)]}'
{"id":"openstack%2Fpuppet-keystone~133601","triplet_id":"openstack%2Fpuppet-keystone~master~I9a4f72f9a1de200b324aa52eb3ea90d15423c062","project":"openstack/puppet-keystone","branch":"master","topic":"bug/1391373","hashtags":[],"change_id":"I9a4f72f9a1de200b324aa52eb3ea90d15423c062","subject":"handle missing project/tenant when using ldap backend","status":"MERGED","created":"2014-11-11 03:07:17.000000000","updated":"2015-01-26 14:44:31.000000000","submitted":"2015-01-25 04:19:24.000000000","submitter":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"total_comment_count":32,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"e750632d811eb21e8252abad4de8c74be8b6cee5","_number":133601,"virtual_id_number":133601,"owner":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"all":[{"value":0,"_account_id":6525,"name":"Gilles Dubreuil","email":"gilles@redhat.com","username":"q-1illes-a"},{"value":0,"_account_id":13294,"name":"Javier Peña","email":"jpena@redhat.com","username":"jpena"},{"value":0,"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},{"value":0,"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},{"value":0,"_account_id":5241,"name":"Martin Magr","email":"mmagr@redhat.com","username":"mmagr"},{"value":0,"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},{"value":0,"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":0,"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":2,"date":"2015-01-25 04:19:24.000000000","_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"all":[{"value":0,"_account_id":6525,"name":"Gilles Dubreuil","email":"gilles@redhat.com","username":"q-1illes-a"},{"value":0,"_account_id":13294,"name":"Javier Peña","email":"jpena@redhat.com","username":"jpena"},{"value":0,"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},{"value":0,"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},{"value":0,"_account_id":5241,"name":"Martin Magr","email":"mmagr@redhat.com","username":"mmagr"},{"value":0,"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},{"value":2,"date":"2015-01-25 03:40:14.000000000","_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":2,"date":"2015-01-25 04:13:24.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"all":[{"value":0,"_account_id":6525,"name":"Gilles Dubreuil","email":"gilles@redhat.com","username":"q-1illes-a"},{"value":0,"_account_id":13294,"name":"Javier Peña","email":"jpena@redhat.com","username":"jpena"},{"value":0,"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},{"value":0,"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},{"value":0,"_account_id":5241,"name":"Martin Magr","email":"mmagr@redhat.com","username":"mmagr"},{"value":0,"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},{"value":0,"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":1,"date":"2015-01-25 04:13:24.000000000","_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"_account_id":5241,"name":"Martin Magr","email":"mmagr@redhat.com","username":"mmagr"},{"_account_id":6525,"name":"Gilles Dubreuil","email":"gilles@redhat.com","username":"q-1illes-a"},{"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},{"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},{"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"},{"_account_id":13294,"name":"Javier Peña","email":"jpena@redhat.com","username":"jpena"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2014-11-12 07:57:06.000000000","updated_by":{"_account_id":5241,"name":"Martin Magr","email":"mmagr@redhat.com","username":"mmagr"},"reviewer":{"_account_id":5241,"name":"Martin Magr","email":"mmagr@redhat.com","username":"mmagr"},"state":"REVIEWER"},{"updated":"2014-11-12 07:57:12.000000000","updated_by":{"_account_id":13294,"name":"Javier Peña","email":"jpena@redhat.com","username":"jpena"},"reviewer":{"_account_id":13294,"name":"Javier Peña","email":"jpena@redhat.com","username":"jpena"},"state":"REVIEWER"},{"updated":"2014-11-12 07:57:23.000000000","updated_by":{"_account_id":6525,"name":"Gilles Dubreuil","email":"gilles@redhat.com","username":"q-1illes-a"},"reviewer":{"_account_id":6525,"name":"Gilles Dubreuil","email":"gilles@redhat.com","username":"q-1illes-a"},"state":"REVIEWER"},{"updated":"2014-11-20 20:30:39.000000000","updated_by":{"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},"reviewer":{"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},"state":"REVIEWER"},{"updated":"2014-11-21 09:21:46.000000000","updated_by":{"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"},"reviewer":{"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"},"state":"REVIEWER"},{"updated":"2015-01-14 14:48:51.000000000","updated_by":{"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},"reviewer":{"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},"state":"REVIEWER"},{"updated":"2015-01-25 03:40:14.000000000","updated_by":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"reviewer":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"state":"REVIEWER"},{"updated":"2015-01-25 04:13:24.000000000","updated_by":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"reviewer":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"state":"REVIEWER"},{"updated":"2015-01-25 04:19:24.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"}],"messages":[{"id":"ace4a77618de98acba70133f4547790959971028","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-11 03:07:17.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f753fbfbc4064548b6d008d902ef5ce841bb27ce","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-11 03:08:18.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGit#Test_Failures\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/1/check/gate-puppet-keystone-puppet-lint/07b5559 : SUCCESS in 17s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/1/check/gate-puppet-keystone-puppet-syntax/07c570a : SUCCESS in 7s\n- gate-puppet-keystone-puppet-unit-3.1 http://logs.openstack.org/01/133601/1/check/gate-puppet-keystone-puppet-unit-3.1/b21551d : FAILURE in 19s\n- gate-puppet-keystone-puppet-unit-3.2 http://logs.openstack.org/01/133601/1/check/gate-puppet-keystone-puppet-unit-3.2/995c8f3 : FAILURE in 27s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/1/check/gate-puppet-keystone-puppet-unit-3.3/da66f59 : FAILURE in 54s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/1/check/gate-puppet-keystone-puppet-unit-3.4/907bcee : FAILURE in 58s","accounts_in_message":[],"_revision_number":1},{"id":"6cf454fdee8a1febf7b4de5db7a1ced8ccb43dba","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-11 03:10:24.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"2636e7a848020538091b405ac340915bbe648901","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-11 03:12:56.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGit#Test_Failures\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/2/check/gate-puppet-keystone-puppet-lint/e77975a : SUCCESS in 14s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/2/check/gate-puppet-keystone-puppet-syntax/d97aac5 : SUCCESS in 7s\n- gate-puppet-keystone-puppet-unit-3.1 http://logs.openstack.org/01/133601/2/check/gate-puppet-keystone-puppet-unit-3.1/e767baa : FAILURE in 22s\n- gate-puppet-keystone-puppet-unit-3.2 http://logs.openstack.org/01/133601/2/check/gate-puppet-keystone-puppet-unit-3.2/8eacaf7 : FAILURE in 28s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/2/check/gate-puppet-keystone-puppet-unit-3.3/75fa91a : FAILURE in 1m 02s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/2/check/gate-puppet-keystone-puppet-unit-3.4/e3aaf22 : FAILURE in 1m 22s","accounts_in_message":[],"_revision_number":2},{"id":"7596cd735c7ccf8eb7c438e9015b48c03ad31c65","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-13 01:53:02.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"6991e2ef4fe8b968e0118893a6772d611e236052","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-13 01:57:06.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/3/check/gate-puppet-keystone-puppet-lint/9196206 : SUCCESS in 22s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/3/check/gate-puppet-keystone-puppet-syntax/c4c195a : SUCCESS in 17s\n- gate-puppet-keystone-puppet-unit-3.1 http://logs.openstack.org/01/133601/3/check/gate-puppet-keystone-puppet-unit-3.1/390bbe3 : SUCCESS in 53s\n- gate-puppet-keystone-puppet-unit-3.2 http://logs.openstack.org/01/133601/3/check/gate-puppet-keystone-puppet-unit-3.2/7b3df8a : SUCCESS in 1m 26s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/3/check/gate-puppet-keystone-puppet-unit-3.3/1b4bf1f : SUCCESS in 1m 18s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/3/check/gate-puppet-keystone-puppet-unit-3.4/3eee18b : SUCCESS in 1m 30s","accounts_in_message":[],"_revision_number":3},{"id":"b149c36b8e1ed2f7e7b3623f1e9efdd7fe3c40a7","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-14 15:14:54.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"ce608fe4bfca7f2ef175b216991f6e8a2e4ffef9","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-14 15:25:07.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/4/check/gate-puppet-keystone-puppet-lint/146efb8 : SUCCESS in 19s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/4/check/gate-puppet-keystone-puppet-syntax/c869387 : SUCCESS in 8s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/4/check/gate-puppet-keystone-puppet-unit-3.3/fc8b2ad : SUCCESS in 1m 06s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/4/check/gate-puppet-keystone-puppet-unit-3.4/def9046 : SUCCESS in 1m 15s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/4/check/gate-puppet-keystone-puppet-unit-3.6/8c2cad1 : SUCCESS in 1m 05s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/4/check/gate-puppet-keystone-puppet-unit-3.7/656e062 : SUCCESS in 1m 09s","accounts_in_message":[],"_revision_number":4},{"id":"46a34138330b7e896fbd4f70ff7a8762035b1eb6","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2014-11-18 01:27:52.