)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c35ffd2c9230d7beaa2a08488023d6bb14639721","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"9e9d75db_da64c36b","updated":"2021-11-19 20:43:59.000000000","message":"Marking this as WIP until we verify the policies introduces here are consistent with the policies in the service on stable/wallaby.\n\nOnce that\u0027s acknowledge, or +1\u0027d, from the service I\u0027ll remove the WIP.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"9863cbb8859c8c0ae6768bea4262c9fa9b7817c6","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"af426576_6f431a3e","in_reply_to":"6a2fba6a_77587bfd","updated":"2021-11-19 21:06:05.000000000","message":"That makes sense. Feel free to take over this patch or leave comments for what needs to be adjusted for cinder.\n\nThanks for the help, Alan.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"d887f064f4927f8fbddffbb156ff47a080c2cfa4","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"91662717_ff96de2b","in_reply_to":"9788e847_7c37396f","updated":"2021-11-19 21:15:42.000000000","message":"Whoops, just realized I\u0027m commenting in the cinder patch! Sure, I\u0027ll take this over.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"0446a7bfddb685fb5af54f936e5b2daa1b21545e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"6a2fba6a_77587bfd","in_reply_to":"9e9d75db_da64c36b","updated":"2021-11-19 20:53:12.000000000","message":"Cinder has some policy differences that will need to be taken into account. I assume the project specific patches that update this one will also be backported, such as cinder\u0027s [1].\n\n[1] https://review.opendev.org/c/openstack/tripleo-heat-templates/+/810460\n\nI\u0027m thinking that might be the place to resolve the policy deltas between X and W, and I\u0027m happy to collaborate on cinder\u0027s. To that end, I could do the [1] backport.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"e18071396827e702e99fd40177b91128fb753c88","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"9788e847_7c37396f","in_reply_to":"af426576_6f431a3e","updated":"2021-11-19 21:14:39.000000000","message":"I propose we merge this patch as-is, and have each project/community be responsible for backporting the patch that updated/fixed their policies in Xena (cinder\u0027s is [1]). The people that do those backports are best suited to adjust the backports for wallaby.\n\nObviously this is a team effort, so I\u0027d like to hear from folks from other projects.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"e145ad6bec13b71b4b493b37beeda1f6dc4ddb84","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"928751aa_ab923d40","updated":"2021-12-14 18:27:11.000000000","message":"Adding my own vote, but only +1 as I\u0027m a co-author.","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"},{"author":{"_account_id":6796,"name":"Giulio Fidente","email":"gfidente@redhat.com","username":"gfidente"},"change_message_id":"f36d5b4575ada911db31318058e8d1eaa274c960","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"faf925bc_4c48fc22","updated":"2021-11-23 09:20:53.000000000","message":"LGTM","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"74f8284af683eaca91bcc36a2fc7a26b297295cc","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"cce37bc1_7c67222d","updated":"2021-11-25 17:54:05.000000000","message":"check-rdo","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"},{"author":{"_account_id":12393,"name":"chandan kumar","display_name":"Chandan Kumar","email":"chkumar@redhat.com","username":"chkumar246"},"change_message_id":"fc8d8204c75b1edffb4bd70b9c6fba12eda7a1ec","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"783986ff_123038aa","updated":"2021-12-21 08:50:19.000000000","message":"https://e422948e3659485610a4-2fe81f106a8b79afa5f859bb7636b32b.ssl.cf2.rackcdn.com/818634/2/gate/tripleo-ci-centos-8-scenario000-multinode-oooq-container-updates-wallaby/5b38b3f/logs/undercloud/home/zuul/undercloud_install.log\n\n```\nontainer image prepare | undercloud | error\u003d{\"changed\": false, \"error\": \"Not found image: http://173.231.255.76:5001/v2/tripleowallaby/openstack-mariadb/manifests/bbdb0cc31fe6dface3aa970cae578134\", \"msg\": \"Error running container image prepare: Not found image: http://173.231.255.76:5001/v2/tripleowallaby/openstack-mariadb/manifests/bbdb0cc31fe6dface3aa970cae578134\", \"params\": {}, \"success\": false}\n```\nrecheck","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"},{"author":{"_account_id":9976,"name":"Ronelle Landy","email":"rlandy@redhat.com","username":"rlandy"},"change_message_id":"e55b0ec298d4940c63403983ef108923fa35135b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"e534a987_7745acde","updated":"2021-12-21 17:57:04.000000000","message":"recheck","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"}],"environments/enable-secure-rbac.