summaryrefslogtreecommitdiff
path: root/openstackclient/identity
Commit message (Collapse)AuthorAgeFilesLines
* Merge "Adds domain specification for SetUser"Jenkins2017-01-261-4/+19
|\
| * Adds domain specification for SetUserSamuel Pilla2017-01-251-4/+19
| | | | | | | | | | | | | | | | | | | | | | This patch adds the ability to specify the domain context for making changes to a user with `--domain` flag. Example: $ openstack user set test_user --domain test_domain --enable Change-Id: I2b3241785c22e72e19181394acff650422299b0e Closes-Bug: #1658147
* | Fix 'mapping set' return valueColleen Murphy2017-01-251-1/+0
|/ | | | | | | | | | | | | | | | Without this patch, the command 'openstack mapping set <args>' will, upon success, print the rules for the updated mapping and exit with return code 1 (failure). This is a problem for scripts and config management tools that depend on the return code to validate whether the operation was successful, since even upon success the command returns a failing error code. Moreover, the behavior of printing the new value is completely unlike the behavior of any of the 'set' subcommands for other entities. This patch normalizes the 'mapping set' command by omitting any return value in the SetMapping take_action() method. This way the client will only exit with an error code if an exception is raised, and not upon normal operation. Change-Id: I610ec3b2fa7561072346d46e49cfc1ae82130e0d
* Merge "Handle 403 error on creating trust"Jenkins2017-01-241-4/+8
|\
| * Handle 403 error on creating trustHongbin Lu2017-01-241-4/+8
| | | | | | | | | | | | | | | | | | | | Currently, creating trust requires permission to list roles, but non-admin users don't have permission to do that by default. This commit adds exception handling on listing roles, and continue to create trust if server returns 403. Closes-Bug: #1658582 Change-Id: I4f016b76cb46ae07ef65ed54780881bbcd6210d3
* | TrivialFix in helpMessage for readabilityzhiyong.dai2016-11-231-1/+1
|/ | | | Change-Id: Ic5fae89455470585f1bd79539f99a9c04e0c68a0
* Error handling for delete commands in identityHuanxuan Ao2017-01-038-45/+161
| | | | | | | | | Add missing multi deletion error handling for identity delete commands. All delete commands in identity support error handling now. Change-Id: I05626dcb5e516a423d610906347b02236ba7eeaf
* Remove auth_with_unscoped_saml decoratorColleen Murphy2016-12-041-22/+0
| | | | | | | | | | | | | | | | | | | | The auth_with_unscoped_saml decorator existed to make sure the user selected the right auth plugin before trying to call either a 'federation domain' or 'federation project' command. This is outdated, because openstackclient now uses keystoneauth[1] and keystoneauth removed its entrypoints for the federation plugins[2] since its _Rescoped class no longer needs them. This patch removes the decorator since that validation check was the only thing standing in the way of the commands working correctly. Also removed the '*_list_wrong_auth' tests since those only existed to test the decorator, and stopped setting the plugin in the positive tests since the automatically-determined token plugin should now be fine. [1] http://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=6ae0d2e8a54fd5139e63a990ab4bdce634e73c5e [2] http://git.openstack.org/cgit/openstack/keystoneauth/commit/?id=d9e4d26bb86f8d48e43188b88bab9d7fe778d2c1 Change-Id: Id981739663113447a7bba8ddba81ba9394a19e07 Closes-bug: #1624115
* translate all command help strings3.4.0Steve Martinelli2016-11-1730-136/+138
| | | | | | | | | | | | | | Leverage the new cliff command class attribute (_description) to get the help of a command, this allows us to mark strings for translation. We could not do this before since the help was grabbed from the docstring. This also depends on a new release of cliff and a bump to the minimum level in osc's requirements. Closes-Bug: 1636209 Depends-On: Id915f6aa7d95a0ff3dc6e2ceaac5decb3f3bf0da Change-Id: I8673080bb5625e8e3c499feaefd42dfc7121e96f
