Without this patch, build failed after 2019-12-31 with
Traceback (most recent call last):
  File "keystoneclient/tests/unit/v3/test_auth.py", line 226, in test_authenticate_success_password_unscoped
    self.assertRequestBodyIs(json=self.TEST_REQUEST_BODY)
  File "keystoneclient/tests/unit/utils.py", line 72, in assertRequestBodyIs
    self.assertEqual(json, val)

NOTE: in addition to the orginal backport, this patch adds the following
changes. The changes has to be combined into a single patch in order to
avoid circular dependencies.

1. fixed bandit complains in keystoneclient/common/cms.py. The literal 'sha256'
is the default hash algorithm, not a sensitive password. Marking it as false
positive so bandit can stop chirping.

2. combined with cherry pick from commit
f2d3fec9b254f9c47e97ddf48e3c5f7614b87f1b to avoid circular dependency. Without
combining them, neither backport will pass all the gates since pep8 has
switched over to use python3 now.

Change-Id: I0e44d9896c5970f0ca07438c372aec826aeb5c77
(cherry picked from commit f2d3fec9b254f9c47e97ddf48e3c5f7614b87f1b)
(cherry picked from commit acc21ff06154e16de16583fe6994207d689ed054)

This change overrides the base find functionality within project
in order to encode tags to a base string.

Change-Id: I4599b8a4dafcb9d4178c973eb48a8ad3a7d292f5
(cherry picked from commit 53972d68f611a4d5a9dfd250807b373cd4f22ecb)

This commit adds the necessary bits to be able to use system
role assignments from python-keystoneclient.

bp system-scope

Change-Id: Iecbcbf020a15f2bec777334c648d4477f89f3b2c

Add support for creating, reading, and deleting application credentials.
Application credentials do not support updating.

Keystoneclient does not handle authentication with application
credentials. This is done in keystoneauth. Additional work will be
needed in python-openstackclient to support both CRUD and auth for
application credentials.

bp application credentials

Change-Id: I21214238deac2c45f2f2d666287c2ae106955ab1

Adds the client functionality for the following project tag calls:
- Create a project tag on a project
- Check if a project tag exists on a project
- List project tags on a project
- Modify project tags on a project
- Delete a specific project tag on a project
- Delete all project tags on a project

Co-Authored-By: Jess Egler <jess.egler@gmail.com>
Co-Authored-By: Rohan Arora <ra271w@att.com>
Co-Authored-By: Tin Lam <tin@irrational.io>

Partially Implements: bp project-tags

Change-Id: I486b2969ae0aa2638842d842fb8b0955cc086d25

In some cases, the following:

  datetime.datetime.now(tz=iso8601.iso8601.UTC).tzinfo.tzname()

returns:

  'UTC+00:00'

rather than:

  'UTC'

resulting in strings that look like:

  2013-03-04T12:00:01.000000UTC+00:00

That is just flatly invalid. The code here accounts for a tzname of
"UTC" and normalizes to to being a trailing Z as-per the ISO 8601 spec,
but it does not account for UTC+00:00. Add support for that so that we
don't produce invalid date strings.

Most of this can be avoided by replacing use of this function with the
isoformat method of datetime instead.

  datetime.datetime.now(tz=iso8601.iso8601.UTC).isoformat()

Produces

  2013-03-04T12:00:01.000000+00:00

Which while different from

  2013-03-04T12:00:01.000000Z

is still a valid iso8601 string.

Change-Id: I52ca7561abee158285c2c98ba63d84c62e12360f

Change-Id: I207b716e47893931e79e3758abc2bd879917f340

Zuul v2 uses 'jenkins' as user, but Zuul v3 uses 'zuul'.
Using $USER solves it for both cases.

Change-Id: I42cfcd4d8dee2ff3a99e42a5a64f3c38163972b8