summaryrefslogtreecommitdiff
path: root/keystoneclient
Commit message (Collapse)AuthorAgeFilesLines
* Make tests pass in 2020pike-eolstable/pikeBernhard M. Wiedemann2020-01-139-24/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without this patch, build failed after 2019-12-31 with Traceback (most recent call last): File "keystoneclient/tests/unit/v3/test_auth.py", line 226, in test_authenticate_success_password_unscoped self.assertRequestBodyIs(json=self.TEST_REQUEST_BODY) File "keystoneclient/tests/unit/utils.py", line 72, in assertRequestBodyIs self.assertEqual(json, val) NOTE: in addition to the orginal backport, this patch adds the following changes. The changes has to be combined into a single patch in order to avoid circular dependencies. 1. fixed bandit complains in keystoneclient/common/cms.py. The literal 'sha256' is the default hash algorithm, not a sensitive password. Marking it as false positive so bandit can stop chirping. 2. combined with cherry pick from commit f2d3fec9b254f9c47e97ddf48e3c5f7614b87f1b to avoid circular dependency. Without combining them, neither backport will pass all the gates since pep8 has switched over to use python3 now. 3. combined with cherry pick from commit b29f478f28c4989156cfe87392cbd308e3f55c1e to avoid circular dependency. Without combining them, neither backport will pass all the gates since bandit will have a false positive on the hash algorithm. Change-Id: I0e44d9896c5970f0ca07438c372aec826aeb5c77 (cherry picked from commit f2d3fec9b254f9c47e97ddf48e3c5f7614b87f1b) (cherry picked from commit acc21ff06154e16de16583fe6994207d689ed054) (cherry picked from commit b29f478f28c4989156cfe87392cbd308e3f55c1e) (cherry picked from commit 9da2e0bdd83d481091814a8c6f40ab3ff39ffa9c)
* Update URLs in documents according to document migrationmelissaml2017-07-141-1/+1
| | | | Change-Id: Ie0a8594f2dd0554a07111207899e6134affc998e
* Merge "Add support for endpoint group filtering"Jenkins2017-06-225-12/+321
|\
| * Add support for endpoint group filteringEnrique Garcia Navalon2017-04-135-12/+321
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following API calls are made available: - GET /OS-EP-FILTER/projects/{project_id}/endpoint_groups - GET /OS-EP-FILTER/endpoint_groups/{endpoint_group_id}/projects - PUT /OS-EP-FILTER/endpoint_groups/{endpoint_group}/projects/{project_id} - HEAD /OS-EP-FILTER/endpoint_groups/{endpoint_group}/projects/{project_id} - DELETE /OS-EP-FILTER/endpoint_groups/{endpoint_group}/projects/{project_id} Co-Authored-By: Samuel de Medeiros Queiroz <samueldmq@gmail.com> Closes-Bug: #1641674 Change-Id: Idf938267479b5b8c50c9aa141c3c2770c2d69839
* | Add support for specifying role ids when creating trustKristi Nikolla2017-06-162-4/+25
| | | | | | | | | | Change-Id: I38e0ac35946ee6e53128babac3ea759a380572e0 Partial-Bug: 1696111
* | Merge "Remove pbr warnerrors in favor of sphinx check"Jenkins2017-06-131-1/+1
|\ \
| * | Remove pbr warnerrors in favor of sphinx checkGage Hugo2017-04-241-1/+1
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change removes the unused "warnerrors" setting that was part of [pbr], which was replaced by "warning-is-error" in sphinx 1.5 and above[0]. This also fixes any warnings and errors that came up when running `tox -edocs` using this new feature: - Specified correct instance of 'List' This change also adds the "warning-is-error" setting to setup.cfg in order to allow for strict doc validation which will cause doc building to fail if any warnings are thrown. [0] http://lists.openstack.org/pipermail/openstack-dev/2017-March/113085.html Change-Id: I8111193e5a1ae7d063ab4cc37186aea1299964a4
* | Merge "Replace six.iteritems() with .items()"Jenkins2017-06-1318-35/+24
|\ \
| * | Replace six.iteritems() with .items()M V P Nitesh2017-04-0318-35/+24
| |/ | | | | | | | | | | | | | | | | | | | | | | 1.As mentioned in [1], we should avoid using six.iteritems to achieve iterators. We can use dict.items instead, as it will return iterators in PY3 as well. And dict.items/keys will more readable. 2.In py2, the performance about list should be negligible, see the link [2]. [1] https://wiki.openstack.org/wiki/Python3 [2] http://lists.openstack.org/pipermail/openstack-dev/2015-June/066391.html Change-Id: I18a6890935ebdbb589269379f21a0dd47d07eb3a
* | Moved release note to the correct pathKristi Nikolla2017-05-261-6/+0
