)]}' { "log": [ { "commit": "6dc6040afd72561169aad27abd6ccba65523f932", "tree": "fda90d7a141b828edf7e3b4aa5bca796e40eb390", "parents": [ "03a3d878d02b1050a4fb6d0a9431171b9d40be55", "c0188efba4c908b0a9c305b3c6669eefd14a7d75" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Oct 05 22:02:27 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Oct 05 22:02:27 2017 +0000" }, "message": "Merge \"Clean up identity base class resources via addClassResourceCleanup\"" }, { "commit": "03a3d878d02b1050a4fb6d0a9431171b9d40be55", "tree": "ba75968a59eba3dbfd40f0fb9e48ea00d4020e1d", "parents": [ "2cb5da9c397a029931d53a527ea65b7cd94e5bf1", "0dd58e79879722f18491213e9384c6edf6bdd54a" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Oct 05 21:59:28 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Oct 05 21:59:28 2017 +0000" }, "message": "Merge \"Clean up network class resources via addClassResourceCleanup\"" }, { "commit": "c0188efba4c908b0a9c305b3c6669eefd14a7d75", "tree": "f208107d5ca0bd04c5a3401fb3effe41cc97d876", "parents": [ "7a9b3e27619d16f6ad7c129b08ff9b9fac087b9f" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Oct 04 02:06:36 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Oct 04 02:06:36 2017 +0100" }, "message": "Clean up identity base class resources via addClassResourceCleanup\n\nThis PS cleans up identity base class resources via\naddClassResourceCleanup.\n\nChange-Id: If855b67414298d4c43c57bfaa9019d39ace7776f\n" }, { "commit": "2cb5da9c397a029931d53a527ea65b7cd94e5bf1", "tree": "cc0adbf3cf25919db43de94140150013d6c6b163", "parents": [ "7a9b3e27619d16f6ad7c129b08ff9b9fac087b9f" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Oct 04 02:02:28 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Oct 04 02:02:28 2017 +0100" }, "message": "Clean up image resource types class resources via addClassResourceCleanup\n\nThis patch cleans up test_image_resource_types_rbac class resources\nvia addClassResourceCleanup.\n\nChange-Id: I99298fac3060c4affe5f04e8068b70c047aa39eb\n" }, { "commit": "0dd58e79879722f18491213e9384c6edf6bdd54a", "tree": "01caefbe7596a32d13747a25f1cd7094bcf8a294", "parents": [ "d1a72df9c9d94d4756cc0768d672a9a0b489609d" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Oct 02 03:14:51 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Oct 04 00:17:59 2017 +0000" }, "message": "Clean up network class resources via addClassResourceCleanup\n\nThis PS cleans up network class resources via addClassResourceCleanup.\n\nChange-Id: Ifc1679eb5ae7a5fc2304506929cac2b86b7b8ead\n" }, { "commit": "7a9b3e27619d16f6ad7c129b08ff9b9fac087b9f", "tree": "ff973cd76ee9d372ad1ad768084e301666e0dff5", "parents": [ "21ab97e47db13227ccb68b8394a9d15036b69561", "e22ed5a098718ef62751d8c5c7f70cfe0251b75b" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Tue Oct 03 08:10:06 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Oct 03 08:10:06 2017 +0000" }, "message": "Merge \"Clean up namespace class resources via addClassResourceCleanup\"" }, { "commit": "e22ed5a098718ef62751d8c5c7f70cfe0251b75b", "tree": "1d5bc513bcd5adf8ed6d5329c16ea97db5be3159", "parents": [ "d1a72df9c9d94d4756cc0768d672a9a0b489609d" ], "author": { "name": "Madhuri Kumari", "email": "madhuri.rai07@gmail.com", "time": "Mon Oct 02 13:00:07 2017 +0530" }, "committer": { "name": "Madhuri Kumari", "email": "madhuri.rai07@gmail.com", "time": "Mon Oct 02 13:01:37 2017 +0530" }, "message": "Clean up namespace class resources via addClassResourceCleanup\n\nThis patch cleans up namespace class resources via addClassResourceCleanup.\n\nChange-Id: I4507b56856f20bfc1adbfdaafc92a9ff66ff6f4b\n" }, { "commit": "21ab97e47db13227ccb68b8394a9d15036b69561", "tree": "16384d9fdd9923c4c19c53598379e710bdab7975", "parents": [ "d1a72df9c9d94d4756cc0768d672a9a0b489609d" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Oct 02 03:20:04 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Oct 02 03:20:04 2017 +0100" }, "message": "Clean up volume class resources via addClassResourceCleanup\n\nThis PS cleans up volume class resources via addClassResourceCleanup.\n\nChange-Id: Ia22813f734927c2aa2d5828603ce795ea29a8c8e\n" }, { "commit": "d1a72df9c9d94d4756cc0768d672a9a0b489609d", "tree": "815fe26ca63e33ea95407a4a688fdfaaa0d25763", "parents": [ "63881a9bd34d75f58e46dde4b4c89cb17d3e5fac", "bc6c682b66688b1aab38a75df748b2f08cf66977" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Sep 29 02:35:57 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Sep 29 02:35:57 2017 +0000" }, "message": "Merge \"Clean up compute class resources via addClassResourceCleanup\"" }, { "commit": "63881a9bd34d75f58e46dde4b4c89cb17d3e5fac", "tree": "f62e62a67198b4d46ae2f5a23ef61858891f2214", "parents": [ "b18a3f6524f64cbc9c650237fe1220585f653294", "1a9cd96273f3fdb56de0ac2e9461b3c895d2ae69" ], "author": { "name": "Zuul", "email": "zuul@review.openstack.org", "time": "Fri Sep 29 02:35:52 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Sep 29 02:35:52 2017 +0000" }, "message": "Merge \"Clean up test_server_actions_rbac\"" }, { "commit": "1a9cd96273f3fdb56de0ac2e9461b3c895d2ae69", "tree": "c85cc9cd70ed5505f164dda6e4cd489f3f34855f", "parents": [ "1171b6fb1b6fae40817bf1a2cb5d52bad4a73304" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Sep 27 03:38:57 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Sep 27 03:38:57 2017 +0100" }, "message": "Clean up test_server_actions_rbac\n\nThis PS removes unnecessary helpers from test_server_actions_rbac\nthat are only used once. Helpers that are used at least twice\nare kept.\n\nHelpers were renamed to drop the \"_test\" prefix as the helpers\nthemselves do not test anything, but rather invoke server\nactions.\n\nChange-Id: Ia9f83517b0ed9cf93af729c856e0adcc68da9314\n" }, { "commit": "b18a3f6524f64cbc9c650237fe1220585f653294", "tree": "c72561bbe6de9290581337c1ed7214415ec4cf5e", "parents": [ "f7e74ac95c04f19fd0468a69ec7830acc3226193" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Sep 19 04:25:51 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Sep 27 03:31:32 2017 +0100" }, "message": "[flake8] Enable extra, optional hacking checks\n\nUpdate test-requirements.txt to use latest version of:\n * hacking\n\nEnable the following off-by-default checks:\n * [H203] Use assertIs(Not)None to check for None.\n * [H204] Use assert(Not)Equal to check for equality.\n * [H205] Use assert(Greater|Less)(Equal) for comparison.\n * [H210] Require ‘autospec’, ‘spec’, or ‘spec_set’ in\n mock.patch/mock.patch.object calls\n * [H904] Delay string interpolations at logging calls.\n\nMade necessary unit test changes to work with these checks.\n\nChange-Id: I9db3445caa2883563fd7271d6bf0b24800e06c01\n" }, { "commit": "f7e74ac95c04f19fd0468a69ec7830acc3226193", "tree": "ac6b91377d5be4962f5722b840e30cfcc3f8017b", "parents": [ "1171b6fb1b6fae40817bf1a2cb5d52bad4a73304", "0f86ca422a6bd2d1a6edc76e8496426262128edf" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 27 01:22:51 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 27 01:22:51 2017 +0000" }, "message": "Merge \"RBAC tests for extended server attributes policies\"" }, { "commit": "bc6c682b66688b1aab38a75df748b2f08cf66977", "tree": "6766a509ddeab67630c328ded12770547de3db4a", "parents": [ "1171b6fb1b6fae40817bf1a2cb5d52bad4a73304" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Sep 26 23:50:51 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Sep 27 00:23:46 2017 +0000" }, "message": "Clean up compute class resources via addClassResourceCleanup\n\nThis PS cleans up compute class resources via addClassResourceCleanup.\n\nChange-Id: I14a2152ac48362495a2a705d3b415ed1449b381a\n" }, { "commit": "0f86ca422a6bd2d1a6edc76e8496426262128edf", "tree": "281d701010fd2992f0b4169f8f08fd19681e5ad2", "parents": [ "a63f854f6392c554c0095862ab766ee09be14cfd" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 29 21:30:52 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Sep 26 16:48:30 2017 +0000" }, "message": "RBAC tests for extended server attributes policies\n\nThis commit adds RBAC tests for extended server attributes\npolicies, the documentation for which can be found here:\n\nhttps://github.com/openstack/nova/blob/master/nova/policies/extended_server_attributes.py\n\nTests for both APIs that enforce each policy were added.