summaryrefslogtreecommitdiff
path: root/openstackclient/tests/identity
Commit message (Collapse)AuthorAgeFilesLines
* Add support to remote_idMarco Fargetta2015-03-302-7/+231
| | | | | | | | | | | | | | | | | | | | | | | The federation APIs for the identity providers introduce a new parameter for every identity provider, named remote_ids, which contains a list of entity ID associated with. This parameter can be provided during the creation of the identity provider and can be updated at any time. For more information look at the blueprint: https://blueprints.launchpad.net/keystone/+spec/idp-id-registration This patch add the support to this new parameter in the command line by inserting the option "--remote-id" in the following commands: - "identity provider create" - "identity provider set" Additionally, the values can be read from a file, specified by "--remote-id-file", containing an entity id per line. Change-Id: Ie93340ee57e54128daa70d8a7bd0a9975ff7eef4 Depends-On: I12a262c55b5f6b5cc7007865edf30f14269da537 Implements: blueprint idp-id-registration
* Merge "Add project and domain params to network create"Jenkins2015-03-241-0/+7
|\
| * Add project and domain params to network createColleen Murphy2015-03-191-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without this patch, openstackclient has no way to specify to which project a network belongs upon creation. Instead, it uses the project ID that the user is authenticating with to fill the tenant_id column. This is a problem because an admin user is unable to specify a project for a non-admin network. To fix this and to improve feature parity with the neutron client, this patch adds project and domain parameters to the network create command and uses the given project name to look up the project ID. Neutron does not allow the project to be changed after creation, so no such parameter has been added to the neutron set command. Neutron calls the field 'tenant_id', but this change exposes the parameter as '--project' to support the newer terminology. If no project is specified, the client defaults to the previous behavior of using the auth project. Change-Id: Ia33ff7d599542c5b88baf2a69b063a23089a3cc4
* | Merge "Add identity v3 catalog show"Jenkins2015-03-101-0/+34
|\ \
| * | Add identity v3 catalog showTerryHowe2015-03-091-0/+34
| | | | | | | | | | | | Change-Id: Ia6b6c25eded43b899b3aa026227ad2859f1c67dd
* | | Merge "Add identity v3 catalog list"Jenkins2015-03-101-0/+84
|\ \ \ | |/ /
| * | Add identity v3 catalog listTerryHowe2015-03-071-0/+84
| |/ | | | | | | Change-Id: Id4c1371ca28b9fd884ec75061edca700fd69886c
* | Fix identity v2 catalog listTerryHowe2015-03-041-11/+24
|/ | | | | | | The v2 catalog list was only printing the last endpoint in the catalog. Change-Id: I5401a11eedb3be1513c86261329de50c8ad82720
* Merge "Restrict groups and users from changing domains"Jenkins2015-02-101-46/+0
|\
| * Restrict groups and users from changing domainsSteve Martinelli2015-02-091-46/+0
| | | | | | | | | | | | | | | | | | | | Similar to projects, we shouldn't allow users and groups to change domains. The server side tosses up an error but osc should restrict that behaviour in the first place. Related-Bug: #1418384 Change-Id: I860291a5859c576021b18e35d1a12c32abfb6ca5
* | Merge "Implement trust in identity v3 api"Jenkins2015-02-102-1/+248
|\ \ | |/ |/|
| * Implement trust in identity v3 apiSteve Martinelli2015-02-082-1/+248
| | | | | | | | | | | | | | | | | | | | | | Added new module in identity v3 api to handle create, read, and delete operations of trust resources. Co-Authored-By: Lance Bragstad <lbragstad@gmail.com> Co-Authored-By: Steve Martinelli <stevemar@ca.ibm.com> Closes-Bug: #1413718 Change-Id: I2b360b141ff70d4f396466abede859a3db6644f4
* | fix the wrong order of assertEqual argswanghong2015-01-2718-213/+213
|/ | | | | | Let's fix them thoroughly. Change-Id: I8a1f042fb614b05c9836a49041f3883638b870b0
* Update service clist commands for v2 and v3Dean Troyer2015-01-162-2/+27
| | | | | | | | | | | | Changes to the 'service list' commands for Identity v2 and v3: * Document support for --long * Add Description to v3 output with --long * v3 output is now (ID, Name, Type), with (Description, Enabled) added with --long * Change v2 output to match v3 output, with the absense of Enabled. * Update doc to match Closes-Bug: #1411337 Change-Id: I999e3df22f61350cdeba63bbb7d01145c2ffeeaf
* Merge "Check if service.name available before access"Jenkins2015-01-152-11/+99
|\
| * Check if service.name available before accesszhiyuan_cai2015-01-042-11/+99
