)]}'
{"id":"openstack%2Fwatcher~1001508","triplet_id":"openstack%2Fwatcher~stable%2F2025.2~Ic56f82c6825f0dc8e83ee92a92e3c3479404252d","project":"openstack/watcher","branch":"stable/2025.2","topic":"bug/2161771","attention_set":{},"removed_from_attention_set":{"30002":{"account":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"last_update":"2026-08-20 04:03:55.000000000","reason":"\u003cGERRIT_ACCOUNT_30002\u003e replied on the change","reason_account":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"}},"11604":{"account":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"last_update":"2026-08-19 19:27:21.000000000","reason":"\u003cGERRIT_ACCOUNT_11604\u003e replied on the change","reason_account":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"}}},"hashtags":["CVE-2026-76878","OSSA-2026-036"],"change_id":"Ic56f82c6825f0dc8e83ee92a92e3c3479404252d","subject":"Add policy enforcement to webhook trigger endpoint","status":"MERGED","created":"2026-08-19 14:13:53.000000000","updated":"2026-08-20 07:17:38.000000000","submitted":"2026-08-20 07:16:21.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1001508-bug/2161771","meta_rev_id":"4eb6ea6ec53f926d94098923b54dde092459d0f0","_number":1001508,"virtual_id_number":1001508,"owner":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},{"value":0,"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-08-20 07:16:21.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"all":[{"value":0,"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},{"value":2,"date":"2026-08-19 19:27:21.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"all":[{"value":1,"date":"2026-08-20 00:43:26.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},{"value":0,"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},{"value":0,"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{" 0":"Standard Change","+1":"Important Change","+2":"High Priority Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-08-19 14:31:13.000000000","updated_by":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"reviewer":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"state":"REVIEWER"},{"updated":"2026-08-19 15:57:02.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"493df984dd3608ef3926f1f85886a2a407bc619b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"date":"2026-08-19 14:13:53.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"2aa2b272f914ec48c26fe4e853967b3d04effbd9","author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"date":"2026-08-19 14:31:13.000000000","message":"Patch Set 1: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"abc1944ea9144779367dfb59e35463c79b43b425","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-08-19 15:01:51.000000000","message":"Hashtag added: OSSA-2026-036","accounts_in_message":[],"_revision_number":1},{"id":"89227a0aee451f66da669f7863d220111f7f1b4a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-19 15:57:02.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2e01048139e44a56b6a862a8ec4fd5ab\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/90584b01b9d3435c9df254bf8ab42a4c : SUCCESS in 3m 49s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fb57cea0f72742d4ab418c9597be78f6 : SUCCESS in 6m 01s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/311e4fa3aee94d738986ebfe5ebd5f84 : SUCCESS in 5m 52s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/7eaa16ea38ff4161aa35d93a4b559159 : SUCCESS in 5m 41s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/3570b73cedb84706aac129f219429549 : SUCCESS in 6m 28s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8f44905b54984f3fba36eeccc02921e8 : SUCCESS in 9m 04s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/05674f6b2c3a4f25ae3fe590f973bb5d : SUCCESS in 2m 56s\n- openstack-tox-py312-threading https://zuul.opendev.org/t/openstack/build/e7e93042da754e208bbbfd43599c1ad4 : SUCCESS in 5m 41s\n- watcher-grenade https://zuul.opendev.org/t/openstack/build/39e6e9accc8a4395adc1ec39bc4b5e81 : SUCCESS in 41m 33s\n- watcher-tempest-api-ipv6-only https://zuul.opendev.org/t/openstack/build/01a4205ec7594bacafc410b93f1aa5f9 : SUCCESS in 38m 46s\n- watcher-tempest-gnocchi https://zuul.opendev.org/t/openstack/build/fde9e264be2f49cb8e99bdf20963d135 : SUCCESS in 1h 13m 54s\n- python-watcherclient-functional https://zuul.opendev.org/t/openstack/build/39745fed21e14e5ea65c1fbd8bc54b0e : SUCCESS in 23m 45s\n- watcher-tempest-prometheus https://zuul.opendev.org/t/openstack/build/f95e31468f3440b0ac5292840fec615d : SUCCESS in 1h 29m 39s\n- watcher-tempest-prometheus-threading https://zuul.opendev.org/t/openstack/build/fa633bd61d6041c088aed42487de23b6 : SUCCESS in 1h 27m 09s\n- watcher-tempest-aetos https://zuul.opendev.org/t/openstack/build/643679deb4684706bc6234333ee97111 : SUCCESS in 1h 28m 21s","accounts_in_message":[],"_revision_number":1},{"id":"7dd5ca9c82117dab6d481e50468d17151d66927b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"date":"2026-08-19 16:04:12.000000000","message":"Uploaded patch set 2: Commit message was updated.\n\nOutdated Votes:\n* Code-Review+2 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"5b350f4ca86916dfa6321fd01b87038463f28249","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-19 17:46:46.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4e9ed7403cd443fab6938201289b3d22\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c501c447f5b14c75832244b3081b0d46 : SUCCESS in 7m 46s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7aaa85f3c1fe470d879b68dcbcd1adbb : SUCCESS in 4m 15s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/403d103ce6774f6c9ff2e6dbb2e52996 : SUCCESS in 5m 10s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/8134cae9af334675944a3f7be5f1b892 : SUCCESS in 5m 17s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/8d08b74c7bb041a1a473d4187a098385 : SUCCESS in 10m 05s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c9ab21c199cd4ee481433ff6e5291bbc : SUCCESS in 11m 14s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/bb6264d1197e4fec926b9856022c9f34 : SUCCESS in 5m 50s\n- openstack-tox-py312-threading https://zuul.opendev.org/t/openstack/build/6f0a9a02dbd64938842b2267befe4aa6 : SUCCESS in 6m 40s\n- watcher-grenade https://zuul.opendev.org/t/openstack/build/8d2b901423624d5a8c8cd1049bac0d1f : SUCCESS in 54m 02s\n- watcher-tempest-api-ipv6-only https://zuul.opendev.org/t/openstack/build/baad30a2571e42c7af6c2242fe60f977 : SUCCESS in 29m 11s\n- watcher-tempest-gnocchi https://zuul.opendev.org/t/openstack/build/48ba2f0faf6a4cc8b1a1e4058ad44d33 : SUCCESS in 1h 11m 08s\n- python-watcherclient-functional https://zuul.opendev.org/t/openstack/build/2710c61ea4c745b79d585157a22b6e2e : SUCCESS in 29m 20s\n- watcher-tempest-prometheus https://zuul.opendev.org/t/openstack/build/0435d9e77b334843986c180bdab43fa2 : SUCCESS in 52m 01s\n- watcher-tempest-prometheus-threading https://zuul.opendev.org/t/openstack/build/e4b20065160241089ebc450fe0d478c6 : SUCCESS in 1h 35m 54s\n- watcher-tempest-aetos https://zuul.opendev.org/t/openstack/build/e342b85128154216a8c32131fe8d49aa : SUCCESS in 1h 07m 30s","accounts_in_message":[],"_revision_number":2},{"id":"d841d4297e5ff2da61ea020c740de9dfe39cadff","author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"date":"2026-08-19 19:27:21.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"b5fdfd0713212a94815d97bcb9962ef7037903f4","author":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"date":"2026-08-20 00:43:26.000000000","message":"Patch Set 2: Workflow+1","accounts_in_message":[],"_revision_number":2},{"id":"7ccf72d777f0cb02bc79c3e240e0bc1914daf639","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 00:44:01.