93594c30ec
This commit updates default policies to account for system scope and default roles. This is part of a broader change to provide a consistent and secure authorization experience across OpenStack projects. - Introduces basic/reusable check strings in base.py - Implements secure RBAC for build info API - Implements secure RBAC for the action API - Implements secure RBAC for cloud formations - Implements secure RBAC for events - Implements secure RBAC for the resource API - Implements secure RBAC for the service API - Implements secure RBAC for software configs - Implements secure RBAC for software deployments - Implements secure RBAC for stacks - Adds unit tests for legacy and new secure-rbac policies. Change-Id: Iff1e39481ea3b1f00bd89dba4a00aed30334ecec
70 lines
2.5 KiB
Plaintext
70 lines
2.5 KiB
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
|
|
pbr>=3.1.1 # Apache-2.0
|
|
Babel!=2.4.0,>=2.3.4 # BSD
|
|
ddt>=1.4.1 # MIT
|
|
croniter>=0.3.4 # MIT License
|
|
cryptography>=2.5 # BSD/Apache-2.0
|
|
debtcollector>=1.19.0 # Apache-2.0
|
|
eventlet!=0.18.3,!=0.20.1,!=0.21.0,!=0.23.0,!=0.25.0,>=0.18.2 # MIT
|
|
keystoneauth1>=3.18.0 # Apache-2.0
|
|
keystonemiddleware>=5.1.0 # Apache-2.0
|
|
lxml!=3.7.0,>=4.5.0 # BSD
|
|
netaddr>=0.7.18 # BSD
|
|
neutron-lib>=1.14.0 # Apache-2.0
|
|
openstacksdk>=0.11.2 # Apache-2.0
|
|
oslo.cache>=1.26.0 # Apache-2.0
|
|
oslo.config>=6.0.0 # Apache-2.0
|
|
oslo.concurrency>=3.26.0 # Apache-2.0
|
|
oslo.context>=2.22.0 # Apache-2.0
|
|
oslo.db>=6.0.0 # Apache-2.0
|
|
oslo.i18n>=3.20.0 # Apache-2.0
|
|
oslo.log>=4.3.0 # Apache-2.0
|
|
oslo.messaging>=5.29.0 # Apache-2.0
|
|
oslo.middleware>=3.31.0 # Apache-2.0
|
|
oslo.policy>=3.6.2 # Apache-2.0
|
|
oslo.reports>=1.18.0 # Apache-2.0
|
|
oslo.serialization>=2.25.0 # Apache-2.0
|
|
oslo.service!=1.28.1,>=1.24.0 # Apache-2.0
|
|
oslo.upgradecheck>=0.1.0 # Apache-2.0
|
|
oslo.utils>=3.40.0 # Apache-2.0
|
|
osprofiler>=1.4.0 # Apache-2.0
|
|
oslo.versionedobjects>=1.31.2 # Apache-2.0
|
|
PasteDeploy>=1.5.0 # MIT
|
|
aodhclient>=0.9.0 # Apache-2.0
|
|
python-barbicanclient>=4.5.2 # Apache-2.0
|
|
python-blazarclient>=1.0.1 # Apache-2.0
|
|
python-ceilometerclient>=2.5.0
|
|
python-cinderclient>=3.3.0 # Apache-2.0
|
|
python-designateclient>=2.7.0 # Apache-2.0
|
|
python-glanceclient>=2.8.0 # Apache-2.0
|
|
python-heatclient>=1.10.0 # Apache-2.0
|
|
python-ironicclient>=2.8.0 # Apache-2.0
|
|
python-keystoneclient>=3.8.0 # Apache-2.0
|
|
python-magnumclient>=2.3.0 # Apache-2.0
|
|
python-manilaclient>=1.16.0 # Apache-2.0
|
|
python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0
|
|
python-monascaclient>=1.12.0 # Apache-2.0
|
|
python-neutronclient>=6.14.0 # Apache-2.0
|
|
python-novaclient>=9.1.0 # Apache-2.0
|
|
python-octaviaclient>=1.8.0 # Apache-2.0
|
|
python-openstackclient>=3.12.0 # Apache-2.0
|
|
python-saharaclient>=1.4.0 # Apache-2.0
|
|
python-swiftclient>=3.2.0 # Apache-2.0
|
|
python-troveclient>=2.2.0 # Apache-2.0
|
|
python-vitrageclient>=2.7.0 # Apache-2.0
|
|
python-zaqarclient>=1.3.0 # Apache-2.0
|
|
python-zunclient>=3.4.0 # Apache-2.0
|
|
pytz>=2013.6 # MIT
|
|
PyYAML>=5.1 # MIT
|
|
requests>=2.14.2 # Apache-2.0
|
|
tenacity>=6.1.0 # Apache-2.0
|
|
Routes>=2.3.1 # MIT
|
|
SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT
|
|
sqlalchemy-migrate>=0.13.0 # Apache-2.0
|
|
stevedore>=3.1.0 # Apache-2.0
|
|
WebOb>=1.7.1 # MIT
|
|
yaql>=1.1.3 # Apache 2.0 License
|