10328 Commits

Author SHA1 Message Date
Samuel de Medeiros Queiroz
62d0175ada Move Federation Auth API to its own file
Change I2423030bd0849c051d22f63bf60b6a5f41f72574 migrated Federation
api-ref docs into keystone repository.

Moving Auth API to its own file is one of the TODO comments left there,
which is being addressed in this change.

Change-Id: Icd0c293c1a326c9bf3fe1ca01c96e3908ac33db3
2016-08-02 13:18:19 -03:00
Samuel de Medeiros Queiroz
edd5827199 Move List Projects and Domains API to its own file
Change I2423030bd0849c051d22f63bf60b6a5f41f72574 migrated Federation
api-ref docs into keystone repository.

Moving List Projects and Domains API to its own file is one of the TODO
comments left there, which is being addressed in this change.

Change-Id: I78572d6605c7eddd9c7b41bb2e982dc10728f46e
2016-08-02 13:07:07 -03:00
Samuel de Medeiros Queiroz
34dd18c2c2 Move Service Provider API to its own file
Change I2423030bd0849c051d22f63bf60b6a5f41f72574 migrated Federation
api-ref docs into keystone repository.

Moving Service Provider API to its own file is one of the TODO
comments left there, which is being addressed in this change.

Change-Id: Iabe3d443f01b173024620aae629558d228c2cd10
2016-08-02 13:04:45 -03:00
Samuel de Medeiros Queiroz
fc9cfb76c5 Move Mapping API to its own file
Change I2423030bd0849c051d22f63bf60b6a5f41f72574 migrated Federation
api-ref docs into keystone repository.

Moving Mapping API to its own file is one of the TODO comments left
there, which is being addressed in this change.

Change-Id: I070f2807dc683d470ef4e5e6d758c3998009b2be
2016-08-02 12:52:33 -03:00
Jenkins
41aa273f67 Merge "Add token feature support matrix to documentation" 2016-08-02 14:27:49 +00:00
Jenkins
da48676d5b Merge "Add schema validation to create service in v2" 2016-08-02 03:56:29 +00:00
Gage Hugo
44ccc92c1a Added postgresql libs to developer docs
Added corresponding packages for postgresql libraries for various
distros to the development docs to avoid causing pip to fail when
installing dependencies within test-requirements.txt

Change-Id: Ie181cf01bb22366b80d0639e66d939aaa948490b
Closes-Bug: #1608653
2016-08-01 15:26:10 -05:00
Jenkins
8a8f070bc0 Merge "refactor idp to its own file" 2016-08-01 18:37:55 +00:00
Jenkins
366468065d Merge "Move Identity Provider API to its own file" 2016-08-01 18:36:43 +00:00
Gage Hugo
f250fe407b Add schema validation to create service in v2
Added validation for create service in the v2 api

Partially implements: bp schema-validation-extent

Change-Id: If6e24b6c0c005aa7568a652aed5ee9d8273d2da7
2016-08-01 10:30:40 -05:00
Jenkins
3cada7760b Merge "Add schema validation to v2 update tenant" 2016-08-01 03:38:32 +00:00
Tin Lam
dbf101f69d Add schema validation to v2 update tenant
Partially implements: bp schema-validation-extent

Change-Id: I57c29d1b988a44c031932f544f628d15f44954e6
2016-07-31 04:34:57 +00:00
Steve Martinelli
85570dc678 refactor idp to its own file
for comparison

Change-Id: Ia1becc2fa36f095e30f306c6436bd180fb8760a2
2016-07-30 20:35:19 -07:00
OpenStack Proposal Bot
629b2d02b1 Updated from global requirements
Change-Id: I53677611008c016fa6c9a5ee45980c1ce56d3227
2016-07-30 01:18:42 +00:00
Jenkins
627eeeaef4 Merge "Allow V2TestCase to be tested against fernet and uuid" 2016-07-29 19:37:45 +00:00
Jenkins
be88c0b7be Merge "Make AuthWithTrust testable against uuid and fernet" 2016-07-29 19:36:19 +00:00
Samuel de Medeiros Queiroz
0f6fa0e3d3 Move Identity Provider API to its own file
Change I2423030bd0849c051d22f63bf60b6a5f41f72574 migrated Federation
api-ref docs into keystone repository.

Moving Identity Provider API to its own file is one of the TODO
comments left there, which is being addressed in this change.