| | | | | | | | | | | | | | Release note was accidentally added to keystoneclient/releasenotes instead of releasenotes Change-Id: Id8ec0b895fa8f42d60572077bd5fe49d9478ee10
* | Merge "Remove log translations in python-keystoneclient"Jenkins2017-05-168-48/+33
|\ \
| * | Remove log translations in python-keystoneclientwingwj2017-03-218-48/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Log messages are no longer being translated. This removes all use of the _LE, _LI, and _LW translation markers to simplify logging and to avoid confusion with new contributions. See: http://lists.openstack.org/pipermail/openstack-i18n/2016-November/002574.html http://lists.openstack.org/pipermail/openstack-dev/2017-March/113365.html Change-Id: Ia77819cbb133903d20e821bff0c45766b11ef07b
* | | Stop using oslotest.mockpatchChangBo Guo(gcb)2017-05-031-8/+8
| | | | | | | | | | | | | | | | | | This module has been deprecated in favor of native fixtures. Change-Id: I8fa00396f64d81eba807b2c6cbf4ae810447c59b
* | | Remove unused logzlyqqq2017-04-252-8/+0
| |/ |/| | | | | Change-Id: I1fe2c1703b03eb1c8458c53bdd208a91ababf941
* | Fix failing PY2 and PY3 gate jobsdineshbhor2017-03-222-2/+2
| | | | | | | | | | | | | | | | Please refer: http://logs.openstack.org/43/446943/1/check/gate-python-keystoneclient-python27-ubuntu-xenial/84b965d/console.html Closes-Bug: #1673761 Change-Id: Iefa74ffe8642f039a115e9ff4416c8f72d299317
* | Merge "Add support for endpoint group CRUD"Jenkins2017-02-145-0/+310
|\ \
| * | Add support for endpoint group CRUDSamuel de Medeiros Queiroz2017-02-115-0/+310
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following API calls are made available: - POST /OS-EP-FILTER/endpoint_groups - GET /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - HEAD /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - PATCH /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - DELETE /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - GET /OS-EP-FILTER/endpoint_groups Partial-Bug: #1641674 Change-Id: I285eefe82152b178268f671e8800a0ff8c1511e4
* | | Fix 12 warnings when building keystoneclient docsGage Hugo2017-02-095-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While building keystoneclient docs, there are currently 12 warnings emitted that specify either: WARNING: more than one target found for cross-reference u'list' WARNING: more than one target found for cross-reference u'Auth' This change specifies the correct object for the docstring with "List" since there are many instances of "list" within keystoneclient and specifies the proper "Auth" object. With these changes, the warnings no longer appear. Change-Id: I4515429df38760700552d48fc570c03abf116f83
* | | Use https for *.openstack.org referencesEric Brown2017-02-055-10/+11
| | | | | | | | | | | | | | | | | | | | | The openstack.org pages now support https and our references to the site should by default be one signed by the organization. Change-Id: Ia6cdaf7fabd1c355df002aa07b0695610dde9cd1
* | | Merge "Fix boto version strip regex"Jenkins2017-01-272-1/+40
|\ \ \
| * | | Fix boto version strip regexMarounMaroun2017-01-272-1/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the current regex pattern will match incorrect strings like: Boto/2x0t2 Change-Id: I260f4e0d98f082172a3a67a1fbaa05da5369ea49 Closes-Bug: #1658639
* | | | Allow Multiple Filters of the Same KeySamuel Pilla2017-01-242-1/+27
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before, the way filters were passed in would not allow filtering on the same key. For example: keystone.users.list(name__contains='test', name__contains='user') This fails because of how kwargs handles key/value pairs. This patch allows using multiple values for the same filter. Example: keystone.users.list(name__contains=['test', 'user']) Specifying the only one filter value is still functional as expected. Co-Authored-By: Jeffrey Augustine <ja224e@att.com> Partially-Implements: bp pci-dss-query-password-expired-users Change-Id: I89cecf7e18974e7860ba0925840d6264168eabcb
* | | Fix response body being omitted in debug mode incorrectlyTin Lam2017-01-172-2/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In debug mode, when a response's header Content-Type is set to "application/json" with a parameter, i.e., "application/json; charset=UTF-8". This patch set ignores the additional parameter and only match the mimetype. Change-Id: Ie8fcb1061e0e49b039436947524cfdc704c83846 Closes-Bug: #1656981