\n\nChange-Id: I4150bcff934f1386ba8947d271289b790900ce2e\nImplements: blueprint rbac-tests-for-extended-server-attributes\n" }, { "commit": "1171b6fb1b6fae40817bf1a2cb5d52bad4a73304", "tree": "5b9ece0cdcc2ec252c89cd1ef493df947621c9a9", "parents": [ "a63f854f6392c554c0095862ab766ee09be14cfd" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 31 04:27:45 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Sep 26 16:47:24 2017 +0000" }, "message": "Add os-create-backup compute RBAC test\n\nAdd RBAC test for creating a server backup, providing coverage for the\npolicy action: \"os_compute_api:os-create-backup\".\n\nThis patch also:\n - Removes unnecessary setUp from ServerActionsV216RbacTest\n since it does a rebuild server in case something bad\n happened to the server -- but there is only 1 test case\n in the class.\n - Use data_utils.rand_name to create a fake host name for\n evacuate server test to further randomize host name to\n guarantee 404 is thrown which is the desired outcome.\n\nChange-Id: Ia5f95deb7b9495345db50c0569885a17b22984f6\nDepends-On: Ib97e65cca468a09bbeaf68fcfe0e8192674a481e\n" }, { "commit": "a63f854f6392c554c0095862ab766ee09be14cfd", "tree": "a25141edf370353078690104f2431b7234376b46", "parents": [ "bb3c257f77e52bf9da2f0822d40a2a716275bd8f" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Sep 22 07:06:26 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Sep 26 05:54:57 2017 +0000" }, "message": "[Gate Fix] Fix AttributeError in ServerActionsRbacTest\n\nThis PS fixes an AttributeError being raised in ServerActionsRbacTest\n[0] due to a recent Tempest change [1]. Besides, the volume\ncreation was being done manually in Patrole, when the volume\nshould have been created using Tempest\u0027s base helper for creating\na volume.\n\nThis same issue applies with `test_create_image_volume_backed` in\nthe same class [2] due to a recent Tempest change [3], and besides\nthat, the previous way of spinning up a volume-backed server did\nnot leverage Tempest\u0027s helpers, which this PS corrects.\n\n[0] http://logs.openstack.org/06/466806/8/check/gate-tempest-dsvm-patrole-admin-ubuntu-xenial/c186718/console.html#_2017-09-22_01_07_10_242418\n[1] https://review.openstack.org/#/c/498888/\n[2] http://logs.openstack.org/31/506531/3/check/gate-tempest-dsvm-patrole-member-ubuntu-xenial/01bfbc6/console.html#_2017-09-22_07_08_39_483859\n[3] https://review.openstack.org/#/c/498886/\n\nChange-Id: I6f93dc6961844e2154d348790cad3fde77b9d218\n" }, { "commit": "bb3c257f77e52bf9da2f0822d40a2a716275bd8f", "tree": "7fff853042d8bd4556dd214f4ee3d364a74139e0", "parents": [ "88cd29969d65c8ffc157b883249f0b26641ae42d", "2466aeb15e0e08f66edfe81f4a90bf2094a51182" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 20 00:54:07 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 20 00:54:07 2017 +0000" }, "message": "Merge \"Improve test coverage for flavor_access nova policies\"" }, { "commit": "88cd29969d65c8ffc157b883249f0b26641ae42d", "tree": "f1235d4ed13c06b904953e02491354e5e506f349", "parents": [ "9c0a0aa729cd456f2b8c3f3d59c629df18d79026", "f2b58d7e79f2b3034f40caabdc26cbc2e96e01fe" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Sep 19 23:12:35 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 19 23:12:35 2017 +0000" }, "message": "Merge \"Update policy authority documentation\"" }, { "commit": "9c0a0aa729cd456f2b8c3f3d59c629df18d79026", "tree": "af46102b79b551331a5bf5e2f495d31b7ef1db18", "parents": [ "384bc468a1e9176be6b6adee9739d31dc898acdd", "5ed98d78a023844ac44decdd10ae5a7964b036c5" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Sep 19 16:18:15 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 19 16:18:15 2017 +0000" }, "message": "Merge \"Clean up rbac_rule_validation unit tests\"" }, { "commit": "384bc468a1e9176be6b6adee9739d31dc898acdd", "tree": "3150c80db632481172703921328d7c5bc4c6089a", "parents": [ "0f593351d428dff4e5d4c8a0ba746b610b167b04", "4af0345627ad9201b91e8bccf62ae93fbcec57ff" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Sep 19 16:18:05 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 19 16:18:05 2017 +0000" }, "message": "Merge \"Volume test for backup:backup_project_attribute\"" }, { "commit": "0f593351d428dff4e5d4c8a0ba746b610b167b04", "tree": "4f7f0497fb897bc643f676ac46474af888c04bf5", "parents": [ "6b2fbfecda1f2659edac40fcc3233a60f38b9a86", "72b55d9db79ac1e38f33cce28fe7af5f23d2ff47" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Sep 19 16:09:10 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 19 16:09:11 2017 +0000" }, "message": "Merge \"Add missing v3 volume tests for which v2 tests exist\"" }, { "commit": "2466aeb15e0e08f66edfe81f4a90bf2094a51182", "tree": "65f2a6e5811c20843a11550708d23acb3f2e6ebd", "parents": [ "b3939a8f2a6712d73dd99ab734948cf41b5e7cf0" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Sep 01 20:33:50 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Sep 15 14:38:22 2017 +0000" }, "message": "Improve test coverage for flavor_access nova policies\n\nThis commit improves test coverage for flavor_access policies, achieving\nthe the most amount of coverage in Patrole for these policies that is\ncurrently possible.\n\nThe base policy \"os_compute_api:os-flavor-access\" is covered by\n4 separate APIs, but currently Patrole only tests 1 one of those\nAPIs. This commit extends the existing tests to achieve almost\nfull test coverage, with the exception of this endpoint:\n\n POST /flavors\n\nAt present, it is impossible to test os-flavor-access for that\nendpoint since it also enforces os-flavor-manage:create\n(or os-flavor-manage) both of which require admin.\n\nIn addition, this commit fixes test_show_flavor always passing.\nWhile policy enforcement happens in Nova when calling\n`self.flavors_client.show_flavor`, no Forbidden exception\nis raised following failure. Instead, the attribute\n\"os-flavor-access:is_public\" is injected into the response\nbody following successful policy enforcement. So Patrole\nchecks for the attribute and, if not found, raises an\nappropriate RbacMalformedResponse exception.\n\nReference: https://github.com/openstack/nova/blob/master/nova/policies/flavor_access.py\n\nChange-Id: Icaf516f996ec088ce48bbfc768116b2d6994c336\n" }, { "commit": "b3939a8f2a6712d73dd99ab734948cf41b5e7cf0", "tree": "4dfacd136d385d8e6921b4235fceb74e043ea089", "parents": [ "6f4bc6795745e002e27b098125ca7e48ea47ad7e" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Sep 11 17:27:40 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Sep 14 08:06:52 2017 +0100" }, "message": "[Gate fix] Change expected_error_code to 403 for some subnetpool tests\n\nThis change corrects some expected_error_code\u0027s for subnetpool tests.\nThese endpoints actually raise a 403, not a 404 (example: [0]):\n\n - test_update_subnetpool_is_default\n - test_delete_subnetpool\n\nThis commit also corrects resource_cleanup in\ntest_image_resource_types_rbac which wrongly calls super\nresource_setup in resource_cleanup.\n\nThese changes have been combined to unblock the gate.\n\n[0] http://logs.openstack.org/80/496080/9/check/gate-tempest-dsvm-patrole-member-ubuntu-xenial/f9cde4d/console.html#_2017-09-11_14_55_54_024285\n\nChange-Id: If4399c5f67058925c800bd2ce32c19bf6657d9b5\n" }, { "commit": "6f4bc6795745e002e27b098125ca7e48ea47ad7e", "tree": "8d1c1b522d69db74ba38ef0450c5296b3f98ad85", "parents": [ "be3fac39f8ee43d09704a5e59f6aee61623045c0", "72430755e2f2054badc1d8ebaabc96d2b6ac9cae" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 07 17:12:27 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 07 17:12:27 2017 +0000" }, "message": "Merge \"RBAC tests for key_name in response\"" }, { "commit": "72430755e2f2054badc1d8ebaabc96d2b6ac9cae", "tree": "b0b6ac7fa070d3508289037a1e96cef1a8f91008", "parents": [ "2a4bc7e28a3a1a18dbce0d537e97eb6d4d4a5ff6" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Fri Aug 25 16:01:10 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Sep 06 20:41:42 2017 +0000" }, "message": "RBAC tests for key_name in response\n\nAdds tests for os-keypairs that looks for \"key_name\" in the\nresponse body from a call to list or show server. Also adds a\nskip exception to test_keypairs_rbac if os-keypairs extension\nis not enabled.