From 7ea7e0a14e6bfdb01972c3cddc26326b12486214 Mon Sep 17 00:00:00 2001 From: Trevor McCasland Date: Thu, 17 Jan 2019 11:35:39 -0600 Subject: [PATCH] update identity role tests to work w/ pre-prov I don't see any limitations by using pre-provisioned credentials for these tests: * test_role_create_update_show_list * test_list_roles * test_implied_roles_create_check_show_delete * test_roles_hierarchy * test_assignments_for_implied_roles_create_delete * test_domain_roles_create_delete * test_implied_domain_roles * test_assignments_for_domain_roles * test_list_all_implied_roles * test_grant_list_revoke_role_to_user_on_project * test_grant_list_revoke_role_to_user_on_domain * test_grant_list_revoke_role_to_group_on_project * test_grant_list_revoke_role_to_group_on_domain By setting force_tenant_isolation=False these tests now be can executed with backends that don't allow user creation (immutable user source) like LDAP. Partial-Bug: #1714277 Change-Id: Id82f3b6187e878abe04a0aea9e7dbb9e8fb6360e --- tempest/api/identity/admin/v3/test_roles.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tempest/api/identity/admin/v3/test_roles.py b/tempest/api/identity/admin/v3/test_roles.py index b67de95929..5ba4c9f1f7 100644 --- a/tempest/api/identity/admin/v3/test_roles.py +++ b/tempest/api/identity/admin/v3/test_roles.py @@ -25,6 +25,10 @@ CONF = config.CONF class RolesV3TestJSON(base.BaseIdentityV3AdminTest): + # NOTE: force_tenant_isolation is true in the base class by default but + # overridden to false here to allow test execution for clouds using the + # pre-provisioned credentials provider. + force_tenant_isolation = False @classmethod def resource_setup(cls):