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"d6da080b853af4251aec417981e488615e2d72f0","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-18 02:04:37.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"e57ce313dba0e1b3ea96e124888169f8bdad0c42","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2014-11-18 03:10:07.000000000","message":"Patch Set 4:\n\nYes, that what I supposed, but do we need to keep it?","accounts_in_message":[],"_revision_number":4},{"id":"471a57c8bce8e7f6b9b26ec275f9e00dc7ecd923","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-18 03:21:37.000000000","message":"Uploaded patch set 5.","accounts_in_message":[],"_revision_number":5},{"id":"c09f6a4401a5243ddad83213cdaf92c6c43cdab8","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-18 03:22:41.000000000","message":"Patch Set 5:\n\nI removed all of the debugs, and reverted back some code I had rearranged for debugging","accounts_in_message":[],"_revision_number":5},{"id":"f9ea3bc7b203d9b44c8a80f86b552df326431a7c","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-18 03:27:44.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see https://wiki.openstack.org/wiki/GerritJenkinsGit#Test_Failures\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/5/check/gate-puppet-keystone-puppet-lint/1cc0cbd : SUCCESS in 22s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/5/check/gate-puppet-keystone-puppet-syntax/35a4d1c : SUCCESS in 8s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/5/check/gate-puppet-keystone-puppet-unit-3.3/145cd9e : FAILURE in 54s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/5/check/gate-puppet-keystone-puppet-unit-3.4/c634b5f : FAILURE in 1m 47s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/5/check/gate-puppet-keystone-puppet-unit-3.6/f65edcb : FAILURE in 1m 58s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/5/check/gate-puppet-keystone-puppet-unit-3.7/921d315 : FAILURE in 59s","accounts_in_message":[],"_revision_number":5},{"id":"fe999936971ef296ce3497dcca73e6024161322b","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-18 03:35:05.000000000","message":"Uploaded patch set 6.","accounts_in_message":[],"_revision_number":6},{"id":"b5e6ba05b261c9960df045ed69d0632b65c66488","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-18 03:40:59.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/6/check/gate-puppet-keystone-puppet-lint/b1ad013 : SUCCESS in 16s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/6/check/gate-puppet-keystone-puppet-syntax/40fcd32 : SUCCESS in 9s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/6/check/gate-puppet-keystone-puppet-unit-3.3/6618b03 : SUCCESS in 1m 39s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/6/check/gate-puppet-keystone-puppet-unit-3.4/4318544 : SUCCESS in 1m 17s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/6/check/gate-puppet-keystone-puppet-unit-3.6/5131445 : SUCCESS in 1m 57s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/6/check/gate-puppet-keystone-puppet-unit-3.7/85445ba : SUCCESS in 1m 16s","accounts_in_message":[],"_revision_number":6},{"id":"6d63569d3311a6482ae45fffaee79e7b20140705","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2014-11-19 21:50:40.000000000","message":"Patch Set 6: Code-Review+2","accounts_in_message":[],"_revision_number":6},{"id":"34f429376da2548040c9cb63af18df7d0c010b19","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-11-20 13:36:21.000000000","message":"Uploaded patch set 7.","accounts_in_message":[],"_revision_number":7},{"id":"32ecc2f0c484ff8cde62ee971fc0a47f8546ab79","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-11-20 13:45:33.000000000","message":"Patch Set 7: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/7/check/gate-puppet-keystone-puppet-lint/311e762 : SUCCESS in 20s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/7/check/gate-puppet-keystone-puppet-syntax/622564c : SUCCESS in 9s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/7/check/gate-puppet-keystone-puppet-unit-3.3/7ab79d7 : SUCCESS in 1m 43s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/7/check/gate-puppet-keystone-puppet-unit-3.4/b51a033 : SUCCESS in 1m 11s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/7/check/gate-puppet-keystone-puppet-unit-3.6/e03270f : SUCCESS in 57s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/7/check/gate-puppet-keystone-puppet-unit-3.7/d536f2d : SUCCESS in 1m 16s","accounts_in_message":[],"_revision_number":7},{"id":"b17b56aa4d73f56255f8291bb70d57c488a6b609","author":{"_account_id":7462,"name":"Ivan Chavero","email":"ichavero@redhat.com","username":"ichavero"},"date":"2014-11-20 20:30:39.000000000","message":"Patch Set 7: Code-Review+1","accounts_in_message":[],"_revision_number":7},{"id":"c1dd7278a63a74a3ae68a0ec678cb880ac4afe4d","author":{"_account_id":11491,"name":"Gael Chamoulaud","email":"gchamoul@redhat.com","username":"gchamoul"},"date":"2014-11-21 09:21:46.000000000","message":"Patch Set 7: Code-Review+1","accounts_in_message":[],"_revision_number":7},{"id":"04ae7f41cf2eca694780bbeeef4d1f1ed7874a44","author":{"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},"date":"2014-12-02 14:51:45.000000000","message":"Patch Set 7: Code-Review+1","accounts_in_message":[],"_revision_number":7},{"id":"e2c615c45bf422d39e6a64cff677305fd2c4e64c","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2014-12-09 19:45:28.000000000","message":"Uploaded patch set 8.","accounts_in_message":[],"_revision_number":8},{"id":"1b6859bdfc4a0ae74a748e1d7000279d74318795","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2014-12-09 19:49:04.000000000","message":"Patch Set 8: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-lint/f95cbef : SUCCESS in 15s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-syntax/da23eac : SUCCESS in 8s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-unit-3.3/d68471c : SUCCESS in 50s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-unit-3.4/ea7812b : SUCCESS in 1m 18s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-unit-3.6/e62d994 : SUCCESS in 1m 24s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-unit-3.7/fb50084 : SUCCESS in 55s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/8/check/gate-puppet-keystone-puppet-beaker-rspec/f2fc859 : FAILURE in 1m 19s (non-voting)","accounts_in_message":[],"_revision_number":8},{"id":"3e29562fc5778b3b34069814365fd9844effe6b6","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-07 14:05:30.000000000","message":"Patch Set 8: Verified-1\n\nMerge Failed.\n\nThis change was unable to be automatically merged with the current state of the repository. Please rebase your change and upload a new patchset.","accounts_in_message":[],"_revision_number":8},{"id":"a01ff4be4e1d9b1bdf943db506aba6b608356973","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-14 01:49:14.000000000","message":"Uploaded patch set 9.","accounts_in_message":[],"_revision_number":9},{"id":"ddd8ba2192a87481a3b98867c456a9a25c4adc48","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-14 01:55:13.000000000","message":"Patch Set 9: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-lint/f360662/ : SUCCESS in 25s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-syntax/5ec63dc/ : SUCCESS in 3s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-unit-3.3/86a76f1/ : SUCCESS in 1m 08s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-unit-3.4/b01dbd0/ : SUCCESS in 1m 00s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-unit-3.6/1f35e35/ : SUCCESS in 1m 08s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-unit-3.7/3b14b65/ : SUCCESS in 1m 14s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/9/check/gate-puppet-keystone-puppet-beaker-rspec/37b9f77/ : FAILURE in 34s (non-voting)","accounts_in_message":[],"_revision_number":9},{"id":"8a0050ac669b3f013af8746eac02e9b4237a3248","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2015-01-14 12:01:15.000000000","message":"Patch Set 9: Code-Review+2","accounts_in_message":[],"_revision_number":9},{"id":"2d7d845481c8ad7a64cfea4d55cdb49ce44e51cf","author":{"_account_id":11166,"name":"Lukas Bezdicka","email":"social@v3.sk","username":"xbezdick"},"date":"2015-01-14 14:48:51.000000000","message":"Patch Set 9: Code-Review+1","accounts_in_message":[],"_revision_number":9},{"id":"d2cc1776baae1d2e195c6aa2b786752796c2f016","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-16 22:01:49.000000000","message":"Patch Set 9: Code-Review-1\n\n(7 comments)\n\nI\u0027m a little confused about the design here. It seems like you implement a keystone v3 API call entirely with HTTP requests because you need a full list of projects. But then you only use the first project. I don\u0027t see the benefit of adding such complexity when it seems like `openstack user list --long` would be sufficient to get the (an?) associated project.\n\nMoreover this seems to preempt and possibly conflict with the planned work to add v3 support to the providers by adding a workaround for a single feature. I\u0027m concerned about the longer-term design impact of adding this now without coming up with a design spec first.","accounts_in_message":[],"_revision_number":9},{"id":"50a1c89a63deb13717083d2a1a6cd1ae5ca19639","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-16 22:12:14.000000000","message":"Patch Set 9:\n\n(4 comments)\n\n\u003e I\u0027m a little confused about the design here. It seems like you implement a keystone v3 API call entirely with HTTP requests because you need a full list of projects. But then you only use the first project. I don\u0027t see the benefit of adding such complexity when it seems like `openstack user list --long` would be sufficient to get the (an?) associated project.