We are tickled pink to announce the release of: patrole 0.7.0: Patrole is a tool for verifying that Role-Based Access Control is being enforced across OpenStack deployments. This release is part of the train release series. The source is available from: https://opendev.org/openstack/patrole Download the package from: https://tarballs.openstack.org/patrole/ Please report issues through: https://bugs.launchpad.net/patrole/+bugs For more details, please see below. 0.7.0 ^^^^^ Prelude ******* This release is to tag the Patrole for OpenStack Train release. This release marks the start of Train release support in Patrole. After this release, Patrole will support below OpenStack Releases: * Train * Stein * Rocky * Queens Current development of Patrole is for OpenStack Ussuri development cycle. Every Patrole commit is also tested against master during the Ussuri cycle. However, this does not necessarily mean that using Patrole as of this tag will work against a Ussuri (or future release) cloud. To be on safe side, use this tag to test the OpenStack Train release. New Features ************ * Added new feature flag called "keystone_policy_enforcement_train" under the configuration group "[policy-feature-enabled]" to make "test_list_trusts" test backwards compatible, test the current release, and test the correct policy action. The Keystone Trust API is enforced differently depending on passed arguments Changes in patrole 0.6.0..0.7.0 ------------------------------- 7ac8dfb Add releasenote to tag the Patrole for Train release 94e6b18 Add PDF building 6d62df5 Remove the Pike stable branch jobs from master gate acd2d56 Skip 'test_delete_flavor_service_profile' 97fffed fix: admin, member, and reader gates broken 544b807 fix patrole-multinode-admin non-voting gate b28337c Fix router leak from L3AgentsExtRbacTest class abfd456 Add tests for new Trusts policy actions cb09614 Fix resource leaks in IdentityPolicyAssociationRbacTest class 1099cdf fix: 'openstack-tox-docs' gate 94f5f07 Replace cls.__class__.__name__ with cls.__name__ f4cadfd [doc] Fix docs job by adding _static folder to avoid Sphinx warning 17fc333 Fix a broken url link in README.rst 416286a Add release notes page for version 0.6.0 ee00c05 Update api-ref location Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 ---- README.rst | 25 +++++---- devstack/plugin.sh | 26 ++++++++++ patrole_tempest_plugin/config.py | 7 ++- patrole_tempest_plugin/rbac_utils.py | 2 +- .../api/compute/test_floating_ip_pools_rbac.py | 2 +- .../api/compute/test_floating_ips_bulk_rbac.py | 2 +- .../test_server_misc_policy_actions_rbac.py | 3 +- .../compute/test_server_volume_attachments_rbac.py | 9 +++- .../api/compute/test_virtual_interfaces_rbac.py | 2 +- .../api/network/test_dscp_marking_rule_rbac.py | 2 +- .../network/test_flavor_service_profile_rbac.py | 1 + .../test_policy_bandwidth_limit_rule_rbac.py | 2 +- .../test_policy_minimum_bandwidth_rule_rbac.py | 2 +- ..._policy_enforcement_rocky-b52fb471ac31189b.yaml | 7 +++ .../patrole-train-release-7d493ff5039f1715.yaml | 17 +++++++ releasenotes/source/index.rst | 1 + releasenotes/source/v0.6.0.rst | 6 +++ tox.ini | 9 ++++ 36 files changed, 221 insertions(+), 86 deletions(-)