5189 Commits

Author SHA1 Message Date
Zuul
3599bd9599 Merge "RDO: Fix package name of aodhclient" 2025-01-14 17:12:31 +00:00
Zuul
a171a3e4ce Merge "doc: Use dnf instead of yum" 2025-01-06 16:40:35 +00:00
Takashi Kajinami
4450d9bd50 RDO: Fix package name of aodhclient
All python packages in RDO are now named python3-* instead of python-*
and python-* is no longer translated to python3-* automatically.

Change-Id: I692e0f06f922a13e342f568b442da6bee74c5633
2025-01-07 01:32:23 +09:00
Takashi Kajinami
a669583536 doc: Use dnf instead of yum
The yum command has been replaced by the dnf command in recent releases
of Fedora-based distributions. Use the native command instead of
the alias kept for compatibility.

Change-Id: I5c9d4f4ac56cc2510839c1c931f3a03550396726
2025-01-07 01:21:42 +09:00
Zuul
fafbf587d0 Merge "Update gate jobs as per the 2025.1 cycle testing runtime" 2024-12-23 08:32:45 +00:00
Ghanshyam Mann
1622797c43 Update gate jobs as per the 2025.1 cycle testing runtime
As per 2025.1 testing runtime[1], we need to test on Ubuntu
Noble (which will be taken care by depends-on tempest and devstack
patches to move base jobs to Noble) and at least single job to run on
Ubutnu Jammy (for smooth upgrade from previous releases).

Depends-On: https://review.opendev.org/c/openstack/tempest/+/932156
Tracking: https://etherpad.opendev.org/p/migrate-to-noble

[1] https://governance.openstack.org/tc/reference/runtimes/2025.1.html

Change-Id: I0e9818b4c4dbacfcb7edd11a13918837da980d63
2024-12-21 02:47:14 +00:00
Zuul
b569e90595 Merge "Remove gabbi from test-requirements" 2024-12-17 10:02:10 +00:00
OpenStack Proposal Bot
79655fcfce Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: If00dbd252459b72b786c9310c0ccee077f2e157b
2024-12-17 02:19:30 +00:00
Zuul
b70ef40c14 Merge "Add policy rule for get quotas" 2024-12-10 10:43:41 +00:00
Zuul
bb8447dbeb Merge "Drop logic for absence of segregation rule" 2024-12-10 10:43:40 +00:00
Zuul
a599332fea Merge "Load full contexts from request headers" 2024-12-10 10:43:38 +00:00
OpenStack Proposal Bot
ee8b7db26f Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: If08e238194bec30343415827a4885319c0561e80
2024-12-05 04:00:47 +00:00
Takashi Kajinami
f2cc2a1036 Add policy rule for get quotas
This introduces the missing policy customization capability for get
quotas API, so that policy rules for all quota APIs can be customized.

Also fix missing target project_id in policy evaluation.

Change-Id: I0e9a12670b8df448bed97448f8de9e3bbf207364
2024-11-26 15:34:00 +00:00
Takashi Kajinami
fac8aa64a0 Drop logic for absence of segregation rule
Since all policy rules were implemented as code, there is no chance
that the segregation policy rule does not exist.

Change-Id: If30adba443ead164af55c947a1822f8690da5e53
2024-11-26 15:33:53 +00:00
Erno Kuvaja
413b17ed5c Remove gabbi from test-requirements
These are redundant vs tempest test suite which can be
executed agains actual live deployment instead of
depending clean deployment like the gabbi counterparts.

Change-Id: I6b470bd1589042cba3810b5de30e06f6c98bc953
2024-11-22 15:42:25 +00:00
10cde330b5 reno: Update master for unmaintained/2023.1
Update the 2023.1 release notes configuration to build from
unmaintained/2023.1.

Change-Id: Iaba846d9b97c4cd8c74145c3903e7b52f232c676
2024-11-21 18:28:32 +00:00
Zuul
a6a89a6d4c Merge "Remove default override for config options policy_file" 2024-11-18 07:50:29 +00:00
Zuul
1ff88cccd8 Merge "Allow overriding AODH_SERVICE_HOST" 2024-11-16 17:20:17 +00:00
Zuul
9cfff3f6d5 Merge "Revert "Disable GLOBAL_VENV"" 2024-11-16 17:16:44 +00:00
Zuul
e4e07a8b2c Merge "Add note about lower bound of requirements" 2024-11-15 16:30:00 +00:00
Takashi Kajinami
eaf0a39bea Replace deprecated configure_auth_token_middleware
It was deprecated some years ago by [1].

