summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Updated from global requirementsjuno-eolstable/junoOpenStack Proposal Bot2015-09-251-1/+1
| | | | Change-Id: I7175b57f3de0693afa6be9ed748b33be773858ee
* Updated from global requirementsOpenStack Proposal Bot2015-07-283-30/+29
| | | | Change-Id: I84da18441e32ced8121d93a786ff4c2fe9fe3ce5
* Updated from global requirements1.1.1OpenStack Proposal Bot2015-04-222-26/+26
| | | | Change-Id: I55f24dd1d002b76948a782c99f9620617eca0aa6
* Merge "Fix tests to work with requests<2.3" into stable/junoJenkins2015-04-151-5/+11
|\
| * Fix tests to work with requests<2.3Brant Knudson2015-04-111-5/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tests didn't pass with requests<2.3 because of the cookies monkey-patching. To test this, make sure the requests library in your tox venv is the right level: $ .tox/py27/bin/pip install -U "requests<2.3" Then run the tests. Closes-Bug: 1442919 Change-Id: Ie93906ba2370dada2386a50ae2137337ccf98f10 (cherry picked from commit a335b7f6f2577f06cead7b7acbfa07dd771a94b9)
* | Merge "Set defaultbranch to stable/juno in .gitreview" into stable/junoJenkins2015-04-151-0/+1
|\ \
| * | Set defaultbranch to stable/juno in .gitreviewTristan Cacqueray2015-04-141-0/+1
| |/ | | | | | | | | | | This makes submitting change for stable more simple. Change-Id: I46fba0ce7377c03e18ebfd364f24a11fe6829e12
* | Fix s3_token middleware parsing insecure optionBrant Knudson2015-04-142-2/+25
|/ | | | | | | | | The "insecure" option was being treated as a bool when it was actually provided as a string. The fix is to parse the string to a bool. Closes-Bug: 1411063 Change-Id: Id674f40532215788675c97a8fdfa91d4420347b3
* Merge "Add get_headers interface to authentication plugins"1.1.0Jenkins2015-02-096-32/+180
|\
| * Add get_headers interface to authentication pluginsJamie Lennox2015-02-026-32/+180
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current scheme of having auth plugins only able to specify the X-Auth-Token header via the get_token function is too limited for all plugins. We need to allow both the case where the plugin wants to control additional headers, or doesn't set the X-Auth-Token header at all. This deprecates the get_token interface in favour of the get_headers interface. Whilst we should promote using get_headers it is likely that plugins that only require setting the X-Auth-Token header will continue to only support the get_token interface. Change-Id: Ibd750d72acc3ba4fd8a880cad69173248ec4092f blueprint: generic-plugins
* | Merge "Basic AccessInfo plugin"Jenkins2015-02-092-0/+108
|\ \
| * | Basic AccessInfo pluginJamie Lennox2015-02-042-0/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Generally we want people to use the existing plugins to manage their authentication, however there are a number of existing services that know how to work with an AccessInfo object directly and either cache it or manipulate it manually. Provide a simple Identity plugin that just takes an existing AccessInfo and allows it to be used as an authentication plugin. Change-Id: I388283c03a0a8a3d1afe43138eebbe5e66ca9102
* | | Merge "Add name parameter to NoMatchingPlugin exception"Jenkins2015-02-093-8/+20
|\ \ \
| * | | Add name parameter to NoMatchingPlugin exceptionJamie Lennox2015-02-023-8/+20
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If you want to handle a NoMatchingPlugin exception rather than simply exit then the name of the missing plugin is generally more useful than the message. The exception is specific enough that you can know what went wrong, but you cannot determine the name of the missing plugin if you want to do your own logging - only use the message that is generated. We should keep the message but expose the plugin name as well. Closes-Bug: #1410391 Change-Id: Ic93ec6583b8d7797529d36d63995ef0d8db754f1
* | | Merge "use right resource_class to create resource instance"Jenkins2015-02-081-3/+3
|\ \ \
| * | | use right resource_class to create resource instancewanghong2015-02-051-3/+3
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | Currently, in test_endpoint_policy.py we use the resource_class of project to create a policy instance. We should use the resource_class of policy to create policy instance. Closes-Bug: #1418316 Change-Id: I4fc444b266c61da0a131651d7aa636021f6ea5f9
