2520 Commits

Author SHA1 Message Date
Zuul
4e812b673b Merge "Add parent project filter for listing projects" 2019-09-10 20:36:10 +00:00
Takashi Kajinami
27d4376ea5 Fix unit tests broken by requests-mock
Now requests-mock records request url in log[1], so it is
invalid to check that the logger output does NOT contain
request url.

Also, fix url passed to request mock as now it requires
complete url is passed

[1] https://github.com/jamielennox/requests-mock/pull/93

Change-Id: I4bab30a6705b7cab6b5a569dd61c442263e39995
2019-09-06 10:08:39 +00:00
Vishakha Agarwal
f27e6467e7 Generate pdf documentation
This patch adds a new tox job/command for building the pdf
version of documentation.

tox -epdf-docs

Change-Id: I0c0ef99190ea2a834bfdb47eb443b88a93bc802c
2019-09-04 11:09:34 +05:30
Takashi Kajinami
2d3ec6eb89 Add parent project filter for listing projects
This patch introduces the interface into listing project, to
specify parent_id to filter projects which has the given project
as their parent[1].

[1] https://docs.openstack.org/api-ref/identity/v3/?expanded=list-projects-detail#list-projects

Change-Id: If78030425468d4f99cba708540142871a2bf9190
2019-08-29 16:50:26 +09:00
Colleen Murphy
6c116ec084 Add support for app cred access rules
This change adds access_rules as a parameter for creating application
credentials, and also adds the ability to list access rules and to
retrieve and delete individual rules. Directly creating an access rule
or updating one is not supported.

bp whitelist-extension-for-app-creds

Depends-On: https://review.opendev.org/671374
Change-Id: I490f1e6b421d4f36f588f83a511ce39b9b4204e2
2019-08-21 08:21:42 -07:00
pengyuesheng
f7e75f43d8 Bump the openstackdocstheme extension to 1.20
Some options are now automatically configured by the version 1.20:
- project
- html_last_updated_fmt
- latex_engine
- latex_elements
- version
- release.

Depends-On:https://review.opendev.org/#/c/660609/

Change-Id: I83ee2a89ae0a8158ed955581b738cea6ca93707d
2019-08-01 09:44:54 +08:00
Zuul
d27ac84cc2 Merge "Update the constraints url" 3.20.0 2019-07-10 21:10:03 +00:00
Zuul
6a37e0da9b Merge "Add support for app cred access rules header" 2019-07-10 20:15:19 +00:00
Vishakha Agarwal
319fd1a532 Blacklist bandit 1.6.0 & cap sphinx for 2.7
The latest version of bandit has broken directory
exclusion, so multiple test files are getting flagged.
This change blocks version 1.6.0 while this issue is
fixed for 1.6.1. This change also caps sphinx
at <2.0.0 for python version 2.7.

This also updates the keyring version.

Change-Id: I69a86ef21791698e4dd749fe5640fcdc7df1b0fc
2019-07-04 04:46:58 +00:00
pengyuesheng
54a3baf290 Update the constraints url
For more detail, see http://lists.openstack.org/pipermail/openstack-discuss/2019-May/006478.html

Change-Id: Ia23ddddb2c1488ea6bc036507f13e6adcf52108e
2019-07-03 14:54:09 +08:00
Corey Bryant
890d3a10ad Add Python 3 Train unit tests
This is a mechanically generated patch to ensure unit testing is in place
for all of the Tested Runtimes for Train.

