summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.zuul.yaml6
-rw-r--r--keystone/common/sql/migrations/versions/27e647c0fad4_initial_version.py2
-rw-r--r--keystone/locale/zh_CN/LC_MESSAGES/keystone.po18
-rw-r--r--keystone/tests/unit/ksfixtures/warnings.py17
-rw-r--r--keystone/tests/unit/test_cli.py20
-rw-r--r--releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po96
-rw-r--r--tox.ini5
7 files changed, 148 insertions, 16 deletions
diff --git a/.zuul.yaml b/.zuul.yaml
index 1ccf8741c..ef9782f4c 100644
--- a/.zuul.yaml
+++ b/.zuul.yaml
@@ -35,10 +35,12 @@
- job:
name: keystone-dsvm-py3-functional-fips
parent: keystone-dsvm-py3-functional
- nodeset: devstack-single-node-centos-8-stream
+ nodeset: devstack-single-node-centos-9-stream
description: |
- Functional testing for a FIPS enabled Centos 8 system
+ Functional testing for a FIPS enabled Centos 9 system
pre-run: playbooks/enable-fips.yaml
+ vars:
+ nslookup_target: 'opendev.org'
- job:
name: keystone-dsvm-functional-federation-opensuse15
diff --git a/keystone/common/sql/migrations/versions/27e647c0fad4_initial_version.py b/keystone/common/sql/migrations/versions/27e647c0fad4_initial_version.py
index c57cdf13d..eec97c573 100644
--- a/keystone/common/sql/migrations/versions/27e647c0fad4_initial_version.py
+++ b/keystone/common/sql/migrations/versions/27e647c0fad4_initial_version.py
@@ -1100,7 +1100,7 @@ def upgrade():
bind = op.get_bind()
meta = sql.MetaData()
- project = sql.Table('project', meta, autoload_with=bind.engine)
+ project = sql.Table('project', meta, autoload_with=bind)
root_domain_project = _generate_root_domain_project()
op.execute(project.insert().values(**root_domain_project))
diff --git a/keystone/locale/zh_CN/LC_MESSAGES/keystone.po b/keystone/locale/zh_CN/LC_MESSAGES/keystone.po
index 8c471382f..cb194dc71 100644
--- a/keystone/locale/zh_CN/LC_MESSAGES/keystone.po
+++ b/keystone/locale/zh_CN/LC_MESSAGES/keystone.po
@@ -11,16 +11,18 @@
# 颜海峰 <yanheven@gmail.com>, 2014
# Andreas Jaeger <jaegerandi@gmail.com>, 2016. #zanata
# Eric Lei <1165970798@qq.com>, 2016. #zanata
+# Research and Development Center UnitedStack <dev@unitedstack.com>, 2022. #zanata
msgid ""
msgstr ""
"Project-Id-Version: keystone VERSION\n"
"Report-Msgid-Bugs-To: https://bugs.launchpad.net/openstack-i18n/\n"
-"POT-Creation-Date: 2022-05-20 04:41+0000\n"
+"POT-Creation-Date: 2022-07-01 18:11+0000\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2016-09-28 03:23+0000\n"
-"Last-Translator: Eric Lei <1165970798@qq.com>\n"
+"PO-Revision-Date: 2022-06-14 12:29+0000\n"
+"Last-Translator: Research and Development Center UnitedStack "
+"<dev@unitedstack.com>\n"
"Language: zh_CN\n"
"Plural-Forms: nplurals=1; plural=0;\n"
"Generated-By: Babel 2.0\n"
@@ -729,6 +731,14 @@ msgstr "用户类型 %s 不受支持"
msgid "You are not authorized to perform the requested action."
msgstr "您没有授权完成所请求的操作。"
+msgid ""
+"You cannot change your password at this time due to password policy "
+"disallowing password changes. Please contact your administrator to reset "
+"your password."
+msgstr ""
+"因为密码策略被设置为禁止修改密码,目前您不能更改密码。请联系管理员重置您的密"
+"码。"
+
#, python-format
msgid ""
"You cannot change your password at this time due to the minimum password "
@@ -737,7 +747,7 @@ msgid ""
"contact your administrator to reset your password."
msgstr ""
"没有达到密码最小使用时长,目前您不能更改密码。一旦您修改了密码,在下次可被修"
-"改前该密码必须使用%(min_age_days)d天.请在%(days_left)d天后重试,或者联系管理"
+"改前该密码必须使用%(min_age_days)d天。请在%(days_left)d天后重试,或者联系管理"
"员重置您的密码。"
msgid ""
diff --git a/keystone/tests/unit/ksfixtures/warnings.py b/keystone/tests/unit/ksfixtures/warnings.py
index 9e3a9c4d4..43519925f 100644
--- a/keystone/tests/unit/ksfixtures/warnings.py
+++ b/keystone/tests/unit/ksfixtures/warnings.py
@@ -35,6 +35,23 @@ class WarningsFixture(fixtures.Fixture):
module='^keystone\\.',
)
+ warnings.filterwarnings(
+ 'ignore',
+ message=(
+ 'Policy enforcement is depending on the value of '
+ '(token|group_ids). '
+ 'This key is deprecated. Please update your policy '
+ 'file to use the standard policy values.'