* | | Hierarchical multitenancy basic callsThiago Paiva Brito2015-02-053-8/+225
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch addresses changes needed to manage projects through keystoneclient API v3. The changes are: create: new param 'parent': set the parent project of the project being created get: new param 'subtree_as_list': If True, shows projects down the hierarchy new param 'parents_as_list': If True, shows projects up the hierarchy Co-Authored-By: Andre Aranha <afaranha@lsd.ufcg.edu.br> Co-Authored-By: Rodrigo Duarte <rodrigods@lsd.ufcg.edu.br> Change-Id: I0f02a66e6a29584197ed00cb32caecb50956f458 Implements: blueprint hierarchical-multitenancy
* | Merge "Enable hacking rule E122 and H304"Jenkins2015-02-021-3/+1
|\ \
| * | Enable hacking rule E122 and H304ZhiQiang Fan2015-02-021-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | E122: continuation line missing indentation or outdented H304: no relative imports E122 and H304 havealready been fixed but not removed from exception list, this patch enables them. Change-Id: I1375bed51e9670fc4d174e7afce0ef3b3be83822
* | | Merge "Docstring usability improvements"Jenkins2015-02-022-8/+18
|\ \ \ | |/ / |/| |
| * | Docstring usability improvementsBrant Knudson2015-01-072-11/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The generated docs didn't provide enough information for a developer to get started using the API. This change enhances the documentation for the module so that a developer knows where to go to start (create a Client). Partial-Bug: #1330769 Change-Id: I907187d34ebf2c2e662ff7b9547b0ecaef008414
* | | Merge "Correct failures for check H238"Jenkins2015-02-023-4/+3
|\ \ \
| * | | Correct failures for check H238Brant Knudson2015-01-213-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The new H238 "old style class declaration, use new style (inherit from `object`)" rule was failing and ignored. Change-Id: I9f616d74e4777640cc9441e96f2bd8c1873aaaca
* | | | Merge "handles keyboard interrupt"Jenkins2015-02-022-1/+13
|\ \ \ \
| * | | | handles keyboard interruptRakesh H S2015-01-282-1/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When an user intentionally provides an keyboard interrupt, keystoneclient throws the entire traceback on to the terminal instead of handling it. keystoneclient will now handle the keyboard interrrupt and provides an crisp message on to the terminal. Change-Id: I1026d259fd0688dd2b950b1bdb135d219da2a60a Closes-Bug: #1367283
* | | | | Merge "Fix typo in Ec2Signer class docstring"Jenkins2015-02-021-1/+1
|\ \ \ \ \
| * | | | | Fix typo in Ec2Signer class docstringMatt Riedemann2015-01-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Ie2a05aab512feeac967a64527d649377fd5bc6b9
* | | | | | Merge "Configure TCP Keep-Alive for certain Sessions"Jenkins2015-02-022-0/+28
|\ \ \ \ \ \
| * | | | | | Configure TCP Keep-Alive for certain SessionsIan Cordasco2015-01-212-0/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the user creates a keystoneclient.session.Session without passing a custom session, we will enable TCP Keep-Alive for the requests session used by keystoneclient's Session. novaclient and other clients can experience hung TCP connections. Most clients use keystoneclient's session and will need this merged here before they can make use of it in their projects. Change-Id: Ib70a8b3270d2492596b9fb8981b8584b85567a9c Closes-bug: 1323862
* | | | | | | Merge "make req_ref doesn't require id"Jenkins2015-02-025-10/+18
|\ \ \ \ \ \ \ | |_|_|_|_|_|/ |/| | | | | |
| * | | | | | make req_ref doesn't require idwanghong2015-01-285-10/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The test_update and test_create methods of keystoneclient.tests.v3.utils.CrudTests are very strange: they require req_ref parameter to contain 'id' attribute, however, they just remove 'id' from req_ref then. Change-Id: Ic577546ef03611b2a19f8be661660ad8bd0d8c06
* | | | | | | Merge "Add validate token for v3"Jenkins2015-01-302-7/+106
|\ \ \ \ \ \ \
| * | | | | | | Add validate token for v3Brant Knudson2015-01-302-7/+106
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was no API to validate a token using v3. bp auth-token-use-client Change-Id: Idcd6cedde5c485b9df7a2e056d1673d3ce6cdf90
* | | | | | | | Merge "Tests use keep_blank_values when parse_qs"Jenkins2015-01-301-3/+12
|\ \ \ \ \ \ \ \ | |/ / / / / / /