\n\nImplements bp:rbac-tests-for-key-name-in-response\n\nChange-Id: I2dc5332bfd59ea7c7a0e4a32b69d94ccd19ffaac\n" }, { "commit": "be3fac39f8ee43d09704a5e59f6aee61623045c0", "tree": "6f77196497b194cd27ae3bcbf794d871fde2ffc9", "parents": [ "08b267d081d98aab0090eed9715b630e16fdd005", "2f8c88861a4f7fad0ba4b7d9c1f9f6423d7381f8" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 06 04:14:50 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 06 04:14:50 2017 +0000" }, "message": "Merge \"[TrivialFix] Remove redundant function in RbacUtils class\"" }, { "commit": "08b267d081d98aab0090eed9715b630e16fdd005", "tree": "b994479820ba41fce11f0d9c267013de15dacf17", "parents": [ "789d6b47e2508512f420afd730039d683e400bb0", "e0e2edc1e1eb6ec990cd2c56bd4a41091493df82" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 06 04:13:47 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 06 04:13:47 2017 +0000" }, "message": "Merge \"Remove a few tests from multinode gate\"" }, { "commit": "789d6b47e2508512f420afd730039d683e400bb0", "tree": "0512b4f17c764670b59601f63521ba777c31ebaf", "parents": [ "45fffa50e0020d4a34b1c3eac4b553522bf5fb35", "bf58a7fe3a2e03a60d4142b28b831663ddaf7b68" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 06 03:13:13 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 06 03:13:13 2017 +0000" }, "message": "Merge \"Fix flavor_rxtx_rbac\"" }, { "commit": "5ed98d78a023844ac44decdd10ae5a7964b036c5", "tree": "ec3162a96784f8cd4045a50ffc43b4f53aec3278", "parents": [ "2a4bc7e28a3a1a18dbce0d537e97eb6d4d4a5ff6" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Sep 01 20:30:25 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Sep 06 03:24:19 2017 +0100" }, "message": "Clean up rbac_rule_validation unit tests\n\nThis patch simply makes the unit tests for rbac_rule_validation\ncleaner, easier to read, and thus easier to maintain.\n\nChange-Id: I9205909ff376ce94523b89499df415e9481a9e37\n" }, { "commit": "2f8c88861a4f7fad0ba4b7d9c1f9f6423d7381f8", "tree": "e32d7368528e9ff57373a0eb0ed2422b463e1c01", "parents": [ "2a4bc7e28a3a1a18dbce0d537e97eb6d4d4a5ff6" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Sep 01 05:50:05 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Sep 01 05:50:05 2017 +0100" }, "message": "[TrivialFix] Remove redundant function in RbacUtils class\n\nThis commit simply removes a redundant functionf rom RbacUtils class\nthat shouldn\u0027t have been merged. get_roles was renamed to\nget_roles_by_name and because both now exist get_roles should be\nremoved.\n\nChange-Id: I659d6f5f511d3bd47be05ed27990f4ee55886682\n" }, { "commit": "f2b58d7e79f2b3034f40caabdc26cbc2e96e01fe", "tree": "a61ed69dddb377d91e7feecc7adc501edbbef84f", "parents": [ "2a4bc7e28a3a1a18dbce0d537e97eb6d4d4a5ff6" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 31 22:40:36 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 31 23:12:09 2017 +0000" }, "message": "Update policy authority documentation\n\nAlso cleans up a few nits for rbac_rule_validation documentation\n\nChange-Id: Id1fcab5b6e9e426f30c8902363baacd7c0a50910\n" }, { "commit": "2a4bc7e28a3a1a18dbce0d537e97eb6d4d4a5ff6", "tree": "2f28e06067495507d6db18a3693dfac600da7dfb", "parents": [ "00f779fc61d6eb9c365cab6e053515430578191f", "88a5bab82076e9f783f9a4857eafd1a1cf242bbc" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Aug 31 18:29:09 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Aug 31 18:29:09 2017 +0000" }, "message": "Merge \"Rename rbac_policy_parser to policy_authority\"" }, { "commit": "4af0345627ad9201b91e8bccf62ae93fbcec57ff", "tree": "815de5278adb031a580bfee2a427b5dde768329f", "parents": [ "11b023243f5d58a69f9f6fe65db44bd8cea98721" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 15 21:49:49 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 31 14:35:27 2017 +0000" }, "message": "Volume test for backup:backup_project_attribute\n\nAdd RBAC test for \"backup:backup_project_attribute\" which verifies\nthat the \"os-backup-project-attr:project_id\" attribute appears in\nthe response body only policy enforcement succeeds.\n\nThis commit specifically:\n * adds the test specified above\n * adds a class-wide volume shared by test_show_backup and\n test_show_backup_project_attribute tests (i.e. moved\n volume creation for these tests from setUp into\n resource_setup)\n\nChange-Id: I751275633a3b6f20e67894fceb826f0f97a62b46\n" }, { "commit": "00f779fc61d6eb9c365cab6e053515430578191f", "tree": "d6c9166b55e691217714e5b88db1c0665c3a27e7", "parents": [ "5e9656d375f5d2a49fa7cc3459c126b76ce9c0e5", "2a3b513a38853a2af2107beaee2e0e7c5c3147c3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Aug 31 03:26:48 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Aug 31 03:26:48 2017 +0000" }, "message": "Merge \"Docstring for RbacAuthority class.\"" }, { "commit": "88a5bab82076e9f783f9a4857eafd1a1cf242bbc", "tree": "d87460ede44f239734fe96a62181d28e9ff9d653", "parents": [ "7f8993fe3c5edb9157d696f1e0b5b97f37f31032" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 31 04:00:32 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 31 04:00:45 2017 +0100" }, "message": "Rename rbac_policy_parser to policy_authority\n\nThis change is a follow-up to commit\n\nI8ba89ab5e134b15e97ac20a7aacbfd70896e192f\n\nwhich introduced an abstract class from which (previously)\nrbac_policy_parser and requirements authority inherit, providing\nrbac_rule_validation with 2 ways of validating RBAC.\n\nFor the sake of naming consistency, rbac_policy_parser is renamed\nto policy_authority. This naming scheme is better because\n\"policy parser\" is implementation-specific and doesn\u0027t convey\nwhat the file (and class name) do from a high-level perspective.\n\nBecause this file is only used internally to Patrole, it can be\nchanged without backward-compatibility concerns.\n\nThis commit also includes documentation for the policy authority\nmodule and the rbac_rule_validation module.\n\nChange-Id: Ie09fc2d884f9211244b062fdd5fe018970c2bb2d\n" }, { "commit": "5e9656d375f5d2a49fa7cc3459c126b76ce9c0e5", "tree": "0c12a2fb9346ab4e8208a7011a29f11ec240f781", "parents": [ "c545832800e2e8e9f607a446d9adc48d6306dff1", "3983d1321031469b7e750c059498c172676e8eb6" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Aug 30 21:00:45 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Aug 30 21:00:45 2017 +0000" }, "message": "Merge \"RBAC tests for os-extended-volumes policies\"" }, { "commit": "c545832800e2e8e9f607a446d9adc48d6306dff1", "tree": "3aa2b28599e012864caed2e792b4629d5ccc29a1", "parents": [ "2b441901c347f912c3593d2482de902191c2e1f7", "c27a62fb21ee638dcaade901bddcffab43d4d815" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Aug 30 21:00:40 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Aug 30 21:00:40 2017 +0000" }, "message": "Merge \"Fix router tests expecting wrong error code\"" }, { "commit": "2b441901c347f912c3593d2482de902191c2e1f7", "tree": "16eb4ddb8bbdeb07b6a9e524cb4ca5e8785a760b", "parents": [ "7f8993fe3c5edb9157d696f1e0b5b97f37f31032", "146735df7ae0b8483b820c60f13b871d93ffe16c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Aug 30 20:44:17 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Aug 30 20:44:17 2017 +0000" }, "message": "Merge \"Test coverage for compute flavor_manage policies\"" }, { "commit": "bf58a7fe3a2e03a60d4142b28b831663ddaf7b68", "tree": "d53259e8001193da2e2ccdd78700c944522ced5e", "parents": [ "9db9a1b0cb5bc63af7bbdf6ec543622cac3c64f1" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Fri Aug 25 14:21:49 2017 -0400" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Tue Aug 29 14:30:31 2017 -0400" }, "message": "Fix flavor_rxtx_rbac\n\nUpdates flavor_rxtx to more thoroughly test policy enforcement\nby\n- making use of RbacMalformedResponse to ensure rxtx_factor\n is included in response body\n- adding new flavor_rxtx tests\n\nCurrently, POST /flavors is not tested as that action also\nenforces os-flavor-manage: create, which is admin-only by\ndefault and would therefore fail due to conflicting policy\nrestrictions. This test will be added once multi-policy\nsupport is available.\n\nChange-Id: I7fb35212fc6bb817a2b04077c983865e1191f214\nCloses-Bug: #1712725\n" }, { "commit": "e0e2edc1e1eb6ec990cd2c56bd4a41091493df82", "tree": "4fa5713664a79584266e19319e808762611c1291", "parents": [ "9db9a1b0cb5bc63af7bbdf6ec543622cac3c64f1" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 20:47:47 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Aug 26 17:15:23 2017 +0000" }, "message": "Remove a few tests from multinode gate\n\nThe multinode gate is reserved for tests that require multiple nodes\nlike server migration tests. It is also used for slow-running\ntests that take a while to execute (20-30+ seconds) to better\nparallelize tests in the gates.