)]}' { "log": [ { "commit": "04b26288b36564fb6498e4457b69b879aec23b99", "tree": "393abaa3ef8e627bd93d6dc3a123b6d6f8c615af", "parents": [ "3e98fe47b54dd75365e158e884ee7406a703c7d4" ], "author": { "name": "Mykola Yakovliev", "email": "VegasQ@gmail.com", "time": "Mon Jul 23 12:13:02 2018 -0500" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 07 00:57:22 2018 +0000" }, "message": "Add tests to cover trunks\n\nThis patch set adds tests to cver the neutron trunks API [0].\nTest lists, gets, creates, updates, and deletes trunks.\nPart of \"Increase Neutron RBAC Coverage\" initiative [1]\n\n[0] https://developer.openstack.org/api-ref/network/v2/index.html#trunk-networking\n[1] https://storyboard.openstack.org/#!/story/2002641\n\nStory: 2002641\nTask: 22326\nChange-Id: Ie59f02f5ecc1d04a16fb178444f231e4791e2079\n" }, { "commit": "3e98fe47b54dd75365e158e884ee7406a703c7d4", "tree": "bf2d0480d34421a3fef091939d2e01c608aec386", "parents": [ "1d829781df157bc4a11b2489054997f09b4c54ee" ], "author": { "name": "Mykola Yakovliev", "email": "VegasQ@gmail.com", "time": "Thu Aug 02 17:25:53 2018 -0500" }, "committer": { "name": "Mykola Yakovliev", "email": "myakovliev@mirantis.com", "time": "Sat Aug 04 19:59:24 2018 +0000" }, "message": "Update segments rbac tests with error codes\n\nThis patchset updates tests with exact codes to prevent\nfalse positive results.\n\nChange-Id: I7d7f640c9adda06767eabb657fe739748a2beaf2\n" }, { "commit": "1d829781df157bc4a11b2489054997f09b4c54ee", "tree": "f2c8e15b981e7a082d4f7b33544e1e6022733540", "parents": [ "caffc23980285e4864085976fb482ca04d1ca7d2" ], "author": { "name": "Mykola Yakovliev", "email": "VegasQ@gmail.com", "time": "Fri Aug 03 14:37:37 2018 -0500" }, "committer": { "name": "Mykola Yakovliev", "email": "VegasQ@gmail.com", "time": "Sat Aug 04 11:40:51 2018 -0500" }, "message": "Reset ntp_client cached token in override_role context\n\nAs bug [0] shows we have incorrect behaviour with client, when its\nallowed to perform forbidden action beacause of cached token.\nThis patchset expands RbacUtilsMixin with `get_auth_providers` so\nwe can define additional auth_providers on testcase level.\nUsing it we reset cached auth data for neutron-tempest-plugin\nclient in *PluginRbacTest tests.\n\n[0] https://storyboard.openstack.org/#!/story/2003296\n\nChange-Id: Ie444f1e0be1c9a5ff7fc8a968269b73f510685e3\nStory: 2003296\nTask: 24245\n" }, { "commit": "caffc23980285e4864085976fb482ca04d1ca7d2", "tree": "5dfccb57d6380b4167fbdb3148e86b21eda3901b", "parents": [ "839034139e8d47340f1edd75404bdbceb26e77bc", "d067148212ef95b938af5edbec359fa49156ddee" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Thu Aug 02 18:16:31 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Aug 02 18:16:32 2018 +0000" }, "message": "Merge \"Add tests to cover segments\"" }, { "commit": "839034139e8d47340f1edd75404bdbceb26e77bc", "tree": "57dcd0feec8c43e3d0e8c4fa9908e831dc6bd872", "parents": [ "9af45b13bca3564e758d0bd5ee83be9272dbb8e2" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jul 09 16:33:55 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jul 31 02:15:49 2018 -0400" }, "message": "Deprecate enable_rbac configuration option\n\nThe ``[patrole].enable_rbac`` option is deprecated and will be removed\nduring the \"S\" release. This is a legacy option that was meaningful\ndownstream when Patrole was a suite of tests inside Tempest itself. Now\nthat Patrole exists upstream as a Tempest plugin, it is paradoxical to\ninstall the Patrole plugin yet have an option that allows all Patrole\ntests to be skipped. This option is at odds with current Patrole\narchitecture.\n\nTo skip RBAC tests going forward, with Patrole Tempest plugin already\ninstalled, use an appropriate regex.\n\nChange-Id: I0cc39184c7891fb9133a45488a36ba220592915f\n" }, { "commit": "9af45b13bca3564e758d0bd5ee83be9272dbb8e2", "tree": "49057c741c0b9aea004fd4c5d034d173aff15fe0", "parents": [ "933c8922ef1c3b06c0a64391077c5ed82097a2ab", "d48d892355069aa8540d3b85d9a1c3dd5f7eda9d" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon Jul 30 17:39:48 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 30 17:39:48 2018 +0000" }, "message": "Merge \"Remove misleading todo from config.py\"" }, { "commit": "d48d892355069aa8540d3b85d9a1c3dd5f7eda9d", "tree": "c8309d9ae3d359a6a59b592a8d8a27f347cfa054", "parents": [ "05a73499ce2eabb1f68013304d23ae09e38ba29c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Jul 29 02:07:49 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Jul 29 02:07:49 2018 -0400" }, "message": "Remove misleading todo from config.py\n\nThis patch set removes a misleading todo from config.py which\nsuggests that it might be possible to leverage Keystone\u0027s\nPolicy API to derive policy information from remote hosts. But\nthis is not possible as the Policy API is deprecated [0].\n\nIf we want to get policy information from a remote host we will\nneed to pursue some SSH alternative instead, but this is not\nplanned anytime soon.\n\n[0] https://docs.openstack.org/releasenotes/keystone/queens.html#deprecation-notes\n\nChange-Id: I8a4da457c2d40ebddbfe5492dc1cbba87288c0da\n" }, { "commit": "d067148212ef95b938af5edbec359fa49156ddee", "tree": "996c038134eb1ac34b7d74e9f50273e381d41cdd", "parents": [ "05a73499ce2eabb1f68013304d23ae09e38ba29c" ], "author": { "name": "Mykola Yakovliev", "email": "VegasQ@gmail.com", "time": "Mon Jul 23 12:13:02 2018 -0500" }, "committer": { "name": "Mykola Yakovliev", "email": "VegasQ@gmail.com", "time": "Fri Jul 27 18:01:16 2018 -0500" }, "message": "Add tests to cover segments\n\nThis patch set adds tests to cver the neutron segments API [0].\nTest lists, gets, creates, updates, and deletes segments.\nPart of \"Increase Neutron RBAC Coverage\" initiative [1]\n\n[0] https://developer.openstack.org/api-ref/network/v2/index.html#segments\n[1] https://storyboard.openstack.org/#!/story/2002641\n\nStory: 2002641\nTask: 22306\nChange-Id: I8eef0dcd5355d6212ead2bcb109f23ca0b613109\n" }, { "commit": "933c8922ef1c3b06c0a64391077c5ed82097a2ab", "tree": "7fce291610ef8fbb2366b324ac04a0c9f827d61f", "parents": [ "1f923a1ae5dfb4c4441ab019eb39b0e6ef36e0e3", "2ee0db0726f80ffe0c29a5b24c91c06b988612b9" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Jul 27 22:48:52 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jul 27 22:48:52 2018 +0000" }, "message": "Merge \"Add list backups with details for backup:backup_project_attribute\"" }, { "commit": "1f923a1ae5dfb4c4441ab019eb39b0e6ef36e0e3", "tree": "5d0bf04afe3fb68275b3034e82257222e672b59d", "parents": [ "05a73499ce2eabb1f68013304d23ae09e38ba29c", "9d45e40db03daf4be48b3ce2dab607bf50a2d6c6" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Jul 27 22:48:50 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jul 27 22:48:50 2018 +0000" }, "message": "Merge \"Adds create_network tests for missing policy actions\"" }, { "commit": "2ee0db0726f80ffe0c29a5b24c91c06b988612b9", "tree": "80c509f35e7c6ee9f2c8d1c784f11a9aaa1ae7a4", "parents": [ "05a73499ce2eabb1f68013304d23ae09e38ba29c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Jul 08 22:19:05 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 27 00:29:31 2018 -0400" }, "message": "Add list backups with details for backup:backup_project_attribute\n\nThis patchset adds an RBAC test for validating that\n\"backup:backup_project_attribute\" is included in response body\nfor listing backups with details following successful policy\nauthorization. The policy in code documentation indicates that\nthis API enforces this policy [0] and the policy is enforced in\nthe code here [1]. The expected attribute comes from [2].\n\n[0] https://github.com/openstack/cinder/blob/8f7bc140052091d141e2cf436e989aa2d15dd6f4/cinder/api/v3/backups.py#L89\n[1] https://github.com/openstack/cinder/blob/8f7bc140052091d141e2cf436e989aa2d15dd6f4/cinder/policies/backups.py#L57\n[2] https://github.com/openstack/cinder/blob/8f7bc140052091d141e2cf436e989aa2d15dd6f4/cinder/api/v3/backups.py#L64\n\nChange-Id: I8285b25b97de90e1911adf5e97ffd051d10adf90\n" }, { "commit": "05a73499ce2eabb1f68013304d23ae09e38ba29c", "tree": "c99cf741bdba4230196ea26488e13a1a25a2b25d", "parents": [ "e737900e609783ff172dc86253f3af60e243be62", "1884c572ee472c4dfeb955f66c61a7a73474f682" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Jul 27 03:35:48 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jul 27 03:35:48 2018 +0000" }, "message": "Merge \"Increase test stability of backup RBAC tests\"" }, { "commit": "9d45e40db03daf4be48b3ce2dab607bf50a2d6c6", "tree": "0b4dfa88a1783438d93a94856d7d64c80365ec76", "parents": [ "e0c5c24e3bca25349894b8055589d88a16f4b894" ], "author": { "name": "jessegler", "email": "jess.egler@gmail.com", "time": "Tue Jul 17 13:54:41 2018 -0500" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Jul 26 22:45:01 2018 -0400" }, "message": "Adds create_network tests for missing policy actions\n\n\u0027create_network:is_default\u0027\n\u0027create_network:provider:physical_network\u0027\n\nStory: 2002641\nTask: 22303\n\nChange-Id: I1aaa9b4cd9e0f34522e2e61191d1bae20ad6da48\n" }, { "commit": "f8d1c74f51657cac279cf249ab47c782d1ec78db", "tree": "3abd4c13d37bcdc1b3440b6385b3c4ffdd435d04", "parents": [ "2a21633949555a79a34afe306d6ab299489a14a6" ], "author": { "name": "jessegler", "email": "jess.egler@gmail.com", "time": "Thu Jul 19 14:32:05 2018 -0500" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Jul 22 02:14:40 2018 +0000" }, "message": "Adds the following tests for update_network:\n\n\u0027update_network:provider:network_type\u0027\n\u0027update_network:provider:physical_network\u0027\n\u0027update_network:provider:segmentation_id\u0027\n\nhttps://storyboard.openstack.org/#!