* | | Only log application/json in session to start3.9.0Steve Martinelli2017-01-102-33/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When whitelisting content types to debug print from session we chose application/json and application/text. application/text is not a real mime type, text is typically text/plain. Rather than guess at mime types only print application/json to start with, but make it easy for additional types to be added later. Adapted from keystoneauth: Ica5fee076cdab8b1d5167161d28af7313fad9477 Related-Bug: 1616105 Change-Id: Ieaa8fb3ea8d25e09b89498f23b70b18c0f6153f1
* | | X-Serivce-Token should be hashed in the logTin Lam2017-01-092-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, logs display the hash values of X-Auth-Token, Authorization, and X-Subject-Token, but not the value of the X-Service-Token. This patch set adds the X-Service-Token to the list of header fields to be hashed for logging purposes. Change-Id: Iaa3a27f4b6c3baf964fa0c71328ffe9df43b2c0a Closes-Bug: #1654847
* | | Merge "Do not log binary data during request"Jenkins2017-01-082-7/+9
|\ \ \
| * | | Do not log binary data during requestSteve Martinelli2017-01-062-7/+9
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not log binary data during debug logging of a session. Replace the binary data with the string <binary_data> instead. sort of a backport of: I5184002f3a21c5e0ee510b21b9a7884c8dccd1e3 Change-Id: I07ddbc3967f297597542f1975004d94c490f6e6b Related-Bug: 1616105
* | | Merge "remove hacking checks from keystoneclient"Jenkins2017-01-064-148/+0
|\ \ \
| * | | remove hacking checks from keystoneclientSteve Martinelli2017-01-064-148/+0
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the only hacking check in keystoneclient is related to older versions of oslo libraries, which are no longer supported by keystoneclient, for example: $ pip freeze | grep oslo.utils oslo.utils==3.18.0 $ python >>> import oslo.utils Traceback (most recent call last): File "<stdin>", line 1, in <module> ImportError: No module named oslo.utils >>> import oslo_utils >>> Let's just remove the hacking check since theres no way someone could incorrectly import the older versions. Closes-Bug: 1652458 Signed-off-by: Adam Williamson <awilliam@redhat.com> Change-Id: I14165903b46d2fc26e8c9de591917893f58516db
* | | Merge "Prevent MemoryError when logging response bodies"Jenkins2017-01-053-14/+74
|\ \ \ | |/ / |/| |
| * | Prevent MemoryError when logging response bodiesTobias Diaz2017-01-053-14/+74
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Response bodies are loaded into memory prior to being logged. Loading huge response bodies may result in a MemoryError. This patch proposes that only JSON and TEXT responses be logged, i.e when the Content-Type header is application/json or application/text. Responses that do not include or have a different Content-Type header will have their body omitted. This is a sort of backport of the fix for keystoneauth sessions, see I93b6fff73368c4f58bdebf8566c4948b50980cee Co-Authored-By: Samuel de Medeiros Queiroz <samueldmq@gmail.com> Closes-bug: 1616105 Change-Id: I8f43eee3a0b35041c6cf672e476f8151cf2f8d14
* | | re-work inference rule bindingsSteve Martinelli2016-12-185-131/+383
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - At least one API was not implemented (list_implied_roles) - the tests were lacking assertions and proper mocked responses - some of the functionality just didn't work (see bug) - returning Role objects instead of InferenceRule objects Related commits: - I80a40e88b571fe9b0eca3af8b705ea79f28eb904 - I66e863fb83f8dfcca2c48116d4377df060f402c3 Closes-Bug: 1647934 Change-Id: I7b449a93d7d4d3eb9ca857f6c1f78f884bad2534
* | | Merge "Deprecate the generic client"Jenkins2016-12-083-0/+13
|\ \ \
| * | | Deprecate the generic clientJamie Lennox2016-12-073-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The generic client has been around and unused for a really long time. I dont think it works at all and was never updated to support V3 concepts. Realistically we can probably just remove it and noone will notice, but give it a quick deprecation cycle. Closes-Bug: #1647930 Change-Id: Ie68c8995275bcd55aede49d8f4af4e0d172de089