\n\nHowever, 3 tests currently meet neither of these criteria and are\nhence being moved to the voting gates:\n\n * test_create_security_group_for_server [6.492102s]\n * test_remove_security_group_from_server [6.525612s]\n * test_volume_upload_public [4.558483s]\n\nChange-Id: I24c65839692264f30a1494c051eec5fb72eb78a6\nSource: http://logs.openstack.org/68/494368/12/check/gate-tempest-dsvm-patrole-multinode-member-ubuntu-xenial-nv/32ae39c/console.html\n" }, { "commit": "7f8993fe3c5edb9157d696f1e0b5b97f37f31032", "tree": "142ed239840fd76b629343d96e776a08b7900cd1", "parents": [ "472b84c9bcf80e352caa4e652cd47571489fb59a" ], "author": { "name": "Sean Pryor", "email": "spryor@redhat.com", "time": "Mon Aug 14 12:53:17 2017 -0400" }, "committer": { "name": "Sean Pryor", "email": "spryor@redhat.com", "time": "Fri Aug 25 23:12:08 2017 -0400" }, "message": "Add a per-test log\n\nThis patch adds a new per-test logging feature to Patrole\nTo accomplish this, it adds two new config variables\n\nThe logging now prints a log message containing the results of each RBAC\ntest to a separate log file, as well as to the normal\ntempest.log file. This message is of the form:\n[Service] \u003cnova, neutron, etc\u003e\n[Test] \u003cname of the test\u0027s method\u003e\nfollowed by either the result of the test as Allowed/Denied/Error, or\nthe expected result (from oslopolicy) and then the actual result\n\nThere are two new config variables that control this, added in a new\nconfig group called patrole_log:\nenable_reporting - defaults to True, which enables this new logging\nfunctionality\nreport_log_name - defaults to patrole.log, controls the name of the log\nthe output is written to.\nreport_log_path - Defaults to the local directory, path (relative or\nabsolute) where to store the log\n\nChange-Id: Iff2176f1a7c7d10f78b96d748f1d70b222fd5072\n" }, { "commit": "3983d1321031469b7e750c059498c172676e8eb6", "tree": "7379a5095058c76726bfe870fedba0e303dc13d3", "parents": [ "d6bde6096519a9fb6878a4fafb592c039420d422" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 01 01:51:07 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Aug 25 05:03:49 2017 +0000" }, "message": "RBAC tests for os-extended-volumes policies\n\nThis commit adds RBAC tests for os-extended-volumes\npolicies, the documentation for which can be found here:\n\nhttps://github.com/openstack/nova/blob/master/nova/policies/extended_volumes.py\n\nTests for both APIs that enforce each policy were added.\n\nChange-Id: I6669f420743a3fee6470a7bb4ca5f1353a0e9696\nImplements: blueprint rbac-tests-for-compute-extended-volumes\nDepends-On: I1c14646dc8d102cd093be09833c23846781e5e73\n" }, { "commit": "c27a62fb21ee638dcaade901bddcffab43d4d815", "tree": "c4cb250a32813d65241c10204282c9639321a8dc", "parents": [ "bc39ee8ec61eec7ec5924cd48801f14d5b28e657" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 24 23:01:34 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 24 23:01:34 2017 +0100" }, "message": "Fix router tests expecting wrong error code\n\nCurrently tests in test_router_rbac expect a 404 for some endpoints\nthat actually raise a 403 instead. The reason why the tests currently\npass in the gates for admin and Member is because the associated\npolicies are admin_or_owner -- meaning that the 403 or 404 is never\nraised, causing the tests to silently pass. But if elevated permissions\nare used then a 403 -- not a 404 -- is raised.\n\nThe except is for the test \"test_show_router\" which enforces `get_router`\nwhich does raise a 404, so that is left unchanged.\n\nChange-Id: If37e0b15137d1421f9d16fc515068628ab87768f\n" }, { "commit": "9db9a1b0cb5bc63af7bbdf6ec543622cac3c64f1", "tree": "fb366131be033dd90adc3d329bf39bf01bcb8847", "parents": [ "25b12810f15d4c8b56f680dfcfaf76611196a3ae", "dc73cff02ab484f901876bb42cfdd4d1f266432b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Aug 24 21:54:34 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Aug 24 21:54:34 2017 +0000" }, "message": "Merge \"Remove identity v3 change_password test\"" }, { "commit": "25b12810f15d4c8b56f680dfcfaf76611196a3ae", "tree": "2e7f6845949126dc375ffab928f629df2639dcb1", "parents": [ "bc39ee8ec61eec7ec5924cd48801f14d5b28e657" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 24 17:21:56 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 24 17:22:05 2017 +0100" }, "message": "[TrivialFix] Move security group tests into correct test file\n\nThis commit moves security group tests currently in test_server_rbac\ninto test_security_groups_rbac as that is the logical place\nfor the tests. And this commit renames the deprecated security\ngroups test class to avoid a name conflict with the non-deprecated\ntest class.\n\nChange-Id: Iae32d9bc7e22e39415e498e44f0da4f2711dc550\n" }, { "commit": "bc39ee8ec61eec7ec5924cd48801f14d5b28e657", "tree": "8312e40bacbe8fb362b2c0d5bdf75bea9e9f3b3b", "parents": [ "9d086ab44610799ad8203926d1b3e6fdd29a6616" ], "author": { "name": "ghanshyam", "email": "ghanshyammann@gmail.com", "time": "Thu Aug 24 04:57:54 2017 +0000" }, "committer": { "name": "Ghanshyam Mann", "email": "ghanshyammann@gmail.com", "time": "Thu Aug 24 08:27:48 2017 +0000" }, "message": "Do not use test.get_service_list()\n\nCurrently \u0027network\u0027 service is always True in test.get_service_list()\nS check for the same is not much of use.\nAlso Tempest is moving the get_service_list from test.py to utils.\n- Ibd52153d00b8e60fb8c89e38d94e358ddc787251\n\nTill that movement is done, let\u0027s comment the usage of get_service_list\nand if needed to check \u0027network\u0027 service availability, then get_service_list\ncan be used from new location.\n\nChange-Id: I8edd8da695698db03a752dcfedbd290facfa8fca\n" }, { "commit": "dc73cff02ab484f901876bb42cfdd4d1f266432b", "tree": "a5c80693d03f677c61c05a5176aaac0997e60af5", "parents": [ "d6bde6096519a9fb6878a4fafb592c039420d422" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 22 22:21:50 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 22 22:21:50 2017 -0400" }, "message": "Remove identity v3 change_password test\n\nThis commit removes the v3 change_password test because\nit is currently getting skipped [0], because the policy\naction does not exist in [1] and the API where it would\nbe enforced does not enforce it [2].\n\nSo the correct approach is to remove the test. Also renames\nthe class name to drop \"Admin\" substring as there is nothing\nabout this test class that requires admin credentials in any\nway.\n\n[0] http://logs.openstack.org/68/496068/4/check/gate-tempest-dsvm-patrole-admin-ubuntu-xenial/7069c22/console.html#_2017-08-23_00_50_18_947787\n[1] https://github.com/openstack/keystone/blob/master/keystone/common/policies/user.py\n[2] https://github.com/openstack/keystone/blob/4950c24bddaf98b79dfd9ee178ae1086cf48e322/keystone/identity/controllers.py#L279\n\nChange-Id: I90496d3969b1ef69316a2254754622679bca54b5\n" }, { "commit": "9d086ab44610799ad8203926d1b3e6fdd29a6616", "tree": "c382df8c6240ee29a20e5216e0c03ca55b63cd19", "parents": [ "d6bde6096519a9fb6878a4fafb592c039420d422" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 22:49:39 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 22 20:10:23 2017 -0400" }, "message": "Use create_test_server for attach volume server test\n\nThis commut uses create_test_server to clean up the\ntest test_create_server_attach_volume, which currently\nsuffers from a higher-than-usual failure rate. Example:\n\nThis commit also replaces manual volume creation with\n``create_volume`` helper function defined in Tempest\u0027s\nbase compute class.\n\nhttp://logs.openstack.org/47/496047/1/check/gate-tempest-dsvm-patrole-admin-ubuntu-xenial/2901c0f/console.html#_2017-08-22_01_40_22_359577\n\nChange-Id: If85279ff2f4ee7fad2b3d4c665398f699afc7b38\n" }, { "commit": "146735df7ae0b8483b820c60f13b871d93ffe16c", "tree": "4a88bcbb593036a55d90d6bf5891f5c750a1f61d", "parents": [ "d6bde6096519a9fb6878a4fafb592c039420d422" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 23:38:19 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 22 12:51:46 2017 +0000" }, "message": "Test coverage for compute flavor_manage policies\n\nThis commit adds test coverage for the flavor_manage policies,\nwhich includes tests only for the non-deprecated policy actions:\n\n* \"os_compute_api:os-flavor-manage:create\"\n* \"os_compute_api:os-flavor-manage:delete\"\n\nThis commit also renames _create_flavor in rbac_base for compute\nmodule to be public since it is consumed by other files. It also\nadds a wait_for_resource_deletion call.