delta/openstack/keystonemiddleware.git - opendev.org: openstack/keystonemiddleware.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Wallaby: Update classifiers according to tested runtimesstable/wallaby	Takashi Kajinami	2022-06-07	1	-0/+3
\| \| \| \|	Change-Id: I5eadf5c5dee5b8d0897e4aa0f4d53899d51136e1
*	Wallaby: Update Python 3 job template	Takashi Kajinami	2022-06-08	1	-1/+1
\| \| \| \| \| \| \| \| \|	We should use the template corresponding to the release. Note: This is pseudo-cherry-pick of master commit because we should use the different job template in stable branches. Change-Id: I659fb6cd3eb5be92c1c5568ee417f1ee32e7124f
*	Update TOX_CONSTRAINTS_FILE for stable/wallaby	OpenStack Release Bot	2022-06-07	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \|	Update the URL to the upper-constraints file to point to the redirect rule on releases.openstack.org so that anyone working on this branch will switch to the correct upper-constraints list automatically when the requirements repository branches. Until the requirements repository has as stable/wallaby branch, tests will continue to use the upper-constraints list on master. Change-Id: I83bb9733bdca5500551bcae50218b9bec765983f
*	Update .gitreview for stable/wallaby	OpenStack Release Bot	2022-06-08	2	-1/+5
\| \| \| \| \| \|	... and make lower-constraints job non-voting. Change-Id: I0e247c0fb76f717ad98722221013502dc4d38f58
*	Merge "[goal] Migrate testing to ubuntu focal"wallaby-em 9.2.0	Zuul	2020-09-10	2	-4/+4
\|\
\| *	[goal] Migrate testing to ubuntu focal	Ghanshyam Mann	2020-09-09	2	-4/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	As per victoria cycle testing runtime and community goal[1] we need to migrate upstream CI/CD to Ubuntu Focal(20.04). Fixing: - bug#1886298 Bump the lower constraints for required deps which added python3.8 support in their later version. Story: #2007865 Task: #40190 Closes-Bug: #1886298 [1] https://governance.openstack.org/tc/goals/selected/victoria/migrate-ci-cd-jobs-to-ubuntu-focal Change-Id: I602c3ce7c94a039e3fd550cbb47a8e8f095aacea
* \|	Merge "Use unittest.mock instead of third party mock"	Zuul	2020-08-24	12	-12/+13
\|\ \ \| \|/ \|/\|
\| *	Use unittest.mock instead of third party mock	Sean McGinnis	2020-04-18	12	-12/+13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Now that we no longer support py27, we can use the standard library unittest.mock module instead of the third party mock lib. Change-Id: Idc319f3f8a3ddd57cba91e4cefc66dbb18d5cc22 Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
* \|	Merge "Change the default Identity endpoint to internal"victoria-em 9.1.0 stable/victoria	Zuul	2020-07-06	3	-5/+16
\|\ \
\| * \|	Change the default Identity endpoint to internal	Jens Harbott	2020-06-14	3	-5/+16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	In [0] the ``interface``option was added in order to allow the Identity endpoint that is being used when validating tokens to be configured by the deployer. Change the default to using the internal endpoint, as that should be what most deployments will end up using. [0] https://review.opendev.org/651790 Depends-On: https://review.opendev.org/651492 Closes-Bug: 1830002 Change-Id: I0ce8b6d8cd408c7fac8107972e7be70839e337fb
* \| \|	Imported Translations from Zanata	OpenStack Proposal Bot	2020-06-16	1	-4/+36
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	For more information about this automatic import see: https://docs.openstack.org/i18n/latest/reviewing-translation-import.html Change-Id: I03d472ad957308f098363b3377a8794e9e3d437a
* \| \|	Switch to newer openstackdocstheme and reno versions	Andreas Jaeger	2020-05-21	4	-12/+12