* Warning for empty password set for user create/setqtang2016-10-192-0/+20
| | | | | | | Raise warning when empty password set for user Change-Id: If03516f3f1290e4c329fe3d1277dee0512de0410 Closes-Bug: #1607959
* format token expires time to prevent json loading datetime dataSteve Martinelli2016-09-052-2/+6
| | | | | | | | | | | | When output to shell, the token issue time is fine; however when selecting the json formatter (via the --format json) option, an exception is raised when formatting the dataetime data. Rather than pass in the datetime data, we should format the data with the ISO 8601 formatting. Closes-Bug: 1619937 Change-Id: Iffebb2d5413fabfd283dfa94fc560fc37270f9dd
* Merge "Add support for domain specific roles"Jenkins2016-08-183-14/+111
|\
| * Add support for domain specific rolesHenry Nash2016-08-103-14/+111
| | | | | | | | | | | | | | A role entity can now be specified as domain specific. Closes-bug: #1606105 Change-Id: I564cf3da1d61f5bfcf85be591480d2f5c8d694a0
* | Fix up last-minute imports to use osc-libDean Troyer2016-08-181-3/+4
| | | | | | | | Change-Id: I1ed2983cf574ebd565eeac4f8199fbc3a2e29c8e
* | Gate-unbreaking combo reviewDean Troyer2016-08-182-9/+9
|/ | | | | | | | | | | | | | | | | | | | | | | | Fix argument precedence hack Working around issues in os-client-config <= 1.18.0 This is ugly because the issues in o-c-c 1.19.1 run even deeper than in 1.18.0, so we're going to use 1.19.0 get_one_cloud() that is known to work for OSC and fix o-c-c with an axe. Remove return values for set commands 'identity provider set' and 'service provider set' were still returning their show-like data, this is a fail for set commands now, don't know how this ever passed before... Constraints are ready to be used for tox.ini Per email[1] from Andreas, we don't need to hack at install_command any longer. [1] http://openstack.markmail.org/thread/a4l7tokbotwqvuoh Co-authorioed-by: Steve Martinelli <s.martinelli@gmail.com> Depends-On: I49313dc7d4f44ec897de7a375f25b7ed864226f1 Change-Id: I426548376fc7d3cdb36501310dafd8c44d22ae30
* osc-lib: shellDean Troyer2016-08-051-4/+3
| | | | | | | | | | | | | Convert to using ClientManager and OpenStackShell from osc-lib. * Change all internal uses of ClientManager private attributes that are now public in osc-lib's ClientManager. Leave back-compat copies in place in OSC's clientManager so we don't break plugins. * Put some work-arounds in place for changes in osc-lib that we need until a new release makes it through the g-r and u-c change process. * Add a test for Unicode decoding of argv in shell.main() to parallel the one in osc-lib. Change-Id: I85289740d4ca081f2aca8c9b40ec422ad25d302c
* Merge "Fix error for find_service() in identity"Jenkins2016-07-271-15/+26
|\
| * Fix error for find_service() in identitysunyajing2016-07-221-15/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | if there are more than one services be found with one name, a NoUniqueMatch exception should be raised but we can see a NotFound Exception raised instead. It is because in "find_service()", we use "find_resource()" first, if "find_resource()" return a exception, we just think it is a NotFound Exception and continue to find by type but ignore a NoUniqueMatch exception of "find_resource()". This patch refactor the "find_service()" method to solve this problem. Change-Id: Id4619092c57f276ae0698c89df0d5503b7423a4e Co-Authored-By: Huanxuan Ao <huanxuan.ao@easystack.cn> Closes-Bug:#1597296
* | Merge "Standardize import format"Jenkins2016-07-261-0/+1
|\ \
| * | Standardize import formatshizhihui2016-07-221-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | According to the rule in http://docs.openstack.org/developer/hacking/#imports I modify some irregular import format. Change-Id: Ibf29ccaf3ddec4a956334cc3368ebee7a66e282c