\n\nYes, but when using an ldap backend, openstack user list _does not_ return the project.  This is a design \"feature\" of keystone.  So yes, it is a pain.\n\n\u003e Moreover this seems to preempt and possibly conflict with the planned work to add v3 support to the providers by adding a workaround for a single feature. I\u0027m concerned about the longer-term design impact of adding this now without coming up with a design spec first.\n\nOk.  I was trying to keep backwards compatibility with older versions of osc, by using osc as much as possible, and only using REST when necessary.  OSC 1.0.1 has support for user list --project $project, so the REST call is unnecessary.  So if we are going to deliberately break support for osc versions \u003c 1.0.1, then I will implement this call using osc.  Note that the same would then apply to the password check call in keystone_user, which would be implemented with openstack token issue instead of REST","accounts_in_message":[],"_revision_number":9},{"id":"7ba793c52c4e49dc876792c240e8ea709cf7d64e","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-19 06:03:03.000000000","message":"Patch Set 9:\n\nSorry for taking a while to get back to you. I went and set up an LDAP server so I could see for myself the problem this is trying to solve. If you\u0027ll bear with me, I think I have some suggestions for improving this. First, let me try to restate what it seems like the issue is, so I can check my understanding, and summarize why I\u0027d prefer an alternate solution:\n\nThe problem the patch is trying to solve:\n\nWhen keystone is using LDAP as a read-only identity backend with roles and projects stored in the SQL assignment backend, the keystone_user provider has trouble with the tenant property. First, the user list request reports an empty field for the tenant property, even if the user has a role in a project. Second, the user set command cannot change the tenant property because the openstack command uses \"user\" as the object to act on, and necessarily tries to make the request via LDAP. Since LDAP is read-only (and there is likely no ou for tenants anyway) the request fails. So the provider is neither able to report on a user\u0027s default project nor set the default project.\n\nWhy I think the patch is not optimal:\n\nIt sidesteps the framework we\u0027ve implemented to handle keystone requests by simply using the Net::HTTP library to make raw HTTP API requests. Abstractly, this is a problem because it effectively gives up on the framework\u0027s ability to neatly and consistently provide an interface for all the providers to interact with, opening the door for every strangely-shaped problem we encounter to be solved in an ad hoc manner. Practically, this is a problem because we lose the abstraction of managing sessions and become more dependent on using the hard-coded service token, which the documentation recommends be disabled [1].\n\nThis viewpoint probably seems contradictory given that I implemented the password check using the Net::HTTP library, actually inspired by your suggestion. The reason I think these are different applications, and why I think it was acceptable in the password case, is that the password check has no need to manage a session and has no dependencies on having an existing token. It is also simple and compact enough that we can easily rip it out and replace it with the \u0027token issue\u0027 command once we have that available. On the other hand, given this bug report [2] this might have been a bad decision after all.\n\nIt\u0027s also an issue because it makes the leap to using the v3 API when the groundwork for using the v3 API hasn\u0027t been established yet. Without having a proper design spec yet, this could stomp on or impede efforts to add v3 support to the providers.\n\nOn another note, earlier I said I disagreed with creating the _member_ role if it wasn\u0027t already there. After experimenting I\u0027ve found that if the _member_ role does not exist, the user set command will recreate it if needed, so we can depend on it being there and it should be fine to recreate it if absent.\n\nProposed solution(s):\n\n1) Don\u0027t try to retrieve the list of projects; instead just check whether the project needs to be changed\n\nThe request returns an empty string for the default project name if keystone is using the ldap identity backend, so the getter doesn\u0027t work in the normal sense. However, in the same way we check for password correctness, we can check whether the project should be changed. If the output of `openstack user role list --project \u003cresource[:tenant]\u003e \u003cresource[:name]\u003e` is empty, then the user needs to be added to the project. So in that case, return nil so the insync? method will count it as not in sync. If the output has a role in it, then there is no need to change it. So just return the user-specified project so the insync? method will count it as in sync. For example:\n\n def tenant\n   tenant \u003d instance(resource[:name])[:project]\n   return tenant unless tenant.empty?\n   # If the user list command doesn\u0027t report the project, it might still be there\n   # We don\u0027t need to know exactly what it is, we just need to know whether it\u0027s\n   # the one we\u0027re trying to set.\n   roles \u003d request(\u0027user role\u0027, \u0027list\u0027, nil, resource[:auth], [\u0027--project\u0027, resource[:tenant], resource[:name]])\n   if roles.empty?\n     return nil\n   else\n     return resource[:tenant]\n   end\n end\n\nThen the set_project method could be left as is, or it could actually be moved to the tenant\u003d() method. We can play games with overriding the change_to_s method to make the puppet output more sensible.\n\nOne issue with both this approach and your approach, is that the `openstack role add` command does not set the *default* project, it just adds the user as a _member_ to a new project. This means there is no way to remove membership from the old project, where `openstack user set --project` would both remove membership from the old project and add membership to the new project, since the user table is using a default_project_id column to track it. This leads to the second possibility:\n\n2) Don\u0027t try to set default projects for LDAP users\n\nThe interface presented to us does not set default projects for LDAP users. So why do we try to force it to? It\u0027s sort of square-peg-round-holing the problem. These types should be representative of the openstack objects they represent, not trying to cram openstack functionality that isn\u0027t there into the provider code. It would be better to report the default project as empty, and gracefully fail/warn/notice if the user attempts to set the project.\n\nWhat this might look like:\n\n def tenant\u003d(value)\n   begin\n     request(\u0027user\u0027, \u0027set\u0027, resource[:name], resource[:auth], \u0027--project\u0027, value)\n   rescue Puppet::ExecutionFailure \u003d\u003e e\n     if e.message \u003d~ /Cannot change user ID/\n       fail(\"Unable to set the user\u0027s default tenant.\") # Maybe preferable to use warn() or notice() so that dependent types don\u0027t fail\n     else\n       raise e\n     end\n   end\n end\n\nThen the user should probably not set the tenant parameter, but if they have to (the manifests might enforce it) they could use the ignore_default_tenant parameter to guard against trying to set it:\n\n def tenant\n   unless resource[:ignore_default_tenant]\n     instance(resource[:name])[:project]\n   else\n     resource[:tenant]\n   end\n end\n\nSorry for the giant comment. What are your thoughts?\n\n[1] http://docs.openstack.org/developer/keystone/configuringservices.html\n[2] https://bugs.launchpad.net/puppet-keystone/+bug/1412309","accounts_in_message":[],"_revision_number":9},{"id":"5645a57d9346752f389738eabe5502468033da30","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2015-01-19 22:28:59.000000000","message":"Patch Set 9: -Code-Review","accounts_in_message":[],"_revision_number":9},{"id":"b9ed6c43dd5a1e827785e192148af2dd4e7824ec","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-20 19:32:27.000000000","message":"Patch Set 9:\n\n\u003e The problem the patch is trying to solve:\n\n\u003e When keystone is using LDAP as a read-only identity backend\n\nIt is also a problem with read-write LDAP.  I originally found the problem trying to get puppet-keystone working with read-only LDAP, but discovered in certain circumstances that the problem occurred with read-write LDAP.  That\u0027s why I changed the description.\n\n\u003e Second, the user set command cannot change the tenant property because the openstack command uses \"user\" as the object to act on, and necessarily tries to make the request via LDAP. Since LDAP is read-only (and there is likely no ou for tenants anyway) the request fails. So the provider is neither able to report on a user\u0027s default project nor set the default project.\n\nThe problem is that Keystone does not use the default_project_id property for user objects when you are using an LDAP identity backend.  This is a problem with read-only and read-write LDAP backends.\n\n\u003e Why I think the patch is not optimal:\n\n+1 on all of these points.\n\n\u003e It\u0027s also an issue because it makes the leap to using the v3 API when the groundwork for using the v3 API hasn\u0027t been established yet. Without having a proper design spec yet, this could stomp on or impede efforts to add v3 support to the providers.\n\nWhat groundwork needs to be done?