+ ),
+ )
+
+ # NOTE(stephenfin): Ignore scope check UserWarnings from oslo.policy.
+ warnings.filterwarnings(
+ 'ignore',
+ message="Policy .* failed scope check",
+ category=UserWarning,
+ )
+
# TODO(stephenfin): This will be fixed once we drop sqlalchemy-migrate
warnings.filterwarnings(
'ignore',
diff --git a/keystone/tests/unit/test_cli.py b/keystone/tests/unit/test_cli.py
index c94d8c196..2f9bed064 100644
--- a/keystone/tests/unit/test_cli.py
+++ b/keystone/tests/unit/test_cli.py
@@ -754,18 +754,28 @@ class CliDBSyncTestCase(unit.BaseTestCase):
self.version = None
def setUp(self):
- super(CliDBSyncTestCase, self).setUp()
+ super().setUp()
self.config_fixture = self.useFixture(oslo_config.fixture.Config(CONF))
self.config_fixture.register_cli_opt(cli.command_opt)
- upgrades.offline_sync_database_to_version = mock.Mock()
- upgrades.expand_schema = mock.Mock()
- upgrades.migrate_data = mock.Mock()
- upgrades.contract_schema = mock.Mock()
+
+ self.patchers = patchers = [
+ mock.patch.object(upgrades, "offline_sync_database_to_version"),
+ mock.patch.object(upgrades, "expand_schema"),
+ mock.patch.object(upgrades, "migrate_data"),
+ mock.patch.object(upgrades, "contract_schema"),
+ ]
+ for p in patchers:
+ p.start()
self.command_check = False
self.command_expand = False
self.command_migrate = False
self.command_contract = False
+ def tearDown(self):
+ for p in self.patchers:
+ p.stop()
+ super().tearDown()
+
def _assert_correct_call(self, mocked_function):
for func in [upgrades.offline_sync_database_to_version,
upgrades.expand_schema,
diff --git a/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po b/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
index 150a23c39..713bd7089 100644
--- a/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
+++ b/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
@@ -1,15 +1,16 @@
# Andi Chandler <andi@gowling.com>, 2017. #zanata
# Andi Chandler <andi@gowling.com>, 2018. #zanata
# Andi Chandler <andi@gowling.com>, 2020. #zanata
+# Andi Chandler <andi@gowling.com>, 2022. #zanata
msgid ""
msgstr ""
"Project-Id-Version: Keystone Release Notes\n"
"Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2022-05-20 04:40+0000\n"
+"POT-Creation-Date: 2022-07-01 18:09+0000\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2020-12-19 01:35+0000\n"
+"PO-Revision-Date: 2022-06-20 11:10+0000\n"
"Last-Translator: Andi Chandler <andi@gowling.com>\n"
"Language-Team: English (United Kingdom)\n"
"Language: en_GB\n"
@@ -81,6 +82,9 @@ msgstr "13.0.2"
msgid "13.0.3"
msgstr "13.0.3"
+msgid "13.0.4-9"
+msgstr "13.0.4-9"
+
msgid "14.0.0"
msgstr "14.0.0"
@@ -93,21 +97,51 @@ msgstr "14.1.0"
msgid "14.2.0"
msgstr "14.2.0"
+msgid "14.2.0-7"
+msgstr "14.2.0-7"
+
msgid "15.0.0"
msgstr "15.0.0"
msgid "15.0.1"
msgstr "15.0.1"
+msgid "15.0.1-9"
+msgstr "15.0.1-9"
+
msgid "16.0.0"
msgstr "16.0.0"
msgid "16.0.1"
msgstr "16.0.1"
+msgid "16.0.2"
+msgstr "16.0.2"
+
msgid "17.0.0"
msgstr "17.0.0"
+msgid "17.0.1"
+msgstr "17.0.1"
+
+msgid "18.0.0"
+msgstr "18.0.0"
+
+msgid "18.1.0"
+msgstr "18.1.0"
+
+msgid "19.0.0"
+msgstr "19.0.0"
+
+msgid "19.0.0-8"
+msgstr "19.0.0-8"
+
+msgid "20.0.0"
+msgstr "20.0.0"
+
+msgid "21.0.0"
+msgstr "21.0.0"
+
msgid "8.0.1"
msgstr "8.0.1"
@@ -291,6 +325,15 @@ msgstr ""
"Certain variables in ``keystone.conf`` now have options, which determine if "
"the user's setting is valid."
+msgid ""
+"Change the min value of pool_retry_max to 1. Setting this value to 0 caused "
+"the pool to fail before connecting to ldap, always raising "
+"MaxConnectionReachedError."
