summaryrefslogtreecommitdiff
path: root/lower-constraints.txt
Commit message (Collapse)AuthorAgeFilesLines
* Fix avoid deprecation warnings from policyRico Lin2021-03-121-1/+1
| | | | | | | | | | | | | | | | We received huge amount of warnings during service start. Most about stop using `deprecated_reason` and `deprecated_since` by `policy.DocumentedRuleDefault` directly. And should use them under `policy.DeprecatedRule instead. This patch apply for above suggestion. Also bump oslo.policy lower-constraints and requirements to `3.7.0` to alias policy behavior. Story: 2008707 Task: 42041 Change-Id: Iefcfc30a051fe25ccc5121c7ddb817e8c271fcb6
* Implement secure RBACLance Bragstad2021-03-021-1/+2
| | | | | | | | | | | | | | | | | | | | | This commit updates default policies to account for system scope and default roles. This is part of a broader change to provide a consistent and secure authorization experience across OpenStack projects. - Introduces basic/reusable check strings in base.py - Implements secure RBAC for build info API - Implements secure RBAC for the action API - Implements secure RBAC for cloud formations - Implements secure RBAC for events - Implements secure RBAC for the resource API - Implements secure RBAC for the service API - Implements secure RBAC for software configs - Implements secure RBAC for software deployments - Implements secure RBAC for stacks - Adds unit tests for legacy and new secure-rbac policies. Change-Id: Iff1e39481ea3b1f00bd89dba4a00aed30334ecec
* Merge "Update doc8 version"Zuul2021-01-191-1/+1
|\
| * Update doc8 versionwangzihao2021-01-061-1/+1
| | | | | | | | | | | | The doc8 lib supports Py36 starting from version 0.8.1 Change-Id: Ie6d64485622381031130fa12f963eab5a6a9c555
* | Bump requirements to support secure RBAC effortLance Bragstad2021-01-111-11/+11
|/ | | | | | | | | | | | | | The broader OpenStack community is working towards implementing secure RBAC, which is a common set of personas (role and scope permutations) that deliver the most common asks for custom policies. It also addresses long-standing issues with tenancy and enforce scope checking. This commit updates the requirements for oslo.log, oslo.context, oslo.i18n, oslo.policy, oslo.serialization and keystonemiddleware, which are necessary for implementing this work. Subsequent patches will go through and update the default policies. Change-Id: Ib28f1b333f032b8c9f960a2510e4d23487541631
* Align lower-constraints for new pipRabi Mishra2020-12-091-5/+9
| | | | | | | New pip version is quite strict and does not allow conflicting minimum version deps in lower-constraints. Change-Id: Ie524c54e3b982bc6b0786c875d34d177444ec6fc
* Fix lower-constraints errorsEmilien Macchi2020-09-101-12/+12
| | | | | | | | | | | | | | | | | | | | | | | This patch changes the lower-constraint requirements to make them py3.8 compatible. See https://bugs.launchpad.net/nova/+bug/1886298 Markupsafe==1.1.1 PyMySQL==0.8.0 PyYAML==3.13 cffi==1.14.0 greenlet==0.4.15 kombu==5.0.1 lxml==4.5.0 oslo.db==6.0.0 paramiko==2.7.1 psycopg2==2.8 sqlalchemy-migrate==0.13.0 tenacity==6.1.0 Also update the test-setup.sh to work with recent version of mysql. Change-Id: Ibe60d1e536f0e887eceea32b7cb4eec6318e96af Partial-Bug: #1886298
* Use correct attribute from entrypointRabi Mishra2020-07-151-1/+1
| | | | | | | | | | | | | | The type of the entry point objects returned in stevedore has been changed from`pkg_resources.EntryPoint` to `importlib.metadata.EntryPoint`[1] and it does not have module_name attribute. It also bumps requirements/lower-constraints as stevedore==3.1.0 is not backward compatible. [1] https://review.opendev.org/#/c/740515/ Task: 40355 Change-Id: Icd68f6eab73e44406f2ff5073636dcdd111e00ea
* Use unittest.mock instead of mockHervé Beraud2020-06-101-1/+0