* | | Add assignment list to v2 identity and deprecate alternate listingHenry Nash2016-07-224-0/+175
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current identity role list command (both v2 and v3) is overloaded with listing roles as well as assignments (if you provide user, group, project or domain options). This is in addition to the v3 assignment list command designed for this purpose. This overloading complicates the fact that roles can now be domain specific (i.e. have a domain attribute), so the command 'role list --domain <domain-name' will soon become ambigious (this is in a follow on patch). This patch: - Adds a v2 assignments list, with support for pulling the user and project from the auth credentials - For comapability, adds the same auth support to the existing v3 assignments list - Deprecates the use of role list and user role list to list assignments Change-Id: I65bafdef4f8c89e863dab101369d0d629fa818b8 Partial-Bug: 1605774
* | | Remove execute permission on a few filesSongmingYan2016-07-228-0/+0
|/ / | | | | | | | | | | | | Some files have execute permission unnecessarily. Change them from 755 to 644. Change-Id: I471ebd1c3d123ad4a7376f7f5996f53f8c2d9b0b
* | Merge "Modify some help and error messages in ec2creds identityv2"Jenkins2016-07-191-2/+2
|\ \
| * | Modify some help and error messages in ec2creds identityv2Huanxuan Ao2016-07-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Usually we use "(s)" to show about multi deletion in help message. In addition, I think "EC2 credentials" is better than "EC2 keys" in the error message. Change-Id: I6a6461291542701d87a55d9ea0ea1fda6db04601
* | | Merge "Update doc for credential in indentityv3"Jenkins2016-07-191-10/+10
|\ \ \ | |_|/ |/| |
| * | Update doc for credential in indentityv3Huanxuan Ao2016-07-151-10/+10
| |/ | | | | | | Change-Id: I5f49c038a75ea67674b6d9279a6e60d6ded8d12f
* | Support bulk deletion for delete commands in identityv3Huanxuan Ao2016-07-1912-49/+273
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Support bulk deletion for delete commands in the list below identity/v3/consumer identity/v3/credential identity/v3/domain identity/v3/ec2creds identity/v3/endpoint identity/v3/federation_protocol identity/v3/identity_provider identity/v3/mapping identity/v3/policy identity/v3/region identity/v3/service_provider identity/v3/service The unit test in identityv3 need to be refactored, so I add some functional tests instead. I will add all unit tests at one time after the refactor completed. Change-Id: I82367570f59817b47c87b6c7bfeae95ccfe5c50e Closes-Bug: #1592906
* | Make set/unset commands pass normally when nothing specified in identityv3Huanxuan Ao2016-07-1414-87/+0
|/ | | | | Change-Id: I554b41969f96b62a2c6d37024caa56b1441d5ed1 Partial-bug: #1588588
* Merge "Correct reraising of exception"Jenkins2016-07-078-20/+20
|\
| * Correct reraising of exceptionqinchunhua2016-07-078-20/+20
| | | | | | | | | | | | | | | | | | When an exception was caught and rethrown, it should call 'raise' without any arguments because it shows the place where an exception occured initially instead of place where the exception re-raised. Change-Id: I5fb6dea5da7fb6e1e2b339a713c7d37f8c99e407
* | Merge "osc-lib: api.auth"Jenkins2016-07-071-1/+1
|\ \ | |/ |/|
| * osc-lib: api.authDean Troyer2016-06-301-1/+1
| | | | | | | | | | | | Move auth plugin checking to osc-lib. Change-Id: I673d9c2d6e8bbf724c3000459a729e831d747814
* | Support multi-delete for commands in identity V2sunyajing2016-06-233-12/+71
|/ | | | | | | | Commands are "ec2 credentials delete", "service delete", "endpoint delete". Also update their unit tests and functional tests. Partial-Bug: #1592906 Change-Id: I1a0b7160b803a523646d09d030e6f112c81c4c24
* Merge "Use resource id when name given for identity show"Jenkins2016-06-234-5/+48
|\