Change-Id: I5c5b26c2d4c9920d6b9642eaf0fc47ed5bffb3cb
2016-07-29 15:28:04 -03:00
Jenkins
51ada8e255 Merge "Allow attributes other than enabled in schema" 2016-07-29 17:41:42 +00:00
Jenkins
d46b80d7b7 Merge "Remove the extensions repos" 2016-07-29 16:19:53 +00:00
Boris Bobrov
6a94b28281 Allow attributes other than enabled in schema
Although it is not needed, keystoneclient passed `id` in the payload.
For compatibility with it (and with other clients) we have to allow
passing other attributes.

Change-Id: I997d55de28825921ed33646a9ee5cf494b089aba
Closes-Bug: 1607751
2016-07-29 14:41:41 +03:00
Jenkins
26a5bf5e99 Merge "Document the domain config API as stable" 2016-07-29 06:23:19 +00:00
Jenkins
529ff14940 Merge "Add schema for enabling a user" 2016-07-29 05:26:14 +00:00
Henry Nash
345d2a04e1 Remove the extensions repos
All extension are now migrated into the keystone core and the
migrations in the old contrib folders just raise an error. Since
these can only be called from the now deprecated --extensions
options in keyston-manage, we might as well get rid of them all
and just raise the error in keystone manage. We can also clean
up the mirgation helpers accordingly

This clean up is useful ahead of layering on the rolling upgrade
support in keystone manage and the helpers.

Change-Id: I749dc7e13050e211df1f4fd144cb0479891e3e64
2016-07-29 06:24:02 +01:00
Jenkins
108edda14a Merge "TOTP auth not functional in python3" 2016-07-29 03:30:45 +00:00
Eric Brown
8cef8483e6 Document the domain config API as stable
As a follow-on to commit I7bf0a914be13f88313c14bc196369de49cc7413f,
the documentation should also reflect that the domain config API
is now stable. Previous releases are still considered experimental.

Change-Id: I6fb993ac678d0aeaa43547c4b24b62d1a784a615
2016-07-28 14:11:00 -07:00
Dolph Mathews
927b08bbf7 Add token feature support matrix to documentation
This introduces a feature support matrix to illustrate which of our
various token providers supports which API operations and features. This
is intended to mirror Nova's feature support matrix documentation page,
found here:

  http://docs.openstack.org/developer/nova/support-matrix.html

After running `tox -e docs`, the result is embedded in
`doc/build/html/configuration.html`.

Change-Id: I3dc896a2906e25827a9e01afc7de5a737831c336
2016-07-28 15:44:28 +00:00
Jenkins
d07f59ff38 Merge "Invalid tls_req_cert constant as default" 2016-07-28 14:23:13 +00:00
Dave Chen
295cfde14c No need the redundant validation in manager level
Alone with the enabling of schema validation for V2 API, the property
validation has been handled in controller level, property validation
based on clean.py in manager level is no long needed for creating a
project since schema validation is enabled for both V2 and V3.

The patch removes the call from `clean.py` and remove the relevant
testcases since we already have the testcases both in
`test_validation.py` or `test_v2_validation.py`.

Partially implements: bp schema-validation-extent

Change-Id: I9d2ea60d496d83372109ca227ee2091850de0213
2016-07-28 04:36:39 +00:00
Dave Chen
f26b31a014 Add the missing testcases for name and enabled
- `bool`, `int`, whitespace are not valid name.
- The valid data type for `enabled` is `bool`, other type such as
 `string`, `int` are invalid.

This change fix the gap between testcases in manager level and
testcases in `test_v2_validation.py` so that we can clean up the
testcases validated by clean.py in the follow up.

Partially implements: bp schema-validation-extent

Change-Id: Ifade298b9dafe7df3380c16de0a6fac4f941e9c3
2016-07-28 12:19:33 +08:00
adriant
b2cb4c403f TOTP auth not functional in python3
Fixing a byte>str conversion bug present in the TOTP
passcode generation function that was only present in python3
which rendered TOTP auth non-functional in python3.

Also adding a test to check passcode generation returns the
correct format.

Closes-Bug: #1607119

Change-Id: Ie052d559c4eb2577d35caa9f6e240664cf4cf399
2016-07-28 15:10:33 +12:00
Jenkins
3d9a1f1b97 Merge "Add schema validation to v2 create tenant" 2016-07-28 03:09:25 +00:00
Eric Brown
6ab44443d4 Invalid tls_req_cert constant as default
There are several occurances where the argument default of
tls_req_cert is set to 'demand'. This is an invalid option for the
function _common_ldap_initialization, which expects one of the values
of the dict LDAP_TLS_CERTS, not a key.