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Switch to openstackdocstheme 2.2.1 and reno 3.1.0 versions. Using these versions will allow especially: * Linking from HTML to PDF document * parallelizing building of documents Update Sphinx version as well. Remove the doc requirements from lower-constraints, they are not needed during installation. openstackdocstheme renames some variables, so follow the renames. A couple of variables are also not needed anymore, remove them. Set openstackdocs_pdf_link to link to PDF file. Change pygments_style to 'native' since old theme version always used 'native' and the theme now respects the setting and using 'sphinx' can lead to some strange rendering. See also http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html Change-Id: Ic7c901ff19aa073b6e003ccb95aaf77886f20152
* \| \|	Update master for stable/ussuri	OpenStack Release Bot	2020-04-02	2	-0/+7
\| \|/ \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Add file to the reno documentation build to show release notes for stable/ussuri. Use pbr instruction to increment the minor version number automatically so that master versions are higher than the versions on stable/ussuri. Change-Id: Iedcc2750dc0bdfdabb9d03a0b153aeeae6c0b58e Sem-Ver: feature
* \|	Merge "Update hacking for Python3"ussuri-em 9.0.0	Zuul	2020-03-30	4	-4/+6
\|\ \
\| * \|	Update hacking for Python3	Andreas Jaeger	2020-03-30	4	-4/+6
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The repo is Python 3 now, so update hacking to version 3.0 which supports Python 3. Blacklist: W504 line break after binary operator W503 line break before binary operator Fix other problems found Change-Id: I2fb257a4f42b499df3702f3e8f3c99ecb28557d6
* \| \|	Have middlewarearchitecture doc reference auth_type option	Tim Burke	2020-03-20	1	-5/+5
\|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	We literally say in (the rendered version of) the same doc: # Authentication type to load (string value) # Deprecated group/name - [keystone_authtoken]/auth_plugin #auth_type = <None> Looks like auth_plugin has been deprecated for quite some time: https://opendev.org/openstack/keystoneauth/commit/a56ed4218 Change-Id: I2dafa0cb28f017667497e0a6585d96a8cd090d5f
* \|	Remove universal wheel configuration	Ben Nemec	2020-02-06	1	-2/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Now that we've dropped py2 support we shouldn't be setting this anymore. Change-Id: I6c5f0a87ac7551674ce09f5fde5fdbce103e2a47
* \|	[ussuri][goal] Drop python 2.7 support and testing	Vishakha Agarwal	2020-01-07	5	-16/+10
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	OpenStack is dropping the py2.7 support in ussuri cycle. keystonemiddleware is ready with python 3 and ok to drop the python 2.7 support. Complete discussion & schedule can be found in - http://lists.openstack.org/pipermail/openstack-discuss/2019-October/010142.html - https://etherpad.openstack.org/p/drop-python2-support Ussuri Communtiy-wide goal: https://governance.openstack.org/tc/goals/selected/ussuri/drop-py27.html Change-Id: Ia6f0e14efd19b0b98227258e7264b4850a197f4f
* \|	Merge "Update the constraints url"	Zuul	2020-01-02	1	-1/+1
\|\ \
\| * \|	Update the constraints url	pengyuesheng	2019-09-20	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	For more detail, see http://lists.openstack.org/pipermail/openstack-discuss/2019-May/006478.html Change-Id: I89648da5b9e8579d3ef40b840fb81c76596a785a
* \| \|	Merge "Remove keystoneclient exception usage in tests"	Zuul	2020-01-02	1	-3/+2
\|\ \ \
\| * \| \|	Remove keystoneclient exception usage in tests	Gage Hugo	2019-11-24	1	-3/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This change replaces the usage of keystoneclient exceptions in the auth_token_middleware unit tests to use the ConnectFailure exception from keystoneauth. This is part of the process of removing keystoneclient from keystonemiddleware. Change-Id: Ie00fc310728c319faf2cfdfb651f0c7a8f48d757
* \| \| \|	Merge "Switch to Ussuri jobs"	Zuul	2020-01-02	1	-1/+1
\|\ \ \ \
\| * \| \| \|	Switch to Ussuri jobs	pengyuesheng	2019-10-22	1	-1/+1
