Commit Graph

480 Commits

Author SHA1 Message Date
Zuul bed20ed9d3 Merge "pre-commit: Integrate bandit" 2024-03-29 02:56:38 +00:00
Zuul 38d2e88fb2 Merge "pre-commit: Bump versions" 2024-03-29 02:56:36 +00:00
Takashi Kajinami 8c89839e37 Use upper-constraint in doc generation
Currently doc jobs are broken because the latest sphinx 7.2.0 is not
compatible with the latest release of openstackdocstheme.

This updates the docs/releasenotes target to use the global upper
constraints to avoid that issue.

Change-Id: I7eef81e2cfc2156dd8aa076e09de4904dda6eb9a
2024-03-14 00:06:39 +00:00
Zuul 718bde6e3f Merge "reno: Update master for unmaintained/xena" 2024-03-12 14:31:55 +00:00
Zuul 86a28d334e Merge "reno: Update master for unmaintained/wallaby" 2024-03-12 14:28:00 +00:00
Zuul 03b5caba88 Merge "reno: Update master for unmaintained/victoria" 2024-03-12 13:10:48 +00:00
OpenStack Release Bot 9558ccd6ff Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: I3ed6662c2c6c440435eae5d6f05a8abb83dae142
2024-03-08 14:21:45 +00:00
OpenStack Release Bot ec6a49410c reno: Update master for unmaintained/xena
Update the xena release notes configuration to build from
unmaintained/xena.

Change-Id: Iab48a01fca4c2f67cb81379ac59031038c9bfb08
2024-03-07 14:24:33 +00:00
OpenStack Release Bot ce2706ac53 reno: Update master for unmaintained/wallaby
Update the wallaby release notes configuration to build from
unmaintained/wallaby.

Change-Id: Iffda7484b0b6fd3849301a93d9b177b0692b8a61
2024-03-07 14:20:20 +00:00
OpenStack Release Bot a6e6a0e5b2 reno: Update master for unmaintained/victoria
Update the victoria release notes configuration to build from
unmaintained/victoria.

Change-Id: If32844bcfaa61f0836ff73818f72073a5cfc9b80
2024-03-07 14:14:09 +00:00
Takashi Kajinami d578cbcce9 Add release note about new consumer interfaces
Since bc6d87b969 was merged, any
implementations inheriting the base KeyManager class should implement
the two new consumer interfaces. This documents that upgrade impact
so that the note appears in release note.

Change-Id: Id6ba2f3dff279371a13e319773b4579c82338774
2024-03-04 18:04:25 +09:00
melanie witt 4925356be6 Raise ManagedObjectNotFoundError in MockKeyManager
Currently the MockKeyManager raises KeyError when a key is not found
for a get() or delete() but a real key manager raises
ManagedObjectNotFoundError in the case of not found [1][2].

This updates the MockKeyManager to raise the same exception as a real
key manager so that projects using it in tests will be able to test
their handling of "not found" scenarios properly.

[1] a662b30764/castellan/key_manager/barbican_key_manager.py (L617)
[2] a662b30764/castellan/key_manager/barbican_key_manager.py (L644)

Change-Id: I3184a229f6690854dda1edc12e74bb483b47a057
2024-02-26 08:34:28 +00:00
Zuul e4c44a460d Merge "tox: Drop envdir" 2024-02-15 09:18:39 +00:00
Zuul a662b30764 Merge "Bump hacking" 2024-02-14 09:59:04 +00:00
OpenStack Release Bot 1d423e1bfa reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: Ic2c7f652bcec232b16249c1c6341cd86c07aae38
2024-02-06 14:27:03 +00:00
Takashi Kajinami 3d23bfdc81 tox: Drop envdir
tox now always recreates an env although the env is shared using envdir
options.
~~~
$ tox -e genpolicy
genpolicy: recreate env because env type changed from
{'name': 'genconfig', 'type': 'VirtualEnvRunner'} to
{'name': 'genpolicy', 'type': 'VirtualEnvRunner'}
~~~

According to the maintainer of tox, this functionality is not intended
to be supported.
https://github.com/tox-dev/tox/issues/425#issuecomment-1011944293

Change-Id: I5db68dc1ca25626d7f50c2fa9319896721c08d3d
2024-02-02 23:43:25 +09:00
Takashi Kajinami 1a7af1289b pre-commit: Integrate bandit
Co-Authored-By: Stephen Finucane <sfinucan@redhat.com>
Change-Id: I8ce1724bb1f7eab88204d350616bf59d910ea57d
2024-02-02 10:19:06 +09:00
Takashi Kajinami 9744fe5734 pre-commit: Bump versions
hacking now has a native hook.

