* Update barbican-tempest-plugin from branch 'master'
to 82b0e48639ad52838902dffbc3acaa5bc789b87e
- Merge "Support files removed for CONF.scenario.img_dir option"
- Support files removed for CONF.scenario.img_dir option
CONF.scenario.img_dir file has been removed along with any other
support files. Exception has been raised when a user passes an
img file that does not exist in the CONF.scenario.img_file.
Exceptions import has been added for lib_exc.
Closes-Bug: #2032948
Change-Id: I2b57dd4928ab3f6858909fc90b7865aac2d93da2
* Update barbican-tempest-plugin from branch 'master'
to e1645532b1f81976c3518b68cb9529da431f67a3
- Merge "Update python testing as per zed cycle teting runtime"
- Update python testing as per zed cycle teting runtime
In Zed cycle, we have dropped the python 3.6/3.7[1] testing
and its support. Removing the py36 centos8 job as well as
updating the python classifier also to reflect the same.
[1] https://governance.openstack.org/tc/reference/runtimes/zed.html
Change-Id: I0ae09def76d163190d79ccbff231c3d2e3ac16e0
* Update barbican-tempest-plugin from branch 'master'
to 0ee4c298ce8482bb9c435378f9575a3133dbae1f
- Merge "Fix typo in branch name for 2023.2"
- Fix typo in branch name for 2023.2
Change-Id: Ifec735cc7222d49993d8191fb65a1b0a910880d9
* Update barbican-tempest-plugin from branch 'master'
to f95155dc767e9a88bf7ce861a9a63319d928d65e
- Merge "Update roles required for testing"
- Update roles required for testing
This patch removes the hard-coded 'key-manager:service-admin' role from
the base test class because the role is not available in deployments
with the new Secure RBAC policies enabled.
There is only one test that still requires this role in the API quotas
tests, so we generate a dynamic user there and only use it in this
class. This test is skipped when SRBAC is enabled.
Change-Id: I6fbfe43f821d9315e01d3bdfd6f5d4edf4e552b7
* Update barbican-tempest-plugin from branch 'master'
to 57968af2c4d1cff014396cfd27d400e7aa2b8b28
- Merge "Update python classifier in setup.cfg"
- Update python classifier in setup.cfg
As per the current release tested runtime, we test
till python 3.11 so updating the same in python
classifier in setup.cfg
Change-Id: Iff08f2ae92b34a7ec9b1155e12e5e9854f3feb88
* Update barbican-tempest-plugin from branch 'master'
to 3c70e93c06b873ef4f58fee689a7dc3e8984d6b1
- Merge "Fix barbican_tempest option group"
- Fix barbican_tempest option group
This patch fixes a bug with the barbican_tempest option group that was
breaking tempest init by returning the wrong object.
Change-Id: Ia62c43fc67114c89be5f481dab2cb11df6ee82b0
* Update barbican-tempest-plugin from branch 'master'
to e8fb657de92ca6f0d0225bb203df73d9f0183189
- Merge "Fix image_signature_verification group not register properly"
- Fix image_signature_verification group not register properly
Change-Id: I32d4a5864c2cf9ec364167c6f7dada21a1a6bd46
* Update barbican-tempest-plugin from branch 'master'
to 34dd80821f0f6f7fe162a35646df465016201ecb
- Merge "Update stable branch testing"
- Update stable branch testing
stable/yoga and older branches are no longer supported by current
tempest so remove tests for these branches from gate.
Also fix the missing 2023.2 branch job.
Change-Id: I2feca9dba2e42e113277d5bca96188db092d098a
* Update barbican-tempest-plugin from branch 'master'
to bddfa997475a5cf1545cb7130667c8bdf54672dc
- Merge "Add secure RBAC jobs for stable branches"
- Add secure RBAC jobs for stable branches
Change-Id: Ib8b2a71d7d7e5a12316bd45e6a95501620db8fab
* Update barbican-tempest-plugin from branch 'master'
to f2b9c024cb736551668bc871201d71542896b508
- Merge "Replace deprecated tenant_id property"
- Replace deprecated tenant_id property
The tenant_id property of RestClient in tempest was deprecated in
25.0.0. This replaces the deprecated property by the new project_id
property to avoid the following warning.
WARNING tempest.lib.common.rest_client [-] Deprecated: "tenant_id"
property is deprecated for removal, use "project_id" instead
Depends-on: https://review.opendev.org/c/openstack/tempest/+/707938
Change-Id: I1b690898f1c88244b9f9a68e67e2263058171c2f
* Update barbican-tempest-plugin from branch 'master'
to 8debdcb489b95e19b0a8275bd0ef69a61b7a63b9
- Merge "Use consistent naming for enforce_scope option"
- Use consistent naming for enforce_scope option
Tempest and a few other plugins such as manila-tempest-plugin registers
the option to enable scope enforcement tests in the [enforce_scope]
option. This renames the option so that this plugin follows that
standard.