\n\n\u003e On another note, earlier I said I disagreed with creating the _member_ role if it wasn\u0027t already there. After experimenting I\u0027ve found that if the _member_ role does not exist, the user set command will recreate it if needed, so we can depend on it being there and it should be fine to recreate it if absent.\n\nOk.\n\n\u003e Proposed solution(s):\n\n\u003e 1) Don\u0027t try to retrieve the list of projects; instead just check whether the project needs to be changed\n\n\u003csnip code and explanation\u003e\n\nack\n\n\u003e One issue with both this approach and your approach, is that the `openstack role add` command does not set the *default* project, it just adds the user as a _member_ to a new project. This means there is no way to remove membership from the old project, where `openstack user set --project` would both remove membership from the old project and add membership to the new project, since the user table is using a default_project_id column to track it. This leads to the second possibility:\n\n\u003e 2) Don\u0027t try to set default projects for LDAP users\n\n\u003csnip\u003e\n\nI suppose I could try this.  But user set --project, when using the SQL identity backend, does 3 things:\n1) sets the default_project_id property in the user object\n2) adds the user to the given project\n3) removes the user from any other projects\n\nSimilarly with user create, when project is specified as a property of the user resource - the default_project_id property in the user object is set, and the user is added to the project.\n\nWhen using a read-write LDAP backend, user create --project will add the user to the given project, and user set --project will just fail.\n\n\u003e The interface presented to us does not set default projects for LDAP users.\n\nIt depends.  For user set --project, you are correct - with LDAP, this will neither set the default_project_id property in the user object, nor will it assign the user to the given project.  user create --project will assign the user to the given project, when using a read-write LDAP identity backend or an SQL identity backend.\n\nIt will not work when using a read-only LDAP identity backend, because the user create part will fail before the assignment of the project.\n\n\u003e So why do we try to force it to? It\u0027s sort of square-peg-round-holing the problem. These types should be representative of the openstack objects they represent, not trying to cram openstack functionality that isn\u0027t there into the provider code. It would be better to report the default project as empty, and gracefully fail/warn/notice if the user attempts to set the project.\n\nThe problem is that the user (writer of puppet code) might not know nor care if keystone has an LDAP identity backend.  This user knows that the keystone_user resource has a \"tenant\"/\"project\" property, and expects it to mean both the default_project_id property in the user object, and that the user has been assigned to the given project.  This is the behavior expected by puppet writers.\n\n\u003e What this might look like:\n\u003csnip\u003e\n\n\u003e Then the user should probably not set the tenant parameter, but if they have to (the manifests might enforce it) they could use the ignore_default_tenant parameter to guard against trying to set it:\n\n\u003csnip\u003e\n\nDoes this mean we have to change all of the puppet code everywhere that uses keystone_user, remove the tenant parameter, and instead explicitly use keystone_tenant to do any project assignments that would have been implicitly done by the keystone_user tenant parameter?\n\n\u003e Sorry for the giant comment. What are your thoughts?","accounts_in_message":[],"_revision_number":9},{"id":"89c13c19d6a51f88a7e227c79fddc57796c75881","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-20 22:17:28.000000000","message":"Patch Set 9:\n\n\u003e \u003e It\u0027s also an issue because it makes the leap to using the v3 API when the groundwork for using the v3 API hasn\u0027t been established yet. Without having a proper design spec yet, this could stomp on or impede efforts to add v3 support to the providers.\n\u003e What groundwork needs to be done?\nI assumed there would be some significant changes to allow using the v3 API (should the user choose what API version? should it just always use v3? do we need new parameters or to deprecate old parameters? etc), but I hadn\u0027t put a lot of thought into the specifics.\n\u003e \u003e The interface presented to us does not set default projects for LDAP users.\n\u003e It depends. For user set --project, you are correct - with LDAP, this will neither set the default_project_id property in the user object, nor will it assign the user to the given project. user create --project will assign the user to the given project, when using a read-write LDAP identity backend or an SQL identity backend.\n\u003e It will not work when using a read-only LDAP identity backend, because the user create part will fail before the assignment of the project.\nOkay, I think I understand now - there /is/ a concept of assigning the user to a project with \u0027user set\u0027 or \u0027user create\u0027 without actually making it the default project, it\u0027s not just very intuitive.\n\u003e \u003e So why do we try to force it to? It\u0027s sort of square-peg-round-holing the problem. These types should be representative of the openstack objects they represent, not trying to cram openstack functionality that isn\u0027t there into the provider code. It would be better to report the default project as empty, and gracefully fail/warn/notice if the user attempts to set the project.\n\u003e The problem is that the user (writer of puppet code) might not know nor care if keystone has an LDAP identity backend. This user knows that the keystone_user resource has a \"tenant\"/\"project\" property, and expects it to mean both the default_project_id property in the user object, and that the user has been assigned to the given project. This is the behavior expected by puppet writers.\n\u003e \u003e What this might look like: \u003csnip\u003e\n\u003e \u003e Then the user should probably not set the tenant parameter, but if they have to (the manifests might enforce it) they could use the ignore_default_tenant parameter to guard against trying to set it:\n\u003e \u003csnip\u003e\n\u003e Does this mean we have to change all of the puppet code everywhere that uses keystone_user, remove the tenant parameter, and instead explicitly use keystone_tenant to do any project assignments that would have been implicitly done by the keystone_user tenant parameter?\nThat\u0027s a really good point I hadn\u0027t thought of. Given that a puppet user and puppet module writer\u0027s expectation is for the tenant property to at minimum assign membership to the project (nothing in puppet would depend on it being \"default\", right?), it makes sense to use \u0027role add\u0027 to maintain compatibility.","accounts_in_message":[],"_revision_number":9},{"id":"0b34eac9c90f9e0dccba1542aafab2b55f4cade4","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-21 03:02:04.000000000","message":"Uploaded patch set 10.","accounts_in_message":[],"_revision_number":10},{"id":"eebd3a57770d393673803d54a50490edb44804c2","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-21 03:03:26.000000000","message":"Uploaded patch set 11.","accounts_in_message":[],"_revision_number":11},{"id":"534e70a0a569e0cf35ec27ce9cb476c44788b235","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-21 03:06:41.000000000","message":"Patch Set 11: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-lint/deb3497/ : SUCCESS in 21s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-syntax/a3ff81a/ : SUCCESS in 9s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-unit-3.3/21d3d75/ : SUCCESS in 1m 15s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-unit-3.4/2a90262/ : SUCCESS in 1m 31s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-unit-3.6/43e3e09/ : SUCCESS in 59s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-unit-3.7/b996ed1/ : SUCCESS in 1m 03s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/11/check/gate-puppet-keystone-puppet-beaker-rspec/3c4a613/ : FAILURE in 21s (non-voting)","accounts_in_message":[],"_revision_number":11},{"id":"cb4a1bde4c4b69e787012b4cc77fd63762f4fbee","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-21 14:54:53.000000000","message":"Uploaded patch set 12.","accounts_in_message":[],"_revision_number":12},{"id":"46bf6dbd2ecbfe07efd4f9e5aee2ea0d25763100","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-21 15:04:44.000000000","message":"Patch Set 12: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-lint/76a25c9/ : SUCCESS in 21s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-syntax/cfe8f32/ : SUCCESS in 9s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-unit-3.3/4c9bd68/ : SUCCESS in 59s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-unit-3.4/fc2cb62/ : SUCCESS in 1m 05s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-unit-3.6/f5259c5/ : SUCCESS in 1m 02s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-unit-3.7/7d20e3d/ : SUCCESS in 1m 06s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/12/check/gate-puppet-keystone-puppet-beaker-rspec/16fa845/ : FAILURE in 24s (non-voting)","accounts_in_message":[],"_revision_number":12},{"id":"8613468f6367189504a9410710ff6b55c37ad8aa","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-22 19:41:53.000000000","message":"Patch Set 12:\n\nOne other thing I think is an issue: if we are using the SQL backend, then we should be able to set the default tenant for a user, not just add them to the role. Is there a way we could distinguish between when to \u0027user set\u0027 and when to use \u0027role add\u0027? Maybe it could attempt \u0027user set\u0027 first, catch the error, and then attempt \u0027role add\u0027?","accounts_in_message":[],"_revision_number":12},{"id":"d3205b407d71dbe2f52bc1a0138134835604ce56","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-22 22:56:55.000000000","message":"Uploaded patch set 13.","accounts_in_message":[],"_revision_number":13},{"id":"4c71af840eace6af059fcdd55bac5891442c846f","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-22 22:58:25.000000000","message":"Patch Set 13:\n\nNow when setting the tenant/project, it will try to use user set --project first, then will also fall back and do the set_project, which will check to see if the project was already set by user set --project.