)]}'
{"id":"openstack%2Fopenstack-helm~998831","triplet_id":"openstack%2Fopenstack-helm~master~I32e225e8218bf33636a26954f743a396fbe8dc29","project":"openstack/openstack-helm","branch":"master","attention_set":{},"removed_from_attention_set":{"3009":{"account":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"last_update":"2026-07-29 19:48:53.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I32e225e8218bf33636a26954f743a396fbe8dc29","subject":"Drop unused endpoints TLS client-secret metadata","status":"MERGED","created":"2026-07-27 17:23:36.000000000","updated":"2026-07-29 19:49:49.000000000","submitted":"2026-07-29 19:48:53.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"998831","meta_rev_id":"9643059e40d4074a4e4ed574a0d35898959145ee","_number":998831,"virtual_id_number":998831,"owner":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-07-29 19:48:52.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"all":[{"value":2,"date":"2026-07-29 18:37:15.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":2,"date":"2026-07-28 16:55:57.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"all":[{"value":1,"date":"2026-07-29 18:37:15.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"value":0,"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-27 19:12:42.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-07-28 16:55:57.000000000","updated_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"reviewer":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"state":"REVIEWER"},{"updated":"2026-07-29 18:37:15.000000000","updated_by":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"reviewer":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"state":"REVIEWER"}],"messages":[{"id":"be167c1857306e0fd0e1eb6b2db342f66d5ac0b6","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-27 17:23:36.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"a56dffac11dcea7297b3cc11732045eae87db445","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-27 17:25:12.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"53f7cd830936030c2c68e876cc8b7e811550b3e8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-27 19:12:42.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a2c140d23f6f4ef1a09a990f9f9f860a\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e42835405c0242fe8d36ac7c3f0c8d1d : SUCCESS in 3m 23s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/10468d75b27e4468864ab2fee2b17107 : SUCCESS in 3m 28s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/dca1775b8a7c42cbb5855be8bb1d4c91 : SUCCESS in 3m 28s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/ab6d8dd765894291b77966881d00b658 : SUCCESS in 4m 19s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/d8535d42dc3c444f949446b4b4f69208 : SUCCESS in 12m 26s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/e831eba5fbcf410b9415c2237b14cef4 : SUCCESS in 45m 09s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/278647857af74c819c14d64b28544033 : SUCCESS in 1h 13m 03s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0f238fa7f6d445a5806c9bf789c31bcc : SUCCESS in 46m 26s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b1feead5b63d4346a89d8a9807a46ae1 : SUCCESS in 1h 11m 20s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c8618b6edc034658895c738d5ebdda57 : SUCCESS in 44m 00s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/76c3a25ca7384959baab41379525a085 : SUCCESS in 1h 12m 44s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/748f40edee40430a8dbe6855aa64ea40 : SUCCESS in 1h 40m 05s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/14cc7293f8da4fa0be468026ba5b2802 : SUCCESS in 54m 26s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/223550f62d8b4db180d35703c6a8f94c : SUCCESS in 1h 19m 09s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a6f9a24f763841c9acea35164ff213a1 : SUCCESS in 1h 07m 13s\n- openstack-helm-cloudkitty-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6f9a9543ed9f4a389dba59c9a753b011 : SUCCESS in 50m 52s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/07e04f2c7d5148f8a4f009b598537e6a : SUCCESS in 25m 37s\n- openstack-helm-horizon-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/08ea1c6982ba4a0e83f57a7827b97f2a : SUCCESS in 25m 32s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/a3f4509961e948318bb1c1f06bb11e6f : SUCCESS in 1h 32m 46s\n- openstack-helm-skyline-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/56fe7b79a1e04822be27ac6d7de8b873 : SUCCESS in 52m 40s\n- openstack-helm-tacker-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/c80168b6c6e849a793c0e334bfe5001b : SUCCESS in 46m 56s\n- openstack-helm-trove-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0d647c7821404246bc4051c3860cd189 : SUCCESS in 1h 05m 13s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/fb00a3d0fb044415ac73a36286629003 : SUCCESS in 26m 47s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/f29080db56754ae39ab8f22cd84c8ce9 : SUCCESS in 40m 08s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/7d6cc0145ed543c38abda83c99102efe : SUCCESS in 32m 49s","accounts_in_message":[],"_revision_number":2},{"id":"17e8a3e9fee113e30561eb217912f492b2df31e8","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-27 23:16:58.000000000","message":"Patch Set 2:\n\nThis change is ready for review.","accounts_in_message":[],"_revision_number":2},{"id":"a7fc27faa3a7fdb6faed174c7b617b61995b7571","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-27 23:21:08.