| | | | | | | | | | | | | | | | | | | | | | Currently v3 endpoint commands access service.name directly, while name is not a required attribute of service. So if we associate an endpoint to a service without name, we will get an AttributeError executing v3 endpoint commands later. This patch addresses this issue by checking if service.name is available before accessing it. Change-Id: I3dd686ef02a2e21e2049a49cb55634385c2ecfaf Closes-Bug: #1406737
* | Request token authorizeSteve Martinelli2015-01-091-2/+10
| | | | | | | | | | | | Command doc and tweaks to the code Change-Id: I8f251bf9ca77f16b01a509844e79ddde82048b0d
* | Merge "Request token creation docs + tweaks"Jenkins2015-01-091-2/+10
|\ \
| * | Request token creation docs + tweaksSteve Martinelli2015-01-081-2/+10
| |/ | | | | | | | | | | | | Added command docs, and changed request token to take in name or id of a project, and also support a domain option. Change-Id: I87363274e5b7a0c687e234f5a4bcaaf166d28840
* | Allow user list to filter by projectSteve Martinelli2015-01-081-0/+47
|/ | | | | | | | Adds a --project filter to `os user list`, which really calls the role assignment manager behind the scenes. Change-Id: I57a75018f12ed3acdf8f6611b6b58bd974f91da2 Closes-Bug: #1397251
* Merge "type should be required for v2.0 service create"Jenkins2015-01-031-4/+71
|\
| * type should be required for v2.0 service createlin-hua-cheng2014-12-301-4/+71
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated the service name to be optional, mostly matching the cli arguments with v3 service create. Implemented the following changes on service create: - if only a single positional is present, it's a <type>. This is not currently legal so it is considered a new case. - if --type option is present the positional is handled as <name>; display deprecation message - if --name option is present the positional is handled as <type>. Making --type optional is new, but back-compatible - Made --name and --type mutually exclusive. - only '--name <service-name> <type>' shall appear in the help output Change-Id: I8fd4adba3d8cd00d5a8cacc2c494d99d492c45a3 Closes-Bug: #1404073
* | Merge "Rename column to `default project id` for long listing v3 user"Jenkins2015-01-022-27/+36
|\ \
| * | Rename column to `default project id` for long listing v3 userSteve Martinelli2015-01-022-27/+36
| | | | | | | | | | | | | | | | | | | | | Previously this column was coming up as empty, since user's have a `default project id`, not just `project id`. Change-Id: I3d7f7eb600e9526b9c6cc2a8c5d6009b9100b1f5
* | | Merge "Command docs: domain"Jenkins2015-01-021-6/+4
|\ \ \
| * | | Command docs: domainDean Troyer2014-12-311-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Change the implementation of --enable|--disable on domain create and set commands to our usual style. Change-Id: I10f2b96281a114fa3cf3b001394844770b2a8632
* | | | Merge "Allow service description to be set for KS V3"Jenkins2014-12-302-4/+85
|\ \ \ \ | |/ / / |/| | |
| * | | Allow service description to be set for KS V3lin-hua-cheng2014-12-232-4/+85
| | |/ | |/| | | | | | | | | | Change-Id: Ibf84882c9a9f408268c225190436fc1a534e1017 Closes-Bug: #1404997
* | | add multi-delete support for identitywanghong2014-12-236-6/+6
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | This is part2. Add support for these objects: identity.project(v2.0) identity.role(v2.0) identity.user(v2.0) identity.project(v3) identity.role(v3) identity.user(v3) identity.group(v3) Closes-Bug: #1400597 Change-Id: I270434d657cf4ddc23c3aba2c704d6ef184b0dbc
* | Don't import form keystoneclient.openstack.commonJamie Lennox2014-12-173-3/+3
|/ | | | | | | | The keystoneclient.openstack.common directory is where we sync files from oslo incubator. It is not a public directory and should not be being consumed by openstackclient. Change-Id: I011bb95c2c824e2dbc4b822ca922ae77b8d9b955
* Merge "add keystone v3 region object"Jenkins2014-11-192-0/+421
|\
| * add keystone v3 region objectwanghong2014-11-182-0/+421
| | | | | | | | | | | | | | Co-Authored-By: Steve Martinelli <stevemar@ca.ibm.com> Change-Id: Ia6f607630dbf507681733c3ab3b9b7c55de30f49 Closes-Bug: #1387932
* | Add additional support for --or-showSteve Martinelli2014-11-142-0/+156
| | | | | | | | | | | | | | | | Add --or-show for the following: * v2 roles * v2 projects Change-Id: Ibbae19cda668575b9527fbd259f1298c48b8265b
* | Swap remaining assertEqual argumentsDean Troyer2014-11-071-22/+22
| | | | | | | | Change-Id: I1abdebb298b93074657a7ba65a7186d814969780
* | Add --or-show option to user createDean Troyer2014-11-071-0/+79
