openstack
/
tempest
Code Issues Proposed changes
tempest/tempest/tests/lib/common
History
Colleen Murphy cd0bbbdad3 Add system scope for admin auth 
Keystone is moving away from using either project-scope or domain-scope
for the main cloud administrator user, and instead moving toward the
admin user having a role assignment on the "system" scope[1]. This will
mean that no particular project or domain is special, and instead the
cloud administrator scopes to the system in order to make
deployment-wide changes. Keystone has now migrated all of its policies
to understand system scope[2], and if a deployment sets
[oslo_policy]/enforce_scope=true in keystone.conf and uses the new
policies, an admin user scoped to the admin project will not be able to
create dynamic credentials for tempest.

This patch adds a new parameter ``[auth]/admin_system`` to indicate that
neither the ``admin_project`` or ``admin_domain`` parameters apply to
the admin user and that the user should instead authenticate with the
system scope. This also adds ``admin_user_domain_name`` so that the
admin user can be found in its domain (namespace) without setting
``domain_name``, and for completeness also adds
``admin_project_domain_name`` so that ``domain_name`` could be omitted
even if using project scope.

[1] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html
[2] https://bugs.launchpad.net/keystone/+bugs?field.status%3Alist=FIXRELEASED&field.tag=system-scope

Depends-on: https://review.opendev.org/739262

Change-Id: I840b273c37ca7cc4592c43813abfb424337e2836
 		2021-01-11 19:11:45 +00:00
..
utils Retry on ServerFault in call_and_ignore_notfound_exc() 2020-09-30 15:37:28 -07:00
__init__.py Migrate tempest-lib code into new lib dir 2016-02-23 14:15:04 -05:00
test_api_version_request.py Fix base unit test class location 2016-04-22 18:11:30 -04:00
test_api_version_utils.py Add compare header version function to tempest.lib 2017-09-01 02:37:35 +01:00
test_cred_client.py Add system scope for admin auth 2021-01-11 19:11:45 +00:00
test_dynamic_creds.py Merge "Change 'Member' role reference to 'member'" 2020-06-12 02:05:18 +00:00
test_http.py Remove unnecessary setUp 2019-01-10 10:14:37 +08:00
test_jsonschema_validator.py Fix date-time format checking in response schema 2017-01-31 07:40:25 +00:00
test_preprov_creds.py Use unittest.mock instead of third party mock 2020-05-17 17:22:58 +00:00
test_profiler.py Use unittest.mock instead of third party mock 2020-05-17 17:22:58 +00:00
test_rest_client.py Update json module to jsonutils 2019-03-06 22:54:51 +08:00
test_validation_resources.py Use unittest.mock instead of third party mock 2020-05-17 17:22:58 +00:00