+msgstr ""
+"Change the min value of pool_retry_max to 1. Setting this value to 0 caused "
+"the pool to fail before connecting to ldap, always raising "
+"MaxConnectionReachedError."
+
msgid "Configuring per-Identity Provider WebSSO is now supported."
msgstr "Configuring per-Identity Provider WebSSO is now supported."
@@ -457,6 +500,24 @@ msgstr ""
"this option is set back to `False`."
msgid ""
+"If you are affected by this bug, a fix in the keystone database will be "
+"needed so we recommend to dump the users' tables before doing this process:"
+msgstr ""
+"If you are affected by this bug, a fix in the keystone database will be "
+"needed so we recommend to dump the users' tables before doing this process:"
+
+msgid ""
+"If you are affected by this bug, you must remove stale role assignments "
+"manually. The following is an example SQL statement you can use to fix the "
+"issue, but you should verify it's applicability to your deployment's SQL "
+"implementation and version."
+msgstr ""
+"If you are affected by this bug, you must remove stale role assignments "
+"manually. The following is an example SQL statement you can use to fix the "
+"issue, but you should verify it's applicability to your deployment's SQL "
+"implementation and version."
+
+msgid ""
"In ``keystone-paste.ini``, using ``paste.filter_factory`` is deprecated in "
"favor of the \"use\" directive, specifying an entrypoint."
msgstr ""
@@ -675,6 +736,9 @@ msgstr ""
msgid "Queens Series Release Notes"
msgstr "Queens Series Release Notes"
+msgid "Rocky Series Release Notes"
+msgstr "Rocky Series Release Notes"
+
msgid ""
"Routes and SQL backends for the contrib extensions have been removed, they "
"have been incorporated into keystone and are no longer optional. This "
@@ -766,6 +830,9 @@ msgstr ""
"``validate_token(self, token_ref)``. If using a custom token provider, "
"update the custom provider accordingly."
+msgid "Stein Series Release Notes"
+msgstr "Stein Series Release Notes"
+
msgid ""
"Support for writing to LDAP has been removed. See ``Other Notes`` for more "
"details."
@@ -1392,6 +1459,9 @@ msgstr ""
msgid "Tokens can now be cached when issued."
msgstr "Tokens can now be cached when issued."
+msgid "Train Series Release Notes"
+msgstr "Train Series Release Notes"
+
msgid ""
"UUID token provider ``[token] provider=uuid`` has been deprecated in favor "
"of Fernet tokens ``[token] provider=fernet``. With Fernet tokens becoming "
@@ -1427,6 +1497,15 @@ msgstr ""
"Using the full path to the driver class is deprecated in favour of using the "
"entrypoint. In the Mitaka release, the entrypoint must be used."
+msgid "Ussuri Series Release Notes"
+msgstr "Ussuri Series Release Notes"
+
+msgid "Victoria Series Release Notes"
+msgstr "Victoria Series Release Notes"
+
+msgid "Wallaby Series Release Notes"
+msgstr "Wallaby Series Release Notes"
+
msgid ""
"We have added the ``password_expires_at`` attribute to the user response "
"object."
@@ -1448,6 +1527,12 @@ msgstr ""
"Write support for the LDAP has been removed in favour of read-only support. "
"The following operations are no longer supported for LDAP:"
+msgid "Xena Series Release Notes"
+msgstr "Xena Series Release Notes"
+
+msgid "Yoga Series Release Notes"
+msgstr "Yoga Series Release Notes"
+
msgid ""
"[`Bug 1645487 <https://bugs.launchpad.net/keystone/+bug/1645487>`_] Added a "
"new PCI-DSS feature that will require users to immediately change their "
@@ -1786,6 +1871,13 @@ msgstr "lt - password expires before the timestamp"
msgid "lte - password expires at or before timestamp"
msgstr "lte - password expires at or before timestamp"
+msgid ""
+"mysqldump -h <mysql host> -p -P <mysql port> -u keystone keystone "
+"federated_user local_user user > user_tables.sql"
+msgstr ""
+"mysqldump -h <mysql host> -p -P <mysql port> -u keystone keystone "
+"federated_user local_user user > user_tables.sql"
+
msgid "neq - password expires not at the timestamp"
msgstr "neq - password expires not at the timestamp"
diff --git a/tox.ini b/tox.ini
index 7792f5114..b1b1fad4c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -4,9 +4,10 @@ envlist = py39,pep8,api-ref,docs,genconfig,genpolicy,releasenotes,protection
ignore_basepython_conflict = true
[testenv]
-usedevelop = True
basepython = python3
-setenv = VIRTUAL_ENV={envdir}
+usedevelop = True
+setenv =
+ PYTHONDONTWRITEBYTECODE=1
deps =
-c{env:UPPER_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
-r{toxinidir}/test-requirements.txt