Open Stack

We enthusiastically announce the release of:

patrole 0.9.0: Patrole is a tool for verifying that Role-Based Access
Control is being enforced across OpenStack deployments.

This release is part of the ussuri release series.

The source is available from:

    https://opendev.org/openstack/patrole

Download the package from:

    https://tarballs.openstack.org/patrole/

Please report issues through:

    https://bugs.launchpad.net/patrole/+bugs

For more details, please see below.

0.9.0
^^^^^


Prelude
*******

This release is to tag the Patrole for OpenStack Ussuri release. This
release marks the start of Ussuri release support in Patrole. After
this release, Patrole will support below OpenStack Releases:

   * Ussuri

   * Train

   * Stein

Current development of Patrole is for OpenStack Victoria development
cycle. Every Patrole commit is also tested against master during the
Victoria cycle. However, this does not necessarily mean that using
Patrole as of this tag will work against a Victoria (or future
release) cloud. To be on safe side, use this tag to test the OpenStack
Ussuri release.


New Features
************

* Nova adopting the new policy defaults in ussuri cycle which
  include some of the policies are made granular.

  Patorle tests will adopt the new polcies. Below are the policies
  changed in patrole tests:

     * os_compute_api:os-services

     * os_compute_api:deferred_delete

     * os_compute_api:os-attach-interfaces

     * os_compute_api:os-instance-usage-audit-log

     * os_compute_api:os-agents

     * os_compute_api:os-hypervisors

     * os_compute_api:os-instance-actions

     * os_compute_api:os-security-groups

     * os_compute_api:os-server-password


Upgrade Notes
*************

* Python 2.7 support has been dropped. Last release of patrole to
  support python 2.7 is patrole 0.8.0. The minimum version of Python
  now supported by Patrole is Python 3.6.

Changes in patrole 0.8.0..0.9.0
-------------------------------

6f0c119 Add releasenote to tag the Patrole for Ussuri release
ee53f84 Gate fix and update compute tests to adopt new policies
a1f0245 [ussuri][goal] Update contributor documentation
2aad808 Update hacking for Python3
84cb426 Update compute hypervisor tests to adopt new policies
be0154c Update compute instance-usage and agents tests to adopt new policies
d17e0a6 Changing the review policy to approve with single +2
7564244 Update compute tests to adopt new policies
595e61d Unskip test that relied on Neutron bug being fixed
51368ef [ussuri][goal] Drop python 2.7 support and testing
2189883 Add release notes page for version 0.8.0
1488e1e Remove the Queens stable branch jobs from master gate
7085622 Do not skip nova API extensions policy test for rocky
8c23e7a Update the constraints url


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         | 27 +++++-----
CONTRIBUTING.rst                                   | 19 ++++++++
HACKING.rst                                        |  1 -
REVIEWING.rst                                      |  7 +--
devstack/plugin.sh                                 |  1 +
patrole_tempest_plugin/hacking/checks.py           | 43 +++++-----------
patrole_tempest_plugin/policy_authority.py         |  9 ++--
.../compute/test_instance_usages_audit_log_rbac.py | 14 +++++-
.../test_server_misc_policy_actions_rbac.py        | 27 +++++++---
.../network/test_flavor_service_profile_rbac.py    |  1 -
.../adopt_nova_new_policies-c61d1c3751ff1bf9.yaml  | 18 +++++++
.../notes/drop-py-2-7-d287ad9a325b132d.yaml        |  6 +++
.../patrole-ussuri-release-6a2ec4e5c357fb19.yaml   | 16 ++++++
releasenotes/source/index.rst                      |  1 +
releasenotes/source/v0.8.0.rst                     |  6 +++
setup.cfg                                          |  3 +-
test-requirements.txt                              |  2 +-
tox.ini                                            | 42 +++++++++-------
26 files changed, 303 insertions(+), 118 deletions(-)


Requirements updates
--------------------

diff --git a/test-requirements.txt b/test-requirements.txt
index a08c27a..63f290c 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4 +4 @@
-hacking>=1.1.0,<1.2.0 # Apache-2.0
+hacking>=3.0,<3.1.0 # Apache-2.0