/story/2002641\n\nChange-Id: I693746f2e2b816a1573b41a9e089ab9b7dd1e44a\n" }, { "commit": "1884c572ee472c4dfeb955f66c61a7a73474f682", "tree": "999e6dc41fad2c37b53f18208d8cee7e59462956", "parents": [ "2a21633949555a79a34afe306d6ab299489a14a6" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Mar 26 01:25:36 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 20 21:22:35 2018 +0000" }, "message": "Increase test stability of backup RBAC tests\n\nThis is to increase test stability of backup RBAC tests which\nfail not only due to the rather error-prone nature of backing\nup volumes, but also because of data race conditions and\nmissing clean ups.\n\nThis adds some waiters following certain backup actions. This\nalso adds a clean up of the volume that is created when restoring\na backup [0].\n\nAdditional waiters are also added for waiting for volumes to\nbecome available following backup (because they briefly\ngo into backing-up status) [1].\n\n[0] https://developer.openstack.org/api-ref/block-storage/v3/index.html#restore-a-backup\n[1] https://review.openstack.org/#/c/569917/8\n\nChange-Id: Ifce15f69fcca38005b40785c42231ca164917345\n" }, { "commit": "07a79551e87c5fca43779578dcfe06afe5cf9c2b", "tree": "728f7bb13d3b90ffd7b05c2603d12f9dcca115de", "parents": [ "51299a14146ec4f80fdd4eb42819dd0a4b8d5ee3", "299b9d467db7495835352e633538432685428d7d" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Wed Jul 18 19:01:37 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jul 18 19:01:37 2018 +0000" }, "message": "Merge \"Bump hacking to 1.1.0\"" }, { "commit": "51299a14146ec4f80fdd4eb42819dd0a4b8d5ee3", "tree": "9f6655b634cd87238cafadf4c53d1f48d7009f2a", "parents": [ "561d028a636fc0982f57319a2fb78039dc9c700c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Jun 28 20:03:27 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Jul 18 01:18:35 2018 +0000" }, "message": "Improve exception that is raised following invalid service\n\nThis patchset changes the exception that is raised following\nan invalid service being passed in for testing. Instead of\na NotFound getting raised (which doesn\u0027t make sense), the\noriginal exception, RbacInvalidServiceException, is raised\ninstead. In addition \"Exception\" is appended to the original\nexception name for greater clarity and consistency with other\nexception names.\n\nThis patchset is similar to [0] which aims to simplify and\nconsolidate how service input is validated.\n\n[0] https://review.openstack.org/#/c/577963/\n\nChange-Id: Ib91a6581f89a528630d756840176b0e16663fa6f\n" }, { "commit": "561d028a636fc0982f57319a2fb78039dc9c700c", "tree": "9640832baa3e3c45b498698daf34dd6d751cb2c7", "parents": [ "2e45d9b6929b3538d6d7b5bb04e95b3f822cdd7b" ], "author": { "name": "ghanshyam", "email": "gmann@ghanshyammann.com", "time": "Tue Jul 17 04:45:49 2018 +0000" }, "committer": { "name": "ghanshyam", "email": "gmann@ghanshyammann.com", "time": "Tue Jul 17 04:45:49 2018 +0000" }, "message": "Cap additional nova-network tests at Queens\n\nAs noted in I7aea99d7c1818b8edcda41ba4eaa062a8ea069eb, nova is working\non removing the nova-network only compute REST APIs in the Rocky\nrelease, which means any requests to those APIs after Queens will result\nin a 410 response, regardless of microversion or whether or not neutron\nis being used.\n\nThe os-floating-ips-bulk API is being removed in nova change\nI89d081108b398d8efba9636279088c61349b21e6. As a result,\nos-floating-ips-bulk tests will no longer works against Rocky+ versions\nof nova. Skip this test using the check added in the previous change.\n\nRelated to blueprint remove-nova-network\n\nChange-Id: I1a2accebce29c3be6acec7ede67b1250552a42ca\n" }, { "commit": "e0c5c24e3bca25349894b8055589d88a16f4b894", "tree": "7caf91d8bf0abd776741c255fd82f4de5fe8b2df", "parents": [ "94986d7e3c25b842f90036d6971f103403f0c3f2", "c0cb7eb2d49213afa209de87dfbeb376775c3977" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Jul 10 20:57:10 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jul 10 20:57:10 2018 +0000" }, "message": "Merge \"multi policy: Fix logging issues with multiple policies\"" }, { "commit": "94986d7e3c25b842f90036d6971f103403f0c3f2", "tree": "4f5592f69cf0061c5f4323c5125e967c705b8c37", "parents": [ "f800a1c5ca672033cd9e283c82972b87d0911648", "f16b6b3a1df654cfc98256ab1dd92ad4e719c369" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Jul 10 19:54:19 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jul 10 19:54:19 2018 +0000" }, "message": "Merge \"Update overpermission/underpermission rbac exceptions\"" }, { "commit": "299b9d467db7495835352e633538432685428d7d", "tree": "ff87cc98ff516c1a61b3119b65865dc6885cea8b", "parents": [ "556094d276d79b7f320e5557aee93d7f029a1363" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 06 23:00:24 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jul 10 18:40:19 2018 +0000" }, "message": "Bump hacking to 1.1.0\n\nhacking 1.0+ adds a couple of additional checks that are helpful as part\nof the transition to Python 3. However, hacking 1.1.0 incorporated\nflake8 2.6.x, which transitioned from pep8 to pycodestyle. Tempest\nprovides some hacking extensions and these use pep8 imports. As things\nstand, projects that wish to use these hacking extensions must either\nconstrain themselves to the same older hacking versions or install pep8\nmanually. Neither of these approaches is particularly attractive so\ninstead transition to hacking 1.1.0 ourselves. This has the benefit of\ngiving us the additional checks for Python 3.\n\nBased off https://review.openstack.org/#/c/580634/1/\n\nChange-Id: I8ed5aa0ccd02a792d26d3bef1949a7e1a3f600ed\n" }, { "commit": "4671e3909def0fa75c7cdea2ea44b02f0fdd48fd", "tree": "61fe6a007f22f0253438e5dcc46edf98de84eeb1", "parents": [ "a85698bcb8d2be09359aa575f3a5e5e6d4eee73c", "1bed58be501ac22ef8f6c01f1e1e77fe2c6129a8" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Wed Jul 04 02:53:53 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jul 04 02:53:53 2018 +0000" }, "message": "Merge \"Add fixed ip cleanup to test_add_fixed_ip\"" }, { "commit": "f16b6b3a1df654cfc98256ab1dd92ad4e719c369", "tree": "d757fcb089c63b21c7fffd8db1f8fc94c6f6e942", "parents": [ "556094d276d79b7f320e5557aee93d7f029a1363" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Jun 28 19:32:59 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jun 29 04:51:33 2018 +0000" }, "message": "Update overpermission/underpermission rbac exceptions\n\nThis patchset updates rbac_exceptions by bringing the concept\nof under-permission and over-permission together. An over-permission\noccurs when an unauthorized role is allowed to perform an action\nand an under-permission occurs when an authorized role is not\nallowed to perform an action. Both of these are important failure\nscenarios.\n\nCurrent Patrole has an RbacOverPermission Exception but uses\na \"Forbidden\" as a pseudonym for the under-permission version\nbut this is not ideal for the following reasons:\n\n* Patrole can expect a 404 Not Found due to Neutron policy enforcement [0]\n* The naming is inconsistent with RbacOverPermission\n* It should have a Patrole wrapper exception (NotFound is used directly\n from Tempest)\n\nSo, this patchset:\n\n* renames RbacOverPermission to RbacOverPermissionException\n* replaces Forbidden exception with RbacUnderPermissionException\n* updates documentation, docstrings and unit tests\n\nIn addition, this patchset introduces a new exception called\nRbacExpectedWrongException which is raised when the expected\nexception does not match the actual exception and both are instances\nof 403 and 404, which means that the RBAC test uses the wrong\nexpected_error_codes.