\| \|/ / / \| \| \| \| \| \| \| \| \| \| \| \|	Change-Id: I1503b5a58c47beae9609dd3edc384b932cdf9445
* \| \| \|	Merge "Fix DeprecationWarning: invalid escape sequence issues"	Zuul	2020-01-02	1	-4/+4
\|\ \ \ \
\| * \| \| \|	Fix DeprecationWarning: invalid escape sequence issues	Sean McGinnis	2019-11-13	1	-4/+4
\| \|/ / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Some regex strings contain invalid escape sequences for normal strings, causing newer version of Python to emit DeprecationWarning messages. This updates those instances to raw strings so they are not interpreted as invalid. Change-Id: I28ac26516bacab36578a5a7f6ec7f9dcf7d7eeb1 Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
* \| \| \|	Imported Translations from Zanata	OpenStack Proposal Bot	2019-12-22	3	-24/+213
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	For more information about this automatic import see: https://docs.openstack.org/i18n/latest/reviewing-translation-import.html Change-Id: I4a5f9f48ae099291cf47f4d08c40535223761b1b
* \| \| \|	Rename _v3_to_v2_catalog to _normalize_catalog8.0.0	Gage Hugo	2019-12-20	2	-16/+12
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This change renames the _v3_to_v2_catalog to _normalize_catalog as part of the v2 removal effort. Several services still rely on the converted catalog format, so this change maintains the conversion but removes the v2 association. Change-Id: Ic7bca16d8c6211d006fc2ba09dc2ecd83f8955db Partial-Bug: #1845539 Partial-Bug: #1777177
* \| \| \|	Merge "Update master for stable/train"	Zuul	2019-12-10	2	-0/+7
\|\ \ \ \
\| * \| \| \|	Update master for stable/train	OpenStack Release Bot	2019-09-20	2	-0/+7
\| \| \|/ / \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Add file to the reno documentation build to show release notes for stable/train. Use pbr instruction to increment the minor version number automatically so that master versions are higher than the versions on stable/train. Change-Id: Id57d4939da1ea27351d5a5dc5542f24e0abea789 Sem-Ver: feature
* \| \| \|	Merge "Change ec2 URLs to v3"	Zuul	2019-12-03	3	-16/+17
\|\ \ \ \
\| * \| \| \|	Change ec2 URLs to v3	Gage Hugo	2019-11-29	3	-16/+17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This change modifies any URLs specifying v2.0 to v3. This is part of the effort to remove v2.0 functionality from keystonemiddleware. Change-Id: I9cde8963333ea95b4ab05d9aea4d196ab4357763 Partial-Bug: #1829453 Partial-Bug: #1845539
* \| \| \| \|	Remove v2.0 functionality	Gage Hugo	2019-11-27	4	-340/+24
\| \|_\|/ / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This change removes v2.0 functionality from keystonemiddleware, as well as associated tests. Partial-Bug: #1845539 Partial-Bug: #1777177 Change-Id: If47e90085d8a59c52fb23876dc329cd4f0b05ef0
* \| \| \|	Merge "Generate pdf documentation"	Zuul	2019-09-30	3	-3/+31
\|\ \ \ \
\| * \| \| \|	Generate pdf documentation	Vishakha Agarwal	2019-09-27	3	-3/+31
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Change-Id: I4bc8c036ce91795129970ab4f8c2536401c2a135
* \| \| \| \|	Update invalid link for README	Q.hongtao	2019-09-18	1	-1/+1
\| \|_\|/ / \|/\| \| \| \| \| \| \| \| \| \| \|	Change-Id: Ia85c53bf2f74058d855bb8075a07b5c358acd1ce
* \| \| \|	Make tests pass in 2022	Bernhard M. Wiedemann	2019-09-17	1	-1/+2
\|/ / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Background: As part of my work on reproducible builds for openSUSE, I check that software still gives identical build results in the future. The usual offset is +15 years, because that is how long I expect some software will be used in some places. This showed up failing tests in our package build. See https://reproducible-builds.org/ for why this matters. This makes it expire 1 year in the future to model realistic tokens. Change-Id: I73bde68be53afff4e8dff12d756b8381f34b2adb
* \| \|	Fix misspell word	Q.hongtao	2019-09-09	1	-1/+1