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"13bb1a4c18b69875804cee12392ddc53b0dcb681","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"date":"2026-07-27 23:38:43.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"d3d98db9baa8025bcc3538db37f36bd761e6ac17","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-28 01:06:41.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/cded5a76b1d84a9abdcb8e6b88bf60ad\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a4cc2f155f3e427192ca6330cbfc09bd : SUCCESS in 4m 11s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/51ae006efa3141769e6568067735a591 : SUCCESS in 3m 59s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/7cccea7fe7804a63973e515b508428bc : SUCCESS in 3m 14s\n- openstack-helm-pre-commit https://zuul.opendev.org/t/openstack/build/f29726ce82714537b447a7c55ef8dfd4 : SUCCESS in 2m 34s\n- openstack-helm-build-charts https://zuul.opendev.org/t/openstack/build/df2b5e9a689f411e908b67e9dc1c6290 : SUCCESS in 12m 46s\n- openstack-helm-cinder-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8460404083c44711a5956c98e5654be3 : SUCCESS in 25m 54s\n- openstack-helm-compute-kit-2025-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/92798baeb1cc43a1b5dbfc30433ec0a5 : SUCCESS in 1h 19m 11s\n- openstack-helm-cinder-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/eb478e6a5f484d67b02b5035409b26e3 : SUCCESS in 42m 15s\n- openstack-helm-compute-kit-2025-2-ubuntu_noble https://zuul.opendev.org/t/openstack/build/9023fb3710e24cfdbbab68a1ba59d498 : SUCCESS in 1h 03m 33s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/b4c2b5bfef0341e5b8635d7dfd2f7f6e : SUCCESS in 26m 52s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/64b6609c837d45d7aa584e987dd5b240 : SUCCESS in 1h 02m 30s\n- openstack-helm-tls-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/52a4d8b97a5f470eb54744eb96cdfe3a : SUCCESS in 1h 25m 07s\n- openstack-helm-compute-kit-dpdk-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/7e7088fa17d2430b86f510ede0245274 : SUCCESS in 56m 08s\n- openstack-helm-octavia-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/0a822a9f18d44709ae4c0791fec9e791 : SUCCESS in 46m 58s\n- openstack-helm-blazar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/cf5c3b86be7f4ce581bf1608cb3eb75f : SUCCESS in 1h 01m 24s\n- openstack-helm-cloudkitty-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/2f4480187c4a40b5a97b3d4cfc437b25 : SUCCESS in 53m 08s\n- openstack-helm-freezer-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/39b7280db82a4dada4b3206f9e377883 : SUCCESS in 25m 14s\n- openstack-helm-horizon-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/1f4c17df1bce43c8be7408b100df5a9b : SUCCESS in 13m 24s\n- openstack-helm-manila-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/16c6480179ca4139a7badf425190e307 : SUCCESS in 51m 39s\n- openstack-helm-skyline-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/8f57dd71e63644769b2b3888d8545840 : SUCCESS in 53m 51s\n- openstack-helm-tacker-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/80b23218c27b4e09b37600ff7c8f8e3e : SUCCESS in 38m 07s\n- openstack-helm-trove-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/6678cb9a51464944a9a47af86fe6e2bf : SUCCESS in 1h 04m 00s\n- openstack-helm-zaqar-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/16610e6c7da3411d82e77a69b15bfda5 : SUCCESS in 16m 01s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/66aa2b388ab04dceb478c720e920a0a7 : SUCCESS in 35m 52s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/60a398d6042a490e90254dbbcb457a93 : SUCCESS in 20m 01s","accounts_in_message":[],"_revision_number":4},{"id":"4aa552d076200c0418b999602c28b033690c7b2e","author":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"},"date":"2026-07-28 16:55:57.000000000","message":"Patch Set 4: Code-Review+2","accounts_in_message":[],"_revision_number":4},{"id":"16d2b50153d1931c09f928bb070fe3ff45d744bb","author":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"},"date":"2026-07-29 18:37:15.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"bca06f77a4e186c557e99d4aa8adfe416fb586fe","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 18:37:28.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"eec3746a22d610c865469c3203113c78c3733b5e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 19:48:52.