\n\nChange-Id: I681610448cbe0269f02c34ea6afaaaf29c306121\n" }, { "commit": "a85698bcb8d2be09359aa575f3a5e5e6d4eee73c", "tree": "a8f3f18c3ee0b6ed980cb4820a6aef25f1770265", "parents": [ "2ed9feac24eb6cf1919effe95313fe703486a2e3", "f5ed588fb55a9a4fc1f03e7f1e344266d9742b4f" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Thu Jun 28 23:24:51 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Jun 28 23:24:51 2018 +0000" }, "message": "Merge \"trivial: Drop empty services folder under patrole_tempest_plugin\"" }, { "commit": "2ed9feac24eb6cf1919effe95313fe703486a2e3", "tree": "75637309ae72b987b0d51ba0a032520b11a2e485", "parents": [ "a6371ed510b318183e1c2cbafcc97bd85f6625f8", "318fa3b80c8d3ff49ec3d26db98d063530e65b35" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Wed Jun 27 17:29:19 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 27 17:29:19 2018 +0000" }, "message": "Merge \"Use tempest-multinode-full parent for multinode Zuul jobs\"" }, { "commit": "a6371ed510b318183e1c2cbafcc97bd85f6625f8", "tree": "1afd60ae5b235491f6c44feaaa549f7a1f7f791e", "parents": [ "556094d276d79b7f320e5557aee93d7f029a1363", "d91c1242c3396594495d2bd905bc42b24a8f29ba" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Wed Jun 27 17:03:16 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 27 17:03:16 2018 +0000" }, "message": "Merge \"Change Neutron tests to use multi-policy support\"" }, { "commit": "d91c1242c3396594495d2bd905bc42b24a8f29ba", "tree": "d3a712fd1731701910803fe6e5fca5ea905755e0", "parents": [ "e965f90cafe8b45913ab51782afcc9c7c47a9fed" ], "author": { "name": "Cliff Parsons", "email": "cliff.parsons@att.com", "time": "Fri Jun 15 00:50:33 2018 -0500" }, "committer": { "name": "Cliff Parsons", "email": "cliff.parsons@att.com", "time": "Tue Jun 26 16:39:35 2018 +0000" }, "message": "Change Neutron tests to use multi-policy support\n\nThis change changes the test cases that require multi-policy and\nmultiple error code handling.\n\nPartially Implements: bp rbac-testing-multiple-policies\nStory: 2002620\n\nChange-Id: I40df70f7cd7c7f30822010323c5dd02697d50d2b\n" }, { "commit": "f5ed588fb55a9a4fc1f03e7f1e344266d9742b4f", "tree": "5c83134faf6f60c191c9e575a86d8185b099048c", "parents": [ "556094d276d79b7f320e5557aee93d7f029a1363" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jun 25 21:29:11 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jun 25 21:29:11 2018 -0400" }, "message": "trivial: Drop empty services folder under patrole_tempest_plugin\n\nThis patchset drops the empty services folder under\npatrole_tempest_plugin. While it is part of the cookie cutter\nTempest plugin setup, it is currently empty and serves no\npurpose in Patrole. If in the future we decide to add service\nclients there, we can reintroduce the folder. But there is\nno purpose in keeping around an empty folder -- it just\nincreases clutter.\n\nChange-Id: Ibf83a73f5dc2c38d737359221e9974a6562846a6\n" }, { "commit": "556094d276d79b7f320e5557aee93d7f029a1363", "tree": "ce280f2cd05bc190de13bfb0d2b5539c3afa7d7a", "parents": [ "e965f90cafe8b45913ab51782afcc9c7c47a9fed", "e7679f7f2d43e40f2d3399c495fba3e9be476acd" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 23 01:34:32 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 23 01:34:32 2018 +0000" }, "message": "Merge \"Fix Neutron-related return values on some list APIs\"" }, { "commit": "318fa3b80c8d3ff49ec3d26db98d063530e65b35", "tree": "0f93d9b2e6e18d5b5294a06dac0dd2b8e4c7e47d", "parents": [ "8f45b364f722fa87be0e572108f98fc3d402a23c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jun 19 16:53:33 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Jun 20 00:25:06 2018 -0400" }, "message": "Use tempest-multinode-full parent for multinode Zuul jobs\n\nThis patchset uses the recently added [0] tempest-multinode-full\nparent for multinode Patrole Zuulv3 jobs. This patchset also\nfixes some trivial docstring errors related to [1].\n\n[0] https://review.openstack.org/#/c/545724/\n[1] https://review.openstack.org/#/c/570262/\n\nChange-Id: Ib13663b582f0c57a28ec4b18129b83ab5ba95cfe\n" }, { "commit": "c0cb7eb2d49213afa209de87dfbeb376775c3977", "tree": "1719f342fed721ea8c7c888a7cf0102ec8980f1e", "parents": [ "25e2e71b95034743ddf26520ff369d941f39e2b3" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jun 19 19:50:36 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jun 19 19:50:36 2018 -0400" }, "message": "multi policy: Fix logging issues with multiple policies\n\nThis patchset mostly aims to fix logging issues surrounding\nmultiple policies introduced by [0]. Some of the LOG messages\nstill only log `rule` arg when they should log all the `rules`\narg instead to capture all the policies being enforced.\n\nIn addition, this patchset:\n\n* corrects docstring formatting with rbac_rule_validation following [1]\n* changes unit tests in test_rbac_rule_validation to test non-deprecated\n arg `rules` instead of `rule` (tests also exist for ensuring that\n `rule` is handled correctly until it is finally removed from code)\n* rewords some log messages to better conform to multi policy support\n\n[0] https://review.openstack.org/#/c/554764/\n[1] https://review.openstack.org/#/c/570262/\n\nPartially Implements: bp rbac-testing-multiple-policies\nStory: 2002620\nTask: 22250\n\nChange-Id: I3df69d5a476416378bde14ee6a258ff5ed40e363\n" }, { "commit": "25e2e71b95034743ddf26520ff369d941f39e2b3", "tree": "f8319d9d6e76f0c5ab207223ac1c848394b1cbf0", "parents": [ "8f45b364f722fa87be0e572108f98fc3d402a23c", "bc865dfecc319cbca8aeb31687ee0ba6dcea9d12" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Jun 19 22:32:34 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jun 19 22:32:34 2018 +0000" }, "message": "Merge \"Fix test_volume_upload BadRequest error\"" }, { "commit": "8f45b364f722fa87be0e572108f98fc3d402a23c", "tree": "1b08659d0a596cd79914c7e8938b5688a9019241", "parents": [ "f50f6f1384040ee4a1fa806bb9a39bfd6cf429e5", "35a77113fccfd5659c123adb2cc142836cdd764d" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Jun 19 20:10:28 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jun 19 20:10:28 2018 +0000" }, "message": "Merge \"Add support for handling multiple error codes\"" }, { "commit": "1bed58be501ac22ef8f6c01f1e1e77fe2c6129a8", "tree": "c2e5e79630ccd6bc08a1a6bb4ef1575c4fdfd26e", "parents": [ "ffc1ad8556b3aee842db5345ee4080d8cae7c303" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jun 18 21:57:53 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jun 18 21:57:53 2018 +0100" }, "message": "Add fixed ip cleanup to test_add_fixed_ip\n\nThere is a data race on clean up with the test test_add_fixed_ip\nbecause it can currently fail during resource_cleanup [0] with:\n\"One or more ports have an IP allocation from this subnet.\"\n\n[0] http://logs.openstack.org/36/575536/4/gate/patrole-admin/ccf48f1/testr_results.html.gz\n\nChange-Id: I71099c62cb9c49739ec21579f24d4fd8a9cbf432\n" }, { "commit": "6962e8afa2de51821c6392df6ae08d8ebec64299", "tree": "41a43c737bf262e6e264204311229ba6b47db0f3", "parents": [ "2fc2929882c211682219c5ab71f06e5954fc7b53", "ece376d3a4f760b8493e7d7d02f5174d01cdc7d3" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon Jun 18 17:49:41 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jun 18 17:49:41 2018 +0000" }, "message": "Merge \"Remove duplicate test_unmanage_volume test\"" }, { "commit": "e7679f7f2d43e40f2d3399c495fba3e9be476acd", "tree": "a8a7e250b1e6fdc0045c75065b3b2b87a24c1aaa", "parents": [ "6962e8afa2de51821c6392df6ae08d8ebec64299" ], "author": { "name": "Cliff Parsons", "email": "cliff.parsons@att.com", "time": "Sat Jun 16 18:42:29 2018 -0500" }, "committer": { "name": "Cliff Parsons", "email": "cliff.parsons@att.com", "time": "Sun Jun 17 19:47:36 2018 -0500" }, "message": "Fix Neutron-related return values on some list APIs\n\nThere are a handful of APIs in Neutron where instead of returning\nan error code for a disallowed role, it returns an empty list. The\ntest cases for these APIs does not currently handle this.\n\nChange-Id: Ice15b4d27dae72963281a31ba58fee1f373a9690\n" }, { "commit": "35a77113fccfd5659c123adb2cc142836cdd764d", "tree": "b35dbf96aaec39fd83b3d07f7672b3bbbc8b4983", "parents": [ "2fc2929882c211682219c5ab71f06e5954fc7b53" ], "author": { "name": "Cliff Parsons", "email": "cliff.parsons@att.com", "time": "Mon May 07 14:03:40 2018 -0500" }, "committer": { "name": "Cliff Parsons", "email": "cliff.parsons@att.com", "time": "Sun Jun 17 04:37:17 2018 +0000" }, "message": "Add support for handling multiple error codes\n\nPatrole currently cannot handle the scenario where two possible\nerror codes can returned by Neutron policy enforcement for a\nfailed policy check (403 Forbidden and 404 NotFound), depending\non what role is being tested. Patrole framework can only handle\none expected_exception.\n\nThis change builds upon the recent multi-policy support to allow\nthe tester to specify multiple policy actions for one API test.\nFor each policy action, the tester would need to specify an\nerror code that is expected if the action should fail. If multiple\npolicy actions fail, the error code for the first policy action\nthat fails will be expected to be returned from the service.\n\nThis handles the cases in Neutron where Neutron may use a second\npolicy rule to determine whether or not to return a 403 error\ncode or a 404 error code. The tester is expected to list out\nwhich policy rules are being tested by the API endpoint test.