| * Use resource id when name given for identity showDavid Rosales2016-06-224-5/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently a user is allowed to specify either a resource ID or name when running openstack identity comands. In some cases, when a name is specified instead of an ID, the command will return as not able to find the resource when it in fact does exist. The changes here are to check the client against the token on such requests and to extract the ID of the resource specified if enough information exists between the two. We then use the ID associated with the resource to complete the user requests. Change-Id: I40713b0ded42063b786dc21247e854224b9d2fe2 Closes-Bug: #1561599
* | Standardize logger usage of catalog in identitysunyajing2016-06-232-4/+12
|/ | | | | Change-Id: I5307f949b3a350e41840a4a5c191ceacf1b3b291 Partially-Implements: blueprint log-usage
* Merge "Standardize logger usage"Jenkins2016-06-2012-13/+67
|\
| * Standardize logger usageTang Chen2016-06-2012-13/+67
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use file logger for all command specific logs. This patch also fixes some usage that doesn't follow rules in: http://docs.openstack.org/developer/oslo.i18n/guidelines.html After this patch, all self.log and self.app.log will be standardized to LOG(). NOTE: In shell.py, we got the log in class OpenStackShell, which is also known as self.app.log in other classes. This logger is used to record non-command-specific logs. So we leave it as-is. Change-Id: I114f73ee6c7e84593d71e724bc1ad00d343c1896 Implements: blueprint log-usage
* | Modify help msg and docs in identitysunyajing2016-06-174-4/+4
|/ | | | | | | | Migrate 'change', 'update' to 'modify', migrate 'user to delete' to 'user(s) to delete', migrate '(name or ID)' to '(type, name or ID)'. Change-Id: Ie425e178bb5ddf773e6e793fcd91c78e9c4a5053
* Merge "Make set/unset command in identity and image pass normally when ↵Jenkins2016-06-172-25/+5
|\ | | | | | | nothing specified"
| * Make set/unset command in identity and image pass normally when nothing ↵sunyajing2016-06-172-25/+5
| | | | | | | | | | | | | | | | | | specified Also update its unit tests. Change-Id: I82b90658b0d4247cdc9a650f14aceda640a32059 Partial-bug: #1588588
* | Merge "Fix help msg of identity endpoint"Jenkins2016-06-162-6/+6
|\ \ | |/ |/|
| * Fix help msg of identity endpointsunyajing2016-06-162-6/+6
| | | | | | | | | | | | | | <service> argument of `endpoint create` command doesn't mean `new endpoint service`, but an existent service that the new endpoint attached to. Change-Id: I846fdb501bdea14499f42288186f375a3b2b5951
* | Merge "osc-lib: command"Jenkins2016-06-1429-30/+30
|\ \
| * | osc-lib: commandDean Troyer2016-06-1329-30/+30
| | | | | | | | | | | | | | | | | | | | | Leave command.py and test_command.py as a sanity check during the deprecation period. Change-Id: I24e1b755cbfbcbcaeb5273ec0c9706b82384fc85
* | | Merge "osc-lib: parseractions"Jenkins2016-06-142-2/+2
|\ \ \ | |/ /
| * | osc-lib: parseractionsDean Troyer2016-06-132-2/+2
| | | | | | | | | | | | | | | | | | | | | Leave parseractions.py and test_parseractions.py as a sanity check during the deprecation period. Change-Id: I1a7469b6d872284e0276502a1a287bc0b87f8f83
* | | Fix i18n problems for common files in identityTang Chen2016-06-142-20/+22
|/ / | | | | | | | | | | | | Some missing parts in identity. Change-Id: I8777b845613d7d7df36ac3c198da552e11aaad1b Partial-bug: #1574965
* | osc-lib: utilsDean Troyer2016-06-1330-50/+52
| | | | | | | | | | | | | | | | Use osc-lib directly for utils. Leave openstackclient.common.utils for deprecation period. Change-Id: I5bd9579abc4e07f45219ccd0565626e6667472f7
* | osc-lib: exceptionsDean Troyer2016-06-138-10/+13
| | | | | | | | | | | | | | | | Use osc-lib directly for exceptions. Leave openstackclient.common.exceptions for deprecation period. Change-Id: Iea3e862302372e1b31ccd27f69db59b4953ca828