\nThis revision also adds some spec tests","accounts_in_message":[],"_revision_number":13},{"id":"cb0860ab23eae3d07ce7f2f92c2fde7f37de065e","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-22 23:02:08.000000000","message":"Patch Set 13: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see http://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-lint/d853bf9/ : SUCCESS in 22s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-syntax/fb9226d/ : FAILURE in 9s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.3/bbb4e5b/ : SUCCESS in 1m 15s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.4/9a43639/ : SUCCESS in 1m 40s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.6/11a129f/ : SUCCESS in 59s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.7/c48ef58/ : SUCCESS in 56s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-beaker-rspec/ce96775/ : FAILURE in 38s (non-voting)","accounts_in_message":[],"_revision_number":13},{"id":"5079c13063f4031146809758b0dd7da02c2b03b0","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-22 23:03:43.000000000","message":"Patch Set 13:\n\nrecheck","accounts_in_message":[],"_revision_number":13},{"id":"503140d9757ee9696ac58a9e4a0439a0a7a44af3","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-22 23:11:29.000000000","message":"Patch Set 13: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-lint/fd0a0f3/ : SUCCESS in 25s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-syntax/7821129/ : SUCCESS in 29s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.3/9ca8035/ : SUCCESS in 1m 29s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.4/5a24572/ : SUCCESS in 1m 29s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.6/1429091/ : SUCCESS in 1m 18s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-unit-3.7/ad2c698/ : SUCCESS in 1m 21s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/13/check/gate-puppet-keystone-puppet-beaker-rspec/55e4af1/ : FAILURE in 22s (non-voting)","accounts_in_message":[],"_revision_number":13},{"id":"2ac8332dfb29ee6958e0935081d6665a50b03a4e","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-22 23:27:07.000000000","message":"Patch Set 13: Code-Review-1\n\n(3 comments)\n\nDirection looks good to me, just one small issue and a couple nitpicks. Tests look good to me too.","accounts_in_message":[],"_revision_number":13},{"id":"c1bebe1e84e4da5e0e20dddac7ded28d52019fc3","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-22 23:47:42.000000000","message":"Patch Set 13:\n\nAfter testing it out, I found a bigger issue:\n\n # puppet resource keystone_user\n Error: Could not run: Execution of \u0027/bin/openstack user role list --quiet --format csv demo2 --project --os-token sosp-kyl --os-url http://127.0.0.1:35357/v2.0/\u0027 returned 2: usage: openstack user role list [-h] [-f {csv,table}] [-c COLUMN]\n                                [--max-width \u003cinteger\u003e]\n                                [--quote {all,minimal,none,nonnumeric}]\n                                [--project \u003cproject\u003e]\n                                [\u003cuser\u003e]\n openstack user role list: error: argument --project: expected one argument\n\nI think this is because resource[:tenant] is being used without being set. I think this is another reason it should attempt to find the tenant using instance(), and then maybe that fails and the resource parameters aren\u0027t available, just return nil.","accounts_in_message":[],"_revision_number":13},{"id":"a84e96546dc299e7754e38663e755db44014ac79","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-23 01:52:45.000000000","message":"Patch Set 13:\n\n(3 comments)","accounts_in_message":[],"_revision_number":13},{"id":"ed1ade7d1d5615761b83029ee7d748df53a1bbdf","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-23 02:28:29.000000000","message":"Uploaded patch set 14.","accounts_in_message":[],"_revision_number":14},{"id":"1c0757147dfa0e37b7384d79b072b5e4f1d2ba8c","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-23 02:32:46.000000000","message":"Patch Set 14: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-lint/9351687/ : SUCCESS in 21s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-syntax/fcb1933/ : SUCCESS in 16s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-unit-3.3/f50fb3b/ : SUCCESS in 1m 18s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-unit-3.4/0738419/ : SUCCESS in 1m 05s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-unit-3.6/9a77823/ : SUCCESS in 1m 26s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-unit-3.7/b4858ad/ : SUCCESS in 1m 15s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/14/check/gate-puppet-keystone-puppet-beaker-rspec/ca14cfd/ : FAILURE in 23s (non-voting)","accounts_in_message":[],"_revision_number":14},{"id":"e2f15d1870f48786bfd67e306f4673ab5eaa576a","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-23 06:46:18.000000000","message":"Patch Set 14: Code-Review-1\n\n(2 comments)","accounts_in_message":[],"_revision_number":14},{"id":"82d61ffcb4f18f97a13f3f332f0307bb43ddadc8","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-23 06:47:16.000000000","message":"Patch Set 13:\n\n(1 comment)","accounts_in_message":[],"_revision_number":13},{"id":"de7e648a2b6b5a00b78d1a07e19c854970d65dba","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-23 18:12:50.000000000","message":"Uploaded patch set 15.","accounts_in_message":[],"_revision_number":15},{"id":"55e4b3c8287d422cc845cabc1e41702a174536eb","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-23 18:27:01.000000000","message":"Patch Set 15: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-lint/e3b4e73/ : SUCCESS in 15s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-syntax/19d438d/ : SUCCESS in 9s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-unit-3.3/a5d8338/ : SUCCESS in 2m 05s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-unit-3.4/f34e243/ : SUCCESS in 1m 16s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-unit-3.6/7fa4283/ : SUCCESS in 1m 08s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-unit-3.7/2af8dd8/ : SUCCESS in 1m 15s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/15/check/gate-puppet-keystone-puppet-beaker-rspec/fc2254e/ : FAILURE in 1m 03s (non-voting)","accounts_in_message":[],"_revision_number":15},{"id":"83cfb4a93a526625712a6e80780e14697584502e","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-23 19:28:20.000000000","message":"Patch Set 15: Code-Review-1\n\n(2 comments)","accounts_in_message":[],"_revision_number":15},{"id":"3c93d2351ade20d9e2bcf7c26cd74d58423cafb7","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-23 22:38:56.000000000","message":"Patch Set 15:\n\n(1 comment)","accounts_in_message":[],"_revision_number":15},{"id":"a5c9471d83f2b3a55363ebfa8e22cf26c0189ea3","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-23 23:04:36.000000000","message":"Patch Set 15:\n\n(1 comment)","accounts_in_message":[],"_revision_number":15},{"id":"536d0ab8b04be594e80ecc5f45b06e39e50a5bee","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-24 02:57:15.000000000","message":"Uploaded patch set 16.","accounts_in_message":[],"_revision_number":16},{"id":"51a8074af50b2caaec88c44576af74f311a7740a","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-24 03:03:03.000000000","message":"Patch Set 16: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-lint/b18b9b2/ : SUCCESS in 16s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-syntax/bcb594f/ : SUCCESS in 18s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-unit-3.3/5d4902f/ : SUCCESS in 1m 25s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-unit-3.4/96f0388/ : SUCCESS in 1m 04s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-unit-3.6/6531401/ : SUCCESS in 56s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-unit-3.7/18565e9/ : SUCCESS in 1m 14s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/16/check/gate-puppet-keystone-puppet-beaker-rspec/e034016/ : FAILURE in 20s (non-voting)","accounts_in_message":[],"_revision_number":16},{"id":"769b0857a8601ce4abc59aedb6eb56fb58c7cf51","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-24 05:10:14.000000000","message":"Patch Set 16: Code-Review-1\n\n(2 comments)","accounts_in_message":[],"_revision_number":16},{"id":"64b4ae75a9991a6ef9e47a624316cc87f8df5efe","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-25 02:31:16.000000000","message":"Uploaded patch set 17.","accounts_in_message":[],"_revision_number":17},{"id":"3d9faab2e2969ebc9fd9dfa7e75fced5b3414609","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-25 02:32:15.000000000","message":"Patch Set 16:\n\n(2 comments)","accounts_in_message":[],"_revision_number":16},{"id":"062ce2e073d27f66aa29eaa67269cb7d2df5cbf9","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-25 02:34:47.000000000","message":"Patch Set 16:\n\n(1 comment)","accounts_in_message":[],"_revision_number":16},{"id":"8216c2a27c7df75e5735b185a1d781cdecc9e73f","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-25 02:36:51.000000000","message":"Patch Set 17: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-lint/73b206d/ : SUCCESS in 