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"5454d1ca35b0ad6dbb84e0a65aa03e87d3ee0199","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 02:14:43.000000000","message":"Patch Set 2: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/67b4dd01a436470ea56b12b3cd21b867\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/acb70df1920943f9a7594eb0e4f28567 : SUCCESS in 2m 52s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/60f186768ad5401b9473c10b9cdb4305 : SUCCESS in 6m 43s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/8ecc9f7bff824e818fb9954268a347e9 : SUCCESS in 6m 45s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/28932c441b074a7b8d938d6191f82f10 : SUCCESS in 9m 57s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5008ca9aca1c47279603e31e052043af : SUCCESS in 2m 44s\n- openstack-tox-py312-threading https://zuul.opendev.org/t/openstack/build/ec78ddd38b914743a1adfb4bf4e137f0 : SUCCESS in 3m 19s\n- watcher-grenade https://zuul.opendev.org/t/openstack/build/28e5d187a8704a969c64189c49fac45e : SUCCESS in 51m 16s\n- watcher-tempest-api-ipv6-only https://zuul.opendev.org/t/openstack/build/1e12492eef6742f89be8985422e370c0 : SUCCESS in 16m 55s\n- watcher-tempest-gnocchi https://zuul.opendev.org/t/openstack/build/6dc5fbc717a6410e8c20a35a3b664265 : POST_FAILURE in 1h 24m 27s\n- python-watcherclient-functional https://zuul.opendev.org/t/openstack/build/b301e54d340d42a493f44fe89b8a1e3a : SUCCESS in 14m 05s\n- watcher-tempest-prometheus https://zuul.opendev.org/t/openstack/build/967c32f603694dcc8652c4bbce10d664 : SUCCESS in 50m 06s\n- watcher-tempest-prometheus-threading https://zuul.opendev.org/t/openstack/build/62d4e49e3d074e8d8027f579981ad289 : SUCCESS in 1h 25m 51s\n- watcher-tempest-aetos https://zuul.opendev.org/t/openstack/build/c97424d022394c78b37e6fdb36d3a690 : SUCCESS in 49m 37s","accounts_in_message":[],"_revision_number":2},{"id":"66f373efcd6773e37e6bc598ca444b65e2f76149","author":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"date":"2026-08-20 04:03:55.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"cfc18a2b6cea630e4e32bb30658a736e4234e734","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 05:40:23.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/75f29d016aa94fdfb769bff1eff32932\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2d146bfdc32340e4901f959f8d9dffb7 : SUCCESS in 6m 17s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/be98b980e4b546c5b1844fd38b7434b2 : SUCCESS in 6m 28s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/320ea22c4b9c4771baf824f8ec7a7938 : SUCCESS in 6m 21s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/6b9d0be63de14e0abfccdf8520d7e5fc : SUCCESS in 7m 35s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/95331925fca347db94e0025d9eeff654 : SUCCESS in 8m 49s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/16ade0fab32243138e0e994a6902b1e2 : SUCCESS in 9m 14s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a1c69776a1d34dadaed4d30e4ef37ee5 : SUCCESS in 4m 28s\n- openstack-tox-py312-threading https://zuul.opendev.org/t/openstack/build/76a842c046884c7086f81be7e590caa4 : SUCCESS in 3m 39s\n- watcher-grenade https://zuul.opendev.org/t/openstack/build/0968b230a7eb41f19928c128ed65c4fe : SUCCESS in 37m 32s\n- watcher-tempest-api-ipv6-only https://zuul.opendev.org/t/openstack/build/30038fa969134a7998a99b264989d60a : SUCCESS in 39m 28s\n- watcher-tempest-gnocchi https://zuul.opendev.org/t/openstack/build/139c5a269f1c4be086c257770f3a8e27 : SUCCESS in 1h 24m 47s\n- python-watcherclient-functional https://zuul.opendev.org/t/openstack/build/17ad8b6e64b64edb8281be6163606c62 : SUCCESS in 15m 49s\n- watcher-tempest-prometheus https://zuul.opendev.org/t/openstack/build/e4b9c0964cb44cee976e555590001f5b : SUCCESS in 1h 26m 33s\n- watcher-tempest-prometheus-threading https://zuul.opendev.org/t/openstack/build/9dbac142132d4df689c838bc55362dfa : SUCCESS in 1h 27m 00s\n- watcher-tempest-aetos https://zuul.opendev.org/t/openstack/build/47b2692b65a740989524074d3b1dab48 : SUCCESS in 53m 20s","accounts_in_message":[],"_revision_number":2},{"id":"92ab077415796cd64bfcea9e4e4ba639083657ba","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 05:40:58.