1e540a8bc8 : SUCCESS in 40m 54s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/29b059b8f02b4f6dbdc989cd26181327 : SUCCESS in 29m 33s","accounts_in_message":[],"_revision_number":1},{"id":"1222adf94cdf5c5290a97cf959162b525ff67fb3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-23 21:20:06.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"3974c3f3b647612d719633a76c70be6be6562e23","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 22:55:38.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0c6d844aa52b4ac592b5e540f148fbef\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/722763aa30434a0d97dd1f586c140a5a : SUCCESS in 2m 13s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/99071a370ada4eea9fe6fef3e9d91f14 : SUCCESS in 2m 19s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/146e22ebfa054c25a8f246e384032bb4 : SUCCESS in 2m 29s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/519ef73abc614c489eabd9c7d51e89fb : SUCCESS in 2m 28s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/063d43c82a4846968d12db7c3ebf4266 : SUCCESS in 6m 42s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/5b383ac219ef4d5792adecbb64d91359 : SUCCESS in 43m 05s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2409136cf02c4418bf93f5add83b5c29 : SUCCESS in 46m 17s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/df3b7026473e43e29b08a3bfce5f7a34 : SUCCESS in 38m 04s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a33f3c96bbb54cd4b26c74e954cdee3d : SUCCESS in 1h 14m 29s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a18decb7e8be4e11b0ab9d953edddf95 : SUCCESS in 27m 03s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/49cd910d49eb4810a344f8e6ff64601a : SUCCESS in 47m 44s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/596fa26cb86e4a01943ca10714edf484 : SUCCESS in 1h 17m 00s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/00894f8e8e6b4865a6ce90331cdf849b : SUCCESS in 56m 23s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9037fdfcd8ab482790c1be973a49a003 : SUCCESS in 1h 18m 07s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1692644b450741c7b04fbeb78886a001 : SUCCESS in 1h 01m 51s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a7ab95beda684168b7b7c66ccbdbd0f0 : SUCCESS in 28m 57s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fc36a60c072d43d2abe79166f883de91 : SUCCESS in 1h 29m 09s\n- openstack-helm-tacker-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/781de92434c24619b21f3a644e5222cf : SUCCESS in 36m 40s\n- openstack-helm-trove-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a8eb903d1bd04e98935fa978ad1a1f59 : SUCCESS in 48m 14s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/f13109450b2345489a09114d83870175 : SUCCESS in 25m 20s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/7de5e6b0ff44426a937c21cf370a12fe : SUCCESS in 40m 27s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/d95ead0a59dc4465be3479ca9868963c : SUCCESS in 21m 25s","accounts_in_message":[],"_revision_number":2},{"id":"3ff50c351099260838376db9fcac59c78de6d380","author":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"},"date":"2026-07-28 19:33:33.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"0d2076695b42d8293d12f255032282bc60b51476","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-07-30 03:26:27.000000000","message":"Patch Set 2: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"1132b1b7e2e669e730ec05f720155e216f71dff2","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-30 03:26:40.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"b267b5260c4fba19392edf62aa682adb911a4d59","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-30 04:28:55.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5a7a22d5cd104073ba5604bf3e970139\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c9f6ce4b9def41a5a6fdd00b2b374f2b : SUCCESS in 2m 17s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d2d1684d1860437f809b66cbac98c00e : SUCCESS in 3m 04s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/249cc230ddaa44f5a8cb4b2689ae0f68 : SUCCESS in 1m 59s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8c5f6b7a760840b09249c99c0ec33823 : SUCCESS in 48m 28s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/4f840b1634a8462ab1f7fb82f127b5b9 : SUCCESS in 56m 46s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/93df460d59c74d69b6f06abc2178763f : SUCCESS in 38m 45s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/ce58a90b17234163bc99507e7867976a : SUCCESS in 21m 48s","accounts_in_message":[],"_revision_number":2},{"id":"c66f2ff00dbce4486d6f5818b567d4ed8ec7a596","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-30 04:28:55.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"6525029578c49600cc0434482d3ab5e655fe95c0","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-30 04:30:02.