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/6c5861ecc6534b7b82c4015c7eedfd17\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d09987aefc4847248bd72bb5e0b7c3dd : SUCCESS in 3m 45s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5562c0d2c7034287ba710cd84345dcea : SUCCESS in 2m 37s\n- openstack-helm-linter https://zuul.opendev.org/t/openstack/build/bf0568c5960e47fa8ebce13a32f349d6 : SUCCESS in 2m 14s\n- openstack-helm-cinder-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/faba426a654b45dfb697bdd3479a028f : SUCCESS in 47m 41s\n- openstack-helm-compute-kit-2026-1-ubuntu_noble https://zuul.opendev.org/t/openstack/build/03752d4d876a4ff19b94ddc1ca47becc : SUCCESS in 1h 04m 31s\n- openstack-helm-logging https://zuul.opendev.org/t/openstack/build/627ee157fd0b4583a6a759188b17de02 : SUCCESS in 41m 26s\n- openstack-helm-monitoring https://zuul.opendev.org/t/openstack/build/3838387608564b4490f0ac0cfa8eae9e : SUCCESS in 30m 46s","accounts_in_message":[],"_revision_number":4},{"id":"f703d91661499e9d76d85f76ae41f48d4b9a3c7f","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 19:48:53.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"9643059e40d4074a4e4ed574a0d35898959145ee","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 19:49:49.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c2e30e0ffea84d49859fb546d030c067\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3aa9068a1bc347638d07231af2d91179 : SUCCESS in 47s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1ad6ed1dc37f4652b94cfe0a74fdf13c : SUCCESS in 43s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"fd5baacc6df043614f26b0e74c9f1dd08b01baad","revisions":{"7aa325d7bf207a8449b446b3f78b9a71e0f2c832":{"kind":"REWORK","_number":1,"created":"2026-07-27 17:23:36.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/31/998831/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/31/998831/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/1"}}},"commit":{"parents":[{"commit":"50c697fc3cb4307d7f8e278a1ad7366e5f7260a7","subject":"Merge \"Terminate API TLS with nginx sidecars\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/50c697fc3cb4307d7f8e278a1ad7366e5f7260a7"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:18:13.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:23:34.000000000","tz":-300},"subject":"Drop unused endpoints TLS client-secret metadata","message":"Drop unused endpoints TLS client-secret metadata\n\nThe endpoints.oslo_db.auth.admin.secret.tls and\nendpoints.oslo_messaging.auth.admin.secret.tls values pointed the DB/RabbitMQ\nmTLS client certificate at the server certificate secret (mariadb-tls-direct /\nrabbitmq-tls-direct). Most charts already mint a dedicated per-chart client\ncertificate via secrets.tls.client.\u003cservice\u003e and no longer read these values,\nleaving them as dead metadata.\n\nRemove the metadata from all oslo_db/oslo_messaging endpoints. Migrate the\ncharts that still consumed it (cloudkitty, skyline, tacker, trove and grafana)\nto the secrets.tls.client.\u003cservice\u003e pattern: they now issue their own client\ncertificate through certificates.yaml, gated on tls.oslo_db /\ntls.oslo_messaging, instead of reusing the server certificate. Also drop the\norphaned oslo_db client-cert volume from the manila share statefulset (the\nshared client-certs volume already provides it).\n\nThe elasticsearch and monitoring endpoints keep their auth.admin.secret.tls\nvalues, which are still actively consumed by fluentd, kibana and nagios.\n\nChange-Id: I32e225e8218bf33636a26954f743a396fbe8dc29\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/7aa325d7bf207a8449b446b3f78b9a71e0f2c832"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/7aa325d7bf207a8449b446b3f78b9a71e0f2c832"}]},"branch":"refs/heads/master"},"e9d311246af77d8fdfacadce6b2d60ea9effbfe7":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2026-07-27 17:25:12.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/31/998831/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/31/998831/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/2"}}},"commit":{"parents":[{"commit":"50c697fc3cb4307d7f8e278a1ad7366e5f7260a7","subject":"Merge \"Terminate API TLS with nginx sidecars\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/50c697fc3cb4307d7f8e278a1ad7366e5f7260a7"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:18:13.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:25:10.000000000","tz":-300},"subject":"Drop unused endpoints TLS client-secret metadata","message":"Drop unused endpoints TLS client-secret metadata\n\nThe endpoints.oslo_db.auth.admin.secret.tls and\nendpoints.oslo_messaging.auth.admin.secret.tls values pointed\nthe DB/RabbitMQ mTLS client certificate at the server\ncertificate secret (mariadb-tls-direct / rabbitmq-tls-direct).\nMost charts already mint a dedicated per-chart client\ncertificate via secrets.tls.client.\u003cservice\u003e and no longer read\nthese values, leaving them as dead metadata.\n\nRemove the metadata from all oslo_db/oslo_messaging endpoints.\nMigrate the charts that still consumed it (cloudkitty, skyline,\ntacker, trove and grafana) to the secrets.tls.client.\u003cservice\u003e\npattern: they now issue their own client certificate through\ncertificates.yaml, gated on tls.oslo_db / tls.oslo_messaging,\ninstead of reusing the server certificate. Also drop the\norphaned oslo_db client-cert volume from the manila share\nstatefulset (the shared client-certs volume already provides\nit).\n\nThe elasticsearch and monitoring endpoints keep their\nauth.admin.secret.tls values, which are still actively consumed\nby fluentd, kibana and nagios.