\n\nChange-Id: I5cd861e184da90bb27f8ba454c94fa4d4f99c269\nCloses-Bug: #1772710\n" }, { "commit": "2fc2929882c211682219c5ab71f06e5954fc7b53", "tree": "cbd212581aefb64e4f4b99a8769c03a784f6d29c", "parents": [ "ffc1ad8556b3aee842db5345ee4080d8cae7c303" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jun 15 18:26:27 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 16 16:20:16 2018 -0400" }, "message": "Gate fix: Rename Member (legacy) to member role\n\nDue to a recent change [0], Member role is no longer\nbeing found, as it has been renamed to member. This is\ncausing all the member-based gates to fail. Because \"Member\"\nis legacy [1], this patchset uses \"member\" instead of \"Member\"\nduring the devstack Patrole plugin for master. For n-1\nand n-2 releases \"Member\" is still used.\n\nThis patchset also specifies which role was not found in\nthe system while trying to resolve roles CONF.identity.admin_role\nand CONF.patrole.rbac_test_role in order to make debugging\neasier.\n\n[0] https://review.openstack.org/#/c/572243/\n[1] http://git.openstack.org/cgit/openstack-dev/devstack/tree/lib/keystone#n355\n\nChange-Id: I7b59bab164041b26ed8a1a798546e493f22f6edd\n" }, { "commit": "ffc1ad8556b3aee842db5345ee4080d8cae7c303", "tree": "236a15893591e159e1102be706b5971deb3f82b3", "parents": [ "cd61bb685becf1f25f373067d683b1a15824e94a", "57ab8c46f2e2082c71d1e23f96f57472d5e216a0" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Jun 15 02:38:21 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jun 15 02:38:21 2018 +0000" }, "message": "Merge \"Remove duplicate subnet tests fromt test_networks_rbac module\"" }, { "commit": "cd61bb685becf1f25f373067d683b1a15824e94a", "tree": "0eeeb3c8e269f833eebf2531ad02ea7f90ae5a8b", "parents": [ "5da0aad1996835066a038194cd3811c52b222f60", "383960df5710c599334532c0177cbefee9c49d33" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Jun 15 01:27:38 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jun 15 01:27:38 2018 +0000" }, "message": "Merge \"Drop old README file\"" }, { "commit": "5da0aad1996835066a038194cd3811c52b222f60", "tree": "f263e151a5fbb25a57fa050ec4ce695016741ddd", "parents": [ "c9bc9db4b45b8112cee9d8e06304e620d0a5c13c" ], "author": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Tue Jun 12 14:28:50 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Jun 14 11:26:21 2018 -0400" }, "message": "Gate fix: Cap nova-network tests at Queens\n\nNova is working on removing the nova-network only\ncompute REST APIs in the Rocky release, which means\nany requests to those APIs after Queens will result\nin a 410 response, regardless of microversion or\nwhether or not neutron is being used.\n\nThe os-virtual-interfaces API is being removed in\nnova change: https://review.openstack.org/569923/\n\nAs a result, os-virtual-interfaces tests will no longer\nworks against Rocky+ versions of nova.\n\nnova-network tests are skipped by adding\n`depends_on_nova_network \u003d True` to the test class. The\nbase compute API class does a check to determine, based\non the max compute API microversion, which release is\nbeing tested and if Rocky+ the nova-network specific\ntests will be skipped.\n\nSubsequent nova-network specific tests will be skipped\nas the API removal changes are proposed in nova.\n\nRelated to blueprint remove-nova-network\n\nChange-Id: I1d8d9aba6f44ee451e8e4d93a3e5bf5e70f7bbb3\n" }, { "commit": "c9bc9db4b45b8112cee9d8e06304e620d0a5c13c", "tree": "651896d395176ecd9b15f367a842e553beac81fb", "parents": [ "8d99172e2a55a2292ea0b733b43a4a7daefe5af3", "3056b9865bae5920dbd82e38f7b981fd497381d6" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sun Jun 10 18:04:38 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sun Jun 10 18:04:38 2018 +0000" }, "message": "Merge \"Wait for interface to detach for all interface tests\"" }, { "commit": "383960df5710c599334532c0177cbefee9c49d33", "tree": "096bb1e83730d2898933c7ad01a9d26489309d07", "parents": [ "8d99172e2a55a2292ea0b733b43a4a7daefe5af3" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Jun 10 13:39:05 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Jun 10 13:39:05 2018 -0400" }, "message": "Drop old README file\n\nThis patchset drops an old README file (not the main README file)\nthat contains no content. If we want to include README content\nunder patrole_tempest_plugin package we can do so later, but we\nshould not keep an empty documentation page around for nothing.\n\nChange-Id: I7e524e849a02732e70c5109795f422ac7f7cba25\n" }, { "commit": "8d99172e2a55a2292ea0b733b43a4a7daefe5af3", "tree": "ba9a5c083444429aa535903b9fa442abd4e31fb0", "parents": [ "d0ddf7d45044b2c8a9395a8f0df0c6c6adec9399", "8251477dde1d12d9b325ed3f9ab8caa047f25b93" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sun Jun 10 05:11:29 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sun Jun 10 05:11:29 2018 +0000" }, "message": "Merge \"Refactor `test_confirm_resize_server` to pass for all roles\"" }, { "commit": "ece376d3a4f760b8493e7d7d02f5174d01cdc7d3", "tree": "a532d787b8c228fc5d1040eb9f9a696bcbce1ac1", "parents": [ "9f42552b1aeb615cc7c705156fe0392184e581e8" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 23:01:55 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 23:01:55 2018 -0400" }, "message": "Remove duplicate test_unmanage_volume test\n\nThis patchset removes the duplicate test_umanage_volume test\nfrom test_volume_actions_rbac [0] because it is more appropriate\nto keep it in test_volumes_manage_rbac [1]. Besides the latter\nimplementation is more robust.\n\n[0] https://github.com/openstack/patrole/blob/1f2ba24f4df09ba3711aa520bdf1bedb63e7797a/patrole_tempest_plugin/tests/api/volume/test_volume_actions_rbac.py#L147\n[1] https://github.com/openstack/patrole/blob/7676a21077b5d8078f5beb32f7186970f02fc1a1/patrole_tempest_plugin/tests/api/volume/test_volumes_manage_rbac.py#L113\n\nChange-Id: I96705df2cfaf9e0885e53de15675581508dd7c3c\n" }, { "commit": "57ab8c46f2e2082c71d1e23f96f57472d5e216a0", "tree": "f0f44d49c174213c7649318287668bb5d234ff8b", "parents": [ "9f42552b1aeb615cc7c705156fe0392184e581e8" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 22:16:59 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 22:16:59 2018 -0400" }, "message": "Remove duplicate subnet tests fromt test_networks_rbac module\n\nThis patchset simply removes duplicate subnet tests from\ntest_networks_rbac [0] as they are already covered in\ntest_subnets_rbac [1].\n\n[0] e.g. https://github.com/openstack/patrole/blob/d0ddf7d45044b2c8a9395a8f0df0c6c6adec9399/patrole_tempest_plugin/tests/api/network/test_networks_rbac.py#L300\n[1] e.g. https://github.com/openstack/patrole/blob/d0ddf7d45044b2c8a9395a8f0df0c6c6adec9399/patrole_tempest_plugin/tests/api/network/test_subnets_rbac.py#L42\n\nChange-Id: Iea9eb984b06ab49822cf56021df3739c30a97d03\n" }, { "commit": "3056b9865bae5920dbd82e38f7b981fd497381d6", "tree": "659de49873f7c41fcff42b192351982d4d48d99d", "parents": [ "ea1c9e7cffb4b822d510d46dcaef76fab5999f20" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 23:23:49 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 15:21:01 2018 +0000" }, "message": "Wait for interface to detach for all interface tests\n\nThis patchset waits for interfaces to detach during\ntest clean up in MiscPolicyActionsNetworkRbacTest.\nThis is a follow up to [0], which missed clean up\nfor certain tests.\n\n[0] I7b1a095bb73f4814b756f9493f9e353a8f98e7da\n\nChange-Id: I041aaa7dce53f920b014c1cb586dc6bb3c10b489\n" }, { "commit": "d0ddf7d45044b2c8a9395a8f0df0c6c6adec9399", "tree": "8b991d5ac23c25a11f016af284098de25dbcb5b4", "parents": [ "ea1c9e7cffb4b822d510d46dcaef76fab5999f20" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 02:04:11 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 14:44:08 2018 +0000" }, "message": "Add RBAC tests for identity v3 application credentials API\n\nThis patchset adds RBAC tests for identity v3 application\ncredentials API [0], which enforces the following policies: [1].\n\n[0] https://developer.openstack.org/api-ref/identity/v3/index.html#application-credentials\n[1] https://github.com/openstack/keystone/blob/master/keystone/common/policies/application_credential.py\n\nChange-Id: I986e245a0bf7c4c37089a4a2dae7d9067c74162b\n" }, { "commit": "8251477dde1d12d9b325ed3f9ab8caa047f25b93", "tree": "23f63cb781bc8894719341232fe48009faad09b1", "parents": [ "ea1c9e7cffb4b822d510d46dcaef76fab5999f20" ], "author": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Thu May 31 15:19:04 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 14:43:49 2018 +0000" }, "message": "Refactor `test_confirm_resize_server` to pass for all roles\n\n`test_confirm_resize_server` fails for roles that do not have\npermission to perform the confirm resize API. It fails since\nthe cleanup tries to resize a server that is already in the resized\nstate [1]. This PS conditionally adds resize to addCleanup based on the\nstate of the server.