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"c0bc5a074e0d5605f5ccbaf8708cc11fa3363b7f","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-08-20 06:15:05.000000000","message":"Hashtag added: CVE-2026-76878","accounts_in_message":[],"_revision_number":2},{"id":"604ef54da070e3ce02b880ec1bd17e5cbcb4dadd","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 07:16:21.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/805d6d0df6bc4021a90e0ac3a78175d9\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f4e0834e381144e0886b2ef6898b1870 : SUCCESS in 4m 01s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/0ce0d4c741ac4cb28dc0c436416cecdd : SUCCESS in 6m 41s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/a3ef334c5fa4430ea8e446a7a22ce46a : SUCCESS in 4m 38s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d28e0d217e5147f8ab93b4096032b9dd : SUCCESS in 9m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8d4e99c615dd4c2785e14ade892c1b41 : SUCCESS in 4m 51s\n- openstack-tox-py312-threading https://zuul.opendev.org/t/openstack/build/5e87af685f054b629f32424026bebde2 : SUCCESS in 5m 04s\n- watcher-grenade https://zuul.opendev.org/t/openstack/build/7a1d9480a77c47fd92a0b3ccd7f558b3 : SUCCESS in 50m 55s\n- watcher-tempest-api-ipv6-only https://zuul.opendev.org/t/openstack/build/978deb4c9d084372b1eae64656673e93 : SUCCESS in 34m 34s\n- watcher-tempest-gnocchi https://zuul.opendev.org/t/openstack/build/e38c4fbc894a4e549e3a071d8c8cab70 : SUCCESS in 1h 08m 21s\n- python-watcherclient-functional https://zuul.opendev.org/t/openstack/build/266ba4d2217b4e9f99db8cba0aedd85b : SUCCESS in 19m 22s\n- watcher-tempest-prometheus https://zuul.opendev.org/t/openstack/build/a9cad4f3189d479386240323178bbbed : SUCCESS in 1h 10m 40s\n- watcher-tempest-prometheus-threading https://zuul.opendev.org/t/openstack/build/a0f801ffe0cd49e8aab7b9c7b9501195 : SUCCESS in 1h 24m 18s\n- watcher-tempest-aetos https://zuul.opendev.org/t/openstack/build/61c5961024df4dc59d990ea5c284bea9 : SUCCESS in 1h 32m 36s","accounts_in_message":[],"_revision_number":2},{"id":"b4d6ada5b0f3641fb2059132d730ce0ab1b7908b","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 07:16:21.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":2},{"id":"4eb6ea6ec53f926d94098923b54dde092459d0f0","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-08-20 07:17:38.000000000","message":"Patch Set 2:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a514831ead464a4ab89d6cc0efc8eae4\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5fc3914d7d574920b480638c86ea3c07 : SUCCESS in 39s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/bcc574d4bda74965add720429c3d7ea6 : SUCCESS in 1m 03s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"1e8546675eb062c2c88985484410c256b8674ca8","revisions":{"0e265fcb2a72aff05c2c98421d5f30d46c03881a":{"kind":"REWORK","_number":1,"created":"2026-08-19 14:13:53.000000000","uploader":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"ref":"refs/changes/08/1001508/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/watcher","ref":"refs/changes/08/1001508/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/watcher refs/changes/08/1001508/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/watcher refs/changes/08/1001508/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/watcher refs/changes/08/1001508/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/watcher refs/changes/08/1001508/1"}}},"commit":{"parents":[{"commit":"8e27e90a2fd493ef9de9fba5a447b5d822fdb395","subject":"Avoid logging messaging transport URLs","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/watcher/commit/8e27e90a2fd493ef9de9fba5a447b5d822fdb395"}]}],"author":{"name":"Douglas Viroel","email":"viroel@gmail.com","date":"2026-07-28 18:19:55.000000000","tz":-180},"committer":{"name":"Douglas Viroel","email":"viroel@gmail.com","date":"2026-08-19 11:44:06.000000000","tz":-180},"subject":"Add policy enforcement to webhook trigger endpoint","message":"Add policy enforcement to webhook trigger endpoint\n\nThe webhook POST endpoint (/v1/webhooks/{audit_uuid}) was entirely\nunprotected even when [api] enable_webhooks_auth was set to True, as no\noslo_policy check was applied to the request.