24s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-syntax/dc47ab4/ : SUCCESS in 2s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-unit-3.3/b7da5ca/ : SUCCESS in 1m 00s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-unit-3.4/0e826cf/ : SUCCESS in 1m 17s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-unit-3.6/4d66ceb/ : SUCCESS in 1m 16s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-unit-3.7/8e25e0b/ : SUCCESS in 1m 10s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/17/check/gate-puppet-keystone-puppet-beaker-rspec/c5b218b/ : FAILURE in 19s (non-voting)","accounts_in_message":[],"_revision_number":17},{"id":"b27bfa3b62025f3670e9960595d23397f8d47fb3","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-25 02:39:10.000000000","message":"Uploaded patch set 18.","accounts_in_message":[],"_revision_number":18},{"id":"0cefbfc0a6d1f260ab0250df3640a69d2cc8249b","author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"date":"2015-01-25 02:39:58.000000000","message":"Patch Set 16:\n\n(1 comment)","accounts_in_message":[],"_revision_number":16},{"id":"bc2bd1ae943a181d73784679a541f81a6c610719","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-25 02:47:52.000000000","message":"Patch Set 18: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-lint/f60d5e5/ : SUCCESS in 19s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-syntax/52c387d/ : SUCCESS in 15s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-unit-3.3/ebcda23/ : SUCCESS in 1m 41s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-unit-3.4/24b3236/ : SUCCESS in 1m 20s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-unit-3.6/0cb6ca2/ : SUCCESS in 1m 18s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-unit-3.7/47b35da/ : SUCCESS in 1m 43s\n- gate-puppet-keystone-puppet-beaker-rspec http://logs.openstack.org/01/133601/18/check/gate-puppet-keystone-puppet-beaker-rspec/eb9d2a9/ : FAILURE in 25s (non-voting)","accounts_in_message":[],"_revision_number":18},{"id":"d36a28b6cce17f4948de9ac591cf87e0780523df","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2015-01-25 03:40:14.000000000","message":"Patch Set 18: Code-Review+2","accounts_in_message":[],"_revision_number":18},{"id":"cae0980f5d39e7f90083dc7e22c77944534b986a","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-25 04:13:24.000000000","message":"Patch Set 18: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":18},{"id":"cc3b9d372ea43960c06abb540f1569031a935f05","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-25 04:13:25.000000000","message":"Patch Set 18: -Verified\n\nStarting gate jobs.\nhttp://status.openstack.org/zuul/","accounts_in_message":[],"_revision_number":18},{"id":"67cc3df3d627fef7db6317a7c778738a263c78ec","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-25 04:19:24.000000000","message":"Patch Set 18: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- gate-puppet-keystone-puppet-lint http://logs.openstack.org/01/133601/18/gate/gate-puppet-keystone-puppet-lint/4f2b201/ : SUCCESS in 11s\n- gate-puppet-keystone-puppet-syntax http://logs.openstack.org/01/133601/18/gate/gate-puppet-keystone-puppet-syntax/1b0d954/ : SUCCESS in 8s\n- gate-puppet-keystone-puppet-unit-3.3 http://logs.openstack.org/01/133601/18/gate/gate-puppet-keystone-puppet-unit-3.3/ff6dfe5/ : SUCCESS in 1m 15s\n- gate-puppet-keystone-puppet-unit-3.4 http://logs.openstack.org/01/133601/18/gate/gate-puppet-keystone-puppet-unit-3.4/312f935/ : SUCCESS in 1m 21s\n- gate-puppet-keystone-puppet-unit-3.6 http://logs.openstack.org/01/133601/18/gate/gate-puppet-keystone-puppet-unit-3.6/881f92e/ : SUCCESS in 1m 20s\n- gate-puppet-keystone-puppet-unit-3.7 http://logs.openstack.org/01/133601/18/gate/gate-puppet-keystone-puppet-unit-3.7/33424fb/ : SUCCESS in 58s","accounts_in_message":[],"_revision_number":18},{"id":"6775e6426a6caf40cd262dd880229e70077adf89","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-01-25 04:19:25.000000000","message":"Change has been successfully merged into the git repository.","accounts_in_message":[],"_revision_number":18},{"id":"550c38428dd997dac497762df76adcd157bc9c82","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2015-01-26 14:44:31.000000000","message":"Patch Set 18: Cherry Picked\n\nThis patchset was cherry picked to branch stable/juno as commit 8cc6ec605954cf46cb321d644b07d9fe43795823","accounts_in_message":[],"_revision_number":18}],"current_revision_number":18,"current_revision":"1b8010e44fb3a6ec8554dc813314e7e254378da9","revisions":{"91380f3fbc6b021054dbaf83bc3f356fe1e578a3":{"kind":"REWORK","_number":1,"created":"2014-11-11 03:07:17.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/1"}}},"commit":{"parents":[{"commit":"38518cbcb3ef8ad3bb068730a21d790b27a29b74","subject":"Merge \"Add python-ldappool as a requirement for LDAP\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/38518cbcb3ef8ad3bb068730a21d790b27a29b74"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-11 02:52:48.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user create\ncommand, which has the --tenant flag which will create the user and add\nthe user to the given tenant.  However, if using a read-only LDAP identity\nbackend, the user must already exist, and user create cannot be used.  The\nonly other way to add the user to a tenant is with user role add, however,\nthe given role must already exist.  So, make sure the user is a member of\nthe default role \"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order to\nlist the tenants for a given user, you have to use the Keystone V3 API\ncall GET /users/{user_id}/projects.  Normally keystone_user.tenant isn\u0027t\ncalled when creating a user since user-create will assign the tenant.\nBut with read-only LDAP with existing users, we need to look up the tenant\nfor the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant - Puppet\nboolean values are not being passed to the ruby type handling code as ruby\nboolean values, but using :parent \u003d\u003e Puppet::Parameter::Boolean makes it\nwork correctly.\n\nI also fixed some minor formatting and indentation problems, and added some\ndebug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/91380f3fbc6b021054dbaf83bc3f356fe1e578a3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/91380f3fbc6b021054dbaf83bc3f356fe1e578a3"}]},"branch":"refs/heads/master"},"e7c966b554e134dc28a537c4e3a3ff688bf63725":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2014-11-11 03:10:24.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/2"}}},"commit":{"parents":[{"commit":"38518cbcb3ef8ad3bb068730a21d790b27a29b74","subject":"Merge \"Add python-ldappool as a requirement for LDAP\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/38518cbcb3ef8ad3bb068730a21d790b27a29b74"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-11 03:07:33.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/e7c966b554e134dc28a537c4e3a3ff688bf63725"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/e7c966b554e134dc28a537c4e3a3ff688bf63725"}]},"branch":"refs/heads/master"},"3d56aa976f98c1b56813dc4b851ac3c8f44b3052":{"kind":"REWORK","_number":3,"created":"2014-11-13 01:53:02.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/3"}}},"commit":{"parents":[{"commit":"38518cbcb3ef8ad3bb068730a21d790b27a29b74","subject":"Merge \"Add python-ldappool as a requirement for LDAP\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/38518cbcb3ef8ad3bb068730a21d790b27a29b74"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-13 01:52:54.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/3d56aa976f98c1b56813dc4b851ac3c8f44b3052"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/3d56aa976f98c1b56813dc4b851ac3c8f44b3052"}]},"branch":"refs/heads/master"},"cce036aa8f8e6f0f190c470382de5a4aa6a9ca0d":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2014-11-14 15:14:54.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/4"}}},"commit":{"parents":[{"commit":"c38e7a619b0cbde3c381d15bbceb4a06e2b048bb","subject":"fix apache::vhost concat test breakage","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/c38e7a619b0cbde3c381d15bbceb4a06e2b048bb"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-14 15:14:38.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/cce036aa8f8e6f0f190c470382de5a4aa6a9ca0d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/cce036aa8f8e6f0f190c470382de5a4aa6a9ca0d"}]},"branch":"refs/heads/master"},"9cd8770555f6dfff4cc4ca333908e27cb1b6914e":{"kind":"REWORK","_number":5,"created":"2014-11-18 03:21:37.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/5"}}},"commit":{"parents":[{"commit":"a0e8e9a393aef8b61c0452a7d917d5af22c5271d","subject":"Remove duplicate entries from endpoint.pp comments","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/a0e8e9a393aef8b61c0452a7d917d5af22c5271d"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-18 03:20:02.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/9cd8770555f6dfff4cc4ca333908e27cb1b6914e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/9cd8770555f6dfff4cc4ca333908e27cb1b6914e"}]},"branch":"refs/heads/master"},"344b746b2d133dc74e872f587ed6588b1093073a":{"kind":"REWORK","_number":6,"created":"2014-11-18 03:35:05.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/6"}}},"commit":{"parents":[{"commit":"a0e8e9a393aef8b61c0452a7d917d5af22c5271d","subject":"Remove duplicate entries from endpoint.pp comments","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/a0e8e9a393aef8b61c0452a7d917d5af22c5271d"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-18 03:34:58.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/344b746b2d133dc74e872f587ed6588b1093073a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/344b746b2d133dc74e872f587ed6588b1093073a"}]},"branch":"refs/heads/master"},"0ae423f3e819b8d926856eca6e17ebf73ff34c08":{"kind":"TRIVIAL_REBASE","_number":7,"created":"2014-11-20 13:36:21.