summaryrefslogtreecommitdiff
path: root/openstackclient/identity/v3
Commit message (Collapse)AuthorAgeFilesLines
* Merge "Add support for domain specific roles"Jenkins2016-08-182-14/+101
|\
| * Add support for domain specific rolesHenry Nash2016-08-102-14/+101
| | | | | | | | | | | | | | A role entity can now be specified as domain specific. Closes-bug: #1606105 Change-Id: I564cf3da1d61f5bfcf85be591480d2f5c8d694a0
* | Gate-unbreaking combo reviewDean Troyer2016-08-182-9/+9
|/ | | | | | | | | | | | | | | | | | | | | | | | Fix argument precedence hack Working around issues in os-client-config <= 1.18.0 This is ugly because the issues in o-c-c 1.19.1 run even deeper than in 1.18.0, so we're going to use 1.19.0 get_one_cloud() that is known to work for OSC and fix o-c-c with an axe. Remove return values for set commands 'identity provider set' and 'service provider set' were still returning their show-like data, this is a fail for set commands now, don't know how this ever passed before... Constraints are ready to be used for tox.ini Per email[1] from Andreas, we don't need to hack at install_command any longer. [1] http://openstack.markmail.org/thread/a4l7tokbotwqvuoh Co-authorioed-by: Steve Martinelli <s.martinelli@gmail.com> Depends-On: I49313dc7d4f44ec897de7a375f25b7ed864226f1 Change-Id: I426548376fc7d3cdb36501310dafd8c44d22ae30
* Add assignment list to v2 identity and deprecate alternate listingHenry Nash2016-07-222-0/+46
| | | | | | | | | | | | | | | | | | | | | | | | | The current identity role list command (both v2 and v3) is overloaded with listing roles as well as assignments (if you provide user, group, project or domain options). This is in addition to the v3 assignment list command designed for this purpose. This overloading complicates the fact that roles can now be domain specific (i.e. have a domain attribute), so the command 'role list --domain <domain-name' will soon become ambigious (this is in a follow on patch). This patch: - Adds a v2 assignments list, with support for pulling the user and project from the auth credentials - For comapability, adds the same auth support to the existing v3 assignments list - Deprecates the use of role list and user role list to list assignments Change-Id: I65bafdef4f8c89e863dab101369d0d629fa818b8 Partial-Bug: 1605774
* Remove execute permission on a few filesSongmingYan2016-07-225-0/+0
| | | | | | | Some files have execute permission unnecessarily. Change them from 755 to 644. Change-Id: I471ebd1c3d123ad4a7376f7f5996f53f8c2d9b0b
* Merge "Update doc for credential in indentityv3"Jenkins2016-07-191-10/+10
|\
| * Update doc for credential in indentityv3Huanxuan Ao2016-07-151-10/+10
| | | | | | | | Change-Id: I5f49c038a75ea67674b6d9279a6e60d6ded8d12f
* | Support bulk deletion for delete commands in identityv3Huanxuan Ao2016-07-1912-49/+273
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Support bulk deletion for delete commands in the list below identity/v3/consumer identity/v3/credential identity/v3/domain identity/v3/ec2creds identity/v3/endpoint identity/v3/federation_protocol identity/v3/identity_provider identity/v3/mapping identity/v3/policy identity/v3/region identity/v3/service_provider identity/v3/service The unit test in identityv3 need to be refactored, so I add some functional tests instead. I will add all unit tests at one time after the refactor completed. Change-Id: I82367570f59817b47c87b6c7bfeae95ccfe5c50e Closes-Bug: #1592906
* | Make set/unset commands pass normally when nothing specified in identityv3Huanxuan Ao2016-07-1414-87/+0
|/ | | | | Change-Id: I554b41969f96b62a2c6d37024caa56b1441d5ed1 Partial-bug: #1588588
* Correct reraising of exceptionqinchunhua2016-07-075-10/+10
| | | | | | | | | When an exception was caught and rethrown, it should call 'raise' without any arguments because it shows the place where an exception occured initially instead of place where the exception re-raised. Change-Id: I5fb6dea5da7fb6e1e2b339a713c7d37f8c99e407