\n\nThis patch introduce a new webhook policy module with a webhook:trigger rule\nbacked by the new admin_or_service_api base rule (role:admin,\nrole:administrator, or role:service). The policy is enforced in the\nWebhookController.post() method when enable_webhooks_auth is enabled,\nrejecting callers that do not hold one of the required roles with HTTP 403.\nWhen enable_webhooks_auth is False the endpoint remains unauthenticated and\nno policy check is applied.\n\nCloses-Bug: #2161771\nAssisted-By: Claude Code (Sonnet 4.6)\nChange-Id: Ic56f82c6825f0dc8e83ee92a92e3c3479404252d\nSigned-off-by: Douglas Viroel \u003cviroel@gmail.com\u003e\n(cherry picked from commit c4e44309c4b60dd01211a910407671bfb765636a)\n(cherry picked from commit e373cb2b0ee683ea61cf687782c8005b6a78e622)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/watcher/commit/0e265fcb2a72aff05c2c98421d5f30d46c03881a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/watcher/commit/0e265fcb2a72aff05c2c98421d5f30d46c03881a"}]},"branch":"refs/heads/stable/2025.2"},"1e8546675eb062c2c88985484410c256b8674ca8":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2026-08-19 16:04:12.000000000","uploader":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"},"ref":"refs/changes/08/1001508/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/watcher","ref":"refs/changes/08/1001508/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/watcher refs/changes/08/1001508/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/watcher refs/changes/08/1001508/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/watcher refs/changes/08/1001508/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/watcher refs/changes/08/1001508/2"}}},"commit":{"parents":[{"commit":"8e27e90a2fd493ef9de9fba5a447b5d822fdb395","subject":"Avoid logging messaging transport URLs","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/watcher/commit/8e27e90a2fd493ef9de9fba5a447b5d822fdb395"}]}],"author":{"name":"Douglas Viroel","email":"viroel@gmail.com","date":"2026-07-28 18:19:55.000000000","tz":-180},"committer":{"name":"Douglas Viroel","email":"viroel@gmail.com","date":"2026-08-19 16:03:34.000000000","tz":-180},"subject":"Add policy enforcement to webhook trigger endpoint","message":"Add policy enforcement to webhook trigger endpoint\n\nThe webhook POST endpoint (/v1/webhooks/{audit_uuid}) was entirely\nunprotected even when [api] enable_webhooks_auth was set to True, as no\noslo_policy check was applied to the request.\n\nThis patch introduce a new webhook policy module with a webhook:trigger rule\nbacked by the new admin_or_service_api base rule (role:admin,\nrole:administrator, or role:service). The policy is enforced in the\nWebhookController.post() method when enable_webhooks_auth is enabled,\nrejecting callers that do not hold one of the required roles with HTTP 403.\nWhen enable_webhooks_auth is False the endpoint remains unauthenticated and\nno policy check is applied.\n\nCloses-Bug: #2161771\nAssisted-By: Claude Code (Sonnet 4.6)\nChange-Id: Ic56f82c6825f0dc8e83ee92a92e3c3479404252d\nSigned-off-by: Douglas Viroel \u003cviroel@gmail.com\u003e\n(cherry picked from commit 58177acea05b08f5a1137492df3189d61908cac2)\n(cherry picked from commit 171f4dc00c38fd2ab602c8900cab0418e1743b8a)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/watcher/commit/1e8546675eb062c2c88985484410c256b8674ca8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/watcher/commit/1e8546675eb062c2c88985484410c256b8674ca8"}]},"branch":"refs/heads/stable/2025.2"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":30002,"name":"Douglas Viroel","email":"viroel@gmail.com","username":"dviroel"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review Priority","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}