\n\nChange-Id: I632235a1d81488ecc8fb1e92f801415a08c7e778\n" }, { "commit": "72b55d9db79ac1e38f33cce28fe7af5f23d2ff47", "tree": "76b5f13a942a3d7a97ae8440232c72ad9cec0bf4", "parents": [ "6315a252d29d35724be8c95834242590592de3d4" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 17:45:09 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 20:37:46 2017 -0400" }, "message": "Add missing v3 volume tests for which v2 tests exist\n\nThis commit adds missing v3 volume tests for which corresponding\nv2 tests exist, and if the v2 API is also present in v3.\n\nThis commit is necessary for partially deprecating the v2 volume\nRBAC tests -- but before that can be done, we need to ensure\nthat v3 has at least the exact same coverage v2 does, plus\nadditional coverage for v3 APIs.\n\nThis commit specifically adds v3 tests for:\n - test_qos_rbac\n - test_volume_basic_crud_rbac\n - test_volume_hosts_rbac\n - test_volume_metadata_rbac\n\nThis commit also adds a missing RBAC test for showing a volume\nhost for both v2 and v3.\n\nDepends-On: I09ad8200f73273dae8e5d926939620b71d9210e8\nChange-Id: I443dfb8e1032ff327f03eb8e8b257df124ad6180\nPartially Implements: blueprint test-v3-volume-api-only\n" }, { "commit": "d6bde6096519a9fb6878a4fafb592c039420d422", "tree": "98df94c422485688b65ff6e6ee59da96fa46c8e9", "parents": [ "337e17a2f14e68373a1f19ad7d0e5720c1a7695b", "5f72954f121a5aa5f6bd378e2d013d2973297766" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Aug 21 22:42:18 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Aug 21 22:42:18 2017 +0000" }, "message": "Merge \"RBAC tests for extended availability zone policies\"" }, { "commit": "337e17a2f14e68373a1f19ad7d0e5720c1a7695b", "tree": "cef4ab278333f11c0ef2a22c71184a8a675225ab", "parents": [ "620105c1165464e0d2e28b9350d6e3b07f392a2d", "b6a9c21424332d4e112d51e03158ea5ecb434e62" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Aug 21 20:25:44 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Aug 21 20:25:44 2017 +0000" }, "message": "Merge \"Adds unit tests for hacking checks\"" }, { "commit": "5f72954f121a5aa5f6bd378e2d013d2973297766", "tree": "be3fb98ac07aa30bd1ac7e1b66f03b9a14951668", "parents": [ "620105c1165464e0d2e28b9350d6e3b07f392a2d" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jul 31 22:44:04 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 20:17:57 2017 +0000" }, "message": "RBAC tests for extended availability zone policies\n\nThis commit adds RBAC tests for extended availability zone\npolicies, the documentation for which can be found here:\n\nhttps://github.com/openstack/nova/blob/master/nova/policies/extended_availability_zone.py\n\nTests for both APIs that enforce each policy were added.\n\nChange-Id: I36aad1ea7ef3c1418cd23fda8357132ac8bde559\nDepends-On: I1c14646dc8d102cd093be09833c23846781e5e73\n" }, { "commit": "620105c1165464e0d2e28b9350d6e3b07f392a2d", "tree": "90a4fbec0ecd906744b5666eef6fbf19e06e14cf", "parents": [ "6315a252d29d35724be8c95834242590592de3d4", "6056d6b996cb8471141d983797c82e323441ae8c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Aug 21 19:51:12 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Aug 21 19:51:12 2017 +0000" }, "message": "Merge \"Move some slow tests into the multinode gate\"" }, { "commit": "6056d6b996cb8471141d983797c82e323441ae8c", "tree": "8962b8b9d4fd8a4799d1967f0e20a623c3d6d57c", "parents": [ "f6eb862105742e0a04d5ef541849713348b5d357" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 17:42:26 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 17:42:26 2017 +0100" }, "message": "Move some slow tests into the multinode gate\n\nThis commit moves two tests into the multinode gate by tagging\nthem as \"slow\":\n\n 1) patrole_tempest_plugin/tests/api/compute/test_server_volume_attachments_rbac.py\n 2) patrole_tempest_plugin/tests/api/volume/test_volumes_backup_rbac.py\n\nThey both also have a higher-than-normal failure rate, so placing\nthem in the non-voting gate will also increase gate stability. But\nthe main reason for moving them is because they belong there.\n\nChange-Id: Iddb9d6e0cfce85e9bde00bec91ff7aec6fb22a62\n" }, { "commit": "2a3b513a38853a2af2107beaee2e0e7c5c3147c3", "tree": "69005480f0cfac2c449e18adf8665386de6053fb", "parents": [ "f6b0e29960e4929951de84f1b5423c92505c96e3" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Aug 11 01:19:06 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 21 14:36:19 2017 +0000" }, "message": "Docstring for RbacAuthority class.\n\nThis commit adds a docstring for the ``RbacAuthority`` class.\n\nChange-Id: Ie2e3218ad5c8fbc2f89fa81116b9a7505446cea7\n" }, { "commit": "d35cc756e95f98e18a2425708f4e3f01f8d82168", "tree": "c6085525c7567362cb8d3e4774f5f7bd3ece7cbd", "parents": [ "01d633bda70eda976c27fb988dfe0afd42d48419", "3e14f473a74a216552fbb329365703b11baeadec" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Aug 18 22:40:08 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Aug 18 22:40:08 2017 +0000" }, "message": "Merge \"Use configured admin creds in rbac utils\"" }, { "commit": "3e14f473a74a216552fbb329365703b11baeadec", "tree": "79711d441838bc7469c541d4c4cd4fa6ffd64381", "parents": [ "f6eb862105742e0a04d5ef541849713348b5d357" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 17 23:02:11 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Aug 18 02:02:09 2017 +0100" }, "message": "Use configured admin creds in rbac utils\n\nUse ``get_configured_admin_credentials()`` in rbac_utils to instantiate\nan admin client manager without having to rely on creating a new\nset of credentials, which is problematic when using pre-provisioned\ncredentials. This is because rbac_utils consumes a set of credentials\nallocated in the accounts.yaml file, which can cause tests to fail.\n\nUsing ``get_configured_admin_credentials()`` is a workaround because\nit uses admin credentials specified in tempest\u0027s config\u0027s [auth]\nsection, which already exist in the system.\n\nChange-Id: I0622bb057c365fdf652e4a110125678371ac4569\n" }, { "commit": "01d633bda70eda976c27fb988dfe0afd42d48419", "tree": "43e03d529c3b0431dd72817dd419d6609dd0243f", "parents": [ "f6eb862105742e0a04d5ef541849713348b5d357" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Aug 16 20:17:26 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Aug 16 20:19:33 2017 +0100" }, "message": "Update rbac_rule_validation docstrings\n\nThis commit updates, clarifies and elaborates on pre-existing\ndocstrings in ``rbac_rule_validation``. Currently, some of the\ndocumentation is either unclear, slightly out of date, or not\ninformative enough. This commit seeks to change those documentation\ndeficiencies.\n\nChange-Id: I06092f6c7693833ea2e1e48513b5498a0e044642\n" }, { "commit": "f6eb862105742e0a04d5ef541849713348b5d357", "tree": "cf0a1f9dcf9cd8e2b1890d0136d33f680a60a604", "parents": [ "11b023243f5d58a69f9f6fe65db44bd8cea98721" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Aug 06 06:08:02 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 15 21:45:27 2017 -0400" }, "message": "Deprecate [rbac] configuration group.\n\nThe [rbac] configuration group has been deprecated\nand will be removed in the next release. It has been\nrenamed to the [patrole] group which contains\nthe exact same options.\n\nThis commit makes necessary deprecation changes,\nalong with renaming changes to documentation, unit\ntests and framework.\n\nChange-Id: I71198506b97b98ac18a969b7e6b13b664579c081\n" }, { "commit": "b6a9c21424332d4e112d51e03158ea5ecb434e62", "tree": "665edc529cb2c1bb937f88fc0538c0712ab9fc72", "parents": [ "10fdf98c128fc890863c34872e1681a61a8b9cfa" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Wed Aug 09 17:43:08 2017 -0400" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Aug 15 22:20:48 2017 +0100" }, "message": "Adds unit tests for hacking checks\n\nAdds unit tests for Patrole hacking checks. Also cleans up\nexisting Patrole hacking checks for code maintainability.\n\nThis commit also modifies the P100 hacking check to work\nwith arbitrarily many decorators, so that rbac_rule_validation\ndecorator can be sandwiched between any number of decorators\nin any order; the only requirement is that it appear before\neach test.