summaryrefslogtreecommitdiff
path: root/keystoneclient
Commit message (Collapse)AuthorAgeFilesLines
...
* Override find function in projectGage Hugo2018-01-241-0/+5
| | | | | | | This change overrides the base find functionality within project in order to encode tags to a base string. Change-Id: I4599b8a4dafcb9d4178c973eb48a8ad3a7d292f5
* Merge "Add CRUD support for application credentials"3.15.0Zuul2018-01-243-0/+291
|\
| * Add CRUD support for application credentialsColleen Murphy2018-01-233-0/+291
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Add support for creating, reading, and deleting application credentials. Application credentials do not support updating. Keystoneclient does not handle authentication with application credentials. This is done in keystoneauth. Additional work will be needed in python-openstackclient to support both CRUD and auth for application credentials. bp application credentials Change-Id: I21214238deac2c45f2f2d666287c2ae106955ab1
* | Add system role functionalityLance Bragstad2018-01-233-43/+177
|/ | | | | | | | | This commit adds the necessary bits to be able to use system role assignments from python-keystoneclient. bp system-scope Change-Id: Iecbcbf020a15f2bec777334c648d4477f89f3b2c
* Merge "Add project tags to keystoneclient"Zuul2017-12-215-4/+459
|\
| * Add project tags to keystoneclientSamuel Pilla2017-12-205-4/+459
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds the client functionality for the following project tag calls: - Create a project tag on a project - Check if a project tag exists on a project - List project tags on a project - Modify project tags on a project - Delete a specific project tag on a project - Delete all project tags on a project Co-Authored-By: Jess Egler <jess.egler@gmail.com> Co-Authored-By: Rohan Arora <ra271w@att.com> Co-Authored-By: Tin Lam <tin@irrational.io> Partially Implements: bp project-tags Change-Id: I486b2969ae0aa2638842d842fb8b0955cc086d25
* | Handle UTC+00:00 in datetime stringsMonty Taylor2017-12-021-1/+1
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In some cases, the following: datetime.datetime.now(tz=iso8601.iso8601.UTC).tzinfo.tzname() returns: 'UTC+00:00' rather than: 'UTC' resulting in strings that look like: 2013-03-04T12:00:01.000000UTC+00:00 That is just flatly invalid. The code here accounts for a tzname of "UTC" and normalizes to to being a trailing Z as-per the ISO 8601 spec, but it does not account for UTC+00:00. Add support for that so that we don't produce invalid date strings. Most of this can be avoided by replacing use of this function with the isoformat method of datetime instead. datetime.datetime.now(tz=iso8601.iso8601.UTC).isoformat() Produces 2013-03-04T12:00:01.000000+00:00 Which while different from 2013-03-04T12:00:01.000000Z is still a valid iso8601 string. Change-Id: I52ca7561abee158285c2c98ba63d84c62e12360f
* Remove functional tests for v2.0 APIRodrigo Duarte Sousa2017-11-144-61/+0
| | | | Change-Id: I207b716e47893931e79e3758abc2bd879917f340
* Use generic user for both zuul v2 and v3Nam Nguyen Hoai2017-10-171-3/+3
| | | | | | | Zuul v2 uses 'jenkins' as user, but Zuul v3 uses 'zuul'. Using $USER solves it for both cases. Change-Id: I42cfcd4d8dee2ff3a99e42a5a64f3c38163972b8
* Adds bandit nosec flag to hashlib.sha1lhinds2017-08-311-1/+3
| | | | | | | | | | | | | A bandit patch to block sha1 hash is failing CI [1], due to a false positive on hashlib.sha1 (which actually uses HMAC-SHA1 in keystone that is considered more secure then standard SHA1) This change marks a # nosec comment against the line which is triggering the false positive in Bandit. [1] https://review.openstack.org/#/c/437563/6 Change-Id: Ib9618119c77f41fba0e612e37c7511676bed47e8
* Remove use of positional decoratorMorgan Fainberg2017-08-0731-115/+2
| | | | | | | | | The positional decorator results in poorly maintainable code in a misguided effort to emulate python3's key-word-arg only notation and functionality. This patch removes keystoneclient's dependance on the positional decorator. Change-Id: I9e691cc8b0c04992f4a8dabd67e1b413d3220d23
* Update URLs in documents according to document migrationmelissaml2017-07-141-1/+1
| | | | Change-Id: Ie0a8594f2dd0554a07111207899e6134affc998e
* Merge "Add support for endpoint group filtering"Jenkins2017-06-225-12/+321