| | | | | | | | The mock third party library was needed for mock support in py2 runtimes. Since we now only support py36 and later, we can use the standard lib unittest.mock module instead. Change-Id: Ie0e43904d375e542ca00cd43b3c84c7afb31ee85
* Update hacking for Python3Andreas Jaeger2020-04-161-4/+0
| | | | | | | | | | | | | | | | The repo is Python 3 now, so update hacking to version 3.0 which supports Python 3. Update local hacking checks for new flake8. Ignore new warnings, they will be fixed in followup. Remove hacking and friends from lower-constraints, they are not needed to be installed at run-time. Add Pygments to lower-constraints to pass requirements-check. Change-Id: I20da1309e4d65707130fe517f013d3ed625bf94c
* Add ironic client plugin supportricolin2020-04-091-0/+1
| | | | | Change-Id: I2f3ee94424c4dab75fbcef6f8b32e565b45684e4 Task: 36285
* Sync lower contraint with test-requirementricolin2020-04-091-0/+1
| | | | Change-Id: Ic2b9387efa9c98f8720d471f653cf55530cfc19b
* Merge "New resource OS::Neutron::ExtraRouteSet"Zuul2020-01-221-1/+1
|\
| * New resource OS::Neutron::ExtraRouteSetBence Romsics2020-01-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I hope I remembered all the discussion points we had about how to design this plugin, so: * Instead of changing OS::Neutron::ExtraRoute we introduce OS::Neutron::ExtraRouteSet so we can take advantage of Neutron API's ability to add/remove multiple extra routes at once. * Addition and removal of extra routes is supposed to be atomic with Neutron extension 'extraroute-atomic'. An update involves a removal and an addition, therefore an update is not atomic operation. However unless the responsibility for an extra route is moved from one stack to another that should not be a problem. * Sharing the responsibility for an extra route between stacks (that is multiple stacks defining the same extra route) is not supported due to the Neutron API not allowing this. Let me know what did I forget. Example template: resources: extrarouteset0: type: OS::Neutron::ExtraRouteSet properties: router: { get_resource: router0 } routes: - destination: 10.0.0.0/24 nexthop: 10.0.0.10 - destination: 10.0.1.0/24 nexthop: 10.0.0.11 ... Change-Id: Ic1fe593d9821d844fd124b0212d444f6e3a0015e Depends-On: https://review.opendev.org/675900 Story: #2005522 Task: #36264
* | Add support for Octavia's Flavor and FlavorProfile resourcesGregory Thiemonge2020-01-201-1/+1
|/ | | | | | | | | | | | | Added OS::Octavia::Flavor and OS::Octavia::FlavorProfile support. Added flavor parameter in OS::Octavia::LoadBalancer. Flavor and FlavorProfile allow to configure/tune Load Balancer capabilities (enable/disable HA, etc...) Story: 2007081 Task: 37993 Change-Id: If31a888e5867ac6941ff0d515d4b88894fb97572
* Added a Vitrage clientIfat Afek2019-12-191-0/+1
| | | | | | Story: 2002684 Task: 23116 Change-Id: If05f0907d8f43f64327c7774170e5b559286fc06
* Use client_retry_limit for keystone connection retryRabi Mishra2019-12-031-1/+1
| | | | | | | | Use the existing client_retry_limit option. Change-Id: If3dd260cad088c9783e4c31ba18d7f261f7d68c9 Closes-Bug: #1840235 Task: 36287
* Bump lower constraint of python-zunclientHongbin Lu2019-09-011-1/+1
| | | | | | | Projects that depends on python-zunclient should use the latest version as lower constraint. Change-Id: I0d90720fab98192a191bb9ce5dae5190f2d23051
* Fix lower-constraints tox env to use proper constraintsRabi Mishra2019-04-101-5/+5
| | | | | | | - Bumps some of the lower constraints - Fixes common/endpoint_utils.py to fallback to use auth_uri. Change-Id: Ief0868d5feef3ee6b0689c6be27649ff009fbbcc
* Add a Blazar Lease resourceKazunori Shinohara2019-02-181-1/+1
| | | | | | | | | | | Add a OS::Blazar::Lease resource plugin to support Blazar which is a resource reservation services in OpenStack. Co-author: Asmita Singh <Asmita.Singh@nttdata.com> Change-Id: I7683599d9e9443372d1f585985cee7c10fd08581 Task: 22882 Story: 2002085