|/ | | | | | | | | | | | | | | | The --or-show option is added to create commands for the common case of needing to ensure an object exists and getting its properties if it does or creating a new one if it does not exist. Note that if the object exists, any additional options that would set values in a newly created object are ignored if the object exists. FakeResource needs the __name__ attribute to fall through utils.find_resource. Prove the concept on v2 user create then propogate once we're happy with it... Change-Id: I6268566514840c284e6a1d44b409a81d6699ef99
* Unscoped federated user-specific commandsMatthieu Huin2014-10-302-0/+145
| | | | | | | | | | | | A federated user can authenticate with the v3unscopedsaml plugin and list the domains and projects she is allowed to scope to. This patch introduces the new commands 'federation domain list' and 'federation project list'. Note that for these commands -and plugin- to be available, the lxml library must be installed. Change-Id: I2707b624befcfb0a01b40a094e12fd68a3ee7773 Co-Authored-By: Florent Flament <florent.flament-ext@cloudwatt.com>
* Fix token issue after auth changeupDean Troyer2014-10-202-6/+8
| | | | | | | | | | | IssueToken.take_action() was missed in updating the structure of the ClientManager. Also, TOKEN_WITH_TENANT_ID in v3 is just wrong... Closes-Bug: #1383396 Change-Id: If2dd82a26af1d743ee9df73e0c1aebce497bf22e
* Merge "Remove 'links' section from several v3 Identity objects"Jenkins2014-10-133-24/+9
|\
| * Remove 'links' section from several v3 Identity objectsSteve Martinelli2014-10-113-24/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The links field in the returned objects from the v3 Identity API aren't really useful, so let's remove them. Managed to remove most of them from the core API. I'll likely remove the extension/contribution (oauth/federation) related ones in another patch. Also in this patch the code for setting services and projects was changed. Though not incorrect, it was not needed to copy the entire returned object, we should just need to pass in the fields we want to update. Change-Id: I164ca9ad8b28fa10b291e9115ef40753e387c547
* | Fix issue token for v3Steve Martinelli2014-10-112-2/+5
|/ | | | | | | | Currently the code is broken as it references a part of keystoneclient that does not exist. Change-Id: I7fbc754537fbb4acffb166b5854840acfaef1fb8 Closes-Bug: #1379871
* Merge "CRUD operations for federated protocols"Jenkins2014-10-092-0/+209
|\
| * CRUD operations for federated protocolsMarek Denis2014-10-082-0/+209
| | | | | | | | | | | | | | | | | | Openstackclient needs to have a capability to manage federated protocols (like saml2, openid connect, abfab). This patch allows users to administrate such operations from the commandline. Change-Id: I59eef2acdda60c7ec795d1bfe31e8e960b4478a1 Implements: bp/add-openstackclient-federation-crud
* | Merge "Pass in domain and project as positional args, not kwargs"Jenkins2014-10-091-2/+2
|\ \ | |/ |/|
| * Pass in domain and project as positional args, not kwargsSteve Martinelli2014-10-021-2/+2
| | | | | | | | | | | | | | | | | | | | The signature for users.set in keystoneclient dictates that domain and project be sent in, not domainId and projectId, which are being incorrectly sent in as 'extra' data. Closes-Bug: #1376833 Change-Id: I44df3e492f61eab2241f3758dee622417bb6f399
* | Implement CRUD operations for Mapping objectsMarek Denis2014-10-082-0/+300
|/ | | | | Change-Id: I4b8f2e77e741cf74f50aba98ab975af7321b02c6 Implements: bp/add-openstackclient-federation-crud
* Add service catalog commandsDean Troyer2014-09-181-0/+107
| | | | | | | | 'catalog list' and 'catalog show' for Identity v2 Identity v2 only so far. Change-Id: I9df0dac3d5bb7c18f38a81bd7d29f8119462d3a5
* Use Keystone client session.SessionDean Troyer2014-09-082-3/+5
| | | | | | | | | | | | | | This replaces the restapi requests wrapper with the one from Keystone client so we can take advantage of the auth plugins. As a first step only the v2 and v3 token and password plugins are supported. This maintainis no changes to the command options or environment variables. The next steps will include reworking the other API client interfaces to fully utilize the single auth session. Blueprint: ksc-session-auth Change-Id: I47ec63291e4c3cf36c8061299a4764f60b36ab89
* Merge "Add action 'user password set' for identiy v3"Jenkins2014-09-071-0/+48
|\
| * Add action 'user password set' for identiy v3Mouad Benchchaoui2014-09-071-0/+48
| | | | | | | | | | | | | | | | | | | | | | This new action will allow a user to change their own password by either providing the new password as an argument (--password) or by being prompted to enter the new password. In both cases user will be prompted to enter their current password as required by the v3 API. Closes-Bug: #1337245 Change-Id: I5e1e0fd2b46a4502318da57f7cce2b236fb2d93d
* | Merge "add service/interface/region filter for endpoint v3"Jenkins2014-09-061-0/+96
|\ \
View Lorry Controller Status