| Commit message (Collapse) | Author | Age | Files | Lines |
| |\ |
|
| | |
| |
| |
| |
| |
| | |
This data can be used elsewhere as well.
Change-Id: I38b6c782b6d38e9e7d091f1c045a13ca10dfcc85
|
| |\ \ |
|
| | |/
| |
| |
| |
| |
| |
| |
| |
| | |
Implements client support for the basic trusts API operations,
note this does not include support for the roles subpath operations,
support for those can be added in a subsequent patch.
Change-Id: I0c6ba12bad5cc8f3f10697d2a3dcf4f3be8c7ece
blueprint: delegation-impersonation-support
|
| |\ \
| |/
|/| |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
Simply pull in HTTPClient from its new location. This also restores the
tests that were modified back to there original form to make sure
nothing has changed from the original.
Fixes: bug 1211998
Change-Id: Ia3241a4352eb6b37c6489cd4dd1bc373de107e12
|
| |/
|
|
|
|
|
|
|
|
| |
In auth_token middleware auth_prefix is only added to requests that go
through the _json_request method. This doesn't include the two
certificate fetching functions. Manually add the auth_prefix to both
those requests.
Closes-Bug: #1211615
Change-Id: I25d1b401598c9a443ddef0fc3259ba859aee8c76
|
| |
|
|
|
|
|
| |
Enable gating on the Hacking H404 check - docstring
should start with a summary.
Change-Id: I80612a15bd11f689e9e9f4dc2ff812138630ddbd
|
| |\ |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Patch adds simple kwargs parsing to tenant update and create
methods allowing users to exercise the extras functionality
of keystone.
As-per keystone data model docs:
http://docs.openstack.org/developer/keystone/architecture.html#data-model
Change-Id: I1c375c70a0ab4519626d2238d65fa0695f953dc5
Fixes: bug #1180317
|
| |\ \ |
|
| | | |
| | |
| | |
| | |
| | | |
Closes-Bug: 1172802
Change-Id: Ifc04f565b96d58a7a2f477a216b57af7f8de6a8e
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Add a function AuthProtocol::verify_signing_dir() in
keystoneclient/middleware/auth_token.py. It will be called both in init
stage and in fetching signing cert scenario.
Fixes bug 1201577
Change-Id: Ice0e8a93ba9d85c20de84cf8da3e9b0f2274b740
|
| |/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Create a function out of the standard request call that handles common
headers like user agent and logging.
This makes future changes easier to digest.
Change-Id: Ia25f997df64efdce27c8fb815e544922940145c3
|
| | |/
|/|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The discoverable entry point is to be client.Client however adding this
functionality to the current client.py is impossible as we end up with
circular dependencies.
This patch simply renames the current client.py to httpclient.py to make
future patches that will modify client.py more readable.
Required for: blueprint api-version-discovery
Change-Id: Ibcea03f6e1df0ae05329297166a8b8117fc3ce7b
|
| |\ \ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
There are a number of problems doing things like .json() if you don't
inherit the correct parameters.
Change-Id: I0dfc8ab6486090fbcd28792c18deae67e4769d53
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* tests/test_auth_token_middleware.py: test_request_no_token_dummy has a
dependency on the keystone.common.cms module importing subprocess prior
to running. The cms._ensure_subprocess() function does this. Call this
function in the base test class's setUp method to ensure subprocess is
imported before symbols from that module are needed. Doing this in the
base setUp will ensure that this works for any additional tests with the
same dependency.
This fix is needed because testr runs tests in non deterministic order
which means that each test needs to be able to run on its own (eg in its
own process without any other tests running first) and they need to run
without interfering any other tests (each test must properly clean up
after itself). Prior to this commit test_request_no_token_dummy would
fail when executed on its own.
Closes-Bug: #1209300
Change-Id: I3cf669b94ed77ad0cd729ead0b4162a3f1b8819f
|
| |/ /
| |
| |
| |
| |
| |
| |
| | |
User default_project_id for setting the default project of the User.
Fixes bug 1205520
Change-Id: I176d88bb6897c36404d8915385cc791adf10c586
|
| |\ \ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Since the fix for bug #1197553, verification for older clients (which strip the
port when formatting the request) fails.
This conditionally reverts to the original behavior, by detecting the boto
version via the User-Agent header, the default behavior will be the new
behavior (which doesn't strip the port), but this will allow a less painful
transition for clients/distros to the new boto version.
Fixes bug #1205281
Change-Id: I54ac9c5ba91e697004f1346a8f2d685da488992a
|
| |\ \ \
| |_|/
|/| | |
|
| | |/
| |
| |
| | |
Change-Id: I0f4fcc9796e8529e7217dc24abe95660633cad33
|
| |\ \
| |/
|/| |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This came up as a packaging problem in Fedora. Now that Swift does
not need python-webob RPM, some sites install a proxy node without.
We add the proper webob dependency to the python-keystoneclient.
Still, in the face of parallel installs, and we end patching
setup.py and diverge from upstream, and we do not like it.
It may be better just stick to WSGI protocol by small amount of
hand-rolled code and drop WebOb altogether.
