| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
| |
As discussed in TC PTG[1] and TC resolution[2], we are
dropping the lower-constraints.txt file and its testing.
We will keep lower bounds in the requirements.txt file but
with a note that these are not tested lower bounds and we
try our best to keep them updated.
[1] https://etherpad.opendev.org/p/tc-zed-ptg#L326
[2] https://governance.openstack.org/tc/resolutions/20220414-drop-lower-constraints.html#proposal
Change-Id: Ifb9dc54424256d5cffe557894b2d26b2401ebf92
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit adds a validation step in the auth_token middleware to check
for the presence of an access_rules attribute in an application
credential token and to validate the request against the permissions
granted for that token. During token validation it sends a header to
keystone to indicate that it is capable of validating these access
rules, and not providing this header for a token like this would result
in the token failing validation. This disregards access rules for a
service request made by a service on behalf of a user, such as nova
making a request to glance, because such a request is not under the
control of the user and is not expected to be explicitly allowed in the
access rules.
bp whitelist-extension-for-app-creds
Depends-On: https://review.opendev.org/670377
Change-Id: I185e0541d5df538d74edadf9976b3034a2470c88
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit updates the version of python-keystoneclient to 3.10.0,
which has fixes to handle different openssl versions:
https://review.openstack.org/#/c/406175/2
Since we're bumping the minimum version of python-keystoneclient to
include that fix, we can safely run lower-constraints on Bionic
instead of Xenial.
Change-Id: I52fa44fe76590aced193618406ad30eb70d04f9d
|
|
|
|
| |
Change-Id: Ia31fc31bd33e85622a15bc383cf1bb7af753de7e
|
|
|
|
| |
Change-Id: I16e6cc35166a20abeb400a8609bfefee64644e72
|
|
|
|
| |
Change-Id: I6effa91e130eaf7ebdf30dd36e1c486e2f36df07
|
|
|
|
| |
Change-Id: I14b36d8e7246c3694c9557b8261c2e126f5a2d25
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use the new oslo.cache library instead of using memcached directly.
This keeps the old options around and will continue to use those in
preference to the oslo.config library as there is no way to test whether
oslo.cache was explicitly configured to use that in preference.
Currently there are no messages or anything to deprecate the old options
until we've had a chance to test it in production environments.
Closes-Bug: #1523375
Change-Id: Ifccacc5db311ad538ce60191cbe221644d1a5807
Co-Authored-By: Nicolas Helgeson <nh202b@att.com>
|
|
|
|
| |
Change-Id: I193865cda77ca1e22495b01ea602ebb28a912a8a
|
|
|
|
| |
Change-Id: Id3da041f16b8bca068baff4db4239e2c2a6d17cd
|
|
|
|
| |
Change-Id: I2a031b4a114da146f720eed4d28666a00a2a7dc0
|
|
|
|
| |
Change-Id: I8f3fb853bf358db8fe01427d57b0823f5e3d82c0
|
|
|
|
| |
Change-Id: I83f38668dcc15e5e884c8928047537c8b1a19bd3
|
|
|
|
|
|
|
|
|
| |
The positional decorator results in poorly maintainable code in
a misguided effort to emulate python3's key-word-arg only notation
and functionality. This patch removes keystonemiddleware's dependance
on the positional decorator.
Change-Id: I1be3b19d08daf18babac66f274787862c6d77a93
|
|
|
|
| |
Change-Id: I15c7eed7a39f8ed7c5d8e18e4083979870cdfbb8
|
|
|
|
| |
Change-Id: If23c486c63fa1b0ae3fe003eb7b220138e9e454d
|
|
|
|
| |
Change-Id: Ic5a8fd8c1cf4729f4254751f595c0df876c1a05a
|
|
|
|
| |
Change-Id: Ifae5931a29ef9e687139de0a78f33736907f7f7d
|
|
|
|
| |
Change-Id: I119fbce30d448bcda1be5da1122922b1ea5c3b57
|
|
|
|
| |
Change-Id: I2304e946843d671351a5ad98c03d297ec85830a3
|
|
|
|
| |
Change-Id: I62b51c1d98bccbd2929637743e5c52a306427128
|
|
|
|
| |
Change-Id: I5a9e67d2ded7ac9b9079ffbfcf30c03f442e3c24
|
|
|
|
| |
Change-Id: I5c42ec052c4b8f6a3cabc5e2456b1aacc322e479
|
|
|
|
| |
Change-Id: Id74368e2b0b7421c2cc1ad498a008b33df38f39a
|
|
|
|
| |
Change-Id: I9b61fd0d06cb0ebdea1f389f9f9903b9e264ffb9
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The constants of log levels were added in the 1.8 version
of the oslo.log library.
So we can replace all usage of system logging module
with log module from oslo.log
Change-Id: I97a1d913b543dc9dbd4d228b04adbdf7ee320df5
|
|/
|
|
| |
Change-Id: Ie9a3bef08a28346476651403fdf3b8fe202b8c58
|
|
|
|
| |
Change-Id: I759faf89ee7611ee3d010d494fb3e65a0e38389e
|
|
|
|
| |
Change-Id: I72dd0bb8b87c3e9b3964bb4e891c06f2cfdacaad
|
|
|
|
| |
Change-Id: If2ac4bafa048f260bb22ebe931750a61c4405aac
|
|
|
|
| |
Change-Id: I99a55d7bf7b9ed1c610b566ed65830b563b29dd6
|
|
|
|
| |
Change-Id: I506b5036961fef7645c2010bef090f2b4b098189
|
|
|
|
| |
Change-Id: I48f690002699b255c05e7a77dcdbb2315be462e4
|
|
|
|
| |
Change-Id: I47d293076ae0c0e775eccbd697466e077fcaee1f
|
|
|
|
| |
Change-Id: I5579cc4505b63c845a35bc20ed1fee29b169901a
|
|
|
|
| |
Change-Id: I2fc7078e9ebaff57957658d0026cd67376755180
|
|
|
|
| |
Change-Id: If32fa221c8d59e4369d118abea1dce37b003dfc0
|
|
|
|
| |
Change-Id: I9e17251cd10dad1bbd8edcd39c7133296f62edaf
|
|
|
|
| |
Change-Id: I16ce65c86cae1b826b4d6ddde9c3d9a0bab689a6
|
|
|
|
| |
Change-Id: Ibfdc533a2520f2b3649a52b94cac4492db542d7c
|
|
|
|
| |
Change-Id: I3a80f56a7ebf068124d6972aa4085b6b8b1da464
|
|
|
|
| |
Change-Id: I9c57b8379d8fa9180e10b469a48a80c9b1a4013c
|
|
|
|
| |
Change-Id: Ifff7679fd49de73dd20f91f2b944493f2d1ed7d1
|
|
|
|
| |
Change-Id: I786d8e92e535fdee916abcd4875c9afb0176c39f
|
|
|
|
| |
Change-Id: Ib20a754d72a03257a371dc4e99d9feb545ccbfc1
|
|
|
|
| |
Change-Id: I31f4652930ba7b97b6bf9094099f63bbdfa44c18
|
|
|
|
| |
Change-Id: Ib240ea3bf26772e33d5f56b402029107e8d7a07f
|
|
|
|
| |
Change-Id: I81533a1ca7bdc4dd3be89a752bc8e80be13d94ca
|
|
|
|
| |
Change-Id: I57dde0d981b5505a5b9fdaeb1dc7beb8ec1aef6d
|