DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 1 | ============ |
| 2 | Installation |
| 3 | ============ |
| 4 | |
| 5 | Installation Information |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 6 | ======================== |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 7 | |
| 8 | At the command line:: |
| 9 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 10 | $ sudo pip install patrole |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 11 | |
| 12 | Or, if you have virtualenvwrapper installed:: |
| 13 | |
| 14 | $ mkvirtualenv patrole |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 15 | $ sudo pip install patrole |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 16 | |
DavidPurcell | 45bc1a6 | 2017-01-19 17:21:27 -0500 | [diff] [blame] | 17 | Or to install from the source:: |
| 18 | |
| 19 | $ navigate to patrole directory |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 20 | $ sudo pip install -e . |
DavidPurcell | 45bc1a6 | 2017-01-19 17:21:27 -0500 | [diff] [blame] | 21 | |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 22 | Configuration Information |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 23 | ========================= |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 24 | |
| 25 | tempest.conf |
| 26 | ++++++++++++ |
| 27 | |
Felipe Monteiro | 652e2a2 | 2017-01-25 16:44:02 -0500 | [diff] [blame] | 28 | To run the RBAC tempest api test, you have to make the following changes to |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 29 | the tempest.conf file. |
| 30 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 31 | #. ``auth`` section updates :: |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 32 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 33 | # Allows test cases to create/destroy projects and users. This option |
| 34 | # requires that OpenStack Identity API admin credentials are known. If |
| 35 | # false, isolated test cases and parallel execution, can still be |
| 36 | # achieved configuring a list of test accounts (boolean value) |
| 37 | use_dynamic_credentials = True |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 38 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 39 | #. ``rbac`` section updates :: |
DavidPurcell | 663aedf | 2017-01-03 10:01:14 -0500 | [diff] [blame] | 40 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 41 | # The role that you want the RBAC tests to use for RBAC testing |
| 42 | # This needs to be edited to run the test as a different role. |
| 43 | rbac_test_role = _member_ |
DavidPurcell | 45bc1a6 | 2017-01-19 17:21:27 -0500 | [diff] [blame] | 44 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 45 | # Enables RBAC Tempest tests if set to True. Otherwise, they are |
| 46 | # skipped. |
| 47 | enable_rbac = True |
Samantha Blanco | 0d88008 | 2017-03-23 18:14:37 -0400 | [diff] [blame] | 48 | |
Felipe Monteiro | 7bc35dc | 2017-04-19 21:11:46 +0100 | [diff] [blame] | 49 | # If set to true, tests throw a RbacParsingException for policies |
| 50 | # not found in the policy.json. Otherwise, they throw a |
| 51 | # skipException. |
| 52 | strict_policy_check = False |
Samantha Blanco | 85f79d7 | 2017-04-21 11:09:14 -0400 | [diff] [blame] | 53 | |
| 54 | # The following config options set the location of the service's |
| 55 | # policy file. For services that have their policy in code (e.g., |
| 56 | # Nova), this would be the location of a custom policy.json, if |
| 57 | # one exists. |
| 58 | cinder_policy_file = /etc/cinder/policy.json |
| 59 | glance_policy_file = /etc/glance/policy.json |
| 60 | keystone_policy_file = /etc/keystone/policy.json |
| 61 | neutron_policy_file = /etc/neutron/policy.json |
| 62 | nova_policy_file = /etc/nova/policy.json |