See the Train python3-updates goal document for details:
https://governance.openstack.org/tc/goals/train/python3-updates.html

Change-Id: I88c28ddf9601bb7b69b663a44562ab2c118050de
Story: #2005924
Task: #34215
2019-06-28 06:36:36 +00:00
Vishakha Agarwal
7b7d81d09e Follow bandit B105: hardcoded_password_string
tox -e bandit failing due to the string 'token'
in [1]. According to the bandit 105 any password
assigned to a string should not contain any of the
variables in [2]

[1]https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/common/cms.py#L41
[2]https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html

Change-Id: I822e1195532df2b701f10087cabceda458211986
2019-06-26 16:05:43 +05:30
Zuul
73436a76ba Merge "Update json module to jsonutils" 2019-05-02 21:11:39 +00:00
jacky06
21efbe41cf Replace git.openstack.org URLs with opendev.org URLs
Change-Id: Ifdc21541715cc03b0f6eac5a27a7ee3009d53046
Closes-Bug: #1826197
2019-04-24 19:16:55 +08:00
OpenDev Sysadmins
ab14eb4fb4 OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:39:43 +00:00
Zuul
50839367b6 Merge "Update master for stable/stein" 2019-04-12 17:29:36 +00:00
Vishakha Agarwal
199bb19353 Update the min version of tox
In Train, we will use python3.6 and 3.7 for which
the minimum tox version required is 2.5[1]

[1]https://tox.readthedocs.io/en/latest/changelog.html#v2-6-0-2017-02-04

Change-Id: Idb9a12258fb47a20b4afea7a2d9780b776d7a990
2019-04-09 15:03:54 +05:30
146cd8d5bd Update master for stable/stein
Add file to the reno documentation build to show release notes for
stable/stein.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.

Change-Id: Iff1711b5af0861ad025119dce7f69ccde9f3a990
Sem-Ver: feature
2019-03-18 14:52:14 +00:00
Zuul
b82dabdb44 Merge "Make tests pass in 2020" 2019-03-06 10:44:08 +00:00
Vishakha Agarwal
7569849fbd Drop py35 jobs
Python 3.5 was the target runtime for the Rocky release.
The current target py3 runtime for Stein is Python 3.6,
so there is no reason to keep testing against the older version. Also
correct setup.cfg and tox.ini to reflect the current supported Python
versions.

https://governance.openstack.org/tc/reference/runtimes/stein.html#python-runtime-for-stein

Change-Id: I67c892e0b5afaf8e603a77102e06567a1bfe2eb6
2019-03-01 11:35:16 +01:00
Bernhard M. Wiedemann
acc21ff061
Make tests pass in 2020
Without this patch, build failed after 2019-12-31 with
Traceback (most recent call last):
  File "keystoneclient/tests/unit/v3/test_auth.py", line 226, in test_authenticate_success_password_unscoped
    self.assertRequestBodyIs(json=self.TEST_REQUEST_BODY)
  File "keystoneclient/tests/unit/utils.py", line 72, in assertRequestBodyIs
    self.assertEqual(json, val)

Change-Id: I0e44d9896c5970f0ca07438c372aec826aeb5c77
2019-02-28 14:11:38 +01:00
cao.yuan
7a8ed5e312 Update json module to jsonutils
oslo project provide jsonutils, and keystoneclient  use it in many place[1],
this PS to update the remained json module to oslo jsonutils for
consistency.

[1]: https://github.com/openstack/python-keystoneclient/search?utf8=%E2%9C%93&q=jsonutils&type=

Change-Id: Id5275b5e6b5bf8f6d54406dac7ab95a30828cf58
2019-02-25 11:35:14 +00:00
Colleen Murphy
147efb0469 Add support for app cred access rules header
This header is set to indicate to the keystone server that the client,
usually keystonemiddleware, will validate application credential access
rules. If not provided and the token uses access rules, the server will
return a 401.

bp whitelist-extension-for-app-creds

Change-Id: I64ac952d663e916150fbf7e5a8f70b76dddf3319
2019-02-25 00:30:39 +01:00
Corey Bryant
6c4bb8b529 add python 3.7 unit test job
This is a mechanically generated patch to add a unit test job running
under Python 3.7.

See ML discussion here [1] for context.