* Add heat-status upgrade check command frameworkwhoami-rajat2018-10-221-0/+1
| | | | | | | | | | | This adds basic framework for heat-status upgrade check commands. For now it has only "check_placeholder" check implemented. Real checks can be added to this tool in the future. Change-Id: I83629184b49a6cf91928df702db23156433d99f6 Story: 2003657 Task: 26131
* Merge "Clean up test requirements"Zuul2018-08-031-3/+0
|\
| * Clean up test requirementsPavlo Shchelokovskyy2018-07-271-3/+0
| | | | | | | | | | | | | | | | | | | | remove os-testr and testrepository in favor of stestr, and remove qpid-python (does not seem to be imported anywhere). Also adjust docs to describe running tests with stestr instead of testrepository. Change-Id: I12088ea2bf2475963db58d6e8e83fd6abe6f9b3f
* | Merge "Enhancements to CIDR and IP address constraints."Zuul2018-07-271-0/+1
|\ \
| * | Enhancements to CIDR and IP address constraints.Nakul Dahiwade2018-07-251-0/+1
| |/ | | | | | | | | | | | | | | | | | | | | | | | | Currently the constraints do not reject an ipaddress for ipv4 which have fewer than 3 dots such as 'a' or 'a.b' or 'a.b.c'. This enhancement provides an extra check that an ipv4 address has syntax: 'a.b.c.d' This also applies to CIDR Change-Id: Ia7ec8bf107abd169b6b6a91d0b8bb913fc3cc7b9 Story: 2002552 Task: 22114
* | Merge "zun: use containers.update for renaming"Zuul2018-07-271-1/+1
|\ \
| * | zun: use containers.update for renamingHongbin Lu2018-07-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old way of renaming is duplicated [1]. This patch uses the new way to rename a container. In addition, this patch also bump the version of python-zunclient to 2.0.0 [1] https://review.openstack.org/#/c/557595/ Change-Id: I4ef36a3c4a805b3e041fcb9456c297e59865485c
* | | Merge "Add Blazar client plugin to Heat"Zuul2018-07-271-0/+1
|\ \ \
| * | | Add Blazar client plugin to Heatkaz_shinohara2018-07-121-0/+1
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | Add a Blazar client plugin which will be used by a couple of Balazar resources under development. Change-Id: I0f68fc0525db3ba299d77019a102f24b9d3cea87 Task: 19754 Story: 2002085
* | | Adds doc8 check to pep8Dao Cong Tien2018-07-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds doc8 check for .rst files to pep8. Files that fail doc8 check are also fixed. Ignore D001 of doc8 check. This requires lot of changes and should be done in a separated patch. Change-Id: I7732abc55ec27026efbf56663ba02ff27e8ec847
* | | Bump monascaclient to at less 1.12.0ricolin2018-07-181-1/+1
| |/ |/| | | | | | | | | Bump mocascaclient to avoid issue in story 2002978 Change-Id: Ibe5d6469de8d18f08eeb2bfb48dfdd57b63eb62d
* | Destroy mox foreverZane Bitter2018-07-051-1/+0
|/ | | | Change-Id: Ib983af3392760367c4ce6256456de70d1078fbba
* Fix lower-constraintsZane Bitter2018-04-111-66/+67
| | | | | | | | | In the course of switching over to lower-constraints, the lower constraints got out of sync with the requirements. This change fixes the constraints using the script mentioned in http://lists.openstack.org/pipermail/openstack-dev/2018-April/129056.html Change-Id: Iae317fa745862ebde4115ca8e77a26c6c9be20ac
* add lower-constraints jobDoug Hellmann2018-03-221-0/+159
Create a tox environment for running the unit tests against the lower bounds of the dependencies. Create a lower-constraints.txt to be used to enforce the lower bounds in those tests. Add openstack-tox-lower-constraints job to the zuul configuration. See http://lists.openstack.org/pipermail/openstack-dev/2018-March/128352.html for more details. Change-Id: I72fd5f8c87133713cd272de210b7e957880f48f9 Depends-On: https://review.openstack.org/555034 Signed-off-by: Doug Hellmann <doug@doughellmann.com>