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2103,"context_line":"    cinder-group_group_project_attribute:"},{"line_number":2104,"context_line":"      key: \"group:group_project_attribute\""},{"line_number":2105,"context_line":"      value: \"rule:admin_api\""},{"line_number":2106,"context_line":"    cinder-group_group_types_create:"},{"line_number":2107,"context_line":"      key: \"group:group_types:create\""},{"line_number":2108,"context_line":"      value: \"rule:admin_api\""},{"line_number":2109,"context_line":"    cinder-group_group_types_update:"},{"line_number":2110,"context_line":"      key: \"group:group_types:update\""},{"line_number":2111,"context_line":"      value: \"rule:admin_api\""},{"line_number":2112,"context_line":"    cinder-group_group_types_delete:"},{"line_number":2113,"context_line":"      key: \"group:group_types:delete\""},{"line_number":2114,"context_line":"      value: \"rule:admin_api\""},{"line_number":2115,"context_line":"    cinder-group_access_group_types_specs:"},{"line_number":2116,"context_line":"      key: \"group:access_group_types_specs\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"a5203d6e_d4fd421b","line":2113,"range":{"start_line":2106,"start_character":0,"end_line":2113,"end_character":37},"updated":"2021-11-24 16:04:16.000000000","message":"For reviewers, these were added after wallaby to make the group types API more granular.\n\nThis shouldn\u0027t impact end users since it\u0027s restricted to operators (project-admin).","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2115,"context_line":"    cinder-group_access_group_types_specs:"},{"line_number":2116,"context_line":"      key: \"group:access_group_types_specs\""},{"line_number":2117,"context_line":"      value: \"rule:admin_api\""},{"line_number":2118,"context_line":"    cinder-group_group_types_specs_get:"},{"line_number":2119,"context_line":"      key: \"group:group_types_specs:get\""},{"line_number":2120,"context_line":"      value: \"rule:admin_api\""},{"line_number":2121,"context_line":"    cinder-group_group_types_specs_get_all:"},{"line_number":2122,"context_line":"      key: \"group:group_types_specs:get_all\""},{"line_number":2123,"context_line":"      value: \"rule:admin_api\""},{"line_number":2124,"context_line":"    cinder-group_group_types_specs_create:"},{"line_number":2125,"context_line":"      key: \"group:group_types_specs:create\""},{"line_number":2126,"context_line":"      value: \"rule:admin_api\""},{"line_number":2127,"context_line":"    cinder-group_group_types_specs_update:"},{"line_number":2128,"context_line":"      key: \"group:group_types_specs:update\""},{"line_number":2129,"context_line":"      value: \"rule:admin_api\""},{"line_number":2130,"context_line":"    cinder-group_group_types_specs_delete:"},{"line_number":2131,"context_line":"      key: \"group:group_types_specs:delete\""},{"line_number":2132,"context_line":"      value: \"rule:admin_api\""},{"line_number":2133,"context_line":"    cinder-group_get_all_group_snapshots:"},{"line_number":2134,"context_line":"      key: \"group:get_all_group_snapshots\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"c04170a7_041b7f1c","line":2131,"range":{"start_line":2118,"start_character":0,"end_line":2131,"end_character":43},"updated":"2021-11-24 16:04:16.000000000","message":"For reviewers, these were added after wallaby to make the group type specs API more granular.\n\nThis shouldn\u0027t impact end users since it\u0027s restricted to operators (project-admin).","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2184,"context_line":"    cinder-volume_extension_qos_specs_manage_delete:"},{"line_number":2185,"context_line":"      key: \"volume_extension:qos_specs_manage:delete\""},{"line_number":2186,"context_line":"      value: \"rule:admin_api\""},{"line_number":2187,"context_line":"    cinder-volume_extension_quota_classes_get:"},{"line_number":2188,"context_line":"      key: \"volume_extension:quota_classes:get\""},{"line_number":2189,"context_line":"      value: \"rule:admin_api\""},{"line_number":2190,"context_line":"    cinder-volume_extension_quota_classes_update:"},{"line_number":2191,"context_line":"      key: \"volume_extension:quota_classes:update\""},{"line_number":2192,"context_line":"      value: \"rule:admin_api\""},{"line_number":2193,"context_line":"    cinder-volume_extension_quotas_show:"},{"line_number":2194,"context_line":"      key: \"volume_extension:quotas:show\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"a2efe2da_719544cf","line":2191,"range":{"start_line":2187,"start_character":0,"end_line":2191,"end_character":50},"updated":"2021-11-24 16:04:16.000000000","message":"For reviewers, these were added after wallaby to make the volume extension quota API more granular.\n\nThis shouldn\u0027t impact end users since it\u0027s restricted to operators (project-admin).","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2235,"context_line":"    cinder-volume_extension_volume_unmanage:"},{"line_number":2236,"context_line":"      key: \"volume_extension:volume_unmanage\""},{"line_number":2237,"context_line":"      value: \"rule:admin_api\""},{"line_number":2238,"context_line":"    cinder-volume_extension_type_create:"},{"line_number":2239,"context_line":"      key: \"volume_extension:type_create\""},{"line_number":2240,"context_line":"      value: \"rule:admin_api\""},{"line_number":2241,"context_line":"    cinder-volume_extension_type_update:"},{"line_number":2242,"context_line":"      key: \"volume_extension:type_update\""},{"line_number":2243,"context_line":"      value: \"rule:admin_api\""},{"line_number":2244,"context_line":"    cinder-volume_extension_type_delete:"},{"line_number":2245,"context_line":"      key: \"volume_extension:type_delete\""},{"line_number":2246,"context_line":"      value: \"rule:admin_api\""},{"line_number":2247,"context_line":"    cinder-volume_extension_type_get:"},{"line_number":2248,"context_line":"      key: \"volume_extension:type_get\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"58049031_5a7375bb","line":2245,"range":{"start_line":2238,"start_character":0,"end_line":2245,"end_character":41},"updated":"2021-11-24 16:04:16.000000000","message":"For reviewers, these were added after wallaby to make the volume extension type API more granular.\n\nThis shouldn\u0027t impact end users since it\u0027s restricted to operators (project-admin).","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2282,"context_line":"      value: \"rule:admin_api\""},{"line_number":2283,"context_line":"    cinder-volume_extension_volume_type_access_get_all_for_type:"},{"line_number":2284,"context_line":"      key: \"volume_extension:volume_type_access:get_all_for_type\""},{"line_number":2285,"context_line":"      value: \"rule:admin_api\""},{"line_number":2286,"context_line":"    cinder-volume_extend:"},{"line_number":2287,"context_line":"      key: \"volume:extend\""},{"line_number":2288,"context_line":"      value: \"rule:system_admin_or_project_member\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"334b9b89_138be0bb","line":2285,"updated":"2021-11-24 16:04:16.000000000","message":"This must have been a new policy that was introduced after wallaby was released?","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"1236bf35cefc26d3c7679a30970cea62a1c379fb","unresolved":true,"context_lines":[{"line_number":2282,"context_line":"      value: \"rule:admin_api\""},{"line_number":2283,"context_line":"    cinder-volume_extension_volume_type_access_get_all_for_type:"},{"line_number":2284,"context_line":"      key: \"volume_extension:volume_type_access:get_all_for_type\""},{"line_number":2285,"context_line":"      value: \"rule:admin_api\""},{"line_number":2286,"context_line":"    cinder-volume_extend:"},{"line_number":2287,"context_line":"      key: \"volume:extend\""},{"line_number":2288,"context_line":"      value: \"rule:system_admin_or_project_member\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"f2db18cf_181e2cd2","line":2285,"in_reply_to":"334b9b89_138be0bb","updated":"2021-11-24 16:56:32.000000000","message":"Correct, and it\u0027s similar to the way that a few wallaby policies were split into more granular policies. In this instance, this ^^ new policy was added to govern access to a feature that in wallaby is governed by the \"volume_extension:volume_type_access\" policy. In Xena there are two distinct policies, whereas in wallaby they \"share\" a common policy.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2370,"context_line":"    cinder-volume_delete_volume_metadata:"},{"line_number":2371,"context_line":"      key: \"volume:delete_volume_metadata\""},{"line_number":2372,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2373,"context_line":"    cinder-volume_extension_volume_image_metadata_show:"},{"line_number":2374,"context_line":"      key: \"volume_extension:volume_image_metadata:show\""},{"line_number":2375,"context_line":"      value: \"rule:system_admin_or_project_reader\""},{"line_number":2376,"context_line":"    cinder-volume_extension_volume_image_metadata_set:"},{"line_number":2377,"context_line":"      key: \"volume_extension:volume_image_metadata:set\""},{"line_number":2378,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2379,"context_line":"    cinder-volume_extension_volume_image_metadata_remove:"},{"line_number":2380,"context_line":"      key: \"volume_extension:volume_image_metadata:remove\""},{"line_number":2381,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2382,"context_line":"    cinder-volume_update_volume_admin_metadata:"},{"line_number":2383,"context_line":"      key: \"volume:update_volume_admin_metadata\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"c54fb6ed_cf946dfd","line":2380,"range":{"start_line":2373,"start_character":0,"end_line":2380,"end_character":58},"updated":"2021-11-24 16:04:16.000000000","message":"For reviewers, these were added after wallaby to make the volume extension image metadata API more granular.