[1] http://lists.openstack.org/pipermail/openstack-dev/2018-October/135626.html

Change-Id: I0e44d9896c5970f0ca07438c372aec826aeb5c01
Story: #2004073
Task: #27422
2019-02-14 08:16:55 -05:00
Zuul
13b889823b Merge "Add return-request-id-to-caller function(v3/contrib)" 2019-01-16 16:53:41 +00:00
openstack
27eac4993d Add return-request-id-to-caller function(v3/contrib)
Added return-request-id-to-caller function to resources and resource
managers in the following files.

* keystoneclient/v3/projects.py
* keystoneclient/v3/registered_limits.py
* keystoneclient/v3/roles.py
* keystoneclient/v3/limits.py
* keystoneclient/v3/contrib/federation/saml.py

Also made changes in base.py for _put() method so that if
include_metadata is True, the response data should include request_id
instead of returning None as response.

Change-Id: Ifc0ec9a9d666cccfee3b08ac61596a3692307f23
Implements: blueprint return-request-id-to-caller
2019-01-16 05:51:12 +00:00
ZhijunWei
3f6f14d4fe Update hacking version
1. update hacking version to latest
2. fix pep8 failed

Change-Id: Iecc112206633a7e771c5e45547c573d74cce6f67
2019-01-04 00:46:27 +08:00
Zuul
a69e14e3fc Merge "Change openstack-dev to openstack-discuss" 2018-12-07 12:09:53 +00:00
sunjia
4d466ef31b Change openstack-dev to openstack-discuss
Mailinglists have been updated. Openstack-discuss replaces openstack-dev.

Change-Id: Ia14ecbd5f6051b9e391cd2ed0cfbde14913813bf
2018-12-03 22:19:59 -05:00
qingszhao
ce447696f7 Add Python 3.6 classifier to setup.cfg
Change-Id: Idd26135eb12bfa4acaed9f42f0a5d6ad9492c7fc
2018-11-30 06:57:04 +00:00
Zuul
fee326e56a Merge "Fix keystoneclient-devstack-functional job" 2018-11-30 00:56:30 +00:00
Zuul
f96d92dae3 Merge "Add release notes for return-request-id-to-caller" 2018-11-29 20:40:08 +00:00
Zuul
7c438da88c Merge "Add return-request-id-to-caller function(v3/contrib)" 2018-11-29 20:40:07 +00:00
Maho Koshiya
723002cdd4 Add release notes for return-request-id-to-caller
Change-Id: I6a9b5ec4f2a82c87f9819f5195f72540a13573b8
Co-authored-by: Ankit Agrawal <ankit11.agrawal@nttdata.com>
Implements: blueprint return-request-id-to-caller
2018-11-29 08:43:43 +00:00
Jens Harbott
7d765bf21c Fix keystoneclient-devstack-functional job
The keystoneclient-devstack-functional job works fine when being run
against this repo, but fails when running against the keystone repo
because of conflicts within the tools/test-setup.sh script there.

Do our own definition of the job to make sure that we always run tox
against the correct repo. Also base the job on devstack-minimal to avoid
installing more serviced than needed.

Change-Id: Ie4c03de48a3b7f2fb3967a185486c6fb0d6e0a5f
2018-11-28 14:45:14 +00:00
Zuul
05d035588b Merge "Add py36 tox environment" 2018-11-19 19:08:35 +00:00
Colleen Murphy
8cb5e76bcc Use python3 for functional tests
Switch to python3 for the tox basepython and for the devstack setup for
functional tests to fulfill the python3-first goal[1]. We still have
unit test coverage for python2.

[1] https://governance.openstack.org/tc/goals/stein/python3-first.html

Change-Id: If82196ce6a2fffe6a43bb59077c6bdd712276958
2018-11-06 17:28:50 +01:00
Colleen Murphy
55979dccd7 Make the functional test voting
These tests are stable, so make them voting.

Change-Id: I6fad63b342639937566d55f400db63eefdd23a1b
2018-11-06 17:28:42 +01:00
Colleen Murphy
c9cca44c9c Add py36 tox environment
We already run python3.6 unit tests in CI. Add the py36 environment to
the tox file so that developers with python3.6 available locally can opt
into running that version too.