Change-Id: Ibd6962947c64f04ff1948a19c4afe9f26d0b47bb
* Update barbican-tempest-plugin from branch 'master'
to 6852d1dce8c25688da124739b7eb1096874c6acd
- Merge "Barbican tempest missing IDs"
- Barbican tempest missing IDs
Several tests in the Barbican-tempest-plugin are missing idempotent IDs.
The check-uuid tool was used to ensure that all tests have an ID.
Closes-Bug: #2030965
Change-Id: Ice8a1c210e0ac2e50044f9a37e15b00fd9f306f4
* Update barbican-tempest-plugin from branch 'master'
to ef7c2f473ac0265e2712ac87483ffb3be11f7d08
- Merge "Tests with signed volumes"
- Tests with signed volumes
Scenario tests with encrypted volumes and non encrypted volumes
Change-Id: Ia06e95841e1582d7154fea0bef3e84614b58e1e7
* Update barbican-tempest-plugin from branch 'master'
to 6345b34ae2f47346dd72dc196ec89a3793f57eac
- Pause testing of multiple secret stores
There is an issue with multiple secret stores which is being tracked in
this launchpad [1]. This issue is blocking patches in
barbican-tempest-plugin. Let's remove the testing for multiple secret
stores until the bug gets resolved.
There was also an update of the secret:delete and secret:get policies
[2]. This patch updates the corresponding SRBAC tests so that we test
the policies correctly.
[1] https://bugs.launchpad.net/barbican/+bug/2043457
[2] https://review.opendev.org/c/openstack/barbican/+/884181
Related-Bug: #2043457
Change-Id: I86335a1cb54b6aa2f74e148416ef6af7c27fff61
* Update barbican-tempest-plugin from branch 'master'
to a34bd3b785a645b7879c7dd99625b7fa1546903b
- Merge "Pin barbican-tempest-plugin for jobs in EM"
- Pin barbican-tempest-plugin for jobs in EM
Let's pin barbican-tempest-plugin for jobs that run code from branches in extended maintenance.
This change is required because these jobs install older version of tempest that does not contain all functions consumed by master barbicna-tempest-plugin.
Change-Id: Ia4a30d12de1a58b93a06979188e662edeef21ec6
* Update barbican-tempest-plugin from branch 'master'
to bf83cf93c0063dde7078e8ff701e1712307fd1c0
- Merge "Add stable/2023.1 jobs on master gate"
- Add stable/2023.1 jobs on master gate
As 2023.1 is released, we should add its job on master
gate to keep branchless tempest plugins compatible
to stable branch.
Ref: Tempest plugins guide for stable branch testing:
- https://docs.openstack.org/tempest/latest/stable_branch_testing_policy.html
Change-Id: I59f29bcbf667f6598b00022eff4088ed324f1610
* Update barbican-tempest-plugin from branch 'master'
to e5ed4b9f1e6b2843c48b0df56a71cdb185004ef7
- Remove Glance v1 APIs tests code
Glance v1 APIs were removed in Rocky and tempest master
does not support the Rocky release. If glance v1 APIs
needs to be tested for older release then older Tempest
can be used.
Tempest is removing the Glance v1 APIs tests, config option,
and its service clients and this change is needed for that.
Needed-By: https://review.opendev.org/c/openstack/tempest/+/890592
Change-Id: I0ef67e86730320755e6f642a36f97ab462fe0aad
* Update barbican-tempest-plugin from branch 'master'
to e765946be16235dafa82809183a4b9e2fa14e078
- Merge "Update rbac tests"
- Update rbac tests
This patch updates the rbac tests for testing the policy updates that
removed the "system" scope and use "project" scope instead.
Depends-On: I3b781112fc6ced7b73196f973cefd6a30ef99dd3
Change-Id: I735cefe2b1cb4eb09c9770f0bdc738ffeee34f0e
* Update barbican-tempest-plugin from branch 'master'
to a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
- Merge "Modify test_get_effective_quota test"
- Modify test_get_effective_quota test
The test_get_effective_quotas test uses key-manager:service-admin
legacy role to get the effective quotas. Using a user with only this
role should lead to an ERROR in an SRBAC environment.
This patch changes the test so that it checks whether the ERROR
occurred when the test tried to get quotas in SRBAC environment.
