8acedfd48a
The default check_str for the "default" policy rule has changed. From the Queens release until this series it was "role:admin" (prior to Queens it was "@", which means allow all requests). In order to accomodate existing policies as best as possible, the default check_str has been changed back to "". In the unlikely event that any existing policies are relying on the default check_str for the "default" rule, they need to start explicitly specifying it to maintain similar behaviour. This patch adds a deprecation warning when using the "default" rule without overriding the value in the policy file. This will result in users who carry over an unsafe policy file from the Queens-Train error seeing a warning. Unfortunately it will also result in a warning for users who no longer supply a policy file and are relying on the default policies in code. Change-Id: I3d3ab9b0172521fb42314f2de33ff02985ad4864 Depends-On: https://review.opendev.org/698790 Depends-On: https://review.opendev.org/699299
64 lines
1.7 KiB
Plaintext
64 lines
1.7 KiB
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
|
|
pbr!=2.1.0,>=2.0.0 # Apache-2.0
|
|
defusedxml>=0.5.0 # PSF
|
|
|
|
# < 0.8.0/0.8 does not work, see https://bugs.launchpad.net/bugs/1153983
|
|
SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT
|
|
eventlet!=0.23.0,!=0.25.0,>=0.22.0 # MIT
|
|
PasteDeploy>=1.5.0 # MIT
|
|
Routes>=2.3.1 # MIT
|
|
WebOb>=1.8.1 # MIT
|
|
sqlalchemy-migrate>=0.11.0 # Apache-2.0
|
|
sqlparse>=0.2.2 # BSD
|
|
alembic>=0.8.10 # MIT
|
|
httplib2>=0.9.1 # MIT
|
|
oslo.config>=5.2.0 # Apache-2.0
|
|
oslo.concurrency>=3.26.0 # Apache-2.0
|
|
oslo.context>=2.19.2 # Apache-2.0
|
|
oslo.upgradecheck>=0.1.0 # Apache-2.0
|
|
oslo.utils>=3.33.0 # Apache-2.0
|
|
stevedore>=1.20.0 # Apache-2.0
|
|
futurist>=1.2.0 # Apache-2.0
|
|
taskflow>=2.16.0 # Apache-2.0
|
|
keystoneauth1>=3.4.0 # Apache-2.0
|
|
keystonemiddleware>=4.17.0 # Apache-2.0
|
|
WSME>=0.8.0 # MIT
|
|
PrettyTable<0.8,>=0.7.1 # BSD
|
|
|
|
# For paste.util.template used in keystone.common.template
|
|
Paste>=2.0.2 # MIT
|
|
|
|
jsonschema>=2.6.0 # MIT
|
|
pyOpenSSL>=17.1.0 # Apache-2.0
|
|
# Required by openstack.common libraries
|
|
six>=1.10.0 # MIT
|
|
|
|
oslo.db>=4.27.0 # Apache-2.0
|
|
oslo.i18n>=3.15.3 # Apache-2.0
|
|
oslo.log>=3.36.0 # Apache-2.0
|
|
oslo.messaging>=5.29.0,!=9.0.0 # Apache-2.0
|
|
oslo.middleware>=3.31.0 # Apache-2.0
|
|
oslo.reports>=1.18.0 # Apache-2.0
|
|
oslo.policy>=2.4.1 # Apache-2.0
|
|
|
|
retrying!=1.3.0,>=1.2.3 # Apache-2.0
|
|
osprofiler>=1.4.0 # Apache-2.0
|
|
|
|
# Glance Store
|
|
glance-store>=1.0.0 # Apache-2.0
|
|
|
|
|
|
debtcollector>=1.2.0 # Apache-2.0
|
|
cryptography>=2.1 # BSD/Apache-2.0
|
|
cursive>=0.2.1 # Apache-2.0
|
|
|
|
# timeutils
|
|
iso8601>=0.1.11 # MIT
|
|
|
|
os-win>=3.0.0 # Apache-2.0
|
|
|
|
castellan>=0.17.0 # Apache-2.0
|