Co-Authored-By: Stephen Finucane <sfinucan@redhat.com>
Change-Id: I42e062a3196c7edf145c54f153e85010406edf6e
2024-02-02 10:16:04 +09:00
Takashi Kajinami 291ad9c778 Bump hacking
hacking 3.0.x is too old.

Change-Id: Ic6d33295b33cff8a68fbb8181973480bc17e7711
2024-02-02 01:50:46 +09:00
Ghanshyam Mann 3b4e09f8cd Update python classifier in setup.cfg
As per the current release tested runtime, we test
python version from 3.8 to 3.11 so updating the
same in python classifier in setup.cfg

Change-Id: I8b5ffec9f1622341950e8104795b98b33ccb3a45
2024-01-11 15:36:55 -08:00
OpenStack Release Bot 7b19136668 Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: I678310a4dcc6268263a7a42f4f425907f35079e4
2023-09-07 09:35:42 +00:00
Ghanshyam e84db180dc Revert "Moves supported python runtimes from version 3.8 to 3.10"
This reverts commit 46cb956cf0.

Keeping Python 3.10 in setup.cfg classifier and all zuul.yaml change. 

Reason for revert:

Needed-By: https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/882175

TC has been discussing about re-adding the python 3.8
testing in current master 2023.2 release testing.

- https://meetings.opendev.org/meetings/tc/2023/tc.2023-04-25-18.00.log.html#l-191
- https://lists.openstack.org/pipermail/openstack-discuss/2023-April/033469.html

While governance changes are under review, TC agreed to add py3.8 testing
so that we do not see more project/lib dropping python 3.8 and make them
uninstalable on python 3.8

- https://meetings.opendev.org/meetings/tc/2023/tc.2023-05-02-18.00.log.html#l-17
- https://review.opendev.org/c/openstack/governance/+/882165

Also adding py3.8 testing back in job https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/882175

Change-Id: Ib0e5a4e7d3eaf20690d92ad7c68a66108f51f5bf
2023-05-05 18:50:07 +00:00
Takashi Kajinami 46cb956cf0 Moves supported python runtimes from version 3.8 to 3.10
Within 2023.2 python version 3.9 and 3.10 are the
supported python runtimes [1].
[1] https://review.opendev.org/c/openstack/governance/+/872232

Change-Id: Ibea17ce03a0e4f5ef018afeb934660e0dc1bfc60
2023-04-10 14:47:00 +00:00
OpenStack Release Bot cecdde7672 Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: Ic3218dd69770273a5b4cae181bc21d015501378f
2023-02-24 15:15:14 +00:00
Zuul a8b3ffef93 Merge "Add secret consumers documentation and release note" 2023-02-20 12:48:53 +00:00
Grzegorz Grasza 365618a665 Add secret consumers documentation and release note
Change-Id: I6ef9c1307fb178158970182a6c69ca7f16d2b35d
2023-02-20 13:20:55 +01:00
Zuul 31c77b4542 Merge "Add force parameter functional tests" 2023-02-17 15:12:20 +00:00
Zuul 9efc3e51e9 Merge "Add secret consumers functional tests" 2023-02-17 14:49:39 +00:00
Zuul a2c3d54c82 Merge "Implement force parameter" 2023-02-17 12:51:26 +00:00
Mauricio Harley 7de4f89f02 Add force parameter functional tests
Change-Id: I37036867297ae5e6f95191154c71d25ac9eda796
2023-02-17 13:26:27 +01:00
Zuul 300c60ca97 Merge "Add support for specifying Vault KV path" 2023-02-17 12:23:38 +00:00
Mauricio Harley e65ac5e439 Add secret consumers functional tests
This adds secret consumers functional tests
to use with Barbican.

Change-Id: I23e71e534d94e753c3e94154f39ec04219ab0fa6
2023-02-17 11:11:26 +01:00
Grzegorz Grasza 96027e9cff Implement force parameter
This change adds the force parameter to the secret delete
method. By default, a secret cannot be deleted if it
contains consumers.

This code cannot be merged without a corresponding release and
bump of version for the barbicanclient.

Co-Authored-By: Mauricio Harley <mharley@redhat.com>
Change-Id: I84fd870b1cd19975a5bb832ed6fd6d18ec56eb5a
2023-02-17 10:00:07 +00:00
Grzegorz Grasza bc6d87b969 Add secret consumers
This change adds the ability to add or remove consumers to a
managed object to allow services to indicate which object is
associated with a specific secret.  At this time, only barbican
supports consumers.

This code cannot be merged without a corresponding release and
bump of version for the barbicanclient.

Co-Authored-By: Mauricio Harley <mharley@redhat.com>
Depends-On: https://review.opendev.org/c/openstack/requirements/+/873906
Change-Id: Ic25ac329f87db5992e32ef0b2d7d4020f37b2dee
2023-02-16 13:45:16 +01:00
Grzegorz Grasza fe10397ac0 Initial change to add secret consumers
This adds consumers to the objects. Unit tests are
also covered.