Also, auth.tempest_roles = member was removed from tempest.conf
as it is not necessary and causes a failure of the modified
test and it might cause unwanted problems in the future.
Change-Id: Ib106f5e760d3a5253968e2fe13ec576107a98c74
* Update barbican-tempest-plugin from branch 'master'
to d8047c20252f469977b20a7e03b982ce5cfa5fe2
- Enable test_secret_stores tests
This patch enables test_secret_stores tests in the SRBAC job. The tests
were previously fixed in this patch [1].
This change builds on the fix. It modifies the configuration of
the SRBAC job so that it is deployed with enabled multiple secret
stores.
[1] https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/883482
Change-Id: I60305a35528fd16ac4e995d11d6d0999a6440e44
* Update barbican-tempest-plugin from branch 'master'
to b5519a7015b0f28e796d82555c5d82c684896c68
- Merge "Migrate back to Launchpad"
- Migrate back to Launchpad
Change-Id: I91874ec6001d82104630b4f33883b5af9d2ac09f
* Update barbican-tempest-plugin from branch 'master'
to 3868bbf3c9e38cee487d2a9cb3f72648edebe26b
- Merge "Fix test_secret_stores tests"
- Fix test_secret_stores tests
There were five minor issues with the test_secret_stores tests:
1) There is a typo in some test cases. They are calling
unset_peferred_secret_store instead of unset_p<r>eferred_secret_store
2) Set and unset preferred secret stores API calls in the
SecretStoresClient expect 200 response status code when in fact they
should expect 204 instead [1].
3) test_get_preferred_secret_store test expects to get preferred
secret store when in fact none is set for the project.
4) skip_checks() function did not call super's skip_checks()
5) test_set_unset_preferred_secret_store test expects to get preferred
secret store for a project when there is no preferred secret store
set for it.
[1] https://docs.openstack.org/barbican/rocky/api/reference/store_backends.html#post-v1-secret-stores-secret-store-id-preferred
Change-Id: Ic211ea87006662c5a24aef3d1b78a5aa85b5e35b
* Update barbican-tempest-plugin from branch 'master'
to dba97635a17bed83f0423604fae6c370f80f8f75
- Merge "Add enable_certificate_validation config option"
- Add enable_certificate_validation config option
This patch adds enable_certificate_validation config option. This option
can be used to skip tests that rely on image signature certificate
validation being enabled on the test environment
(test_signed_image_invalid_cert_boot_failure).
Change-Id: Id4134a2e87378487baa9e3d5f49e7ded48daa765
* Update barbican-tempest-plugin from branch 'master'
to b18a6bf265b8c6dea25708c017b86ba81a5efe9b
- Set a default region for clients
Clients initialized for tests.api.* tests do not have defined values
for region [1]. Because of that the clients connect to the first
available service endpoint that they find (see this line in
tempest [2]). This can cause issues when there are multiple endpoints
on a system for barbican (admin, internal, public).
This change sets a default value for key_manager.region config option
to 'regionOne' and ensures that clients defined on the side of
barbican-tempest-plugin are intialised with this value.
[1] https://opendev.org/openstack/barbican-tempest-plugin/src/branch/master/barbican_tempest_plugin/tests/api/base.py#L91
[2] https://opendev.org/openstack/tempest/src/branch/master/tempest/lib/auth.py#L586
Change-Id: Ic9ae00c663cca6b83dc961b984cf129d1c33afc4
* Update barbican-tempest-plugin from branch 'master'
to 30e50ef9c85bf008c7c3e5aeb6b009629a2013c9
- Merge "Introduce a new test for "cve_2022_3100""
- Introduce a new test for "cve_2022_3100"
The exploit is that a malicious user with a Keystone account is able to decrypt
any secret as long as they know the secret's ID by using a specifically crafted
query string:
GET /v1/secrets/{secret-id}/payload?target.secret.read=read
Change-Id: I5e00a188268ef1c25eed8bf3a37197918e529427
* Update barbican-tempest-plugin from branch 'master'
to dc14cae0ebd620d30be0cd9784394f8d775a7557
- Merge "Add skip for api tests"
- Add skip for api tests
Change-Id: I67d2596b32063df92092e58bb3803372b22d1492
* Update barbican-tempest-plugin from branch 'master'
to 397c77d286c2590cdca58ffd73dcd04349f19ea4
- Merge "The Python 3.6 and Python 3.7 Support has been dropped since zed"
- The Python 3.6 and Python 3.7 Support has been dropped since zed
[1] https://governance.openstack.org/tc/reference/runtimes/zed.html
Change-Id: I2725aca3cd5620bd16d086298134f3735e7c338f
* Update barbican-tempest-plugin from branch 'master'
to 6d76a0868c890997be7ae592e23d08cbc9937039
- Merge "Remove secgroups related methods"
- Remove secgroups related methods
As tempest.scenario.manager was announced stable interface in Tempest 27.0.0[1]
it can be now reused in plugins.