* | | | Use assertIsNone(...) instead of assertEqual(None, ...)chenaidong12016-12-082-2/+2
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refer to:http://docs.openstack.org/developer/hacking/#unit-tests-and-assertraises [H203] Use assertIs(Not)None to check for None (off by default) Unit test assertions tend to give better messages for more specific assertions. As a result, assertIsNone(...) is preferred over assertEqual(None, ...) and assertIs(None, ...) Change-Id: I4e60f3f7f3557080669b98cb48627acc40a72606
* | | Refactor test_projectsRodrigo Duarte Sousa2016-12-051-37/+36
| | | | | | | | | | | | | | | | | | | | | Do not reuse the environment's domain and project, create new ones for the tests. Change-Id: I91a5c1b42c0b31f548c1154a4ef028f45cf1cd24
* | | Refactor test_credentialsRodrigo Duarte Sousa2016-12-051-13/+18
| |/ |/| | | | | | | | | | | Do not reuse client's domain, create a new one to be used only by the test, which is destroyed later. Change-Id: I4e3bb11a92535650317a30e6a1854bfd161ee93f
* | Fix Failing tests with openssl >= 1.1.0Ondřej Kobližek2016-12-041-4/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | keystoneclient.tests.unit.test_cms.CMSTest.test_cms_verify keystoneclient.tests.unit.test_cms.CMSTest.test_cms_verify_token_no_files failing with: Command 'openssl' returned non-zero exit status 1 I think its OpenSSL >= 1.1 bug, which returns wrong exit code (1 instead of 2) if input file not exists. Change-Id: I776596487f305c759b88c0d4c604571c33c6ef70 Closes-Bug: #1646858
* | skip failing functional testSteve Martinelli2016-12-041-0/+3
| | | | | | | | Change-Id: If3894679d21709ab813b4675c4bc721a3987596a
* | Merge "Fix missing service_catalog parameter in Client object"3.8.0Jenkins2016-12-013-1/+20
|\ \
| * | Fix missing service_catalog parameter in Client objectMikhail Nikolaenko2016-08-053-1/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Return None if service_catalog parameter does not exist. service_catalog is the property and it is not initialized on object creation. service_catalog tries to get value from auth_ref and raises AttributeError exception if auth_ref is not initialized. It worked before we introduced sessions, because authentication happened on client instantiation. Now, when sessions are used, auth_ref is not initialized until the first request. This change adds try-catch block in service_catalog property to catch this error. Change-Id: I58eb888f0989241f9e5626564bd48d901b324d36 Closes-Bug: #1508374
* | | Merge "Pass allow_expired to token validate"Jenkins2016-11-292-4/+31
|\ \ \
| * | | Pass allow_expired to token validateJamie Lennox2016-11-292-4/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow passing the allow_expired flag to v3 token validation to support extended service to service communication. Implements bp: allow-expired Change-Id: Ia1763fedc1838ad3c58c7f8f98f00b7eaad55a5c
* | | | Replace 'assertFalse(a in b)' with 'assertNotIn(a, b)'howardlee2016-11-182-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | Trivial fix. Change-Id: I818245eaa9e63322b1c6de049368aa4e09b01b4b
* | | | Fix some spelling mistaks in base.py & auth.pyzhangyanxian2016-11-172-3/+3
| | | | | | | | | | | | | | | | | | | | TrivialFix:"dependant" should be "dependent" Change-Id: I276876e5909ac5958c9e0e911b45e813b8104702
* | | | Merge "Fix typo in access.py"Jenkins2016-11-171-1/+1
|\ \ \ \
| * | | | Fix typo in access.pyzhangyanxian2016-11-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | TrivalFix Change-Id: I44250004eb56b579c227874e4b08e358e8dd8712
* | | | | Refactor test_domain_configsRodrigo Duarte Sousa2016-11-161-13/+18
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | Do not reuse the environment domain, create a new one to be fully controlled by the test cases. Change-Id: Idb894da724e252b01405fc937c021fd8981ee090
* | | | Merge "Do not add last_request_id"3.7.0Jenkins2016-11-141-2/+0
|\ \ \ \
| * | | | Do not add last_request_idBoris Bobrov2016-11-101-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is untested and doesn't work for a while. It also causes a failure when the method is used by other client or by keystoneclient itself. Change-Id: Icdd53936a107933e275acd43b5ebe94b8d04bc4b Closes-Bug: 1637530
View Lorry Controller Status