Co-Authored-By: Ade Lee <alee@redhat.com>
Co-Authored-By: Mauricio Harley <mharley@redhat.com>
Change-Id: I598209e30d8f0e4515292b1f8c9a89aa952bac4e
2023-01-27 13:11:05 +01:00
Scott Solkhon 370986e96e Add support for specifying Vault KV path
This commit adds support for a Vault path that is relative to
the root of the Vault KV store. This configuration is optional
and will be a noop for existing deployments.

Change-Id: If34c38c8f0a2f13ea90f564bfe5e933e5e748da4
2023-01-16 20:47:07 +00:00
Grzegorz Grasza fb6b880eaf Fix tox4 error
tox.ini started failing with Tox4 which had some
incompatible changes. One of them is due to the
skipsdist = True.

This also adds setup-vault-env.sh to allowlist_externals, since it
fails otherwise.

Change-Id: If0ace2c2ef0915d9a4ffcba99d664ffe97621b12
2023-01-12 14:01:22 +01:00
Ade Lee 316db6cb53 Make tests more consistent
Tests periodically fail right now because the cleanup which is
running in a different thread sometimes removes the managed objects
before we have completed testing with them.  The change to use
concurrency=1 will slow down the tests, but also make them more
consistent.

Also, when things are not cleaned up, you can get false positive
results if multiple objects contain the same content.  This will
fix this problem by making the contents unique.

Change-Id: Ic2b9e6afe9371dbe135e90fa6df36a8e91921556
2022-09-21 16:27:54 +02:00
OpenStack Release Bot 88fe06e373 Add Python3 antelope unit tests
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for antelope.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I0b09c4b655a3f80eba34520a51bb7aff173764ad
2022-09-09 09:15:42 +00:00
OpenStack Release Bot c6ad6b9315 Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I3136f2dc8f4a6b2f9d15a12a880fa1a5c551343e
2022-09-09 09:15:41 +00:00
Hervé Beraud 73569c8ff0 Drop python3.6/3.7 support in testing runtime
In Zed cycle testing runtime, we are targetting to drop the
python 3.6/3.7 support, project started adding python 3.8 as minimum,

example nova:
- 56b5aed08c/setup.cfg (L13)

Change-Id: I356f666d481e3514f5806221491171d95ae5789c
2022-05-05 16:16:59 +02:00
Takashi Kajinami d2e8437208 Remove redundant override of logging_context_format_string
The target value is exactly same as the default defined in oslo.log,
thus this override is just redundant.

Change-Id: I91fcc035526d655f0b885f5b6a176dc18577a3a3
2022-04-16 00:42:55 +09:00
Zuul e045a4c667 Merge "Add Python3 zed unit tests" 2022-04-05 11:21:58 +00:00
Zuul 6d5cc58c7f Merge "Updating python testing classifier as per Yoga testing runtime" 2022-03-22 13:11:41 +00:00
Joel Capitao a160e5c8dc Replace the deprecated argument tenant
The deprecated argument tenant from RequestContext
has been removed since [1], so we switch to 'project_id'.

[1] https://review.opendev.org/c/openstack/oslo.context/+/815938

Change-Id: I4e3e4c50ba5d829ed739e278b5286f2bf4808870
2022-03-15 08:36:02 +01:00
OpenStack Release Bot d03d696d76 Add Python3 zed unit tests
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for zed.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I81a053eb2bf52a871277c0965fce6a13ce4ac3bc
2022-03-04 17:17:06 +00:00
OpenStack Release Bot 3e0fad7783 Update master for stable/yoga
Add file to the reno documentation build to show release notes for
stable/yoga.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/yoga.

Sem-Ver: feature
Change-Id: I600b3e54f31a622862c178452ab68c1059f34036
2022-03-04 17:17:05 +00:00
wu.shiming b0c8638fd8 Updating python testing classifier as per Yoga testing runtime
Yoga testing runtime[1] has been updated to add py39
testing as voting. Unit tests update are handled by the
job template change in openstack-zuul-job

- https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/820286

this commit updates the classifier in setup.cfg file.

[1] https://governance.openstack.org/tc/reference/runtimes/yoga.html

Change-Id: I85d655b21aad1f7101904a19f1eeae9874319206
2022-02-16 14:56:00 +08:00
LiZekun 86712360f3 remove unicode from code
Change-Id: I086d90b6f46e31582d412b8725e48cba5c21d6bc
2022-01-05 10:44:00 +08:00
Zuul ebafb3c656 Merge "Fix gitignore pattern for vault related files" 2021-10-18 21:48:03 +00:00