\n\n[1] `Details: {u\u0027message\u0027: u\"Cannot \u0027resize\u0027 instance\ncb7c5ddc-959e-4238-9f79-a1963e60228f while it is in vm_state resized\",\nu\u0027code\u0027: 409}`\n\nChange-Id: I1abb13742ed931f15d6ae18ccdc6d790b41a02bf\n" }, { "commit": "ea1c9e7cffb4b822d510d46dcaef76fab5999f20", "tree": "3696d739de5d724192dded484984cd408dae11de", "parents": [ "3c9da68af76c27430224715a3e1e7ce6aba90a8e", "66d54a926674c1c60a2c0f3586b3dd6e938e2b89" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 09 14:27:06 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 09 14:27:06 2018 +0000" }, "message": "Merge \"Docs: Add requirements authority module to documentation\"" }, { "commit": "3c9da68af76c27430224715a3e1e7ce6aba90a8e", "tree": "3bd9d0c49de9506bcd67067f031764376b0a2ba7", "parents": [ "9c40f77e19df40ae0c4b2109aa3762705a1b6683", "778b7805483626ebcbd93614b21aa4b99951fc04" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 09 05:10:36 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 09 05:10:36 2018 +0000" }, "message": "Merge \"Add docstrings for requirements_authority module\"" }, { "commit": "66d54a926674c1c60a2c0f3586b3dd6e938e2b89", "tree": "10f62e507af036b8bdc8b968b981516d59bb133a", "parents": [ "9f42552b1aeb615cc7c705156fe0392184e581e8" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 20:08:35 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Jun 09 00:30:30 2018 -0400" }, "message": "Docs: Add requirements authority module to documentation\n\nThis patchset includes documentation on the rbac_authority\nand the requirements_authority modules. In addition,\nthe documentation for the policy_authority module is\nexpanded. All 3 modules are explained together, explaining\nthat the rbac_authority module contains an abstract\nclass consumed by the classes in the other two modules.\n\nThe use cases for each validation approach is also included\nin the documentation.\n\nFinally, some documentation syntax issues are corrected.\n\nChange-Id: I33bbe2da67683faafd0749b687b99237ac815009\n" }, { "commit": "9c40f77e19df40ae0c4b2109aa3762705a1b6683", "tree": "21fa431b8de191d3f7fefe66ba349cf96de1f636", "parents": [ "9f42552b1aeb615cc7c705156fe0392184e581e8", "ac3e85d89f393da48496d37983d72e8a3fe6f0cc" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 09 04:25:02 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 09 04:25:02 2018 +0000" }, "message": "Merge \"Move VirtualInterfacesRbacTest into separate module\"" }, { "commit": "9f42552b1aeb615cc7c705156fe0392184e581e8", "tree": "03e0c15739d4a98b47f7abbf19756e78017eb64b", "parents": [ "55eeb3e6429a4d5ad7dc37f7449fa7371540a815", "31e308ecab6c6933b4e2830b53167416e867966c" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 09 04:20:14 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 09 04:20:14 2018 +0000" }, "message": "Merge \"Move RbacAuthority class into separate module\"" }, { "commit": "55eeb3e6429a4d5ad7dc37f7449fa7371540a815", "tree": "88f95132a29d692a2d54cb0c5d86a003874a2eea", "parents": [ "39c66416c462aba747f61afe8b5f9b775aae1e5e", "44d77848b5e1be53072281f77e6324cde15c3caa" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 09 03:46:26 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 09 03:46:26 2018 +0000" }, "message": "Merge \"Update rbac_rule_validation for multi-policy support\"" }, { "commit": "39c66416c462aba747f61afe8b5f9b775aae1e5e", "tree": "7119255f560f1e0beee197b4f5124eb32ee8d629", "parents": [ "c73b492669ce2d6f11efc71661603bb0e576ceba", "97117b0cc1b6c0f2462a66951bfbee2ee6310041" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Sat Jun 09 03:40:02 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jun 09 03:40:02 2018 +0000" }, "message": "Merge \"Fix typos for custom requirements config options descriptions\"" }, { "commit": "bc865dfecc319cbca8aeb31687ee0ba6dcea9d12", "tree": "efde286d198ca6e5fb2342adada85c6c9b8c7fd9", "parents": [ "9ae705db1631172db370c2be48aeebc4f9a0b085" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jun 08 19:47:28 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jun 08 21:36:27 2018 -0400" }, "message": "Fix test_volume_upload BadRequest error\n\nThis patchset fixes test_volume_upload raising a BadRequest\ndue to visibility being passed to upload_volume which is\nunexpected [0]. That is because this param is only\navailable for microversion 3.1+ [1].\n\nThe issue is fixed by moving the test into the 3.1 microversion\ntest class: VolumesActionsV310RbacTest.\n\n[0] http://logs.openstack.org/83/571383/2/check/patrole-multinode-admin/ccceab5/job-output.txt.gz#_2018-05-31_15_38_44_698855\n[1] https://github.com/openstack/cinder/blob/7d95fb79c42bdeeb82900b41acc70dead8a2ee6f/cinder/api/schemas/volume_actions.py#L150\n\nChange-Id: Ic92504cb0442e47eea3c0e5345498ecb49ffe44f\n" }, { "commit": "c73b492669ce2d6f11efc71661603bb0e576ceba", "tree": "75191271ec7fad06ded3ea15cc5f5a4fdffb4a34", "parents": [ "41e4d002ecebdccfb9a6a13fcbfce88cbb4a31d3", "94fc2ca66d1bce8eacab1f416fba3fd5ed2e50a5" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Jun 08 19:36:04 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jun 08 19:36:04 2018 +0000" }, "message": "Merge \"[trivial] Update short-hand doc reference with real link\"" }, { "commit": "2880cad79c8c2bd090fc5387477f1c5f210d7500", "tree": "38bb06ef19553b2a77d2dd85ec38331a2fee101e", "parents": [ "f1ba5ae05ce075b30b2824f2631caa6ea2357f9b" ], "author": { "name": "Chi Lo", "email": "cl566n@att.com", "time": "Fri May 25 05:09:41 2018 -0500" }, "committer": { "name": "Chi Lo", "email": "cl566n@att.com", "time": "Mon Jun 04 16:21:10 2018 +0000" }, "message": "Remove RBAC test_volume_list_image_metadata test case\n\nRemove the test_volume_list_image_metadata test case as it duplicates with\ntest_list_volumes_details_image_metadata in test_volume_metadata_rbac.py. Also,\ntest_volume_list_image_metadata does not test list image metadata correctly\nsince the volume_image_metadata attribute has never been created in the first\nplace.\n\nChange-Id: I07c3971f5bdb4255105612538e58c79d69daa691\n" }, { "commit": "ac3e85d89f393da48496d37983d72e8a3fe6f0cc", "tree": "8516f93aae7de7fc8ae4cf05aafaaa86e51282fd", "parents": [ "9ae705db1631172db370c2be48aeebc4f9a0b085" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 23:27:46 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 23:27:46 2018 -0400" }, "message": "Move VirtualInterfacesRbacTest into separate module\n\nThis patchset moves VirtualInterfacesRbacTest into a separate\nmodule as its presence in test_server_misc_policy_actions_rbac\nwas out of place, as the class just tests virtual interfaces.\n\nChange-Id: I025e7cc318f4de149438bf838d28dae6e9ddeef7\n" }, { "commit": "778b7805483626ebcbd93614b21aa4b99951fc04", "tree": "3181616a81af708147e0fa0dc90ff5ba8373be87", "parents": [ "9ae705db1631172db370c2be48aeebc4f9a0b085" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 19:52:58 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jun 01 00:50:02 2018 +0000" }, "message": "Add docstrings for requirements_authority module\n\nThis patchset adds docstrings for the requirements_authority\nmodule. Also corrects some docstring syntax issues (and deprecated\ndocstring references) in rbac_rule_validation.\n\nChange-Id: I071cbf53e2c0e819e56e485d2434a30de6793077\n" }, { "commit": "31e308ecab6c6933b4e2830b53167416e867966c", "tree": "ecc053dd6bebcbc799697fd84cf80b51302cc85b", "parents": [ "9ae705db1631172db370c2be48aeebc4f9a0b085" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue May 22 12:05:10 2018 -0700" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu May 31 19:07:15 2018 -0400" }, "message": "Move RbacAuthority class into separate module\n\nThis patchset simply moves the RbacAuthority abstract base class\ninto its own module for better code organization.\n\nChange-Id: I89bee142671645f304d622b9e6c25fbab745a7e2\n" }, { "commit": "f1ba5ae05ce075b30b2824f2631caa6ea2357f9b", "tree": "d25ba67acc1aab2895658f3dff45b5c1a7a35aa1", "parents": [ "7cd216194b173a9ee9f8dc42961d3cec1dbd3cb7" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue May 22 14:19:29 2018 -0700" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed May 30 02:09:48 2018 +0000" }, "message": "Wait for interface to detach for required tests\n\nThis patchset waits for interfaces to detach during\ntest clean up in MiscPolicyActionsNetworkRbacTest test\nclass to avoid errors like [0], caused by data races\non server/network clean up.