openinfra/python-tempestconf
Code Issues Proposed changes

Unsetting the security_compliance flag

Browse Source 
Turns out we need additional changes in "keystone.conf" file to make
it work properly and this should not be enabled by default.

Closes-bug: bz#1443133

Change-Id: Ibf0ea806f5c76a14372fa0c08cdef308245a6cbe
This commit is contained in:
Rodrigo Duarte Sousa 2017-04-18 11:05:43 -03:00
parent 6220c36290
commit baed4411fe
2 changed files with 2 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
config_tempest/config_tempest.py
View File

@ -831,18 +831,12 @@ def configure_keystone_feature_flags(conf, services):
supported_versions = services.get('identity', {}).get('versions', []) supported_versions = services.get('identity', {}).get('versions', [])
for version in supported_versions: for version in supported_versions:
major, minor = version.split('.')[:2] major, minor = version.split('.')[:2]
# We are going to enable two feature flags that are available # Enable the domain specific roles feature flag. For more information,
# after version 3.6: one related to domain specific roles and # see https://developer.openstack.org/api-ref/identity/v3
# another one related to the security compliance feature.
# For more information, see
# https://developer.openstack.org/api-ref/identity/v3
if major == 'v3' and int(minor) >= 6: if major == 'v3' and int(minor) >= 6:
conf.set('identity-feature-enabled', conf.set('identity-feature-enabled',
'forbid_global_implied_dsr', 'forbid_global_implied_dsr',
'True') 'True')
conf.set('identity-feature-enabled',
'security_compliance',
'True')
def configure_boto(conf, services): def configure_boto(conf, services):

3
config_tempest/tests/test_config_tempest.py
View File

@ -320,9 +320,6 @@ class TestConfigTempest(BaseConfigTempestTest):
self.assertEqual( self.assertEqual(
self.conf.get('identity-feature-enabled', self.conf.get('identity-feature-enabled',
'forbid_global_implied_dsr'), 'True') 'forbid_global_implied_dsr'), 'True')
self.assertEqual(
self.conf.get('identity-feature-enabled',
'security_compliance'), 'True')
def test_configure_boto(self): def test_configure_boto(self):
tool.configure_boto(self.conf, self.FAKE_SERVICES) tool.configure_boto(self.conf, self.FAKE_SERVICES)