commit 6006de75a749556a071d23e12ca3a1e7e0ec58c0
author Michael Johnson <johnsomor@gmail.com> Sun Feb 21 01:42:39 2021 +0000
committer Michael Johnson <johnsomor@gmail.com> Thu Apr 08 22:07:40 2021 +0000
tree 0f65b194bd92d997ecb2d5968046b7bd1c43a673
parent 41b3aac6b0386dae202abe8cc03455ea710e468e

Update tests for scoped tokens and default roles

This patch refactors the RBAC enforcement checks in the API tests.
It also updates those test for keystone scoped tokens and default roles.

Change-Id: I6fad03f5a89c213562918ca258884aac34ba7ce7

zuul.d/jobs.yaml

diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml
index 20aa0b4..08263e3 100644
--- a/zuul.d/jobs.yaml
+++ b/zuul.d/jobs.yaml
@@ -456,6 +456,23 @@
       - ^octavia_tempest_plugin/tests/(?!api/|\w+\.py).*
 
 - job:
+    name: octavia-v2-dsvm-noop-api-scoped-tokens
+    parent: octavia-v2-dsvm-noop-api
+    vars:
+      devstack_local_conf:
+        post-config:
+          $OCTAVIA_CONF:
+            oslo_policy:
+              enforce_scope: True
+              enforce_new_defaults: True
+        test-config:
+          "$TEMPEST_CONFIG":
+            enforce_scope:
+              octavia: True
+            load_balancer:
+              enforce_new_defaults: True
+
+- job:
     name: octavia-v2-dsvm-noop-py2-api
     parent: octavia-v2-dsvm-noop-api
     vars: