This will remove the custom install_command from the
cover target, since it does not follow the upper
constraints.

Depends-On: I2c0fb1e9b5a51be409687d9cb85ee3ae70c1ce94
Change-Id: I31eeb2af4dfdb121ab2d138bc9c739f37c2a43e2

The tox venv environment is run during post jobs and thus cannot use
constraints.

See:
http://logs.openstack.org/db/db7bdf9aa0cb0ba5fbae5ae07ecdb9f024213deb/post/keystone-docs/92d1e87/
http://logs.openstack.org/db/db7bdf9aa0cb0ba5fbae5ae07ecdb9f024213deb/post/keystone-branch-tarball/eb685ad/

We run for docs jobs:
"tox -e venv python setup.py build_sphinx"

thus, the docs environment is not used.

For branch tarball, the infra scripts use:
"tox -e venv python setup.py sdist"

And infra does not setup constraints for post jobs currently as this is
not working with current tools

Fix tox.ini for this

Change-Id: I048368981e4be739c66073fdd9bc8a9663498a80
(cherry picked from commit 2535f22e6123bd8b7ae1304b31f6748e631d8e61)

Change-Id: I4b02c5f78090d0078207a74967c7c8305856e91e

Fernet token operations would fail if the key respository did not
have write access, even though it would only need read access.
Added logic to validation to only check for read or read/write
access based on what is required.

Change-Id: I1ac8c3bd549055d5a13e0f5785dede42d710cf9d
Closes-Bug: 1523664
(cherry picked from commit 0aaa3ab1710c3bd9ca7800cc2156a483bd463a11)

This test is validating internal behavior of the oslo.policy
library. Since oslo.policy already has tests for this
function, we don't have to test it in keystone.

As of commit 83d209e in oslo.policy the test fails because
oslo.policy has been enhanced to support YAML and the test is
using valid YAML.

An alternative is to change the test to have a file that's
invalid YAML (remove the ']'), but then it might break again.

An alternative is to change the test to mock out the behavior,
but then the test would just be showing that if we mock out
rules.enforce to raise ValueError it does that.

Change-Id: I4ead61566000aedf62c9c48b0702ea30472c9925
(cherry picked from commit 8eb7960e0f31c2624230b88d17933b3f48a17eaa)

Change-Id: I7d80cf18197f5444044bce59af6fe3385f8ad8ac

Some targets don't respect upper-constraints like
cover and releasenotes, so make sure don't use
the same install_command for those jobs.

Change-Id: I8636e7c86c6c5c608429fab88e181108ae615db9
(cherry picked from commit db7bdf9aa0cb0ba5fbae5ae07ecdb9f024213deb)

Change-Id: I9254aef3c63586f482bec79bb6bde025a399a564