\n\n[0] http://logs.openstack.org/27/570027/1/check/patrole-member/f4f69c3/job-output.txt.gz#_2018-05-22_20_13_22_117128\n\nDepends-On: If23bd5947dea345b30a77bc83c5b3dbfa5a4267b\nChange-Id: I7b1a095bb73f4814b756f9493f9e353a8f98e7da\n" }, { "commit": "97117b0cc1b6c0f2462a66951bfbee2ee6310041", "tree": "d9caaf95787844d110705942d8f15dad5e91b907", "parents": [ "1f2ba24f4df09ba3711aa520bdf1bedb63e7797a" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed May 23 16:31:23 2018 -0700" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed May 23 16:38:11 2018 -0700" }, "message": "Fix typos for custom requirements config options descriptions\n\nThis simply corrects some types for the custom requirements-related\nconfig options\u0027 descriptions.\n\nChange-Id: Ibcf4ef0895b365ad75a6714a9a9ec6445037422d\n" }, { "commit": "7cd216194b173a9ee9f8dc42961d3cec1dbd3cb7", "tree": "0f9a64e59a1b671f7b38a73ba27c76321f080299", "parents": [ "1f2ba24f4df09ba3711aa520bdf1bedb63e7797a" ], "author": { "name": "melissaml", "email": "ma.lei@99cloud.net", "time": "Wed May 23 21:00:50 2018 +0800" }, "committer": { "name": "melissaml", "email": "ma.lei@99cloud.net", "time": "Wed May 23 21:00:50 2018 +0800" }, "message": "fix typos in documentation\n\nChange-Id: Ib35eda5520456a1ecdb02c40c8e90f6f8d7f9269\n" }, { "commit": "94fc2ca66d1bce8eacab1f416fba3fd5ed2e50a5", "tree": "c845c460dbd8d33357a1e128000fc22136eee91a", "parents": [ "1f2ba24f4df09ba3711aa520bdf1bedb63e7797a" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue May 22 12:08:43 2018 -0700" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue May 22 12:08:43 2018 -0700" }, "message": "[trivial] Update short-hand doc reference with real link\n\nThis patchset simply updates a short-hand doc reference to a\nKeystone function in a module with the actual link to the\nfunction that points the precise line of code.\n\nChange-Id: I250e96dcb77b7e210768c18c2051732c163fff7d\n" }, { "commit": "44d77848b5e1be53072281f77e6324cde15c3caa", "tree": "0f85a812de79f1092ece6d3ab9a30e5ac4572829", "parents": [ "1f2ba24f4df09ba3711aa520bdf1bedb63e7797a" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Mar 21 02:42:59 2018 +0000" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon May 21 22:26:36 2018 +0000" }, "message": "Update rbac_rule_validation for multi-policy support\n\nIntroduces foundational logic needed for multi-policy support\nto rbac_rule_validation module. Patrole now offers support for\nmultiple policies. The ``rules`` argument has been added to the\n``rbac_rule_validation.action`` decorator, which takes a list of\npolicy names which Patrole will use to determine the expected test\nresult. This allows Patrole to more accurately determine\nwhether RBAC is configured correctly, since some API endpoints\nenforce multiple policies.\n\nThe new ``rules`` argument is implemented for\ntest_unlock_server_override test which corresponds to [0]\nwhich enforces:\n\n rules\u003d[\"os_compute_api:os-lock-server:unlock:unlock\",\n \"os_compute_api:os-lock-server:unlock:unlock_override\"]\n\nwhich is set for this test.\n\nThe ``rule`` argument in the ``rbac_rule_validation.action``\ndecorator has been deprecated in favor of ``rules``.\n\nThe following will be carried out in additional follow up patches:\n\n * Renaming rule to rules\n * Adding multi-policy support carefully for selected APIs\n to be tracked via an etherpad\n * Updating Patrole documentation with multi-policy support\n details\n\n[0] https://github.com/openstack/nova/blob/0ab78890c155f0b6ffc7c4148b26642f47aa7070/nova/api/openstack/compute/lock_server.py#L42\n\nPartially Implements: bp rbac-testing-multiple-policies\nChange-Id: Iec651aff1c1ef6acda19bcad2f57720f1dd3f8a0\n" }, { "commit": "1f2ba24f4df09ba3711aa520bdf1bedb63e7797a", "tree": "beccd46f0001b7f6ba49903fe9cbbe23a1ef2902", "parents": [ "0fe1d0dc79ebefe2fec89d4c3cd1e6d6db27c12f", "4c3ae9bd25022a423320b4df25fbf54ce8173459" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon May 21 17:10:35 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon May 21 17:10:35 2018 +0000" }, "message": "Merge \"Make patrole-member job run for queens and pike branches\"" }, { "commit": "0fe1d0dc79ebefe2fec89d4c3cd1e6d6db27c12f", "tree": "b7ce23ec5ab87a54ea5d2cad4b2251c08b8306a6", "parents": [ "948f119a40f03527a4c8eb925bb22530a9f2abe3", "739041fb9c0018326baa55098e6d1a381e08c87c" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon May 21 17:10:34 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon May 21 17:10:34 2018 +0000" }, "message": "Merge \"feature flag: Policy feature enabled config group\"" }, { "commit": "4c3ae9bd25022a423320b4df25fbf54ce8173459", "tree": "c7c4d2dc2dc784a45ba0fc44c5ba22fe401a55fd", "parents": [ "739041fb9c0018326baa55098e6d1a381e08c87c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Feb 25 18:33:32 2018 +0000" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat May 19 15:25:17 2018 +0000" }, "message": "Make patrole-member job run for queens and pike branches\n\nThis makes patrole-member job run for queens and pike branches.\nArguably it is also important to do this for admin role, but\nfor now we will verify stability with Member role before extending\nto admin role.\n\nChange-Id: I76c4a9b8737bf94f230ab141def652b054120f3b\n" }, { "commit": "739041fb9c0018326baa55098e6d1a381e08c87c", "tree": "04a63d0e9fb34277f977db98a3a209078ec20bd4", "parents": [ "58515edc32a704503155b18d5904c6d96261b3d0" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Mar 25 00:24:03 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat May 19 16:24:33 2018 +0100" }, "message": "feature flag: Policy feature enabled config group\n\nA new configuration group ``[policy_feature_enabled]`` has been added to\nPatrole which will be responsible for collecting the feature flags to be\nused for newly introduced policies or policies that were changed in a\nbackwards-incompatible way.\n\n * create_port_fixed_ips_ip_address_policy (Neutron)\n * update_port_fixed_ips_ip_address_policy (Neutron)\n * limits_extension_used_limits_policy (Cinder)\n * volume_extension_volume_actions_attach_policy (Cinder)\n * volume_extension_volume_actions_reserve_policy (Cinder)\n * volume_extension_volume_actions_unreserve_policy (Cinder)\n\nThese feature flags will be supported until Pike release cycle\nis EOL.\n\nThe motivation behind these feature flags is [0] which adds\nPike/Queens gating to Patrole. However, in Queens, Neutron\nand Cinder renamed or removed a few policies in a backwards-\nincompatible way. These policies can be reviewed here: [1].\n\nThis PS requires another PS [2] in devstack\u0027s lib/tempest\nbecause Patrole, being a branchless project and hosting the\nPatrole devstack plugin itself, must fall back to Tempest\u0027s\ndevstack script to list out the backwards-incompatible\npolicies in Pike.\n\nA documentation update will also come in a follow up with\ninformation on these feature flags.\n\n[0] I76c4a9b8737bf94f230ab141def652b054120f3b\n[1] e.g. http://logs.openstack.org/51/547851/4/check/patrole-member-pike/139c534/job-output.txt.gz#_2018-03-22_21_46_08_392229\n[2] I00bdeff9474c54d38b6d6844a041b305bec01ad8\n\nChange-Id: Ia0d9847908a8e723446c16465d68cd7f622c04cc\n" }, { "commit": "948f119a40f03527a4c8eb925bb22530a9f2abe3", "tree": "7350cd625889cfe428ec4d38d6007e40c8721065", "parents": [ "7c0fdd17286eb2a10bfd3e8fc8d04346538c7144", "3896908b076c9f0290e52919bd118045f0faaf0e" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon May 14 21:33:08 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon May 14 21:33:08 2018 +0000" }, "message": "Merge \"Create or attach interface should use specific network\"" }, { "commit": "7c0fdd17286eb2a10bfd3e8fc8d04346538c7144", "tree": "7daafd611ddecda06c90a00e8f7eb964d33bdf77", "parents": [ "58515edc32a704503155b18d5904c6d96261b3d0", "6c0f40afa8ff1a46cab1cf9986ae0251cfe61d89" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon May 14 21:33:08 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon May 14 21:33:08 2018 +0000" }, "message": "Merge \"Add waiters to Nova tests to prevent tearDown failures\"" }, { "commit": "3896908b076c9f0290e52919bd118045f0faaf0e", "tree": "0d745d2c1afc5b1a953970ba608fc844e20b5a0e", "parents": [ "58515edc32a704503155b18d5904c6d96261b3d0" ], "author": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Mon Apr 30 17:21:53 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed May 09 16:41:10 2018 +0000" }, "message": "Create or attach interface should use specific network\n\nIn deployments with multiple networks, tests that create or attach an interface\nwill fail for the following reason:\n\n\"Multiple possible networks found, use a Network ID to be more specific.