\n\nThis shouldn\u0027t impact end users since it\u0027s restricted to operators (project-admin).","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2391,"context_line":"    cinder-volume_extension_types_extra_specs_show:"},{"line_number":2392,"context_line":"      key: \"volume_extension:types_extra_specs:show\""},{"line_number":2393,"context_line":"      value: \"rule:system_admin_or_project_reader\""},{"line_number":2394,"context_line":"    cinder-volume_extension_types_extra_specs_read_sensitive:"},{"line_number":2395,"context_line":"      key: \"volume_extension:types_extra_specs:read_sensitive\""},{"line_number":2396,"context_line":"      value: \"rule:admin_api\""},{"line_number":2397,"context_line":"    cinder-volume_extension_types_extra_specs_update:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9fd13ed0_ca6915d5","line":2394,"updated":"2021-11-24 16:04:16.000000000","message":"This must have been implemented after the wallaby release?","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"1236bf35cefc26d3c7679a30970cea62a1c379fb","unresolved":true,"context_lines":[{"line_number":2391,"context_line":"    cinder-volume_extension_types_extra_specs_show:"},{"line_number":2392,"context_line":"      key: \"volume_extension:types_extra_specs:show\""},{"line_number":2393,"context_line":"      value: \"rule:system_admin_or_project_reader\""},{"line_number":2394,"context_line":"    cinder-volume_extension_types_extra_specs_read_sensitive:"},{"line_number":2395,"context_line":"      key: \"volume_extension:types_extra_specs:read_sensitive\""},{"line_number":2396,"context_line":"      value: \"rule:admin_api\""},{"line_number":2397,"context_line":"    cinder-volume_extension_types_extra_specs_update:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"171e58ed_57784f62","line":2394,"in_reply_to":"9fd13ed0_ca6915d5","updated":"2021-11-24 16:56:32.000000000","message":"Yes, it\u0027s for a new cinder feature introduced in xena.","commit_id":"f6a7bf0fc78313a0ecad438c39ca5794ce0f8fee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b170bf2db064b04303773a5bee453cc7dbabf49","unresolved":true,"context_lines":[{"line_number":2342,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2343,"context_line":"    cinder-volume_extension_volume_image_metadata:"},{"line_number":2344,"context_line":"      key: \"volume_extension:volume_image_metadata\""},{"line_number":2345,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2346,"context_line":"    cinder-volume_update_volume_admin_metadata:"},{"line_number":2347,"context_line":"      key: \"volume:update_volume_admin_metadata\""},{"line_number":2348,"context_line":"      value: \"rule:admin_api\""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"4b4585a4_d17ebcca","line":2345,"updated":"2021-11-24 16:04:16.000000000","message":"To clarify - this means the volume image metadata API will not support project-reader for GET APIs.","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"},{"author":{"_account_id":21129,"name":"Alan Bishop","email":"abishopsweng@gmail.com","username":"ASBishop","status":"ex Red Hat"},"change_message_id":"1236bf35cefc26d3c7679a30970cea62a1c379fb","unresolved":true,"context_lines":[{"line_number":2342,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2343,"context_line":"    cinder-volume_extension_volume_image_metadata:"},{"line_number":2344,"context_line":"      key: \"volume_extension:volume_image_metadata\""},{"line_number":2345,"context_line":"      value: \"rule:system_admin_or_project_member\""},{"line_number":2346,"context_line":"    cinder-volume_update_volume_admin_metadata:"},{"line_number":2347,"context_line":"      key: \"volume:update_volume_admin_metadata\""},{"line_number":2348,"context_line":"      value: \"rule:admin_api\""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"7410a739_ab2e8284","line":2345,"in_reply_to":"4b4585a4_d17ebcca","updated":"2021-11-24 16:56:32.000000000","message":"That is correct. I believe the plan is to document this limitation (right, rosmaita?), but I don\u0027t recall the details of how this will be handled.","commit_id":"8a3dbc0b0554594e96275e36aac8d811394f430d"}]}