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/7"}}},"commit":{"parents":[{"commit":"776006fabae004ac7c914ea7c3bf1387aca440a6","subject":"Merge \"Add keystone::resource::service_identity\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/776006fabae004ac7c914ea7c3bf1387aca440a6"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-11-20 13:34:59.000000000","tz":-300},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/0ae423f3e819b8d926856eca6e17ebf73ff34c08"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/0ae423f3e819b8d926856eca6e17ebf73ff34c08"}]},"branch":"refs/heads/master"},"eb0a8da88a5115224de8f89986b255c4b86ea5b8":{"kind":"TRIVIAL_REBASE","_number":8,"created":"2014-12-09 19:45:28.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/8","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/8","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/8 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/8 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/8 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/8"}}},"commit":{"parents":[{"commit":"0df9701dcfc518f5a090f6c6926acb6e1c96e97e","subject":"Merge \"Allow disabling or delaying the token_flush cron\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/0df9701dcfc518f5a090f6c6926acb6e1c96e97e"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-12-09 19:44:15.000000000","tz":-420},"subject":"support Keystone with read-only LDAP identity backend","message":"support Keystone with read-only LDAP identity backend\n\nThere were a couple of problems with keystone_user tenant and tenant\u003d\n\ntenant\u003d - a user has to belong to a tenant before a role (like\nadmin) can be added to the user.  Usually this is handled by the user\ncreate command, which has the --tenant flag which will create the\nuser and add the user to the given tenant.  However, if using a\nread-only LDAP identity backend, the user must already exist, and\nuser create cannot be used.  The only other way to add the user to a\ntenant is with user role add, however, the given role must already\nexist.  So, make sure the user is a member of the default role\n\"_member_\" first, then assign the user to the tenant.\n\ntenant - \"tenantId\" is not a property of the \"user\" object -\nthat is, if you do user-get, it does not show the tenantId.  In order\nto list the tenants for a given user, you have to use the Keystone V3\nAPI call GET /users/{user_id}/projects.  Normally\nkeystone_user.tenant isn\u0027t called when creating a user since\nuser-create will assign the tenant.  But with read-only LDAP with\nexisting users, we need to look up the tenant for the user.\n\nFinally, there seems to be a problem with :ignore_default_tenant\n- Puppet boolean values are not being passed to the ruby type\nhandling code as ruby boolean values, but using\n:parent \u003d\u003e Puppet::Parameter::Boolean makes it work correctly.\n\nI also fixed some minor formatting and indentation problems,\nand added some debug tracing.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/eb0a8da88a5115224de8f89986b255c4b86ea5b8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/eb0a8da88a5115224de8f89986b255c4b86ea5b8"}]},"branch":"refs/heads/master"},"7d0531b08781f83a5b679d648b6f91f62f1515cc":{"kind":"REWORK","_number":9,"created":"2015-01-14 01:49:14.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/9","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/9","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/9 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/9 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/9 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/9"}}},"commit":{"parents":[{"commit":"0d9eb94b3e559ae6c81fb16ca6ec263598a6cfa5","subject":"Merge \"Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/0d9eb94b3e559ae6c81fb16ca6ec263598a6cfa5"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-14 01:48:34.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using the sql (default)\nbackend.  This means calls like user list and user show will not show the\ndefault project.  For getting the project/tenant, we have to use the v3\napi call to list projects for a given user.  If there is more than one project\nlisted, the first one is used.  For setting the project/tenant, this is\nusually done with user create, but when ldap is read-only, we have to use\nrole add to add the user to a default _member_ role and at the same time\nassign the user to a given project/tenant.\nThis also adds support for using the openstack $obj show commands which\nreturn --format shell output, and return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/7d0531b08781f83a5b679d648b6f91f62f1515cc"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/7d0531b08781f83a5b679d648b6f91f62f1515cc"}]},"branch":"refs/heads/master"},"63564cf46bc6bbcea17852149c4708693dcb3a53":{"kind":"REWORK","_number":10,"created":"2015-01-21 03:02:04.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/10","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/10","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/10 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/10 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/10 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/10"}}},"commit":{"parents":[{"commit":"ce16052acc7f7008850b5fd775059d25dfb9140e","subject":"Merge \"service validation: update the default command\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/ce16052acc7f7008850b5fd775059d25dfb9140e"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-21 03:00:53.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using the sql (default)\nbackend.  This means calls like user list and user show will not show the\ndefault project.  For getting the project/tenant, we don\u0027t actually get the\nproject/tenant, we just check to see if the user is assigned to the given\ntenant/project.  For setting the project/tenant, this is\nusually done with user create, but when ldap is read-only, we have to use\nrole add to add the user to a default _member_ role and at the same time\nassign the user to a given project/tenant.\nThis also adds support for using the openstack $obj show commands which\nreturn --format shell output, and return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/63564cf46bc6bbcea17852149c4708693dcb3a53"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/63564cf46bc6bbcea17852149c4708693dcb3a53"}]},"branch":"refs/heads/master"},"3ab386e0b5667912c6e6bb169b941f221641f443":{"kind":"NO_CODE_CHANGE","_number":11,"created":"2015-01-21 03:03:26.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/11","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/11","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/11 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/11 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/11 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/11"}}},"commit":{"parents":[{"commit":"ce16052acc7f7008850b5fd775059d25dfb9140e","subject":"Merge \"service validation: update the default command\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/ce16052acc7f7008850b5fd775059d25dfb9140e"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-21 03:02:14.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, we don\u0027t actually get the project/tenant,\nwe just check to see if the user is assigned to the given\ntenant/project.  For setting the project/tenant, this is usually\ndone with user create, but when ldap is read-only, we have to\nuse role add to add the user to a default _member_ role and at\nthe same time assign the user to a given project/tenant.\nThis also adds support for using the openstack $obj show commands\nwhich return --format shell output, and return a hash of\nkey/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/3ab386e0b5667912c6e6bb169b941f221641f443"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/3ab386e0b5667912c6e6bb169b941f221641f443"}]},"branch":"refs/heads/master"},"f0e83cc3605bd1236de2f05c914c0fd4f09d6c9f":{"kind":"REWORK","_number":12,"created":"2015-01-21 14:54:53.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/12","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/12","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/12 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/12 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/12 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/12"}}},"commit":{"parents":[{"commit":"ce16052acc7f7008850b5fd775059d25dfb9140e","subject":"Merge \"service validation: update the default command\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/ce16052acc7f7008850b5fd775059d25dfb9140e"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-21 14:54:43.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, we don\u0027t actually get the project/tenant,\nwe just check to see if the user is assigned to the given\ntenant/project.  For setting the project/tenant, this is usually\ndone with user create, but when ldap is read-only, we have to\nuse role add to add the user to a default _member_ role and at\nthe same time assign the user to a given project/tenant.\nThis also adds support for using the openstack $obj show commands\nwhich return --format shell output, and return a hash of\nkey/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/f0e83cc3605bd1236de2f05c914c0fd4f09d6c9f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/f0e83cc3605bd1236de2f05c914c0fd4f09d6c9f"}]},"branch":"refs/heads/master"},"3968b404db2b599b8f630da47fe946a48050a229":{"kind":"REWORK","_number":13,"created":"2015-01-22 22:56:55.