\n\nChange-Id: Ic02c9278e5293311dd6f7b02790a256d391098f7\nCloses-Bug: #1708794\n" }, { "commit": "11b023243f5d58a69f9f6fe65db44bd8cea98721", "tree": "a0dd805c927a90e1dfe252e031dabe87c2a2fb2e", "parents": [ "68cb207ab6d5ff949b810665962efb2311e6f452" ], "author": { "name": "shangxiaobj", "email": "shangxiaobj@inspur.com", "time": "Mon Aug 14 22:45:11 2017 -0700" }, "committer": { "name": "shangxiaobj", "email": "shangxiaobj@inspur.com", "time": "Mon Aug 14 22:46:21 2017 -0700" }, "message": "Update and replace http with https for doc links in patrole\n\n1) Update doc links according to OpenStack document migration\n2) Use https instead of http for docs links\n\nChange-Id: I86b5f7fe245bc3731e16ef9a5db239d6da44c69d\n" }, { "commit": "68cb207ab6d5ff949b810665962efb2311e6f452", "tree": "fa06d3498574d540d575ca1943b603fb4a3da6d4", "parents": [ "66cadb4d967568c3bd9b519dc70addf36e36acee", "d2fcf033caadaebdf742a057e5c37fe6f135dc7a" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Aug 14 23:10:59 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Aug 14 23:10:59 2017 +0000" }, "message": "Merge \"Add RBAC test for updating volume group\"" }, { "commit": "66cadb4d967568c3bd9b519dc70addf36e36acee", "tree": "ffd0595157ae47bfe5b0f5014faf8f4a4dec7596", "parents": [ "2af8f554cb6f2d644da8e1656ad8f4613ef0a696", "2693bf7c3a68b79d62e7a5d15036326a9ffbb394" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Aug 14 23:03:47 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Aug 14 23:03:47 2017 +0000" }, "message": "Merge \"Only sleep following a role switch\"" }, { "commit": "2693bf7c3a68b79d62e7a5d15036326a9ffbb394", "tree": "9d99b87c3ffcb642a4305bc1eb23c1d5697523ba", "parents": [ "87c504b5c442acaf502a9bc0e3183e829659179e" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Aug 12 22:56:47 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Aug 14 02:34:57 2017 +0000" }, "message": "Only sleep following a role switch\n\nThis commit drops support for not sleeping if the token being\nused for keystone auth is UUID, as it is being deprecated\nduring the \"R\" release [0]. Thus, the condition for sleeping\nhas completely changed: Now, time.sleep(1) is only carried\nout if the role actually switched (causing a token revocation\nevent in keystone and hence the need to sleep).\n\nFor example, if rbac_test_role \u003d \"admin\" then there is no need\nto sleep (except once, at the beginning, which strips the user\nof any additional roles) as setup, API execution and clean up\nall require admin. If rbac_test_role \u003d \"Member\" then sleep\nmust be carried out each test at least twice, as setup requires\nadmin, API execution requires Member, and clean up requires\nadmin.\n\nThis commit also adds unit tests to confirm that sleep is\nonly performed if the role switched. This required\nchanges to some testing logic.\n\n[0] http://lists.openstack.org/pipermail/openstack-dev/2017-August/121067.html\n\nChange-Id: Iedc97397d9ae76c7f5efed5913850ced470c6c5f\nCloses-Bug: #1710237\nDepends-On: I34d324575c8117022724a944c034f089eb0c7541\n" }, { "commit": "2af8f554cb6f2d644da8e1656ad8f4613ef0a696", "tree": "f021d581be30c6140a940a9754e52bb82088d4ae", "parents": [ "da52cc3fac551e758dd858a4ca5c3d7977511c0e", "03286507585e6c1e5a498b50611d04daa6c9dea3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Aug 12 03:07:11 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Aug 12 03:07:11 2017 +0000" }, "message": "Merge \"RBAC tests for os-extended-status policies\"" }, { "commit": "da52cc3fac551e758dd858a4ca5c3d7977511c0e", "tree": "b337e9aaf01cb9b7fd7183ae6ffd0ddb731f4de5", "parents": [ "b8c13641ef4e2a23cbf3a7a9b17fad61c0de03de", "36bea05690dcc682d33cbfaea67523d9f7af2497" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Aug 12 03:07:06 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Aug 12 03:07:06 2017 +0000" }, "message": "Merge \"Adds meaningful exceptions for missing attributes\"" }, { "commit": "281141bceaf6887ab173c7f44b47bb3c78f5bb53", "tree": "b891a66d2ff4a9e10d6fdacf097b209945a64285", "parents": [ "87c504b5c442acaf502a9bc0e3183e829659179e", "428c44ae9d7d732dada7e2b3696af92ebc61c601" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Aug 12 00:19:50 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Aug 12 00:19:50 2017 +0000" }, "message": "Merge \"Adds update and delete agent tests\"" }, { "commit": "d2fcf033caadaebdf742a057e5c37fe6f135dc7a", "tree": "64a31195ff146b77b6e52f18da844dc0310c5493", "parents": [ "f6b0e29960e4929951de84f1b5423c92505c96e3" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Aug 11 01:06:53 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Aug 11 01:06:53 2017 +0100" }, "message": "Add RBAC test for updating volume group\n\nThis commit adds a test for updating a volume group, providing\ncoverage for group:update policy action.\n\nChange-Id: Ifc6ccb8d79fa01c3dfe951282e004f79db2d01cd\n" }, { "commit": "87c504b5c442acaf502a9bc0e3183e829659179e", "tree": "c9d631a0ab930ce589104801dc695b6e46651923", "parents": [ "1a5d4a55de701754f2dc830f3dbeda4b371d2814", "0df097d526adfb83f000775ed8105900d1f8624b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Aug 10 21:36:45 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Aug 10 21:36:45 2017 +0000" }, "message": "Merge \"Remove usage of credentials_factory.AdminManager\"" }, { "commit": "1a5d4a55de701754f2dc830f3dbeda4b371d2814", "tree": "68b9bc135a31aa4a768bee07f57158b77bbae07a", "parents": [ "6f663e0d1efe4e949709562ef1b7351f90545d11", "8a043fb78da9c00dd0451790c9a82f931bb61ba2" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Aug 10 21:28:29 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Aug 10 21:28:29 2017 +0000" }, "message": "Merge \"Change rbac_utils.RbacUtils is_admin to function\"" }, { "commit": "36bea05690dcc682d33cbfaea67523d9f7af2497", "tree": "6df3ed60a7b213196d1fe60bf94535158b6d9e08", "parents": [ "10fdf98c128fc890863c34872e1681a61a8b9cfa" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Wed Jul 19 12:01:59 2017 -0400" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Thu Aug 10 12:30:30 2017 -0400" }, "message": "Adds meaningful exceptions for missing attributes\n\nAdds new exception and better explanations for failures due to\nmissing response body attributes and other unusual circumstances\nthat may lead to failures during testing.\n\nCloses-Bug: #1699419\nCloses-Bug: #1704684\n\nChange-Id: I1c14646dc8d102cd093be09833c23846781e5e73\n" }, { "commit": "0df097d526adfb83f000775ed8105900d1f8624b", "tree": "17742195f32ef4b0c290032b23813ecd3c2264b9", "parents": [ "7b9ae3fbc847f8b4cb8fa1dfb294423f6c97fa7c" ], "author": { "name": "ghanshyam", "email": "ghanshyammann@gmail.com", "time": "Tue Aug 08 09:28:17 2017 +0300" }, "committer": { "name": "ghanshyam", "email": "ghanshyammann@gmail.com", "time": "Tue Aug 08 09:29:51 2017 +0300" }, "message": "Remove usage of credentials_factory.AdminManager\n\nTempest is making credentials_factory as stable interface\nand will be removing the AdminManager class which is wrapper\nof creating client manager with admin cred.\n\nadmin manager can be instantiated by providing the admin cred\nto clients.Manager.\n\nThis commit removes the usage of AdminManager.\n\nChange-Id: I978e82dcdaa37fbfa71907527be02f03f759c824\n" }, { "commit": "428c44ae9d7d732dada7e2b3696af92ebc61c601", "tree": "750887855614b51e08d1d37335e1602074340a0d", "parents": [ "7b9ae3fbc847f8b4cb8fa1dfb294423f6c97fa7c" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Thu Aug 03 16:00:07 2017 -0400" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Mon Aug 07 18:57:58 2017 +0000" }, "message": "Adds update and delete agent tests\n\nAdds tests for PUT and DELETE endpoints for the os-agents client\nto test_agents_rbac.\n\nChange-Id: I916061e8301876385f3bf1566ed6a2ac14f1467a\nCloses-Bug: #1705796\n" }, { "commit": "8a043fb78da9c00dd0451790c9a82f931bb61ba2", "tree": "5a8535f42135a25fce0f6dca2d29444d2b101cd2", "parents": [ "7b9ae3fbc847f8b4cb8fa1dfb294423f6c97fa7c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sun Aug 06 06:29:05 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Sat Aug 05 06:16:26 2017 +0000" }, "message": "Change rbac_utils.RbacUtils is_admin to function\n\nThis is a trivial change that changes is_admin to a function\n(instead of a property) because properties can only be used\nin the instance context whereas non-class functions can be used\nin both instance and class contexts.\n\nThis allows ``test_tokens_negative_rbac`` to use is_admin()\nnow since it is used in a class context.