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b31bd092b54d4eac93223738d5e1bf77\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/cdb1690d438c49ff9c6174b4659b150f : SUCCESS in 56s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1f98934e4f77465180d520ac241f8910 : SUCCESS in 45s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"11592d6079651f5d217e5d20719f8d6dfc232289","revisions":{"3eb39a9d5dceb012158978947dacd33209345f4b":{"kind":"REWORK","_number":1,"created":"2026-07-23 18:58:25.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/52/998552/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/52/998552/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/1"}}},"commit":{"parents":[{"commit":"50c697fc3cb4307d7f8e278a1ad7366e5f7260a7","subject":"Merge \"Terminate API TLS with nginx sidecars\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/50c697fc3cb4307d7f8e278a1ad7366e5f7260a7"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-23 18:58:17.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-23 18:58:24.000000000","tz":-300},"subject":"Remove unused non-admin oslo_db user secrets","message":"Remove unused non-admin oslo_db user secrets\n\nThe db-init and db-sync jobs of oslo.config based services read the\nservice database connection string from the rendered service config\nfile (populated from the oslo_db endpoint) and take the root\nconnection from the admin secret. The per-service non-admin oslo_db\nDB_CONNECTION secret created by secret-db.yaml was therefore never\nmounted or referenced by any job or pod.\n\nStop creating these dead secrets and drop their orphaned\nsecrets.oslo_db.\u003cservice\u003e values entries. Only secrets that still have\na live consumer are kept: nova oslo_db/oslo_db_cell0 (db-sync), grafana\noslo_db_session.user, and the secret-input db-init/db-drop paths of\ncloudkitty, masakari, horizon, skyline and powerdns.\n\nAuxiliary dead secrets are removed as well: the nova oslo_db_api,\noctavia oslo_db_persistence and gnocchi oslo_db_indexer non-admin user\nsecrets.\n\nRelease notes are added for all affected charts.\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I6f469987c9e75ed926126232ffa779a0d489be92\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/3eb39a9d5dceb012158978947dacd33209345f4b"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/3eb39a9d5dceb012158978947dacd33209345f4b"}]},"branch":"refs/heads/master"},"11592d6079651f5d217e5d20719f8d6dfc232289":{"kind":"REWORK","_number":2,"created":"2026-07-23 21:20:06.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/52/998552/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/52/998552/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/52/998552/2"}}},"commit":{"parents":[{"commit":"50c697fc3cb4307d7f8e278a1ad7366e5f7260a7","subject":"Merge \"Terminate API TLS with nginx sidecars\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/50c697fc3cb4307d7f8e278a1ad7366e5f7260a7"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-23 18:58:17.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-23 21:19:57.000000000","tz":-300},"subject":"Remove unused non-admin oslo_db user secrets","message":"Remove unused non-admin oslo_db user secrets\n\nThe db-init and db-sync jobs of oslo.config based services read the\nservice database connection string from the rendered service config\nfile (populated from the oslo_db endpoint) and take the root\nconnection from the admin secret. The per-service non-admin oslo_db\nDB_CONNECTION secret created by secret-db.yaml was therefore never\nmounted or referenced by any job or pod.\n\nStop creating these dead secrets and drop their orphaned\nsecrets.oslo_db.\u003cservice\u003e values entries. Only secrets that still have\na live consumer are kept: nova oslo_db/oslo_db_cell0 (db-sync), grafana\noslo_db_session.user, and the secret-input db-init/db-drop paths of\ncloudkitty, masakari, horizon, skyline and powerdns.\n\nAuxiliary dead secrets are removed as well: the nova oslo_db_api,\noctavia oslo_db_persistence and gnocchi oslo_db_indexer non-admin user\nsecrets.\n\nThe verify-mariadb-tls.sh CI helper previously read DB_CONNECTION from\nthe per-service \u003cservice\u003e-db-user secret. It now sources the service\nconnection string from the rendered oslo config in the \u003cservice\u003e-etc\nsecret, so it no longer depends on the removed secrets.\n\nRelease notes are added for all affected charts.\n\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\nChange-Id: I6f469987c9e75ed926126232ffa779a0d489be92\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/11592d6079651f5d217e5d20719f8d6dfc232289"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/11592d6079651f5d217e5d20719f8d6dfc232289"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":7156,"name":"Mathieu Gagné","email":"mgagne@calavera.ca","username":"mgagne"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}