\|/ / \| \| \| \| \| \|	Change-Id: I2b727f28733b1f7e2bb0e2dfa94a39bfdd7449fc
* \|	Comment html_static_path entry in docs conf.pytrain-em 7.0.1	Gage Hugo	2019-08-23	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Currently with sphinx 2.2.0 the docs job is throwing a warning that the html_static_path entry does not exist. We treat warnings as errors so this causes the job to fail. This change comments the html_static_path entry in conf.py since the path currently does not exist so it appears to be unused. Change-Id: Ib2c74f4f37855cec250d09b23c45b5b7fde44c8d
* \|	Merge "Bump the openstackdocstheme extension to 1.20"	Zuul	2019-08-16	3	-32/+1
\|\ \
\| * \|	Bump the openstackdocstheme extension to 1.20	pengyuesheng	2019-08-02	3	-32/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Some options are now automatically configured by the version 1.20: - project - html_last_updated_fmt - latex_engine - latex_elements - version - release. Change-Id: I161a3983e23b0ae50c232eb63ca78f8fd230e91e
* \| \|	Blacklist sphinx 2.1.0 (autodoc bug)	pengyuesheng	2019-08-02	1	-1/+1
\|/ / \| \| \| \| \| \| \| \| \| \|	See https://github.com/sphinx-doc/sphinx/issues/6440 for upstream details Change-Id: Ia166252623563438c42538320f6fbf7c74785520
* \|	Merge "Add validation of app cred access rules"7.0.0	Zuul	2019-07-18	10	-6/+376
\|\ \
\| * \|	Add validation of app cred access rules	Colleen Murphy	2019-07-15	10	-6/+376
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This commit adds a validation step in the auth_token middleware to check for the presence of an access_rules attribute in an application credential token and to validate the request against the permissions granted for that token. During token validation it sends a header to keystone to indicate that it is capable of validating these access rules, and not providing this header for a token like this would result in the token failing validation. This disregards access rules for a service request made by a service on behalf of a user, such as nova making a request to glance, because such a request is not under the control of the user and is not expected to be explicitly allowed in the access rules. bp whitelist-extension-for-app-creds Depends-On: https://review.opendev.org/670377 Change-Id: I185e0541d5df538d74edadf9976b3034a2470c88
* \| \|	Merge "print auth version for request strategy in debug"	Zuul	2019-07-12	1	-1/+1
\|\ \ \ \| \|/ / \|/\| \|
\| * \|	print auth version for request strategy in debug	ushen	2019-05-20	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	previously it will print auth version of _requested_auth_version which will be none all the time. Change it to klass makes more sense. Change-Id: I1cec8f163e808f03f15ef053e5768cf711238f0d
* \| \|	Add Python 3 Train unit tests	Corey Bryant	2019-06-26	2	-3/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This is a mechanically generated patch to ensure unit testing is in place for all of the Tested Runtimes for Train. See the Train python3-updates goal document for details: https://governance.openstack.org/tc/goals/train/python3-updates.html Change-Id: Iae72e055b0f407c1643b6c6161af28b535712a7d Story: #2005924 Task: #34215
* \| \|	Merge "Remove PKI/PKIZ support"	Zuul	2019-06-21	40	-2364/+29
\|\ \ \
\| * \| \|	Remove PKI/PKIZ support	Morgan Fainberg	2019-06-19	40	-2364/+29
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Keystone server no longer supports PKI/PKIZ. This change removes keystonemiddleware's support of PKI/PKIZ and associated code. Change-Id: I9a6639a2aa3774be61972d57f38220f66fd5c0e8 closes-bug: #1649735 partial-bug: #1736985
* \| \| \|	Remove Diablo compatibility tests	Colleen Murphy	2019-06-20	2	-62/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	We really don't care about Diablo compatibility any more. Clean up the old cruft. Change-Id: Ib1f628eb40ba0cb6334300cb6dca7dcdfcddba1b