|\
| * Add support for endpoint group filteringEnrique Garcia Navalon2017-04-135-12/+321
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following API calls are made available: - GET /OS-EP-FILTER/projects/{project_id}/endpoint_groups - GET /OS-EP-FILTER/endpoint_groups/{endpoint_group_id}/projects - PUT /OS-EP-FILTER/endpoint_groups/{endpoint_group}/projects/{project_id} - HEAD /OS-EP-FILTER/endpoint_groups/{endpoint_group}/projects/{project_id} - DELETE /OS-EP-FILTER/endpoint_groups/{endpoint_group}/projects/{project_id} Co-Authored-By: Samuel de Medeiros Queiroz <samueldmq@gmail.com> Closes-Bug: #1641674 Change-Id: Idf938267479b5b8c50c9aa141c3c2770c2d69839
* | Add support for specifying role ids when creating trustKristi Nikolla2017-06-162-4/+25
| | | | | | | | | | Change-Id: I38e0ac35946ee6e53128babac3ea759a380572e0 Partial-Bug: 1696111
* | Merge "Remove pbr warnerrors in favor of sphinx check"Jenkins2017-06-131-1/+1
|\ \
| * | Remove pbr warnerrors in favor of sphinx checkGage Hugo2017-04-241-1/+1
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change removes the unused "warnerrors" setting that was part of [pbr], which was replaced by "warning-is-error" in sphinx 1.5 and above[0]. This also fixes any warnings and errors that came up when running `tox -edocs` using this new feature: - Specified correct instance of 'List' This change also adds the "warning-is-error" setting to setup.cfg in order to allow for strict doc validation which will cause doc building to fail if any warnings are thrown. [0] http://lists.openstack.org/pipermail/openstack-dev/2017-March/113085.html Change-Id: I8111193e5a1ae7d063ab4cc37186aea1299964a4
* | Merge "Replace six.iteritems() with .items()"Jenkins2017-06-1318-35/+24
|\ \
| * | Replace six.iteritems() with .items()M V P Nitesh2017-04-0318-35/+24
| |/ | | | | | | | | | | | | | | | | | | | | | | 1.As mentioned in [1], we should avoid using six.iteritems to achieve iterators. We can use dict.items instead, as it will return iterators in PY3 as well. And dict.items/keys will more readable. 2.In py2, the performance about list should be negligible, see the link [2]. [1] https://wiki.openstack.org/wiki/Python3 [2] http://lists.openstack.org/pipermail/openstack-dev/2015-June/066391.html Change-Id: I18a6890935ebdbb589269379f21a0dd47d07eb3a
* | Moved release note to the correct pathKristi Nikolla2017-05-261-6/+0
| | | | | | | | | | | | | | Release note was accidentally added to keystoneclient/releasenotes instead of releasenotes Change-Id: Id8ec0b895fa8f42d60572077bd5fe49d9478ee10
* | Merge "Remove log translations in python-keystoneclient"Jenkins2017-05-168-48/+33
|\ \
| * | Remove log translations in python-keystoneclientwingwj2017-03-218-48/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Log messages are no longer being translated. This removes all use of the _LE, _LI, and _LW translation markers to simplify logging and to avoid confusion with new contributions. See: http://lists.openstack.org/pipermail/openstack-i18n/2016-November/002574.html http://lists.openstack.org/pipermail/openstack-dev/2017-March/113365.html Change-Id: Ia77819cbb133903d20e821bff0c45766b11ef07b
* | | Stop using oslotest.mockpatchChangBo Guo(gcb)2017-05-031-8/+8
| | | | | | | | | | | | | | | | | | This module has been deprecated in favor of native fixtures. Change-Id: I8fa00396f64d81eba807b2c6cbf4ae810447c59b
* | | Remove unused logzlyqqq2017-04-252-8/+0
| |/ |/| | | | | Change-Id: I1fe2c1703b03eb1c8458c53bdd208a91ababf941
* | Fix failing PY2 and PY3 gate jobsdineshbhor2017-03-222-2/+2
| | | | | | | | | | | | | | | | Please refer: http://logs.openstack.org/43/446943/1/check/gate-python-keystoneclient-python27-ubuntu-xenial/84b965d/console.html Closes-Bug: #1673761 Change-Id: Iefa74ffe8642f039a115e9ff4416c8f72d299317
* | Merge "Add support for endpoint group CRUD"Jenkins2017-02-145-0/+310
|\ \
| * | Add support for endpoint group CRUDSamuel de Medeiros Queiroz2017-02-115-0/+310
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following API calls are made available: - POST /OS-EP-FILTER/endpoint_groups - GET /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - HEAD /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - PATCH /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - DELETE /OS-EP-FILTER/endpoint_groups/{endpoint_group_id} - GET /OS-EP-FILTER/endpoint_groups Partial-Bug: #1641674 Change-Id: I285eefe82152b178268f671e8800a0ff8c1511e4