Change-Id: I28e96e5922b73f270b0e77fff91e4343ad06a852
2018-11-06 12:57:46 +01:00
Colleen Murphy
631d9420a3 Convert functional tests to Zuulv3
Use the devstack-tox-functional-consumer job as a parent job to allow us
to remove the custom playbooks and devstack hooks.

Change-Id: Ide6e6da3cbb479b5149fb44f0ef392dc80202910
2018-10-28 12:29:34 +01:00
openstack
e7621bddc1 Add return-request-id-to-caller function(v3/contrib)
Added return-request-id-to-caller function tovresources and resource
managers in the following files.

* keystoneclient/v3/contrib/simple_cert.py
* keystoneclient/v3/contrib/endpoint_policy.py
* keystoneclient/v3/contrib/oauth1/access_tokens.py
* keystoneclient/v3/contrib/oauth1/request_tokens.py

Adding request-id to below V3 contrib API's is covered in base patch
[1] but this patch is specifically for V3 API's so covered their test
cases in this patch.

* keystoneclient/v3/contrib/endpoint_filter.py
* keystoneclient/v3/contrib/federation/identity_providers.py
* keystoneclient/v3/contrib/federation/mappings.py
* keystoneclient/v3/contrib/federation/protocols.py
* keystoneclient/v3/contrib/federation/service_providers.py

The methods in the resource class and resource manager return
a 'base.Response' class that has 'request_ids' property.
The caller can get request ids of the callee via that property.

[1] https://review.openstack.org/#/c/329913

Change-Id: I5f90c31020e0dd672a160c7b587f41ba8f2b596c
Co-authored-by: Dinesh Bhor <dinesh.bhor@nttdata.com>
Co-authored-by: Ankit Agrawal <ankit11.agrawal@nttdata.com>
Co-authored-by: Neha Alhat <neha.alhat@nttdata.com>
Implements: blueprint return-request-id-to-caller
2018-10-22 10:35:03 +00:00
Zuul
8982841b63 Merge "Don't quote {posargs} in tox.ini" 3.18.0 2018-10-20 02:12:19 +00:00
Zuul
d107d45153 Merge "Update IdentityProviderManager docstring" 2018-10-20 02:11:08 +00:00
Zuul
3e00d9168c Merge "Add return-request-id-to-caller function(v3)" 2018-10-19 20:09:20 +00:00
Zuul
06e36dde26 Merge "Add Response class to return request-id to caller" 2018-10-19 20:09:20 +00:00
Vieri
548bc8dd92 Don't quote {posargs} in tox.ini
Quotes around {posargs} cause the entire string to be combined into one
arg that gets passed to stestr. This prevents passing multiple args
(e.g. '--concurrency=16 some-regex')

Change-Id: Ie0b56212cad8d9756c2043a4483c607101491a14
2018-10-09 13:54:50 +00:00
Zuul
ffabfba5a8 Merge "Import legacy keystoneclient-dsvm-functional" 2018-10-05 12:12:01 +00:00
Zuul
a122409e07 Merge "Use templates for cover and lower-constraints" 2018-10-05 12:12:00 +00:00
Zuul
45cb387846 Merge "Deprecate region enabled parameter" 2018-09-28 10:06:14 +00:00
Vishakha Agarwal
b7db5668c1 Deprecate region enabled parameter
We don't check for "enabled" in the region
anywhere thus deprecating it from the create()
and update calls of the v3/region.py. We dont
use it in schema [1] as well as [2].

[1] https://github.com/openstack/keystone/blob/master/keystone/catalog/schema.py#L34
[2] https://github.com/openstack/keystone/blob/master/keystone/catalog/backends/sql.py#L33-L49

Change-Id: I0257d5d42916e3b4d008e592d54eeeebec591633
Partial-Bug: #1615076
2018-09-28 07:16:17 +05:30