* Merge "Use resource id when name given for identity show"Jenkins2016-06-233-5/+15
|\
| * Use resource id when name given for identity showDavid Rosales2016-06-223-5/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently a user is allowed to specify either a resource ID or name when running openstack identity comands. In some cases, when a name is specified instead of an ID, the command will return as not able to find the resource when it in fact does exist. The changes here are to check the client against the token on such requests and to extract the ID of the resource specified if enough information exists between the two. We then use the ID associated with the resource to complete the user requests. Change-Id: I40713b0ded42063b786dc21247e854224b9d2fe2 Closes-Bug: #1561599
* | Standardize logger usage of catalog in identitysunyajing2016-06-231-2/+6
|/ | | | | Change-Id: I5307f949b3a350e41840a4a5c191ceacf1b3b291 Partially-Implements: blueprint log-usage
* Merge "Standardize logger usage"Jenkins2016-06-208-8/+43
|\
| * Standardize logger usageTang Chen2016-06-208-8/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use file logger for all command specific logs. This patch also fixes some usage that doesn't follow rules in: http://docs.openstack.org/developer/oslo.i18n/guidelines.html After this patch, all self.log and self.app.log will be standardized to LOG(). NOTE: In shell.py, we got the log in class OpenStackShell, which is also known as self.app.log in other classes. This logger is used to record non-command-specific logs. So we leave it as-is. Change-Id: I114f73ee6c7e84593d71e724bc1ad00d343c1896 Implements: blueprint log-usage
* | Modify help msg and docs in identitysunyajing2016-06-172-2/+2
|/ | | | | | | | Migrate 'change', 'update' to 'modify', migrate 'user to delete' to 'user(s) to delete', migrate '(name or ID)' to '(type, name or ID)'. Change-Id: Ie425e178bb5ddf773e6e793fcd91c78e9c4a5053
* Merge "Fix help msg of identity endpoint"Jenkins2016-06-161-4/+4
|\
| * Fix help msg of identity endpointsunyajing2016-06-161-4/+4
| | | | | | | | | | | | | | <service> argument of `endpoint create` command doesn't mean `new endpoint service`, but an existent service that the new endpoint attached to. Change-Id: I846fdb501bdea14499f42288186f375a3b2b5951
* | osc-lib: commandDean Troyer2016-06-1321-21/+21
| | | | | | | | | | | | | | Leave command.py and test_command.py as a sanity check during the deprecation period. Change-Id: I24e1b755cbfbcbcaeb5273ec0c9706b82384fc85
* | osc-lib: parseractionsDean Troyer2016-06-131-1/+1
| | | | | | | | | | | | | | Leave parseractions.py and test_parseractions.py as a sanity check during the deprecation period. Change-Id: I1a7469b6d872284e0276502a1a287bc0b87f8f83
* | osc-lib: utilsDean Troyer2016-06-1321-36/+40
| | | | | | | | | | | | | | | | Use osc-lib directly for utils. Leave openstackclient.common.utils for deprecation period. Change-Id: I5bd9579abc4e07f45219ccd0565626e6667472f7
* | osc-lib: exceptionsDean Troyer2016-06-134-4/+7
| | | | | | | | | | | | | | | | Use osc-lib directly for exceptions. Leave openstackclient.common.exceptions for deprecation period. Change-Id: Iea3e862302372e1b31ccd27f69db59b4953ca828
* | Moving authentication from keystoneclient to keystoneauthNavid Pustchi2016-06-092-18/+31
|/ | | | | | | | | | | | | | | | | Currently OpenStackClient uses keystoneclient for authentication. This change will update OpenStackClient to use keystoneauth for authentication. All dependant test have been updated. Updating how auth_ref is set in the tests to use KSA fixtures had some racy side-effects. The user_role_list tests failed when they picked up an auth_ref that was a fixture. This exposed a weakness in ListUserRole that needed to be fixed at the same time re handling of unscoped tokens and options. Change-Id: I4ddb2dbbb3bf2ab37494468eaf65cef9213a6e00 Closes-Bug: 1533369