Note that we keep WebOb in the testing code. The fix is purely
about the stuff that runs inside a WSGI server. Therefore,
requirements.txt continues having no WebOb (apparently, was
forgotten before), but test-requirements.txt keeps WebOb in,
and this patch changes nothing.
Initial version of this patch produced an inexplicable drop in
testing coverage and Chmouel put his foot down on it. We were
unable to figure out why the drop happened. Most likely coverage
simply lied about the previous percentages and getting rid of
import webob permitted it a better analysis. So, we add some
unrelated tests to bump coverage percentages up.
Of course we add a targeted test for the new code too. For that
one to work, we change how set_middleware() treats its fake_http
argument.
This version also adds comments rather than docstrings, because
they need to source as context.
Change-Id: Iba33b11e77b9910211983aa725c69d3886e1c7a7
|
| |/
|
|
|
|
|
|
| |
In tests/v3/utils.py, parameterize()
Fixes bug #1206895
Change-Id: I36e3d49209eb6896cb0e053bba9e4c966efea5db
|
| |\ |
|
| | |
| |
| |
| |
| |
| |
| | |
Only a few occurrences of "multiline docstrings
should end on a new line."
Change-Id: I3fb4591259b1e7c8202365cbadc8967a1639254f
|
| |\ \
| |/
|/| |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Previously the port component of the host:port header was stripped
to match what boto (2.6.0->2.9.2) did, however it seems that was a
n error in boto as from boto commit cfaba39 (in 2.9.3) the port is
now appended.
This means that when this fix is used with keystone, APIs which use
keystone to validate ec2 style v4 signatures (e.g the heat cfn API)
will require python-boto >= 2.9.3
Fixes bug #1197553
Change-Id: I4c01e7aef7015a79e6e6263492c51caf3a08e9e4
|
| | |
| |
| |
| |
| |
| | |
Docstring summaries need punctuation.
Change-Id: I1b740c13d5fedf9a625ca0807c908f651ee08406
|
| |/
|
|
|
|
|
|
|
|
|
| |
Fixes #Bug 1183655
This patch adds name arguments to the following subcommands:
* user-list
* user-create
* endpoint-create
Change-Id: I056e87de78f88f6fcf76baa4c820622c42f74f39
|
| |\ |
|
| | |
| |
| |
| |
| |
| | |
Remove leading spaces from doc comments.
Change-Id: I75b055c0d64dda478c63839d44158e301900107f
|
| |\ \ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
Any other tests running will unexpectedly have mocks installed for
requests otherwise. Make the time mock behave the same way whilst there.
Change-Id: Iec4f35c51ed4650a35ae2780637192c82042a980
|
| |\ \ \
| |_|/
|/| | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Currently keystone support filtering of
groups by domain. This fix is to add
support in keystone-client for filtering
groups by domain.
Fixes Bug #1180581
Change-Id: I3906e2474d968426d06d498928ce2c7094c6fbe9
|
| |\ \ \
| |_|/
|/| | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Historically the swift cache conection used the argument timeout= for
the cache timeout, but this has been unified with the official python
memcache client with time= since grizzly, we still need to handle folsom
for a while until this could get removed.
Fixes bug 1193032
Change-Id: Ia9d544a0277beb197ed9824d7c1266d12968393d
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
TestCase.setUpClass() and unittest.SkipTest are features added in 2.7.
Calling super(KeyringTest, cls).setUpClass() could have never worked
since tests.utils.TestCase doesn't implement that (class) method.
Change-Id: Ifbb0465be24fd13ad68d52c0d7fa4c5090d0f694
|
| | |_|/
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Added support for domain scoping.
Enhancement on AccessInfo to support reading v2/v3 token information.
Enhancement on ServiceCatalog for reading/filtering v2/v3 service
catalog information.
Change-Id: Ibb678b9933d3673e37d0fba857a152a3c5d2b4f4
|
| | |/
|/|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Currently, Keystone-Client is using 'memcache_servers' config option to store
the memcache server info, while in OSLO project, it is using 'memcached_servers'
to config the same option. It is better to change keystone-client's
'memcache_servers' to 'memcached_servers' to keep consistent between these two
projects.
Change-Id: I93ca0aa368f95a3ccf6de6984262057e61f75ffe
Fixes: Bug 1172793
|
| |/
|
|
|
|
|
|
|
|
| |
This fixes lp1175367 and lp1175368 by redesigning the memcache crypt
middleware to not do dangerous things. It is forward compatible, but
will invalidate any existing ephemeral encrypted or signed memcache
entries.
Change-Id: Ice8724949a48bfad3b8b7c41b5f50a18a9ad9f42
Signed-off-by: Bryan D. Payne <bdpayne@acm.org>
|
| |\ |
|
| | |
| |
| |
| |
| |
| |
| | |
This tackles some TODO items left over.
Change-Id: Ib062744acbf56f05d09857d244b78b35c0ef4d39
Signed-off-by: Julien Danjou <julien@danjou.info>
|
| |\ \ |
|
| | |/
| |
| |
| |
| |
| |
| |
| | |
The original logic for whether shell had enough information to
authenticate a user was confusing and will be very difficult to extend
to other forms of authentication.
Change-Id: I88763a651e494e60070a30f0824505acb09310cb
|