\"\n\nTo fix this, the tests should use the network created in the resource_setup\n\nChange-Id: I10dc91252244fe05b513891ee8871965d398d351\n" }, { "commit": "72ecaa2fd67bb1dca2615e358bcb32a6016ee396", "tree": "5ace5f110bfc821f3b5fd7d9353ff92ec84ce09e", "parents": [ "352f80408d6491f8eee855f7d4e5b7c4558ca2ed", "05c859782a0a2e193dc0a5e8316d6a53dfbdc2ed" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon May 07 18:40:05 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon May 07 18:40:05 2018 +0000" }, "message": "Merge \"[TrivialFix] Use tempest.config instead of oslo_config.cfg\"" }, { "commit": "6c0f40afa8ff1a46cab1cf9986ae0251cfe61d89", "tree": "b611444425c4c829509471f8e2a607b2b413c149", "parents": [ "352f80408d6491f8eee855f7d4e5b7c4558ca2ed" ], "author": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Mon May 07 11:42:59 2018 -0400" }, "committer": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Mon May 07 11:53:58 2018 -0400" }, "message": "Add waiters to Nova tests to prevent tearDown failures\n\n\u0027test_rescue_server\u0027 and \u0027test_unrescue_server\u0027 consistently cause\ntearDownClass failures with the following failure message:\n\n\u0027Resource \u003cserver_uuid\u003e failed to delete and is in ERROR status\u0027\n\nBy adding waiters, this issue is mitigated.\n\nChange-Id: Ia1d9e1e07370f5c1e4c86f14d96c342f9c41a817\n" }, { "commit": "352f80408d6491f8eee855f7d4e5b7c4558ca2ed", "tree": "09d9b7531e91fe64350305d269f39b1cc1c7f75b", "parents": [ "65c401e35b9229b8f0a03ca710f25b936b27221c", "af81f05c8252ebd7268e718e26806078bfafe933" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon May 07 11:14:54 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon May 07 11:14:54 2018 +0000" }, "message": "Merge \"Add skip check to \u0027test_update_volume_attachment\u0027\"" }, { "commit": "65c401e35b9229b8f0a03ca710f25b936b27221c", "tree": "81b8ccc2cc79024525a39b372729dbef5dd74986", "parents": [ "d737199e29e7d8a3de261ebfa2ea22dcba97e7dd", "7dec8730308d7bffb5dec6fd00a9574b21b1733f" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon Apr 30 21:27:41 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Apr 30 21:27:41 2018 +0000" }, "message": "Merge \"Always use correct host for aggregates test suite\"" }, { "commit": "af81f05c8252ebd7268e718e26806078bfafe933", "tree": "0e19122a09e516d9cbbb9e972dd3b7371f312a7b", "parents": [ "d0c69296ba332a1f1ea83ae4247fc39320ce09e4" ], "author": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Mon Apr 30 15:29:39 2018 -0400" }, "committer": { "name": "Rick Bartra", "email": "rb560u@att.com", "time": "Mon Apr 30 15:29:39 2018 -0400" }, "message": "Add skip check to \u0027test_update_volume_attachment\u0027\n\nCheck tempest.conf to see if \u0027swap_volume\u0027 is enabled in\n\u0027compute-feature-enabled\u0027. If \u0027swap_volume\u0027 is set to False,\nthen skip \u0027test_update_volume_attachment\u0027\n\nChange-Id: Ieaf2f035080264d3a78fc0417d421a17e15056d3\n" }, { "commit": "d737199e29e7d8a3de261ebfa2ea22dcba97e7dd", "tree": "c6070b8bd005d385997661a512d95c497aa80b38", "parents": [ "d0c69296ba332a1f1ea83ae4247fc39320ce09e4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Apr 25 16:57:09 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Apr 25 16:57:09 2018 +0100" }, "message": "Rephrase Patrole skip message for better sorting\n\nThis is a trivial fix that is meant to address a quality of life\nissue around sorting test results.\n\nThis addresses essentially the following concern:\n\nWe are starting to run Patrole and we are finding that it has a\nlot different messages. We should reverse the message so they sort\nbetter.\n\nChange-Id: I3b5e2d9b1a9d1425982260e910a861d822625b06\n" }, { "commit": "7dec8730308d7bffb5dec6fd00a9574b21b1733f", "tree": "912a9f8908a854c8ebd0c00b65296de062b898d5", "parents": [ "d0c69296ba332a1f1ea83ae4247fc39320ce09e4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Apr 23 21:05:31 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Apr 23 22:29:36 2018 +0000" }, "message": "Always use correct host for aggregates test suite\n\nThis is to always select the correct host for adding and removing\na host to and from an aggregate to make it consistent with the\nTempest implementation which should work for any cloud deployment\n[0].\n\n[0] https://github.com/openstack/tempest/blob/8f323f3dab5a9316170c614c77d621d1078e627a/tempest/api/compute/admin/test_aggregates.py#L42\n\nChange-Id: I62224b28ea8347b66856b0c3812f4c1db2cdde41\n" }, { "commit": "05c859782a0a2e193dc0a5e8316d6a53dfbdc2ed", "tree": "0668066a33176c545bfaeb396b960232f5217b21", "parents": [ "d0c69296ba332a1f1ea83ae4247fc39320ce09e4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Apr 19 21:38:12 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Apr 20 01:39:57 2018 +0000" }, "message": "[TrivialFix] Use tempest.config instead of oslo_config.cfg\n\nThis is to use tempest.config in only 2 test files that use\noslo_config.cfg. This is done for consistency with all other\ntest files and because Tempest\u0027s config loads in plugin config\noptions too so it is better to use it.\n\nChange-Id: Ib360382c4543544d379a51aadcd3d419ef74bcfb\n" }, { "commit": "d0c69296ba332a1f1ea83ae4247fc39320ce09e4", "tree": "9a3455cbf8f0b4369f40bd68154e6ddcfc60c910", "parents": [ "8d29e70c52fe31e44063aff7a85595db892bbda3" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Mar 29 21:53:06 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Apr 13 14:42:11 2018 +0000" }, "message": "Add RBAC tests for identity v3 project tags\n\nThis PS adds RBAC tests for the identity v3 project tags\nAPI [0], whose policies can be found here: [1]. The\ncorresponding Tempest client is implemented in [2].\n\n[0] https://developer.openstack.org/api-ref/identity/v3/index.html#project-tags\n[1] https://github.com/openstack/keystone/blob/19f9937e98473e4fab9f4ee5c86b23a2eaacfe0f/keystone/common/policies/project.py#L98-161\n[2] Iec6b34c10ea1bd7103720c773b48ce130643115d\n\nDepends-On: Iad6b3a88639bb4a0dc3aea5af2ba0162dfa19f96\nChange-Id: I6024fbe89d3d8f673be223bd5a07b1068be12034\n" }, { "commit": "8d29e70c52fe31e44063aff7a85595db892bbda3", "tree": "3a6abe785520ed49779ccc1a985825b3a6ca5c81", "parents": [ "c666eafce3a0a2c31ae3c23c42d1b197052616f2" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Apr 11 05:48:52 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Apr 11 05:48:52 2018 +0100" }, "message": "Fix test_show_server_usage not checking expected attributes\n\nWhile os_compute_api:os-server-usage policy in Nova is deprecated [0]\nthe current test in Patrole should be fixed since it is not\nchecking for expected attributes which are conditionally injected\nfollowing successful policy authorization. See [0] for details\non expected attributes.\n\n[0] https://github.com/openstack/nova/blob/15f1caf98a46ba0ab3f8365075c564e89f06eef3/nova/policies/server_usage.py#L32\n\nChange-Id: Ibc632cc084c2edb58c336f5ff56d2902bf2ccc96\n" }, { "commit": "c666eafce3a0a2c31ae3c23c42d1b197052616f2", "tree": "9c5f6c93068857bec853a185c1625fb59251fd57", "parents": [ "1566bc301b92dedd0a6528fe4d0a8e9a1e8ad4e8", "c330babe84129fd521cd00c5214d4974774d497a" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon Apr 09 22:22:14 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Apr 09 22:22:14 2018 +0000" }, "message": "Merge \"Add max microversion \u003d 2.42 for compute host tests\"" }, { "commit": "1566bc301b92dedd0a6528fe4d0a8e9a1e8ad4e8", "tree": "d57eb903d6cdd067f16746fa8c06de3eed7603f5", "parents": [ "0ad6bde73d77d34bfabaf1a0e1cc1f118f97e6a3", "88d4fc783bcb74e0313315629e0973a7630ef657" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon Apr 09 22:20:54 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Apr 09 22:20:54 2018 +0000" }, "message": "Merge \"Set max microversion for some hypervisor tests to 2.52\"" }, { "commit": "c330babe84129fd521cd00c5214d4974774d497a", "tree": "a2109d8a34f7b638ec0566d7a67ba65dc35b04e5", "parents": [ "8d8e1af35b6baa2bdd592c13168e7e6b1561619a" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Apr 08 15:42:51 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Apr 08 21:09:12 2018 +0000" }, "message": "Add max microversion \u003d 2.42 for compute host tests\n\nThis is to add max_microversion \u003d 2.42 for compute host tests\nas the API in question is deprecated from 2.43 onward [0].\nThis is also consistent with Tempest [1].\n\nAlso adds a test for test_show_host to be consistent with [1] but\nnot any other endpoints as those are too risky to run Patrole side or have\nvarious warnings associated with them in the API documentation [0].\n\n[0] https://developer.openstack.org/api-ref/compute/#hosts-os-hosts-deprecated\n[1] https://github.com/openstack/tempest/blob/28b252f7f61a2dfc585089265cdb3118defbcfff/tempest/api/compute/admin/test_hosts.py#L23\n\nPartially Implements blueprint: clear-deprecated-api\n\nChange-Id: Ifceb5d4656a76bf865f8ef494fc1b093b626cfe0\n" }, { "commit": "88d4fc783bcb74e0313315629e0973a7630ef657", "tree": "6aae4fd389506ee635afad71fe5119f289528e54", "parents": [ "8d8e1af35b6baa2bdd592c13168e7e6b1561619a" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Apr 08 15:26:00 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Apr 08 19:31:56 2018 +0000" }, "message": "Set max microversion for some hypervisor tests to 2.52\n\nThe following tests:\n\n * test_list_servers_on_hypervisor [0]\n * test_search_hypervisor [1]\n\nare deprecated from 2.53 onward. So this is to add max_microversion \u003d 2.52\nfor these tests. This is also consistent with Tempest [2].