* Fix i18n support problems in identityTang Chen2016-06-0720-308/+350
| | | | | Change-Id: I3b48d17850343051239b5b69e8b890dba32d3ac8 Partial-bug: #1574965
* Add newline to strings in stdout/stderr.write()Lu lei2016-06-065-5/+5
| | | | | | Function stdout/stderr.write() can't break line automatically. Change-Id: I903c2d1cc1a669adb6be5aa4eb783d3b9943e685
* Update v2 endpoint show helpDean Troyer2016-06-021-2/+3
| | | | | | | https://review.openstack.org/#/c/319821/ updated v2 endpoint show and the doc, but not the v3 help. Change-Id: Ifaa90f6266eabafb9de544199759f4ee8bcc1c83
* Do not require an scope when setting a passwordAlvaro Lopez Garcia2016-05-271-0/+2
| | | | | | | | Changing the password in Keystone V3 is an unscoped operation, but we were requiring a scope. Change-Id: If0653ac7b59320c2cd9d42a2c73dd29c3626d389 Closes-Bug: 1543222
* Merge "keystone: fix catalog output when region is unset"Jenkins2016-05-251-1/+1
|\
| * keystone: fix catalog output when region is unsetJulien Danjou2016-05-251-1/+1
| | | | | | | | | | | | | | | | | | | | If no region is set in Keystone, null is deserialized as None and the region has None has value, which triggers a type error when building the output string. This patch fixes that. Change-Id: I7637dc2595655cf452f38308f99fe66ac782e16d
* | Merge "Search by user defined ID for service providers"Jenkins2016-05-251-1/+2
|\ \
| * | Search by user defined ID for service providersSteve Martinelli2016-05-241-1/+2
| |/ | | | | | | | | | | | | | | | | | | | | | | IDs for service providers can be user defined (like, Bob). This causes issues with the usual get by ID method. Keystone server side has implemented changes to search by ID when listing, which should resolve the issue with minimal changes to the client side. Change-Id: Ic705806e4bc7bb24f946a1fce803a0a0a4d788c1 Closes-Bug: 1555830
* | Search by user defined ID for identity providersSteve Martinelli2016-05-231-1/+2
|/ | | | | | | | | | | | IDs for service providers can be user defined (like, Bob). This causes issues with the usual get by ID method. Keystone server side has implemented changes to search by ID when listing, which should resolve the issue with minimal changes to the client side. Change-Id: Ic58df22b3445d3293a8e1c76c5da79badebf6528 Closes-Bug: 1479837
* remove #noqa from i18n importsSteve Martinelli2016-05-138-8/+8
| | | | | | hacking checks no longer fail on `import _` Change-Id: Idd60f0a0e71e5081691eacb39e5091ab08fcce6d
* Added "name" parameter to the help message.sharat.sharma2016-05-041-1/+1
| | | | | | | | | In OS_IDENTITY_API_VERSION=3, the "openstack help service delete" allows the user to remove a service based on the name of the service. So, this patch includes name as positional argument. Change-Id: Iae7cb0a82af3cdd4d88e0ed2eb651abf9af30fd9 Closes-Bug: #1566909
* Doc: Unify repeatable option commentsTang Chen2016-04-123-4/+4
| | | | | | | | | | | | There are lots of "this option can be repeated" comments in the doc, which are not consistent to other similar docs. This patch changes them to the following format: "repeat option to do something" Change-Id: I54e01053091c428bf87bb36bb95f73a0b80ab6e7
* Improve error for token issue command without authtimothy-symanczyk2016-03-181-0/+4
| | | | | | | | | Currently when you perform the 'token issue' command with the admin_token, the error is a nonsense python error. This commit changes it to be user-friendly. Change-Id: I5cc92c342e3f83e099354cd04301c7b8d8d2dabc Closes-Bug: #1547721
* take_action() method from command.Command shouldn't returnMohan Muppidi2016-02-2916-43/+18