[1] 8ab64b3236c93c8449edf80165017898b83f1269

Change-Id: I7a1dcb82c2f3ef848f69af6631846c617441458c
2024-11-15 17:01:30 +09:00
Ghanshyam Mann
e71c19732e Remove default override for config options policy_file
olso.policy 4.5.0[1] changed the config options policy_file
default value to 'policy.yaml', which means it is changed
for all the OpenStack services and they do not need to
override the default anymore.

NOTE: There is no change in behaviour here, oslo.policy provides
the same configuration that services have overridden till now.

[1] https://review.opendev.org/c/openstack/releases/+/934012
[2] https://review.opendev.org/c/openstack/requirements/+/934295

Change-Id: Iba548429fefef53d043d42de4d12554d77e4591a
2024-11-10 21:38:03 -08:00
Zuul
1980cc84d2 Merge "Support file watcher to trigger GMR report" 2024-10-22 06:52:54 +00:00
Takashi Kajinami
329894210c Allow overriding AODH_SERVICE_HOST
... to use a static host in aodhclient tests.

Change-Id: I24af0f683962d962207421a77da8d8f5e0936061
2024-10-17 17:42:33 +09:00
Takashi Kajinami
ca2401aa8d Add note about lower bound of requirements
Since we removed lower-constrants job, the lower bound is no longer
tested. Import the note from the other project to declare that it is
maintained on bast effort basis.

Also add license information to all libraries .

Change-Id: Ia05b31061485e613634b27e96b904ad3ebe8fa33
2024-10-17 11:03:55 +09:00
Takashi Kajinami
1c4761ecca Revert "Disable GLOBAL_VENV"
This reverts commit 8de7585f374097bcb4910bfbed34b6c721490db9.

Reason for revert:
Current devstack disables GLOBAL_VENV automatically in CentOS or Rocky
so we don't have to override the option. GLOBAL_VENV=True is required
to migrate the jobs to Ubuntu 24.04 (Noble) .

This also changes the default API deployment method to uwsgi because
uwsgi is now globally used in CI and only works for global venv
method.

Conflicts:
	.zuul.yaml

Change-Id: Iec6ab6b4fcdb60caa67197acb5ada0678c0309ce
2024-10-17 00:27:14 +09:00
Zuul
ebe6170fbc Merge "Switch back to built-in md5 function" 2024-10-16 10:57:35 +00:00
Zuul
d454fc25cc Merge "Drop SQLALCHEMY_WARN_20" 2024-10-16 10:43:23 +00:00
Zuul
bbea5a8752 Merge "Remove Python 3.8 support" 2024-10-14 14:29:46 +00:00
Takashi Kajinami
6831c0303e Support file watcher to trigger GMR report
Allow generating GMR report upon file trigger in addition to a signal.

The feature has been available in oslo.reports since 1.11.0[1] but it
can't be used in aodh without proper initialization.

[1] d23e0a65b23dc77d0104075d2313de6ca22b5cae

Change-Id: I9ad70b40f233018072fb4405b1ea29b6d4d2bc1c
2024-10-14 12:49:18 +00:00
Takashi Kajinami
2813c83e5b Load full contexts from request headers
Ensure full of the context attributes are read and honored when
policy rules are evaluated. This is required to support rules which
depend on attributes other than project_id, user_id and role. (This
means no rule for system scope has had worked in aodh till now)

Also make sure is_admin check honors the context_is_admin rule.

Change-Id: I4a57e5baf3edcbcd3f37a7d436226d33305fcbe8
2024-10-14 12:49:11 +00:00
Takashi Kajinami
e52699f9eb Make PostgreSQL functional job non-voting
This job has been broken because of a known regression in openstack
CLI. The issue is being fixed in 7.1.3 but the release is not yet
pulled into master. Make the job non-voting to unblock the gate now.

