openstack
/
puppet-tempest
Code Issues Proposed changes

Add support for enforce_scope parameters 

This change introduces support for the [enforce_scope] parameters so
that users can enable scope enforcement in each service.
Note that for keystone there is a different parameter for its tempest
plugin ([identity-feature-enabled] enforce_scope) and that parameter
is also set according to the tempest parameter by this change.

Change-Id: I34222a58051c2d219600f39156f577fc183a2dc8
This commit is contained in:
Takashi Kajinami 2022-01-29 06:51:45 +09:00
parent eade1cc6f8
commit 6fbab839e3
3 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
manifests/init.pp
View File

@ -171,6 +171,16 @@
# Defaults to false
# [*barbican_available*]
# Defaults to false
# [*cinder_enforce_scope*]
# Defaults to $::os_service_default
# [*glance_enforce_scope*]
# Defaults to $::os_service_default
# [*keystone_enforce_scope*]
# Defaults to $::os_service_default
# [*neutron_enforce_scope*]
# Defaults to $::os_service_default
# [*nova_enforce_scope*]
# Defaults to $::os_service_default
# [*keystone_v3*]
# Defaults to true
# [*auth_version*]
@ -338,6 +348,11 @@ class tempest(
$vitrage_available = false,
$octavia_available = false,
$barbican_available = false,
$cinder_enforce_scope = $::os_service_default,
$glance_enforce_scope = $::os_service_default,
$keystone_enforce_scope = $::os_service_default,
$neutron_enforce_scope = $::os_service_default,
$nova_enforce_scope = $::os_service_default,
$keystone_v3 = true,
$auth_version = 'v3',
$run_service_broker_tests = false,
@ -576,6 +591,12 @@ class tempest(
'service_available/zaqar': value => $zaqar_available;
'service_available/ec2api': value => $ec2api_available;
'service_available/octavia': value => $octavia_available;
'enforce_scope/cinder': value => $cinder_enforce_scope;
'enforce_scope/glance': value => $glance_enforce_scope;
'enforce_scope/keystone': value => $keystone_enforce_scope;
'identity-feature-enabled/enforce_scope': value => $keystone_enforce_scope;
'enforce_scope/neutron': value => $neutron_enforce_scope;
'enforce_scope/nova': value => $nova_enforce_scope;
'whitebox/db_uri': value => $whitebox_db_uri;
'cli/cli_dir': value => $cli_dir;
'scenario/img_file': value => $img_file_real;

10
releasenotes/notes/enforce_scope-fed80f6987016bb6.yaml Normal file
View File

@ -0,0 +1,10 @@
---
features:
- |
The following parameters have been added to the ``tempest`` class.
- ``cinder_enforce_scope``
- ``glance_enforce_scope``
- ``keystone_enforce_scope``
- ``neutron_enforce_scope``
- ``nova_enforce_scope``

6
spec/classes/tempest_init_spec.rb
View File

@ -269,6 +269,12 @@ describe 'tempest' do
is_expected.to contain_tempest_config('service_available/designate').with(:value => false)
is_expected.to contain_tempest_config('service_available/octavia').with(:value => false)
is_expected.to contain_tempest_config('service_available/barbican').with(:value => false)
is_expected.to contain_tempest_config('enforce_scope/cinder').with(:value => '<SERVICE DEFAULT>')
is_expected.to contain_tempest_config('enforce_scope/glance').with(:value => '<SERVICE DEFAULT>')
is_expected.to contain_tempest_config('enforce_scope/keystone').with(:value => '<SERVICE DEFAULT>')
is_expected.to contain_tempest_config('identity-feature-enabled/enforce_scope').with(:value => '<SERVICE DEFAULT>')
is_expected.to contain_tempest_config('enforce_scope/neutron').with(:value => '<SERVICE DEFAULT>')
is_expected.to contain_tempest_config('enforce_scope/nova').with(:value => '<SERVICE DEFAULT>')
is_expected.to contain_tempest_config('whitebox/db_uri').with(:value => nil)
is_expected.to contain_tempest_config('cli/cli_dir').with(:value => nil)
is_expected.to contain_oslo__concurrency('tempest_config').with(