Barbican tempest plugin still uses nova-network old interface for floating ip
related methods, this patch removes them and use tempests's ones which
already use neutron's interface.[2]
Replaced/Removed methods:
* _default_security_group
* _create_security_group
* _create_loginable_secgroup_rule
* _create_security_group_rule
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
[2] bbc9dd34f6
Change-Id: I7605fe11caa8ae5725e0c0583c623ebad73d40da
* Update barbican-tempest-plugin from branch 'master'
to 2505d0d64ff356377d4dc23bcafdffb638e43a3a
- Merge "Remove nova_volume_attach & nova_volume_detach methods"
- Remove nova_volume_attach & nova_volume_detach methods
As tempest.scenario.manager was announced stable interface in Tempest
27.0.0[1] it can be now reused in plugins.
Replaced methods:
* nova_volume_attach
* nova_volume_detach
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: Ieb01041344ddc17b3bb4c34ada83a80d2fd612d9
* Update barbican-tempest-plugin from branch 'master'
to 5aab50bde0b4e76875dc53ef9136fcebae96f7cc
- Merge "Add skip for test_encrypted_cinder_volumes_cryptsetup"
- Add skip for test_encrypted_cinder_volumes_cryptsetup
Ceph does not support Provider plain.
Volume driver reported an error: Provider plain not supported
Change-Id: If14e6abbf4baf58bda31a476b126bcc18987fc32
* Update barbican-tempest-plugin from branch 'master'
to 7bc1460285a0e04c22566f70b8c5f729936e8038
- Merge "Remove create_floating_ip & get_server_ip methods"
- Remove create_floating_ip & get_server_ip methods
As tempest.scenario.manager was announced stable interface in Tempest 27.0.0[1] it can be now reused in plugins.
Barbican tempest plugin still uses nova-network old interface for floating ip related methods, this patch removes them and use tempests's ones which already use neutron's interface.[2]
Replaced methods:
* create_floating_ip
* get_server_ip
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
[2] 6428139de1
Change-Id: I7b048f78d0ee8fd2aae33134caa1a8034fa31031
* Update barbican-tempest-plugin from branch 'master'
to a396ac40c171e40f6b531afb4990755c308fdf57
- Add stable/zed jobs on master gate
As zed is released, we should add its job on master
gate to keep branchless tempest plugins compatible
to stable branch.
Ref: Tempest plugins guide for stable branch testing:
- https://docs.openstack.org/tempest/latest/stable_branch_testing_policy.html
Change-Id: Ia20cec2a500943a7f954c34614102c4d17a01c34
* Update barbican-tempest-plugin from branch 'master'
to fb42f0106e0e163ae02f6ecbb631c656336b85f5
- Pin stable branch jobs nodeset to Ubuntu Focal (20.04)
In 2023.1 cycle. we are moving the default distro
version of Ubuntu to Jammy (22.04)[1] so we need to pin
the nodeset for stable branch job in master gate so that
they continue run on their supporting distro version which is
Ubuntu Focal since stable/victoria.
[1] https://governance.openstack.org/tc/goals/selected/migrate-ci-jobs-to-ubuntu-jammy.html
Change-Id: I7c9c57d2ca1d3d6536b24f29c89b465059a3cec4
* Update barbican-tempest-plugin from branch 'master'
to 0eebe182c887603033315eaab837d30c1b48bd17
- Add train, ussuri and victoria integration jobs
This patch adds the missing train, ussuri, and victoria jobs to the zuul
config. This should help fix the gates for those stable banches which
are currently failing because they are attempting to test newer APIs
(e.g. Secret Consumers)
Change-Id: I34753317a8a80656a460c2fc6104fd2c9827f838
* Update barbican-tempest-plugin from branch 'master'
to a32eaf0dd8a4cd1825f69b97dc7ac51519ec07d7
- Test secret access via ACL
This patch enhances the ACL test to ensure that "other" user is not able
to get a secret before being added to the ACL.
After adding the ACL for the user, we check again to ensure the ACL is
working as intended by allowing the user now in the ACL to access the
secret.
Change-Id: I0b4e1fc71c62376301858128dd2fbb75bd1fa602
* Update barbican-tempest-plugin from branch 'master'
to 01da5615dbe869685858f64e52fe40c870141116
- Add versioned jobs
With 1.1 coming in zed, we need to version the old jobs to prevent
1.1 tests (secret consumers) being run and failing on old branches.