If tls_req_cert='demand' is given to _common_ldap_initialization,
you'll get:
   "LDAP TLS: invalid TLS_REQUIRE_CERT Option=demand"

Change-Id: I2da2c041bac25ca7ebab8c32b464164279a6bd69
2016-07-26 22:20:32 -07:00
Tin Lam
05f8578787 Add schema validation to v2 create tenant
Partially implements: bp schema-validation-extent

Change-Id: I67296656df073c01de2e26d64e798e76aae1cb9e
2016-07-27 03:47:07 +00:00
Jenkins
9d54eb33c1 Merge "Use quotes consistently in token controller" 2016-07-26 23:51:18 +00:00
Lance Bragstad
9c996413fd Use quotes consistently in token controller
I was perusing through the token controller and saw a few places where we use
double-quotes mixed with single-quotes. We typically stick to one or the other.

Change-Id: Ia56117fea2aa719b3877a4827048b936103b3b81
2016-07-26 17:04:35 +00:00
Dolph Mathews
9d01162c40 Add performance tuning documentation
Change-Id: Ia6ab8fbc0fa5c8f055ef0e913c32e4b285a2a6e2
2016-07-26 11:44:19 -04:00
Lance Bragstad
0b600cedf6 Allow V2TestCase to be tested against fernet and uuid
This helps make our switch to fernet as the default token provider easier.

This is an effort to break https://review.openstack.org/#/c/258650 into
smaller, more reviewable pieces.

Co-Authored-By: Raildo Mascena <raildo@lsd.ufcg.edu.br>
Co-Authored-By: Adam Young <ayoung@redhat.com>

Change-Id: I67121265cf06eb11586c90c37c6439bcdb28acf0
Partial-Bug: 1561054
2016-07-26 15:12:23 +00:00
Lance Bragstad
b77c5b789f Make AuthWithTrust testable against uuid and fernet
We should make AuthWithTrust something that is tested against both the uuid
token provider and the fernet token provider. This helps us move towards making
fernet the default token provider.

This is an effort to break https://review.openstack.org/#/c/258650 into
smaller, more reviewable pieces.

Co-Authored-By: Raildo Mascena <raildo@lsd.ufcg.edu.br>
Co-Authored-By: Adam Young <ayoung@redhat.com>

Change-Id: I0fd2187421fc677e7d422d4b449eec3056a134e9
Partial-Bug: 1561054
2016-07-26 15:12:15 +00:00
Jenkins
8a669fabad Merge "Make it so federated tokens are validated on v2.0" 2016-07-26 14:28:01 +00:00
Jenkins
4a8298d5b8 Merge "Improve os-federation docs" 2016-07-26 12:37:13 +00:00
Jenkins
96af93d361 Merge "Fix v2-ext API enabled documentation" 2016-07-26 03:16:44 +00:00
Clenimar Filemon
ab7a7458e1 Improve os-federation docs
- add /v3/ to all routes;
- switch from 'localhost:port' and 'identity:port' endpoints to
  'example.com/identity';
- fix typo.

Change-Id: If0d90ebab78e93fc9395b0e02436853a4ecbfa73
2016-07-25 22:39:23 -03:00
Jenkins
6881378755 Merge "Replace OpenStack LLC with OpenStack Foundation" 2016-07-25 23:19:18 +00:00
Jenkins
89c160dd81 Merge "Use freezegun in AssignmentInheritanceTestCase" 2016-07-25 22:46:27 +00:00
Jenkins
6723ba08c9 Merge "Only run KvsTokenCacheInvalidation against uuid" 2016-07-25 22:44:26 +00:00
Jenkins
321d7a8a42 Merge "Use freezegun in OSRevokeTests" 2016-07-25 22:39:12 +00:00
Jenkins
48b0ad1ccd Merge "refactor: make TestFetchRevocationList test uuid" 2016-07-25 22:39:01 +00:00
Jenkins
8b47d17ed7 Merge "refactor: make TestAuthExternalDefaultDomain test uuid/pki/pkiz" 2016-07-25 22:38:51 +00:00
Jenkins
663ff28d60 Merge "refactor: make TestAuthKerberos test pki/pkiz/uuid" 2016-07-25 22:38:40 +00:00
Jenkins
fc3585276f Merge "refactor: inherit AuthWithRemoteUser for other providers" 2016-07-25 22:34:05 +00:00