\n\n[0] https://developer.openstack.org/api-ref/compute/#list-hypervisor-servers\n[1] https://developer.openstack.org/api-ref/compute/#search-hypervisor\n[2] https://github.com/openstack/tempest/blob/28b252f7f61a2dfc585089265cdb3118defbcfff/tempest/api/compute/admin/test_hypervisor.py#L108\n\nPartially Implements blueprint: clear-deprecated-api\n\nChange-Id: Iec782e680e2b3429db325d7b575c3b3b5eb4a8c2\n" }, { "commit": "0ad6bde73d77d34bfabaf1a0e1cc1f118f97e6a3", "tree": "fb3a8f7f2af6aff26d04158c73537f6bfc547cb0", "parents": [ "8d8e1af35b6baa2bdd592c13168e7e6b1561619a" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Apr 05 07:01:46 2018 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Apr 05 16:09:49 2018 +0000" }, "message": "Increase RBAC test coverage for floating ips bulk API\n\nThis PS adds better RBAC test coverage for Nova\nos-floating-ip-pools API, the documentation for which is here: [0].\nThe same policy is enforced for each endpoint: [1]. The\nmax_microversion is 2.35 since the API is deprecated in 2.36\nonward [2]. Only [3] is not tested because there is no\ncorresponding Tempest endpoint in its client.\n\n[0] https://developer.openstack.org/api-ref/compute/#floating-ips-bulk-os-floating-ips-bulk-deprecated\n[1] https://github.com/openstack/nova/blob/master/nova/policies/floating_ips_bulk.py\n[2] https://developer.openstack.org/api-ref/compute/#list-floating-ips\n[3] https://developer.openstack.org/api-ref/compute/#list-floating-ips-by-host\n\nChange-Id: Ie28ee0b4e76e59b9813bf352f03c0cf14fa91616\n" }, { "commit": "8d8e1af35b6baa2bdd592c13168e7e6b1561619a", "tree": "46991da33cddbceacdaf27af87438426849ead37", "parents": [ "668a7f2df76f022dfcb7877510afc8b599634cb2", "b43c486213d7d500e9a568c177facb08692730d0" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Apr 03 14:56:06 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Apr 03 14:56:06 2018 +0000" }, "message": "Merge \"Drop min_microversion \u003d \u00272.10\u0027 from compute test\"" }, { "commit": "668a7f2df76f022dfcb7877510afc8b599634cb2", "tree": "369b639dddef39ea37e0fcb8b2c0178d09c666e6", "parents": [ "3d8623d400ecb733ab7d4d23c076e221396d2fd8", "04352eaf4beedba889f523f4d8d945092c16bc13" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Apr 03 14:56:05 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Apr 03 14:56:05 2018 +0000" }, "message": "Merge \"Set max_microversion 2.43 for virtual_interfaces tests\"" }, { "commit": "04352eaf4beedba889f523f4d8d945092c16bc13", "tree": "a66fd7f3de5357f328edf8681cc28b8d5503ad0b", "parents": [ "d085c4617c18030c284bd39a27f3c1817189c1c4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Mar 31 15:23:36 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Mar 31 15:27:40 2018 -0400" }, "message": "Set max_microversion 2.43 for virtual_interfaces tests\n\nThe compute os-virtual-interfaces API is deprecated from the\nMicroversion 2.44, so we should set max_microversion \u003d \u00272.43\u0027\nfor compute virtual_interfaces tests.\n\nThis is based on work in Tempest [0].\n\n[0] Ie1793802fa33898ffbdad16b58b085894e66d4d1\n\nPartially Implements blueprint: clear-deprecated-api\n\nChange-Id: Ib63bab15d4690d23f7ffbd8724ec1351929b94c5\n" }, { "commit": "3d8623d400ecb733ab7d4d23c076e221396d2fd8", "tree": "09ed93ac1b948426a22d8bb1a42632502229e756", "parents": [ "d085c4617c18030c284bd39a27f3c1817189c1c4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Mar 31 15:13:47 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Mar 31 15:14:19 2018 -0400" }, "message": "Fix: Set max_microversion to 2.38 for image metadata compute tests\n\nThis is to set the max_microversion to 2.38 for image metadata\ncompute tests which is a deprecate Glance proxy API deprecated\nin 2.39. The code incorrectly includes it under the max_microversion\nfor the image proxy API whose max_microversion is 2.35. However,\n2.38 is the correct microversion for image metadata tests,\nnot 2.35, which is for image tests.\n\nFor details, see: Ic6cc22f048c2ccd427dfe6e6aea0273128d96592\n\nPartially Implements bp: clear-deprecated-api\nChange-Id: Ia97f55b2004e5fa8abbab0365b6482cf42bda738\n" }, { "commit": "b43c486213d7d500e9a568c177facb08692730d0", "tree": "a6d2ccc2e842628cc7fe97e0de0599348370e0e0", "parents": [ "d085c4617c18030c284bd39a27f3c1817189c1c4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Mar 31 14:59:04 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Mar 31 14:59:04 2018 -0400" }, "message": "Drop min_microversion \u003d \u00272.10\u0027 from compute test\n\nThis is to drop min_microversion \u003d \u00272.10\u0027 from compute tenant\nnetwork test to better align with [0] and because it is not\nneeded.\n\n[0] I3432f75e100fbeda21404d66f9ab0feeb29931f3\n\nChange-Id: Ic0408b5320388d4f14544e8384f31a95f4905320\n" }, { "commit": "d085c4617c18030c284bd39a27f3c1817189c1c4", "tree": "0c2e269218f62b36cbfccb4fad640e08e1a4e6d6", "parents": [ "dd79eb232fe92e6fc208d0fc8d8ca632e31a5f31", "445c48b6c8225521a37f1ac580c2429f98197e31" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Thu Mar 29 19:52:05 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Mar 29 19:52:05 2018 +0000" }, "message": "Merge \"RBAC test for Keystone v3 OS-ENDPOINT-POLICY API\"" }, { "commit": "445c48b6c8225521a37f1ac580c2429f98197e31", "tree": "e598d83ce160cbc3f85ee8ce25aaaeb2b0d41224", "parents": [ "5ca7ada87b319f4371dba58f89671030d1729b3b" ], "author": { "name": "Rao Adnan Khan", "email": "rk221s@att.com", "time": "Mon Apr 24 23:41:41 2017 -0500" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Mar 29 02:25:37 2018 +0000" }, "message": "RBAC test for Keystone v3 OS-ENDPOINT-POLICY API\n\nAdded RBAC test cases to verify access permission for endpoint to policy\nand service to policy association API. Actions covered here include put,\nget and delete.\n\nCo-Authored-By: Felipe Monteiro \u003cfelipe.monteiro@att.com\u003e\n\nDepends-On: I4af1e4862a17216d65446e8c29bd1b886f5d8c24\nChange-Id: Ib268ab8b6b4800f66359d9fee3b3291ff651e095\n" }, { "commit": "2fe986dbb6c7812438b82968ff078dcc66750e74", "tree": "a5c037bd8a5fce1f005e2e5d9c772978acfcaba0", "parents": [ "a1db761f098c8e17c698f3fa37d7692e7b3d0069" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Mar 20 21:53:51 2018 +0000" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Mar 27 22:10:38 2018 +0000" }, "message": "Add functools.wraps decorator to rbac_rule_validation\n\nThis adds functools.wraps [0] to rbac_rule_validation decorator.\n\"This takes a function used in a decorator and adds the functionality\nof copying over the function name, docstring, arguments list, etc.\" which\nis quite convenient [1].\n\nAlso stops adding the role as a testcase attribute which can cause\nfiltering issues via regular expressions when the role doesn\u0027t match\nthe role in tempest.conf under ``[patrole].rbac_test_role``.\n\n[0] https://docs.python.org/2/library/functools.html#functools.wraps\n[1] https://stackoverflow.com/questions/308999/what-does-functools-wraps-do\n\nChange-Id: I8fde00e4f9332ba9b9ea94edc714d87ab9e1b851\n" }, { "commit": "a1db761f098c8e17c698f3fa37d7692e7b3d0069", "tree": "e92a21258b3c004b63951b471b90039298f0d7cd", "parents": [ "5ca77494c880232c940a38127e4fdbca10435694", "4ef7e5309c61583fb2a6e48777188aff06620227" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Mar 27 01:25:48 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 27 01:25:48 2018 +0000" }, "message": "Merge \"Remove already-deprecated strict_policy_check option\"" }, { "commit": "5ca77494c880232c940a38127e4fdbca10435694", "tree": "81f7fe692f0201fb61d823016a7df42b7d0e7603", "parents": [ "f1c6757160d89c7115fda36383f2c3846544d04e", "1c8620af7a9cf5b2bf7336592b42bb86d3e44c21" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Mon Mar 26 23:04:26 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Mar 26 23:04:26 2018 +0000" }, "message": "Merge \"Remove deprecated switch_role method\"" }, { "commit": "4ef7e5309c61583fb2a6e48777188aff06620227", "tree": "0a3c947eabf100b82d2b797c4187891efa287ef0", "parents": [ "f1c6757160d89c7115fda36383f2c3846544d04e" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Mar 11 07:17:11 2018 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Mar 26 19:44:15 2018 +0100" }, "message": "Remove already-deprecated strict_policy_check option\n\nThe option ``[patrole].strict_policy_check`` was deprecated\nduring the last release cycle (Queens). This was because the\noption could be set to False in order to skip tests which\nmight result in false positives.\n\nThis PS, then, removes strict_policy_check references in the code,\nupdates documentation, and adds a releasenote.\n\nChange-Id: I7f7eda39c0472bd3d70892c801fc4d14db0c0426\n" } ], "next": "f1c6757160d89c7115fda36383f2c3846544d04e" }