\n\nChange-Id: I9244f10cd536050986185651421a446fef8e2ade\n" }, { "commit": "03286507585e6c1e5a498b50611d04daa6c9dea3", "tree": "33e92e5c6d8b92129a4994f1f5b8508a1ec149f7", "parents": [ "7b9ae3fbc847f8b4cb8fa1dfb294423f6c97fa7c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jul 31 22:36:11 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Aug 03 03:15:09 2017 +0000" }, "message": "RBAC tests for os-extended-status policies\n\nThis commit adds RBAC tests for os-extended-status\npolicies, the documentation for which can be found here:\n\nhttps://github.com/openstack/nova/blob/master/nova/policies/extended_status.py\n\nTests for both APIs that enforce each policy were added.\n\nChange-Id: I2eb9c7f62d8adbff77dd36f39c3030751d21a894\nImplements: blueprint rbac-tests-for-compute-extended-status\nDepends-On: I1c14646dc8d102cd093be09833c23846781e5e73\n" }, { "commit": "10fdf98c128fc890863c34872e1681a61a8b9cfa", "tree": "ed31ffd7251c03b06f5f0f158ca66b62896523b4", "parents": [ "7b9ae3fbc847f8b4cb8fa1dfb294423f6c97fa7c" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jul 18 04:56:29 2017 +0100" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Wed Aug 02 15:52:15 2017 -0400" }, "message": "Move instance actions test into misc policy actions file\n\nMove instance actions tests into\ntest_server_misc_policy_actions_rbac.py to further increase gate\nstability and decrease gate run time.\n\nThe number of calls to create_test_server() should be minimized\nfor RBAC testing because we don\u0027t do too much modification to the\nresources that are created -- only what\u0027s necessary to trigger the\nAPI action corresponding to the RBAC policy under test. Further,\nminimizing such calls reduces the risk of spinning up too many servers\nconcurrently in our gates: the source of various gate failures as\nlimited resources lead to server faults being raised.\n\nChange-Id: Ie01db6f58229f843684d9b4904defa6ed85b5f17\nPartial-Bug: #1699415\n" }, { "commit": "3d5cd569d5237a003e619f1112a4b879a4a3375f", "tree": "d252ce1972b4562935e6edc784b4f6e6f86c764f", "parents": [ "d8e0d08832041a37b01f224a1f1e1634a4721139", "7be94e80e9d6c358cc32b7f94dcc44633dc5bcc0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Jul 28 18:43:37 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jul 28 18:43:37 2017 +0000" }, "message": "Merge \"Switch to enabled version of identity clients\"" }, { "commit": "7be94e80e9d6c358cc32b7f94dcc44633dc5bcc0", "tree": "98fef7ac7cc83c5306f8289b0d127007c1718cca", "parents": [ "ffa47e6666f3b54865b9bd120a5444718addb626" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Jul 26 02:17:08 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jul 25 18:43:17 2017 +0000" }, "message": "Switch to enabled version of identity clients\n\nPatrole always uses (e.g.) v3 roles client to retrieve\nlist of roles which is bad if the v3 identity service is not enabled.\n\nCases like the following:\n\n self.roles_client \u003d test_obj.os_admin.roles_v3_client\n\nShould be changed to:\n\n self.roles_client \u003d test_obj.os_admin.roles_v3_client \\\n if CONF.identity_feature_enabled.api_v3 \\\n else test_obj.os_admin.roles_client\n\nThis commit switches between the correct identity client\ndepending on the identity version that is enabled in tempest.conf.\nThe v3 client is prioritized as identity v3 is current.\n\nThis commit also corrects/improves upon some documentation errata.\n\nChange-Id: I9a12196f11473ac4e045ae90c4321219beab7ca6\nCloses-Bug: #1702980\n" }, { "commit": "c7880ac4879cceafb4c994d60adf44bbff4d8029", "tree": "62b28133672a91d9f6b0cc6963f7086b7fd18863", "parents": [ "ffa47e6666f3b54865b9bd120a5444718addb626" ], "author": { "name": "dharmendra", "email": "dharmendra.kushwaha@nectechnologies.in", "time": "Tue Jul 25 02:53:36 2017 +0000" }, "committer": { "name": "dharmendra", "email": "dharmendra.kushwaha@nectechnologies.in", "time": "Tue Jul 25 02:54:33 2017 +0000" }, "message": "Replace test.attr with decorators.attr\n\nFunction \u0027tempest.test.attr()\u0027 has moved to \u0027tempest.lib.decorators\n.attr()\u0027 in Pike and will be removed in a future version.\nThis patch replaces the \u0027tempest.test.attr()\u0027 with the \u0027tempest.lib\n.decorators.attr().\u0027\n\nChange-Id: Iab83353750b5dd9592e994fb65f60f2bb8996b33\n" }, { "commit": "ffa47e6666f3b54865b9bd120a5444718addb626", "tree": "f59589fcfd3938483f47c652c85f9e3d8a78c929", "parents": [ "dbd33ea06f2a9bb1d640d81ff18d8a7dfb803662" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Jul 05 03:37:55 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jul 24 19:09:27 2017 +0100" }, "message": "Create rbac utils fixture and refactor tests\n\nThis commit creates a test fixture for rbac_utils.RbacUtils\nand refactors test_rbac_utils tests accordingly. This\nallows other tests to use the fixture as needed, improving\ncode maintenance and readability, as well as the ease\nwith which tests can be written.\n\nSpecifically:\n - adds fixtures file for overriding conf settings and\n for rbac_utils.RbacUtils\n - refactors rbac_utils tests to use the appropriate\n fixture\n\nChange-Id: I2f49137ff71089ecf9764ee1f7887b64185249dd\n" }, { "commit": "c83f85239593e83b4dd9fa59dbf65974824af294", "tree": "a4d7f1685e20aa857ef18f2af568fb426beb801f", "parents": [ "9e7f1ca33095dc37759abe69be831d281261ba2b", "864b0f32966f79ad5d89d8ef2e4ca22cf61a0a0f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 24 17:04:38 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 24 17:04:38 2017 +0000" }, "message": "Merge \"Add missing test for os-instance-usage-audit-log\"" }, { "commit": "9e7f1ca33095dc37759abe69be831d281261ba2b", "tree": "2ff5049f5f1ed2e5383ca9677fa03978365a4a30", "parents": [ "13f689a1b4614aa70a1469606a97fd5cef380b09", "e8d93e0b402dd4547d8c7225d0c8cd8b1587face" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 24 17:04:32 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 24 17:04:32 2017 +0000" }, "message": "Merge \"Remove need to include admin in credentials in base classes\"" }, { "commit": "13f689a1b4614aa70a1469606a97fd5cef380b09", "tree": "0c71ed83cfc1662f1197c66d5609d284a9c5e86c", "parents": [ "b83c9d9a229deb91ca9cf8d0994d37ae433880c8", "0cef808836ef160ec9b41bea587fecd3cdace7e5" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 24 16:34:36 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 24 16:34:36 2017 +0000" }, "message": "Merge \"Unit tests for dynamic policy file discovery\"" }, { "commit": "b83c9d9a229deb91ca9cf8d0994d37ae433880c8", "tree": "014ea6122d140cafba45275e5baeea80f9655468", "parents": [ "7c7b570124ea30c0ce264558cc39581aa1e4081b", "e85d2663b08ea7e9b1173dc1521cc7e86878c78b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 24 16:34:16 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 24 16:34:16 2017 +0000" }, "message": "Merge \"Replace inconsistent skipException messages\"" }, { "commit": "864b0f32966f79ad5d89d8ef2e4ca22cf61a0a0f", "tree": "ba30450c87f142c0837388759d93d45ec05dc3c6", "parents": [ "8c2ab72c70077c31a2a0ced1d3b5eda52ed920f7" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 21 05:37:31 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 21 05:37:31 2017 +0100" }, "message": "Add missing test for os-instance-usage-audit-log\n\nAdd test to validate \"os_compute_api:os-instance-usage-audit-log\"\nagainst ``show_instance_usage_audit_log`` API endpoint.\n\nChange-Id: Ic38272367586815f3b0acd358300621dae2495c9\n" }, { "commit": "e8d93e0b402dd4547d8c7225d0c8cd8b1587face", "tree": "2b76001a832f2c0998ba66ecdb437973f229c596", "parents": [ "c6043b8ad995371a812f4b460eef68c2e751bfa8" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Jul 19 20:52:20 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Wed Jul 19 17:27:39 2017 +0100" }, "message": "Remove need to include admin in credentials in base classes\n\nThis commit removes some excess code from the rbac_base classes,\nincluding defining the auth_provider and setting credentials \u003d\n[\u0027primary\u0027, \u0027admin\u0027]. The credentials array should only be\npopulated with credentials needed by a test class -- but currently\nadmin is provided for rbac_utils, which is poor design.\n\nThis is accomplished by refactoring the constructor in RbacUtils\nto instantiate an admin client manager using get_client_manager\nwhich is available in the instance of tempest.test.BaseTestCase.\nFrom there, it is easy to reference the admin roles client used\nfor switching roles. This is the only reason that admin was\nprovided in the credentials array above.