* | | Fix 12 warnings when building keystoneclient docsGage Hugo2017-02-095-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While building keystoneclient docs, there are currently 12 warnings emitted that specify either: WARNING: more than one target found for cross-reference u'list' WARNING: more than one target found for cross-reference u'Auth' This change specifies the correct object for the docstring with "List" since there are many instances of "list" within keystoneclient and specifies the proper "Auth" object. With these changes, the warnings no longer appear. Change-Id: I4515429df38760700552d48fc570c03abf116f83
* | | Use https for *.openstack.org referencesEric Brown2017-02-055-10/+11
| | | | | | | | | | | | | | | | | | | | | The openstack.org pages now support https and our references to the site should by default be one signed by the organization. Change-Id: Ia6cdaf7fabd1c355df002aa07b0695610dde9cd1
* | | Merge "Fix boto version strip regex"Jenkins2017-01-272-1/+40
|\ \ \
| * | | Fix boto version strip regexMarounMaroun2017-01-272-1/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the current regex pattern will match incorrect strings like: Boto/2x0t2 Change-Id: I260f4e0d98f082172a3a67a1fbaa05da5369ea49 Closes-Bug: #1658639
* | | | Allow Multiple Filters of the Same KeySamuel Pilla2017-01-242-1/+27
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before, the way filters were passed in would not allow filtering on the same key. For example: keystone.users.list(name__contains='test', name__contains='user') This fails because of how kwargs handles key/value pairs. This patch allows using multiple values for the same filter. Example: keystone.users.list(name__contains=['test', 'user']) Specifying the only one filter value is still functional as expected. Co-Authored-By: Jeffrey Augustine <ja224e@att.com> Partially-Implements: bp pci-dss-query-password-expired-users Change-Id: I89cecf7e18974e7860ba0925840d6264168eabcb
* | | Fix response body being omitted in debug mode incorrectlyTin Lam2017-01-172-2/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In debug mode, when a response's header Content-Type is set to "application/json" with a parameter, i.e., "application/json; charset=UTF-8". This patch set ignores the additional parameter and only match the mimetype. Change-Id: Ie8fcb1061e0e49b039436947524cfdc704c83846 Closes-Bug: #1656981
* | | Only log application/json in session to start3.9.0Steve Martinelli2017-01-102-33/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When whitelisting content types to debug print from session we chose application/json and application/text. application/text is not a real mime type, text is typically text/plain. Rather than guess at mime types only print application/json to start with, but make it easy for additional types to be added later. Adapted from keystoneauth: Ica5fee076cdab8b1d5167161d28af7313fad9477 Related-Bug: 1616105 Change-Id: Ieaa8fb3ea8d25e09b89498f23b70b18c0f6153f1
* | | X-Serivce-Token should be hashed in the logTin Lam2017-01-092-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, logs display the hash values of X-Auth-Token, Authorization, and X-Subject-Token, but not the value of the X-Service-Token. This patch set adds the X-Service-Token to the list of header fields to be hashed for logging purposes. Change-Id: Iaa3a27f4b6c3baf964fa0c71328ffe9df43b2c0a Closes-Bug: #1654847
* | | Merge "Do not log binary data during request"Jenkins2017-01-082-7/+9
|\ \ \
| * | | Do not log binary data during requestSteve Martinelli2017-01-062-7/+9
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not log binary data during debug logging of a session. Replace the binary data with the string <binary_data> instead. sort of a backport of: I5184002f3a21c5e0ee510b21b9a7884c8dccd1e3 Change-Id: I07ddbc3967f297597542f1975004d94c490f6e6b Related-Bug: 1616105
* | | Merge "remove hacking checks from keystoneclient"Jenkins2017-01-064-148/+0
|\ \ \
| * | | remove hacking checks from keystoneclientSteve Martinelli2017-01-064-148/+0