| | | | | | | | | | | | command.Command and command.Showone are base classes implemented in cliff framework. Showone extends Command to allow take_action() to return data to be formatted using a user-selectable formatter. Most of the classes which are extended from Command in openstackclient/identity/v3/ in some cases return data or return nothing where it is not necessary, this commit fixes most of them. Change-Id: I84c72ea4d6680f8bdbef5449316dd9a8af8c8286 Closes-Bug: 1550892
* Fixed a bunch of spacingBrandon Palm2016-02-232-1/+2
| | | | | | | Nothing too complicated here. I fixed a bunch of spacing issues that I saw in OSC. Change-Id: I935ab48e7c5bac5f88ecdb3a05f73fb44fc9f41d
* Support unscoped token requestguang-yee2016-02-191-0/+3
| | | | | | | | Make scope check optional for the "token issue" command as unscoped token is a valid Keystone V2/V3 API. Change-Id: Ie1cded4dbfdafd3a78c0ebdf89e3f66762509930 Closes-Bug: #1543214
* Merge "Return names in list role assignments"Jenkins2016-02-171-6/+34
|\
| * Return names in list role assignmentsTom Cocozzello2016-01-271-6/+34
| | | | | | | | | | | | | | | | | | | | | | | | Utilize the new include names functionality added to list role assignments (GET /role_assignments?include_names=True). Which will return the names of the entities instead of their IDs. Change-Id: I6dc03baf61ef9354a8a259a9f17ff47ce1665ce7 Depends-On: I4aa77c08660a0cbd021502155938a46121ca76ef Closes-Bug: #1479569 Implements: blueprint list-assignment-with-names
* | Add "token revoke" for identity v3lin-hua-cheng2016-02-091-0/+19
| | | | | | | | | | Change-Id: Ie631600d02942fe6ce035f31af46abe44e543631 Closes-bug: #1543226
* | log take_action parameters in a single placeAkihiro Motoki2016-02-0221-446/+81
|/ | | | | | | | | | | | Previously each command logs take_action parameters explicitly by using @utils.log_method decorator or log.debug(). Some commands have no logging. This commit calls a logger in the base class and drops all logging definition from individual commands. Closes-Bug: #1532294 Change-Id: I43cd0290a4353c68c075bade9571c940733da1be
* Support non-interactive user password updateGuang Yee2016-01-111-2/+29
| | | | | | | | | | | | | | Currently user password update require interactive prompting of user's original password. This is problematic because we can't support non-interactive applications and therefore hinders automation. This patch make it possible by optionally accepting an '--original-password' argument. If specified, we would use it instead of prompting. DocImpact Change-Id: I2d994e8c2be949f7ae616ac1d1594fb94e1a27cd Closes-Bug: 1531360
* Enabling domain lookup for project set v3 commandJude Job2015-12-311-6/+2
| | | | | | | | | | | | | | Currently the domain option for `project set` attempts to set a new domain that owns the project. This is actually an action that is denied by keystone server. Instead, the domain option should be used as a lookup, to find projects that exist in the non-default domain. Co-Authored-By: Steve Martinelli <stevemar@ca.ibm.com> Closes-Bug: #1524456 Change-Id: I30a3812184fe262667e09baa106d2275c2cbb981
* Switch to ksa SessionDean Troyer2015-12-025-10/+10
| | | | | | | | * Change session imports to keystoneauth1 * Change keystoneclient.exception imports to keystoneauth1 * Change exceptions raised from internal API from keystoneclient to openstack.common Change-Id: I046d89f561d6fe04baae53726f9749d2e7fe2056
* Merge "better format remote IDs for identity providers"Jenkins2015-11-151-3/+7
|\
| * better format remote IDs for identity providersSteve Martinelli2015-11-121-3/+7
| | | | | | | | | | | | | | | | | | remote-ids are a list, and we should format these values as such, rather than python representations of lists/arrays. Closes-Bug: 1478995 Change-Id: Ia6ced0fab2435b8cb486822c676c0dee32613abe
* | Add capability to update description of an IdPlin-hua-cheng2015-11-121-2/+11
|/ | | | | Change-Id: I854067642bbfde6fdf84b22b9cc1de8afc7767c0 Closes-Bug: #1515815
* Merge "Mark arguments for 'credential' commands as required"Jenkins2015-11-041-16/+15
|\
View Lorry Controller Status