Tempest plugin for the keystone project.
Go to file
Colleen Murphy a6d4ceaf57 Add RBAC tests
This change leverages the nine default personas available in tempest[1]
to demonstrate a potential framework for testing default policies. An
abstract base class is created that helps set up credentials and
outlines every policy that needs to be tested, then nine subclasses are
created to test every persona. Each test represents one policy rule, and
some tests make multiple requests in order to test the policy from
different approaches, for example, to check what happens if a different
domain is specified, or what happens if the resource does not exist.

The idea here is to be very verbose and explicit about what is being
tested: every policy gets one test in the base class, and each persona
is tested in a subclass. The layout should be easy to understand and
someone reading the code should not be left guessing whether a case is
missing or if there is magic happening in the background that is causing
a false positive or false negative.

This is intended to replace the unittest protection tests currently
in place.

[1] https://review.opendev.org/686306 (this will require additional
devstack and keystone configuration to work properly in CI)

Depends-on: https://review.opendev.org/686306
Depends-on: https://review.opendev.org/699051
Depends-on: https://review.opendev.org/699519
Depends-on: https://review.opendev.org/700826
Depends-on: https://review.opendev.org/743853
Depends-on: https://review.opendev.org/744087
Depends-on: https://review.opendev.org/744268
Depends-on: https://review.opendev.org/731087

Change-Id: Icb5317b9297230490bd783fe9b07c8db244c06f8
2021-02-11 16:02:54 +00:00
doc Update docs building, cleanup 2020-06-09 07:51:26 +02:00
keystone_tempest_plugin Add RBAC tests 2021-02-11 16:02:54 +00:00
releasenotes Update docs building, cleanup 2020-06-09 07:51:26 +02:00
.coveragerc Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
.gitignore Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
.gitreview OpenDev Migration Patch 2019-04-19 19:39:40 +00:00
.mailmap Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
.testr.conf Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
.zuul.yaml Add RBAC tests 2021-02-11 16:02:54 +00:00
CONTRIBUTING.rst Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
HACKING.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-24 15:36:06 +08:00
LICENSE Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
README.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-24 15:36:06 +08:00
babel.cfg Apply cookiecutter to newly split project 2017-05-30 16:56:11 +02:00
requirements.txt Remove six library 2020-03-23 21:06:29 +05:30
setup.cfg Update docs building, cleanup 2020-06-09 07:51:26 +02:00
setup.py Updated from global requirements 2018-01-27 17:44:29 +00:00
test-requirements.txt Update docs building, cleanup 2020-06-09 07:51:26 +02:00
tox.ini Add RBAC tests 2021-02-11 16:02:54 +00:00

README.rst

keystone-tempest-plugin

Tempest plugin keystone_tempest_plugin

Tempest plugin for functional testing of keystone's LDAP and federation features. More information can be found in the keystone developer documentation.