Change-Id: I92bd612dae86bb6a8a1342daee54bdf00098501c
2024-10-09 16:56:37 +09:00
Zuul
6f7ba5bbda Merge "Simplify tox targets" 2024-09-30 17:32:12 +00:00
Takashi Kajinami
4b8a53f4c1 Switch back to built-in md5 function
hashlib.md5 always supports usedforsecurity argument in Python 3.9 and
later. The method in oslo.utils is being deprecated[1].

[1] https://review.opendev.org/c/openstack/oslo.utils/+/930879

Change-Id: I8b426c2803a08c15e078b6f6ea4b462ac3a81f3b
2024-09-30 20:16:27 +09:00
OpenStack Proposal Bot
bfffb34ea2 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Iadefe50a0fc018a045a715e63388763919229954
2024-09-25 04:07:41 +00:00
Zuul
93f81277f4 Merge "Update master for stable/2024.2" 2024-09-17 03:10:41 +00:00
c2f6cac1ae Update master for stable/2024.2
Add file to the reno documentation build to show release notes for
stable/2024.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.2.

Sem-Ver: feature
Change-Id: I9c204a1ed6a7d052a3845d1057bf062e629cfa00
2024-09-16 12:12:08 +00:00
Takashi Kajinami
916e08616b Drop SQLALCHEMY_WARN_20
This environment was used by SQLAlchemy 1.4 and is no longer necessary
since SQLAlchemy was bumped to 2.0 .

Change-Id: I1850fd6d9be22bb251e42b1c87128b696b994671
2024-09-16 06:24:37 +00:00
OpenStack Proposal Bot
1fd9f09ba7 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I4539a65acaf4d88073efa5509ef847adb33969f9
2024-09-12 03:10:43 +00:00
Zuul
946cbc196d Merge "Isolate project scope and system scope" 19.0.0.0rc1 19.0.0 2024-09-10 07:02:43 +00:00
Ghanshyam Mann
ab00dac26f Keep new RBAC disable by default
oslo.policy has enabled the new RBAC config options
enforce_scope and enforce_new_defaults by default[1][2].

Until Aodh is ready with the new RBAC, we need to continue
disable them by overriding their default values.

NOTE: there is no change in behaviour, aodh continue with the
old RBAC as default.

Needed-By: https://review.opendev.org/c/openstack/requirements/+/925464

[1] https://review.opendev.org/c/openstack/oslo.policy/+/924283
[2] https://review.opendev.org/c/openstack/releases/+/925032

Change-Id: Ifac31d1fc11b44fd6d3d18041f8bacee8287bccf
2024-08-01 12:31:49 -07:00
Takashi Kajinami
807e65e352 Isolate project scope and system scope
This change updates the default policies implemented in Heat, to follow
the updated guideline[1] to implement SRBAC.

The main change is that system users are no longer allowed to perform
any operations about project-level resources like alarms, while project
admin(*1) is still allowed to perform operations about project-level
resources BEYOND project (like getting alarms for all projects)

[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#direction-change

Change-Id: I0a59e3f892aff306e47812b69dbf82066411a542
2024-07-18 15:51:29 +00:00
Takashi Kajinami
88c2fd905a Remove Python 3.8 support
Python 3.8 is no longer part of the tested runtimes for 2024.2[1]
because its EOL is coming soon.

[1] https://governance.openstack.org/tc/reference/runtimes/2024.2.html

Change-Id: I3e9ba41b542ea6309a7415337f60fd37bc9adebc
2024-06-25 11:18:49 +09:00
Zuul
f43e903117 Merge "reno: Update master for unmaintained/xena" 2024-06-19 16:03:08 +00:00
Zuul
52fa6f2f5d Merge "reno: Update master for unmaintained/victoria" 2024-06-19 16:01:41 +00:00
Zuul
c52ec0ebb0 Merge "Remove old excludes" 2024-06-07 12:56:38 +00:00
Zuul
b8347142f8 Merge "Use zoneinfo instead of pytz if available" 2024-06-05 14:10:51 +00:00
Zuul
cd025db6fb Merge "reno: Update master for unmaintained/zed" 2024-06-05 10:57:51 +00:00
Erno Kuvaja
bd06669627 Add tempest configs to jobs
Change-Id: I5f1fe1a02dbccfca48c95e97657c72054016a17e
2024-05-29 12:40:28 +00:00
Zuul
5e2851df64 Merge "Remove SQLAlchemy tips jobs" 2024-05-28 07:32:29 +00:00