\n\nThe following was changed:\n - refactored RbacUtils constructor to remove need to add\n \u0027admin\u0027 to credentials array\n - refactored rbac_utils functions to avoid using auth_provider\n and to instead reference the auth_provider nested inside\n os_primary\n - adding doctring for RbacUtils\n - refactored unit tests as needed\n\nChange-Id: Id5588f2bf8947c314d46bd3cc0ef8b5c93874fc8\n" }, { "commit": "c6043b8ad995371a812f4b460eef68c2e751bfa8", "tree": "d6a2d713e21f0df12e5dc11cc748cb0d3c3d7696", "parents": [ "530a4457572ece4ff0ffef514ff52d4b3ba3e52e", "ccfa23e3888730ef292cead216ddc1fb68e6f00a" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jul 19 02:33:17 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jul 19 02:33:17 2017 +0000" }, "message": "Merge \"Add missing v3 token related testcases\"" }, { "commit": "ccfa23e3888730ef292cead216ddc1fb68e6f00a", "tree": "179e843b8b32afe0789195f77fc247312d1a9634", "parents": [ "5e08484be65d68a3b7a837b746d406a7be6aa9ca" ], "author": { "name": "Pradeep Kumar", "email": "pk5294@att.com", "time": "Fri May 19 21:09:44 2017 +0530" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Tue Jul 18 18:22:14 2017 +0000" }, "message": "Add missing v3 token related testcases\n\nWe have added scenarios to test_check_token_existence(),\ntest_validate_token() and test_validate_revoke_token()\n\nCo-Authored-By: Nishant Kumar \u003cnk613n@att.com\u003e\nCo-Authored-By: Pramod Kumar Singh \u003cpk110e@att.com\u003e\nCo-Authored-By: Hemanth Nakkina \u003cnh863p@att.com\u003e\n\nChange-Id: I4aadd8016dc30b0fb39f22862806aeb787b3ae75\nDepends-on: I0b95a19162456cbaf524ea6691e7e28c151c6ada\nCloses-Bug: #1691044\n" }, { "commit": "530a4457572ece4ff0ffef514ff52d4b3ba3e52e", "tree": "e9d9ee83746200a97650519e9e1d452e11e78e4f", "parents": [ "e922e1e2d59adb2754087f10c827483ae415e280", "c8a5e2923db0ee21fe223997fcd1cc8fffd14ac1" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Jul 18 17:03:52 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jul 18 17:03:52 2017 +0000" }, "message": "Merge \"Update test.attr to decorators.attr\"" }, { "commit": "c8a5e2923db0ee21fe223997fcd1cc8fffd14ac1", "tree": "2b39327d3c18b5f0a40068735202d88d49c60c5a", "parents": [ "aa48f3af0260b54d8fba9e5ea68ccd1426f576b9" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Thu Apr 20 18:02:07 2017 -0400" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Tue Jul 18 09:25:00 2017 -0400" }, "message": "Update test.attr to decorators.attr\n\nTempest has moved their attr decorator to tempest.lib [0]. This\nchange updates all test.attr decorators to the new location,\nremoving deprecation warnings.\n\n[0] https://review.openstack.org/#/c/456236/\n\nCloses-Bug: #1683952\nChange-Id: Ia0d47ab60f57ae0e1eee65527297f14afce378e0\n" }, { "commit": "e922e1e2d59adb2754087f10c827483ae415e280", "tree": "417df20dfcd0f7dba5fa77d5070c116504984243", "parents": [ "aa48f3af0260b54d8fba9e5ea68ccd1426f576b9" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Mon Jul 17 19:46:29 2017 -0400" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Mon Jul 17 19:46:29 2017 -0400" }, "message": "Updates test_volume_types_extra_specs_rbac\n\nUpdates test_volume_types_extra_specs_rbac to take advantage of\nCinder policy changes [0] and stop tests from skipping due to\ninvalid policy actions.\n\n[0] https://review.openstack.org/#/c/483037/\n\nChange-Id: I35f07148f68703620fb3a3492ab5982ea8b118c2\n" }, { "commit": "aa48f3af0260b54d8fba9e5ea68ccd1426f576b9", "tree": "713a86fbc12e2efa862d84bbc4abd97e957f6c83", "parents": [ "62bcf0fa93a0b25015254ca9c33395ee3b38ec85", "d98273152abbcdefeb40a8712af270c3f1e5d6f3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 17 22:29:51 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 17 22:29:51 2017 +0000" }, "message": "Merge \"Move virtual interfaces test into misc policy actions file\"" }, { "commit": "62bcf0fa93a0b25015254ca9c33395ee3b38ec85", "tree": "9dac73f86804d2ba6af228e81778d2bc0feb169d", "parents": [ "7d94c436a99c97854b65b137a6decdee8036337d", "6c068fcbbed3d148b4f79464bdafac08650e42ab" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 17 19:43:56 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 17 19:43:56 2017 +0000" }, "message": "Merge \"Move config drive tests into misc policy actions file\"" }, { "commit": "7d94c436a99c97854b65b137a6decdee8036337d", "tree": "0b95d9c21e32f6095f798046ff877437f26bd4a8", "parents": [ "d55dec5a73ce15a55b5567c6ba381a013cc7069d", "529988b18131b244c61095abb07f3d0d597f5347" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jul 17 18:40:33 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jul 17 18:40:33 2017 +0000" }, "message": "Merge \"Correct policy action for check_endpoint_group test\"" }, { "commit": "6c068fcbbed3d148b4f79464bdafac08650e42ab", "tree": "401a38f11cd012cc48b314d0da2c0db515a3f564", "parents": [ "6b1a2f489b167baf20f2e6cd421b66acfd3ebf06" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jul 17 00:13:21 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Mon Jul 17 15:11:06 2017 +0000" }, "message": "Move config drive tests into misc policy actions file\n\nThis commit does 3 things:\n 1a) Corrects the \"config_drive\" tests by aligning the\n tests with the nova policy documentation [0] which\n states that \"config_drive\" is to added the response\n body of showing a server or listing servers with details\n if policy enforcement passes.\n 1b) Consequently, 2 tests are added: 1 for show and 1 for\n list with details.\n 2) Moves both tests into the misc policy actions file to\n increase gate stability and decrease gate run time.\n\nThe number of calls to create_test_server() should be minimized\nfor RBAC testing because we don\u0027t do too much modification to the\nresources that are created -- only what\u0027s necessary to trigger the\nAPI action corresponding to the RBAC policy under test. Further,\nminimizing such calls reduces the risk of spinning up too many servers\nconcurrently in our gates: the source of various gate failures as\nlimited resources lead to server faults being raised.\n\n[0] https://github.com/openstack/nova/blob/master/nova/policies/config_drive.py\n\nChange-Id: If54fce795c2289b097b617cad7268dc9a3d9cf1c\nPartial-Bug: #1699415\n" }, { "commit": "6b1a2f489b167baf20f2e6cd421b66acfd3ebf06", "tree": "e02640c3456de3fdd5f4c2b2e17c54429d655480", "parents": [ "8b8876ee0b72812a9e879e9a9954823611422d73" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 14 16:01:57 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Fri Jul 14 19:17:26 2017 +0100" }, "message": "[Gate fix] Fix volumes_client AttributeError\n\nThis commit fixes AttributeErrors related to a recent Tempest\ncommit Icc2e12f06c3b4899f934f000e191552f4a5cd2a9 which changed\nthe names of certain clients that are instantiated in\ntempest.clients. This commit changes the clients that no longer\nexist to the appropriately versioned client.\n\nChange-Id: I1d70f69dd35aeae320a7db4f0fc8f1bab34b37b4\n" }, { "commit": "e85d2663b08ea7e9b1173dc1521cc7e86878c78b", "tree": "22e5c5d49a961c0e5091794fa2045029997eaa6b", "parents": [ "3ab2c357e8510e3d1aa562c29d4b72e9f24e1477" ], "author": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Wed Jul 12 18:02:11 2017 -0400" }, "committer": { "name": "Samantha Blanco", "email": "samantha.blanco@att.com", "time": "Thu Jul 13 11:00:32 2017 -0400" }, "message": "Replace inconsistent skipException messages\n\nMakes skipException message consistent across RBAC base classes.\n\nChange-Id: I32e18111d69e3077749386bd3c81e746bdd43e23\nCloses-Bug: #1703402\n" }, { "commit": "529988b18131b244c61095abb07f3d0d597f5347", "tree": "9f440181fe4bcf32c560d616d7b08809861e0eb0", "parents": [ "8b8876ee0b72812a9e879e9a9954823611422d73" ], "author": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Jul 13 05:28:14 2017 +0100" }, "committer": { "name": "Felipe Monteiro", "email": "felipe.monteiro@att.com", "time": "Thu Jul 13 05:28:14 2017 +0100" }, "message": "Correct policy action for check_endpoint_group test\n\nCurrently ``check_endpoint_group`` test is testing the wrong\npolicy action causing the test to be skipped in the gates [0].\nThis commit corrects the policy action to what is actually\nenforced in the code [1].\n\n[0] http://logs.openstack.org/10/483110/1/check/gate-tempest-dsvm-patrole-member-ubuntu-xenial/f821202/console.html#_2017-07-12_22_43_39_986182\n[1] https://github.com/openstack/keystone/blob/a43d5a6893a5753f8567206032e779930ddd4321/keystone/common/policies/endpoint_group.py#L37\n\nChange-Id: I0cb7c513513674de3bddb7595899607780ae45b6\n" } ], "next": "0cef808836ef160ec9b41bea587fecd3cdace7e5" }