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/13","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/13","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/13 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/13 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/13 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/13"}}},"commit":{"parents":[{"commit":"ce16052acc7f7008850b5fd775059d25dfb9140e","subject":"Merge \"service validation: update the default command\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/ce16052acc7f7008850b5fd775059d25dfb9140e"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-22 22:56:38.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, we don\u0027t actually get the project/tenant,\nwe just check to see if the user is assigned to the given\ntenant/project.  For setting the project/tenant, this is usually\ndone with user create, but when ldap is read-only, we have to\nuse role add to add the user to a default _member_ role and at\nthe same time assign the user to a given project/tenant.\nThis also adds support for using the openstack $obj show commands\nwhich return --format shell output, and return a hash of\nkey/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/3968b404db2b599b8f630da47fe946a48050a229"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/3968b404db2b599b8f630da47fe946a48050a229"}]},"branch":"refs/heads/master"},"5ec8f35c624d7bd151b9d316a9c4237a092b115a":{"kind":"REWORK","_number":14,"created":"2015-01-23 02:28:29.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/14","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/14","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/14 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/14 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/14 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/14"}}},"commit":{"parents":[{"commit":"ce16052acc7f7008850b5fd775059d25dfb9140e","subject":"Merge \"service validation: update the default command\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/ce16052acc7f7008850b5fd775059d25dfb9140e"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-23 02:28:22.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, if it is not present in the instances\ninformation provided by user list --long, we don\u0027t actually\nget the project/tenant, we just check to see if the user is\nassigned to the given tenant/project.  For setting the\nproject/tenant, this is usually done with user create, but when\nldap is read-only, we have to use role add to add the user to a\ndefault _member_ role and at the same time assign the user to a\ngiven project/tenant.  This also adds support for using the\nopenstack $obj show commands which return --format shell output,\nand return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/5ec8f35c624d7bd151b9d316a9c4237a092b115a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/5ec8f35c624d7bd151b9d316a9c4237a092b115a"}]},"branch":"refs/heads/master"},"f470429ad813ba71d97bb3f856ae6a03e5e2b02a":{"kind":"REWORK","_number":15,"created":"2015-01-23 18:12:50.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/15","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/15","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/15 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/15 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/15 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/15"}}},"commit":{"parents":[{"commit":"beef860d37977750a1656867d3a7778813d0c915","subject":"add require json for to_json dependency","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/beef860d37977750a1656867d3a7778813d0c915"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-23 18:12:15.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, if it is not present in the instances\ninformation provided by user list --long, we don\u0027t actually\nget the project/tenant, we just check to see if the user is\nassigned to the given tenant/project.  For setting the\nproject/tenant, this is usually done with user create, but when\nldap is read-only, we have to use role add to add the user to a\ndefault _member_ role and at the same time assign the user to a\ngiven project/tenant.  This also adds support for using the\nopenstack $obj show commands which return --format shell output,\nand return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/f470429ad813ba71d97bb3f856ae6a03e5e2b02a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/f470429ad813ba71d97bb3f856ae6a03e5e2b02a"}]},"branch":"refs/heads/master"},"de74abffa0003c98ece7c409b1968c1c64de885e":{"kind":"REWORK","_number":16,"created":"2015-01-24 02:57:15.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/16","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/16","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/16 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/16 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/16 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/16"}}},"commit":{"parents":[{"commit":"beef860d37977750a1656867d3a7778813d0c915","subject":"add require json for to_json dependency","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/beef860d37977750a1656867d3a7778813d0c915"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-24 02:57:06.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, if it is not present in the instances\ninformation provided by user list --long, we don\u0027t actually\nget the project/tenant, we just check to see if the user is\nassigned to the given tenant/project.  For setting the\nproject/tenant, this is usually done with user create, but when\nldap is read-only, we have to use role add to add the user to a\ndefault _member_ role and at the same time assign the user to a\ngiven project/tenant.  This also adds support for using the\nopenstack $obj show commands which return --format shell output,\nand return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/de74abffa0003c98ece7c409b1968c1c64de885e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/de74abffa0003c98ece7c409b1968c1c64de885e"}]},"branch":"refs/heads/master"},"729a9824f3d51d8d13bee3578f30af541e08e770":{"kind":"REWORK","_number":17,"created":"2015-01-25 02:31:16.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/17","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/17","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/17 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/17 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/17 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/17"}}},"commit":{"parents":[{"commit":"beef860d37977750a1656867d3a7778813d0c915","subject":"add require json for to_json dependency","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/beef860d37977750a1656867d3a7778813d0c915"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-25 02:31:11.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, if it is not present in the instances\ninformation provided by user list --long, we don\u0027t actually\nget the project/tenant, we just check to see if the user is\nassigned to the given tenant/project.  For setting the\nproject/tenant, this is usually done with user create, but when\nldap is read-only, we have to use role add to add the user to a\ndefault _member_ role and at the same time assign the user to a\ngiven project/tenant.  This also adds support for using the\nopenstack $obj show commands which return --format shell output,\nand return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/729a9824f3d51d8d13bee3578f30af541e08e770"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/729a9824f3d51d8d13bee3578f30af541e08e770"}]},"branch":"refs/heads/master"},"1b8010e44fb3a6ec8554dc813314e7e254378da9":{"kind":"REWORK","_number":18,"created":"2015-01-25 02:39:10.000000000","uploader":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"ref":"refs/changes/01/133601/18","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/01/133601/18","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/18 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/18 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/18 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/01/133601/18"}}},"commit":{"parents":[{"commit":"beef860d37977750a1656867d3a7778813d0c915","subject":"add require json for to_json dependency","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/beef860d37977750a1656867d3a7778813d0c915"}]}],"author":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2014-10-28 14:12:52.000000000","tz":-360},"committer":{"name":"Rich Megginson","email":"rmeggins@redhat.com","date":"2015-01-25 02:39:04.000000000","tz":-420},"subject":"handle missing project/tenant when using ldap backend","message":"handle missing project/tenant when using ldap backend\n\nThe project/tenant is only stored with the user when using\nthe sql (default) backend.  This means calls like user list\nand user show will not show the default project.  For getting\nthe project/tenant, if it is not present in the instances\ninformation provided by user list --long, we don\u0027t actually\nget the project/tenant, we just check to see if the user is\nassigned to the given tenant/project.  For setting the\nproject/tenant, this is usually done with user create, but when\nldap is read-only, we have to use role add to add the user to a\ndefault _member_ role and at the same time assign the user to a\ngiven project/tenant.  This also adds support for using the\nopenstack $obj show commands which return --format shell output,\nand return a hash of key/value pairs.\n\nCloses-Bug: #1391373\nChange-Id: I9a4f72f9a1de200b324aa52eb3ea90d15423c062\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/1b8010e44fb3a6ec8554dc813314e7e254378da9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/1b8010e44fb3a6ec8554dc813314e7e254378da9"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}