)]}'
{"id":"openstack%2Ftripleo-quickstart-extras~664133","triplet_id":"openstack%2Ftripleo-quickstart-extras~master~I6fa5ebee8a4cbcc65b78654072a6102b742d8b9c","project":"openstack/tripleo-quickstart-extras","branch":"master","topic":"freeipa-firewall","hashtags":[],"change_id":"I6fa5ebee8a4cbcc65b78654072a6102b742d8b9c","subject":"Configure supplemental node firewall for FreeIPA ports","status":"ABANDONED","created":"2019-06-08 09:07:58.000000000","updated":"2019-08-07 19:42:13.000000000","total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"6167ef656cdaf454deecb2ccfb0914f4694458a9","_number":664133,"virtual_id_number":664133,"owner":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},{"_account_id":11589,"name":"Harry Rybacki","email":"hrybacki@redhat.com","username":"hrybacki"},{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},{"value":-1,"date":"2019-06-08 11:31:28.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2019-06-08 11:43:24.000000000","_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},{"date":"2019-06-08 09:08:13.000000000","_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"disliked":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"all":[{"value":0,"date":"2019-06-10 18:29:38.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":11589,"name":"Harry Rybacki","email":"hrybacki@redhat.com","username":"hrybacki"},{"value":-1,"date":"2019-06-08 11:11:04.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},{"date":"2019-06-08 09:08:26.000000000","_account_id":11589,"name":"Harry Rybacki","email":"hrybacki@redhat.com","username":"hrybacki"},{"value":0,"permitted_voting_range":{"min":-1,"max":0},"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},{"_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},{"_account_id":11589,"name":"Harry Rybacki","email":"hrybacki@redhat.com","username":"hrybacki"},{"_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2019-06-08 09:08:13.000000000","updated_by":{"_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2019-06-08 09:08:26.000000000","updated_by":{"_account_id":11589,"name":"Harry Rybacki","email":"hrybacki@redhat.com","username":"hrybacki"},"reviewer":{"_account_id":11589,"name":"Harry Rybacki","email":"hrybacki@redhat.com","username":"hrybacki"},"state":"REVIEWER"},{"updated":"2019-06-08 11:31:28.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2019-06-08 11:43:24.000000000","updated_by":{"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},"reviewer":{"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2019-06-10 18:29:38.000000000","updated_by":{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},"reviewer":{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},"state":"REVIEWER"}],"messages":[{"id":"d5168f04cf5fe88a4f8d8169e179467ebf418b33","author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"date":"2019-06-08 09:07:58.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"6af40e6ae3cb9eca3fc554b7782c76c71e437663","author":{"_account_id":18846,"name":"RedHat RDO CI","email":"rdo-ci-admins@redhat.com","username":"rdo-ci","tags":["SERVICE_USER"]},"date":"2019-06-08 09:08:13.000000000","message":"Patch Set 1:\n\nBuild Failed \n\n* tripleo-quickstart-extras-gate-master-delorean-full-featureset052 https://ci.centos.org/job/tripleo-quickstart-extras-gate-master-delorean-full-featureset052/3489/ : FAILURE","accounts_in_message":[],"_revision_number":1},{"id":"c14f876212a1377f1d27aacf5568b9d94e6fc637","author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"date":"2019-06-08 11:11:04.000000000","message":"Patch Set 1: Code-Review-1\n\nThis is still a WIP.","accounts_in_message":[],"_revision_number":1},{"id":"d3c2c767bff9575813eee56d6faf753961d5222f","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2019-06-08 11:31:28.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttp://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n\n- tripleo-ci-centos-7-undercloud-containers http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-undercloud-containers/8e296f9/ : SUCCESS in 1h 22m 49s\n- tripleo-ci-centos-7-containerized-undercloud-upgrades http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-containerized-undercloud-upgrades/9e15c86/ : FAILURE in 1h 20m 23s (non-voting)\n- tripleo-ci-centos-7-containers-multinode http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-containers-multinode/49063dd/ : SUCCESS in 1h 55m 20s\n- tripleo-ci-centos-7-scenario007-multinode-oooq-container http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-scenario007-multinode-oooq-container/3a79597/ : SUCCESS in 1h 58m 40s (non-voting)\n- tripleo-ci-centos-7-scenario008-multinode-oooq-container http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-scenario008-multinode-oooq-container/f41331a/ : FAILURE in 1h 15m 23s (non-voting)\n- tripleo-ci-centos-7-scenario012-multinode-oooq-container http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-scenario012-multinode-oooq-container/1131b4b/ : FAILURE in 2h 12m 51s (non-voting)\n- tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-scenario000-multinode-oooq-container-updates/ec6080a/ : SUCCESS in 2h 00m 14s\n- tripleo-ci-centos-7-scenario000-multinode-oooq-container-upgrades http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-scenario000-multinode-oooq-container-upgrades/e74b8e4/ : SUCCESS in 2h 10m 02s (non-voting)\n- tripleo-ci-centos-7-standalone http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-standalone/c6992d1/ : SUCCESS in 1h 43m 43s\n- tripleo-ci-fedora-28-standalone http://logs.openstack.org/33/664133/1/check/tripleo-ci-fedora-28-standalone/9253b4d/ : SUCCESS in 1h 48m 34s\n- tripleo-ci-centos-7-standalone-upgrade http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-standalone-upgrade/aadeefb/ : SUCCESS in 1h 54m 16s (non-voting)\n- tripleo-ci-centos-7-standalone-upgrade-stein http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-standalone-upgrade-stein/c4dd8ab/ : SUCCESS in 2h 