We enthusiastically announce the release of: patrole 0.9.0: Patrole is a tool for verifying that Role-Based Access Control is being enforced across OpenStack deployments. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/patrole Download the package from: https://tarballs.openstack.org/patrole/ Please report issues through: https://bugs.launchpad.net/patrole/+bugs For more details, please see below. 0.9.0 ^^^^^ Prelude ******* This release is to tag the Patrole for OpenStack Ussuri release. This release marks the start of Ussuri release support in Patrole. After this release, Patrole will support below OpenStack Releases: * Ussuri * Train * Stein Current development of Patrole is for OpenStack Victoria development cycle. Every Patrole commit is also tested against master during the Victoria cycle. However, this does not necessarily mean that using Patrole as of this tag will work against a Victoria (or future release) cloud. To be on safe side, use this tag to test the OpenStack Ussuri release. New Features ************ * Nova adopting the new policy defaults in ussuri cycle which include some of the policies are made granular. Patorle tests will adopt the new polcies. Below are the policies changed in patrole tests: * os_compute_api:os-services * os_compute_api:deferred_delete * os_compute_api:os-attach-interfaces * os_compute_api:os-instance-usage-audit-log * os_compute_api:os-agents * os_compute_api:os-hypervisors * os_compute_api:os-instance-actions * os_compute_api:os-security-groups * os_compute_api:os-server-password Upgrade Notes ************* * Python 2.7 support has been dropped. Last release of patrole to support python 2.7 is patrole 0.8.0. The minimum version of Python now supported by Patrole is Python 3.6. Changes in patrole 0.8.0..0.9.0 ------------------------------- 6f0c119 Add releasenote to tag the Patrole for Ussuri release ee53f84 Gate fix and update compute tests to adopt new policies a1f0245 [ussuri][goal] Update contributor documentation 2aad808 Update hacking for Python3 84cb426 Update compute hypervisor tests to adopt new policies be0154c Update compute instance-usage and agents tests to adopt new policies d17e0a6 Changing the review policy to approve with single +2 7564244 Update compute tests to adopt new policies 595e61d Unskip test that relied on Neutron bug being fixed 51368ef [ussuri][goal] Drop python 2.7 support and testing 2189883 Add release notes page for version 0.8.0 1488e1e Remove the Queens stable branch jobs from master gate 7085622 Do not skip nova API extensions policy test for rocky 8c23e7a Update the constraints url Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 27 +++++----- CONTRIBUTING.rst | 19 ++++++++ HACKING.rst | 1 - REVIEWING.rst | 7 +-- devstack/plugin.sh | 1 + patrole_tempest_plugin/hacking/checks.py | 43 +++++----------- patrole_tempest_plugin/policy_authority.py | 9 ++-- .../compute/test_instance_usages_audit_log_rbac.py | 14 +++++- .../test_server_misc_policy_actions_rbac.py | 27 +++++++--- .../network/test_flavor_service_profile_rbac.py | 1 - .../adopt_nova_new_policies-c61d1c3751ff1bf9.yaml | 18 +++++++ .../notes/drop-py-2-7-d287ad9a325b132d.yaml | 6 +++ .../patrole-ussuri-release-6a2ec4e5c357fb19.yaml | 16 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/v0.8.0.rst | 6 +++ setup.cfg | 3 +- test-requirements.txt | 2 +- tox.ini | 42 +++++++++------- 26 files changed, 303 insertions(+), 118 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a08c27a..63f290c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0