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the only hacking check in keystoneclient is related to older versions of oslo libraries, which are no longer supported by keystoneclient, for example: $ pip freeze | grep oslo.utils oslo.utils==3.18.0 $ python >>> import oslo.utils Traceback (most recent call last): File "<stdin>", line 1, in <module> ImportError: No module named oslo.utils >>> import oslo_utils >>> Let's just remove the hacking check since theres no way someone could incorrectly import the older versions. Closes-Bug: 1652458 Signed-off-by: Adam Williamson <awilliam@redhat.com> Change-Id: I14165903b46d2fc26e8c9de591917893f58516db
* | | Merge "Prevent MemoryError when logging response bodies"Jenkins2017-01-053-14/+74
|\ \ \ | |/ / |/| |
| * | Prevent MemoryError when logging response bodiesTobias Diaz2017-01-053-14/+74
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Response bodies are loaded into memory prior to being logged. Loading huge response bodies may result in a MemoryError. This patch proposes that only JSON and TEXT responses be logged, i.e when the Content-Type header is application/json or application/text. Responses that do not include or have a different Content-Type header will have their body omitted. This is a sort of backport of the fix for keystoneauth sessions, see I93b6fff73368c4f58bdebf8566c4948b50980cee Co-Authored-By: Samuel de Medeiros Queiroz <samueldmq@gmail.com> Closes-bug: 1616105 Change-Id: I8f43eee3a0b35041c6cf672e476f8151cf2f8d14
* | | re-work inference rule bindingsSteve Martinelli2016-12-185-131/+383
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - At least one API was not implemented (list_implied_roles) - the tests were lacking assertions and proper mocked responses - some of the functionality just didn't work (see bug) - returning Role objects instead of InferenceRule objects Related commits: - I80a40e88b571fe9b0eca3af8b705ea79f28eb904 - I66e863fb83f8dfcca2c48116d4377df060f402c3 Closes-Bug: 1647934 Change-Id: I7b449a93d7d4d3eb9ca857f6c1f78f884bad2534
* | | Merge "Deprecate the generic client"Jenkins2016-12-083-0/+13
|\ \ \
| * | | Deprecate the generic clientJamie Lennox2016-12-073-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The generic client has been around and unused for a really long time. I dont think it works at all and was never updated to support V3 concepts. Realistically we can probably just remove it and noone will notice, but give it a quick deprecation cycle. Closes-Bug: #1647930 Change-Id: Ie68c8995275bcd55aede49d8f4af4e0d172de089
* | | | Use assertIsNone(...) instead of assertEqual(None, ...)chenaidong12016-12-082-2/+2
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refer to:http://docs.openstack.org/developer/hacking/#unit-tests-and-assertraises [H203] Use assertIs(Not)None to check for None (off by default) Unit test assertions tend to give better messages for more specific assertions. As a result, assertIsNone(...) is preferred over assertEqual(None, ...) and assertIs(None, ...) Change-Id: I4e60f3f7f3557080669b98cb48627acc40a72606
* | | Refactor test_projectsRodrigo Duarte Sousa2016-12-051-37/+36
| | | | | | | | | | | | | | | | | | | | | Do not reuse the environment's domain and project, create new ones for the tests. Change-Id: I91a5c1b42c0b31f548c1154a4ef028f45cf1cd24
* | | Refactor test_credentialsRodrigo Duarte Sousa2016-12-051-13/+18
| |/ |/| | | | | | | | | | | Do not reuse client's domain, create a new one to be used only by the test, which is destroyed later. Change-Id: I4e3bb11a92535650317a30e6a1854bfd161ee93f
* | Fix Failing tests with openssl >= 1.1.0Ondřej Kobližek2016-12-041-4/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | keystoneclient.tests.unit.test_cms.CMSTest.test_cms_verify keystoneclient.tests.unit.test_cms.CMSTest.test_cms_verify_token_no_files failing with: Command 'openssl' returned non-zero exit status 1 I think its OpenSSL >= 1.1 bug, which returns wrong exit code (1 instead of 2) if input file not exists. Change-Id: I776596487f305c759b88c0d4c604571c33c6ef70 Closes-Bug: #1646858
* | skip failing functional testSteve Martinelli2016-12-041-0/+3
| | | | | | | | Change-Id: If3894679d21709ab813b4675c4bc721a3987596a
* | Merge "Fix missing service_catalog parameter in Client object"3.8.0Jenkins2016-12-013-1/+20
|\ \
View Lorry Controller Status