Change-Id: Iae1dfea83a6584a95fb73488ad0ba988ded371ca
* Update barbican-tempest-plugin from branch 'master'
to d0aa2f34d0bac13d1706145a510d4474918caf6d
- Add "member" role to tempest tests
The "member" role is needed by the scenario tests to create secrets when
Secure RBAC is enabled i.e. enable_scope=True
Change-Id: I16ed904eeb27ab7110a7e4e56ef7ea89c8c3c2ab
* Update barbican-tempest-plugin from branch 'master'
to 44c9ed2bc48d2a32c8338d9cca80588671a7c638
- Merge "Set minimal tempest version to 27.0.0"
- Set minimal tempest version to 27.0.0
As tempest.scenario.manager was announced stable interface in Tempest
27.0.0[1] it can be now reused in plugins.
Some methods replaced in scenario-manager-cleanup effort won't work
with tempest version lower than 27.0.0 therefore minimal tempest
version must be updated in tempest plugins
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: I422435abd4fb34fbba187deb0d96ef314767ff19
* Update barbican-tempest-plugin from branch 'master'
to 7336b9a1f18ccfcac1b434ebf51ccb0a59d947a6
- Merge "Remove create_volume & create_volume_type methods"
- Remove create_volume & create_volume_type methods
As tempest.scenario.manager was announced stable interface in Tempest 27.0.0[1] it can be now reused in plugins.
Replaced methods:
* create_volume
* create_volume_type
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: I183a0f8190bf7f336370732d8d08d1bb28ad2835
* Update barbican-tempest-plugin from branch 'master'
to 583a00a4e999c6caeeb260e31e93e31e439267b9
- Merge "Remove create_timestamp & get_timestamp methods"
- Remove create_timestamp & get_timestamp methods
As tempest.scenario.manager was announced stable interface in Tempest 27.0.0[1] it can be now reused in plugins.
Replaced methods:
* create_timestamp
* get_timestamp
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: Id6ba585c58c0e9b6564d85137fd00ae2a8954c06
* Update barbican-tempest-plugin from branch 'master'
to f4c25f520647522eeecc8a1d2e0d6c1ad3a5abb9
- Merge "Remove create_server and rebuild_server methods"
- Remove create_server and rebuild_server methods
As tempest.scenario.manager was announced stable interface in Tempest 27.0.0[1] it can be now reused in plugins.
Replaced methods:
* create_server
* rebuild_server
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: I3f9209fef4da9cc85d78060da0bad61682ff6b73
* Update barbican-tempest-plugin from branch 'master'
to be3992b3f921f09eed5728d910aae9c84c30f11e
- Merge "Update 'Maintained' stable branch jobs on master gate"
- Update 'Maintained' stable branch jobs on master gate
We have stable/yoga released and stable/ussuri is in
'Extended Maintenance' state. Current 'Maintained'
stable branches are yoga, xena, wallaby, and victoria.
As per tempest stable branch testing policy[1], adding the
newly released stable/yoga job and remove the EM stable/ussuri
and stable/victoria job.
[1] https://docs.openstack.org/tempest/latest/stable_branch_testing_policy.html
Change-Id: I9df1b691a9d142997a3d3ee5e115187c0923e85d
* Update barbican-tempest-plugin from branch 'master'
to e4b0683526676aa317da2678bbebc2d2f204bc8a
- Merge "Fix the import of NotFound exception"
- Fix the import of NotFound exception
It is exported by tempest.lib.exceptions, not tempest.exceptions
(it was originally until 2015).
Change-Id: Ic8ef45bcb9518968d32872a93fc3381004d218ff
* Update barbican-tempest-plugin from branch 'master'
to 2e5b896b6482962cb642869d23c4033fa3ecdaba
- Merge "Remove _create_port and create_keypair methods"
- Remove _create_port and create_keypair methods
As tempest.scenario.manager was announced stable interface in Tempest 27.0.0[1] it can be now reused in plugins.
Replaced methods:
* _create_port
* create_keypair
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: I2f96cf7b5f85f2a1297eb7a1aafdfd88485eaebe
* Update barbican-tempest-plugin from branch 'master'
to 11c8cfae0ce85b874ab055e685accba85f460fda
- Enable isolated networks in tempest.conf
There was an issue with s-rbac and tempest when isolated networks
were enabled in tempest.conf.
This is no longer an issue as test that were failing with
create_isolated_networks=true and s-rbac enabled are now
passing successfully.
Change-Id: Iae8eac5dffe3c5d15e38a6acd69f2bad95f3f238