\n\nChange-Id: I32e225e8218bf33636a26954f743a396fbe8dc29\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e9d311246af77d8fdfacadce6b2d60ea9effbfe7"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e9d311246af77d8fdfacadce6b2d60ea9effbfe7"}]},"branch":"refs/heads/master"},"e6dbde8e45e10246deac677f7b152dd3308c3d24":{"kind":"REWORK","_number":3,"created":"2026-07-27 23:21:08.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/31/998831/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/31/998831/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/3"}}},"commit":{"parents":[{"commit":"50c697fc3cb4307d7f8e278a1ad7366e5f7260a7","subject":"Merge \"Terminate API TLS with nginx sidecars\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/50c697fc3cb4307d7f8e278a1ad7366e5f7260a7"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:18:13.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:49:48.000000000","tz":-300},"subject":"Drop unused endpoints TLS client-secret metadata","message":"Drop unused endpoints TLS client-secret metadata\n\nThe endpoints.oslo_db.auth.admin.secret.tls and\nendpoints.oslo_messaging.auth.admin.secret.tls values pointed\nthe DB/RabbitMQ mTLS client certificate at the server\ncertificate secret (mariadb-tls-direct / rabbitmq-tls-direct).\nMost charts already mint a dedicated per-chart client\ncertificate via secrets.tls.client.\u003cservice\u003e and no longer read\nthese values, leaving them as dead metadata.\n\nRemove the metadata from all oslo_db/oslo_messaging endpoints.\nMigrate the charts that still consumed it (cloudkitty, skyline,\ntacker, trove and grafana) to the secrets.tls.client.\u003cservice\u003e\npattern: they now issue their own client certificate through\ncertificates.yaml, gated on tls.oslo_db / tls.oslo_messaging,\ninstead of reusing the server certificate. Also drop the\norphaned oslo_db client-cert volume from the manila share\nstatefulset (the shared client-certs volume already provides\nit).\n\nThe elasticsearch and monitoring endpoints keep their\nauth.admin.secret.tls values, which are still actively consumed\nby fluentd, kibana and nagios.\n\nChange-Id: I32e225e8218bf33636a26954f743a396fbe8dc29\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e6dbde8e45e10246deac677f7b152dd3308c3d24"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/e6dbde8e45e10246deac677f7b152dd3308c3d24"}]},"branch":"refs/heads/master"},"fd5baacc6df043614f26b0e74c9f1dd08b01baad":{"kind":"REWORK","_number":4,"created":"2026-07-27 23:38:43.000000000","uploader":{"_account_id":3009,"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","username":"kozhukalov"},"ref":"refs/changes/31/998831/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/openstack-helm","ref":"refs/changes/31/998831/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/openstack-helm refs/changes/31/998831/4"}}},"commit":{"parents":[{"commit":"50c697fc3cb4307d7f8e278a1ad7366e5f7260a7","subject":"Merge \"Terminate API TLS with nginx sidecars\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/50c697fc3cb4307d7f8e278a1ad7366e5f7260a7"}]}],"author":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 17:18:13.000000000","tz":-300},"committer":{"name":"Vladimir Kozhukalov","email":"kozhukalov@gmail.com","date":"2026-07-27 23:37:23.000000000","tz":-300},"subject":"Drop unused endpoints TLS client-secret metadata","message":"Drop unused endpoints TLS client-secret metadata\n\nThe endpoints.oslo_db.auth.admin.secret.tls and\nendpoints.oslo_messaging.auth.admin.secret.tls values pointed\nthe DB/RabbitMQ mTLS client certificate at the server\ncertificate secret (mariadb-tls-direct / rabbitmq-tls-direct).\nMost charts already mint a dedicated per-chart client\ncertificate via secrets.tls.client.\u003cservice\u003e and no longer read\nthese values, leaving them as dead metadata.\n\nRemove the metadata from all oslo_db/oslo_messaging endpoints.\nMigrate the charts that still consumed it (cloudkitty, skyline,\ntacker, trove and grafana) to the secrets.tls.client.\u003cservice\u003e\npattern: they now issue their own client certificate through\ncertificates.yaml, gated on tls.oslo_db / tls.oslo_messaging,\ninstead of reusing the server certificate. Also drop the\norphaned oslo_db client-cert volume from the manila share\nstatefulset (the shared client-certs volume already provides\nit).\n\nThe elasticsearch and monitoring endpoints keep their\nauth.admin.secret.tls values, which are still actively consumed\nby fluentd, kibana and nagios.\n\nChange-Id: I32e225e8218bf33636a26954f743a396fbe8dc29\nSigned-off-by: Vladimir Kozhukalov \u003ckozhukalov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/fd5baacc6df043614f26b0e74c9f1dd08b01baad"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/openstack-helm/commit/fd5baacc6df043614f26b0e74c9f1dd08b01baad"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":34520,"name":"Sergiy Markin","email":"smarkin@mirantis.com","username":"sm515x"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":29974,"name":"Stephen Taylor","email":"stephen.taylor.1@att.com","username":"st053q"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}