06m 14s\n- tripleo-ci-centos-7-standalone-os-tempest http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-standalone-os-tempest/27a647f/ : SUCCESS in 1h 03m 56s\n- tripleo-ci-centos-7-containers-multinode-stein http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-containers-multinode-stein/9431c89/ : SUCCESS in 1h 47m 10s (non-voting)\n- tripleo-ci-centos-7-containers-multinode-rocky http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-containers-multinode-rocky/65b50a5/ : SUCCESS in 2h 13m 02s (non-voting)\n- tripleo-ci-centos-7-containers-multinode-queens http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-containers-multinode-queens/68a3e9b/ : SUCCESS in 1h 58m 39s\n- tripleo-ci-centos-7-containers-multinode-pike http://logs.openstack.org/33/664133/1/check/tripleo-ci-centos-7-containers-multinode-pike/44c78b1/ : SUCCESS in 2h 17m 49s\n- openstack-tox-linters http://logs.openstack.org/33/664133/1/check/openstack-tox-linters/5ee7760/ : FAILURE in 3m 55s","accounts_in_message":[],"_revision_number":1},{"id":"2cb0d22ea2db7364c6628907f66d1c055292bf02","author":{"_account_id":23181,"name":"RDO Third Party CI","email":"dmsimard+rdothirdparty@redhat.com","username":"rdothirdparty","tags":["SERVICE_USER"]},"date":"2019-06-08 11:43:24.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001 http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001/b1d3181/ : SUCCESS in 2h 15m 41s\n- tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset035 http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset035/6361ce1/ : SUCCESS in 2h 16m 58s\n- tripleo-ci-centos-7-multinode-1ctlr-featureset010 http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-multinode-1ctlr-featureset010/8ef8a60/ : SUCCESS in 1h 10m 57s\n- tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-queens-branch http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-queens-branch/a4ffab9/ : SUCCESS in 2h 14m 26s\n- tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-rocky-branch http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-rocky-branch/fd3bb3d/ : SUCCESS in 2h 04m 41s\n- tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-stein-branch http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset001-stein-branch/75c4952/ : SUCCESS in 2h 10m 04s\n- tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset053 http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp-featureset053/2b36d92/ : SUCCESS in 2h 26m 08s (non-voting)\n- tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039 http://logs.rdoproject.org/33/664133/1/openstack-check/tripleo-ci-centos-7-ovb-3ctlr_1comp_1supp-featureset039/88ebd53/ : SUCCESS in 2h 30m 02s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"1deed7c4fa97b65a5c6321a8702d351c567c74c7","author":{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},"date":"2019-06-09 16:51:17.000000000","message":"Patch Set 1: Code-Review-1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"5603ea47bed4f6ef7310ca7f50d64d5a44e7c2aa","author":{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},"date":"2019-06-10 18:29:38.000000000","message":"Patch Set 1: -Code-Review\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"275b28d8bb7f1c00ed6e391dc386570ece30fd5d","author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"date":"2019-08-07 19:42:13.000000000","message":"Abandoned\n\nThere is support in ansible-freeipa for configuring the firewall now.  Abandoning this patch.","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"5d22be44d80d09bc580ce3b0190ce69818ffa3f6","revisions":{"5d22be44d80d09bc580ce3b0190ce69818ffa3f6":{"kind":"REWORK","_number":1,"created":"2019-06-08 09:07:58.000000000","uploader":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"ref":"refs/changes/33/664133/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/tripleo-quickstart-extras","ref":"refs/changes/33/664133/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/tripleo-quickstart-extras refs/changes/33/664133/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/tripleo-quickstart-extras refs/changes/33/664133/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/tripleo-quickstart-extras refs/changes/33/664133/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/tripleo-quickstart-extras refs/changes/33/664133/1"}}},"commit":{"parents":[{"commit":"a5dae7beeee530e0d35570937f028df940628eac","subject":"[ROCKY] put test_resize_server_revert in skip list","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tripleo-quickstart-extras/commit/a5dae7beeee530e0d35570937f028df940628eac"}]}],"author":{"name":"Nathan Kinder","email":"nkinder@redhat.com","date":"2019-06-08 08:51:23.000000000","tz":120},"committer":{"name":"Nathan Kinder","email":"nkinder@redhat.com","date":"2019-06-08 08:51:23.000000000","tz":120},"subject":"Configure supplemental node firewall for FreeIPA ports","message":"Configure supplemental node firewall for FreeIPA ports\n\nThe supplemental node that is used for deploying FreeIPA does not\nconfigure the firewall to allow traffic to its required ports.  This\nhas not been a problem thus far, but the supplemental node is being\nexpanded to also run Keycloak for the purpose of enabling Keystone\nto use it for OpenID Connect or SAML based federation.  The ansible\nrole that will be used to deploy Keycloak (nkinder.keycloak) will\nconfigure firewalld for the Keycloak ports, which results in blocking\naccess to any of the FreeIPA services by other nodes such as the\nundercloud.\n\nThis patch configures firewalld on the supplemental node to allow\ntraffic into the FreeIPA ports when deploying FreeIPA.\n\nChange-Id: I6fa5ebee8a4cbcc65b78654072a6102b742d8b9c\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tripleo-quickstart-extras/commit/5d22be44d80d09bc580ce3b0190ce69818ffa3f6"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/tripleo-quickstart-extras/commit/5d22be44d80d09bc580ce3b0190ce69818ffa3f6"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}