| * | | | | | | Tests use keep_blank_values when parse_qsBrant Knudson2015-01-301-3/+12
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tests weren't using keep_blank_values when calling urlparse.parse_qs, so any empty values were just ignored and couldn't be tested properly. With this change, tests can verify query parameters that have no value (for example, ?no_catalog on the v3 auth request). bp auth-token-use-client Change-Id: Iafcb952c81ca7bd2acab4383687c36ec68a838d2
* | | | | | | Add validate token for v2.0Brant Knudson2015-01-282-0/+71
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was no API to validate a token using v2.0. bp auth-token-use-client Change-Id: I22223f546e750457a0c9d851ef389f7983e5c205
* | | | | | Merge "Add auth plugin params to doc"Jenkins2015-01-282-0/+44
|\ \ \ \ \ \
| * | | | | | Add auth plugin params to docJamie Lennox2015-01-142-0/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These parameters were always available and documented however the way the documentation is generated it is not clear from the superclass what parameters are available from inheritance. Copy the documentation for parameters from the subclass. Change-Id: I43db89505a03d7a4fbd51fadc0e1042a83f2f72a
* | | | | | | Merge "Allow v3 plugins to opt out of service catalog"Jenkins2015-01-282-3/+30
|\ \ \ \ \ \ \
| * | | | | | | Allow v3 plugins to opt out of service catalogJamie Lennox2014-12-192-3/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The identity server supports adding ?nocatalog to auth requests and there are situations where we need to be able to exploit that from the client. Allow passing include_catalog=False to v3 plugins to fetch a plugin without a catalog. Change-Id: I4b2afbfffb71490faed4b7ef0de4d00ee208733a Closes-Bug: #1228317
* | | | | | | | Merge "Add fetch revocations for v3"Jenkins2015-01-282-0/+18
|\ \ \ \ \ \ \ \
| * | | | | | | | Add fetch revocations for v3Brant Knudson2014-12-162-0/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was no API to fetch revocations using v3. bp auth-token-use-client Change-Id: I82c5f3e475187d0961bf30b4fc71b57e288dcf09
* | | | | | | | | Merge "Add fetch revocations for v2.0"Jenkins2015-01-282-0/+17
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Add fetch revocations for v2.0Brant Knudson2014-12-162-0/+17
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was no API to fetch revocations using v2.0. bp auth-token-use-client Change-Id: Ica5aae5b9075180223268fb6b2ef11e00dfd057f
* | | | | | | | | Merge "Surface the user_id and project_id beyond the plugin"Jenkins2015-01-283-19/+103
|\ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / |/| | | | | | | |
| * | | | | | | | Surface the user_id and project_id beyond the pluginJamie Lennox2015-01-233-19/+103
| | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Having the user_id and project_id exposed in the plugin is a good first step however we don't really expect the user to be interacting with the plugins directly often - particularly as you need to pass session to the methods. Exposing get_user_id and get_project_id on the session and the adapter in this way is very similar to the way we expose get_token and get_endpoint on the session and adapter for use higher up. Related-Bug: #1364724 Change-Id: If2f868c3ddc19133f18446e74f8e1b560a4798fa
* | | | | | | | Merge "Update requests-mock syntax"Jenkins2015-01-2812-254/+173
|\ \ \ \ \ \ \ \
| * | | | | | | | Update requests-mock syntaxJamie Lennox2014-12-1212-254/+173
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With requests-mock 0.5 we can do away with register_uri(method, ..) and just use the method name as a function. This feels much cleaner and looks more like requests syntax. In the same update there is query string decoding included in the history, so we no longer have to manually parse the query strings out of the url. Change-Id: I43d31576d15b4be72350bebf00733c08a7fb3e6c
* | | | | | | | | Merge "Updated service name to be optional in CLI"Jenkins2015-01-272-5/+16
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Updated service name to be optional in CLIlin-hua-cheng2014-12-272-5/+16
| | |_|_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Service name is optional in the API, updating the CLI for consistency. Change-Id: I94f0eb248a39d2f59edd00a5f90125a5c42525ed Closes-Bug: #1393977 Closes-Bug: #1404073