
As discussed in PTG, we need to test the new RBAC in the integrated gate and accordingly enable the new defaults and scope check by default. A new integrated testing job has been added and results show that the new defaults and scope checks are working fine. During testing, we found a few bugs in neutron policies but all are fixed now. enforce_scope and enforce_new_defaults are oslo policy config options but they are per service level and the default value can be overridden. Oslo policy 3.11.0 version allows to override the default value for these config options[1] so upgrading the oslo policy version in requirements.txt Depends-On: https://review.opendev.org/c/openstack/devstack/+/869781 Depends-On: https://review.opendev.org/c/openstack/placement/+/869525 [1] https://github.com/openstack/oslo.policy/blob/3.11.0/oslo_policy/opts.py#L125 Change-Id: I977b2daedf880229c8d364ca011f2ea965b86e3a
69 lines
2.1 KiB
Plaintext
69 lines
2.1 KiB
Plaintext
# Requirements lower bounds listed here are our best effort to keep them up to
|
|
# date but we do not test them so no guarantee of having them all correct. If
|
|
# you find any incorrect lower bounds, let us know or propose a fix.
|
|
|
|
pbr>=5.8.0 # Apache-2.0
|
|
SQLAlchemy>=1.4.13 # MIT
|
|
decorator>=4.1.0 # BSD
|
|
eventlet>=0.30.1 # MIT
|
|
Jinja2>=2.10 # BSD License (3 clause)
|
|
keystonemiddleware>=4.20.0 # Apache-2.0
|
|
lxml>=4.5.0 # BSD
|
|
Routes>=2.3.1 # MIT
|
|
cryptography>=2.7 # BSD/Apache-2.0
|
|
WebOb>=1.8.2 # MIT
|
|
greenlet>=0.4.15 # MIT
|
|
PasteDeploy>=1.5.0 # MIT
|
|
Paste>=2.0.2 # MIT
|
|
PrettyTable>=0.7.1 # BSD
|
|
sqlalchemy-migrate>=0.13.0 # Apache-2.0
|
|
alembic>=1.5.0 # MIT
|
|
netaddr>=0.7.18 # BSD
|
|
netifaces>=0.10.4 # MIT
|
|
paramiko>=2.7.1 # LGPLv2.1+
|
|
iso8601>=0.1.11 # MIT
|
|
jsonschema>=3.2.0 # MIT
|
|
python-cinderclient!=4.0.0,>=3.3.0 # Apache-2.0
|
|
keystoneauth1>=3.16.0 # Apache-2.0
|
|
python-neutronclient>=7.1.0 # Apache-2.0
|
|
python-glanceclient>=2.8.0 # Apache-2.0
|
|
requests>=2.25.1 # Apache-2.0
|
|
stevedore>=1.20.0 # Apache-2.0
|
|
websockify>=0.9.0 # LGPLv3
|
|
oslo.cache>=1.26.0 # Apache-2.0
|
|
oslo.concurrency>=5.0.1 # Apache-2.0
|
|
oslo.config>=8.6.0 # Apache-2.0
|
|
oslo.context>=3.4.0 # Apache-2.0
|
|
oslo.log>=4.6.1 # Apache-2.0
|
|
oslo.limit>=1.5.0 # Apache-2.0
|
|
oslo.reports>=1.18.0 # Apache-2.0
|
|
oslo.serialization>=4.2.0 # Apache-2.0
|
|
oslo.upgradecheck>=1.3.0
|
|
oslo.utils>=4.12.1 # Apache-2.0
|
|
oslo.db>=10.0.0 # Apache-2.0
|
|
oslo.rootwrap>=5.15.0 # Apache-2.0
|
|
oslo.messaging>=10.3.0 # Apache-2.0
|
|
oslo.policy>=3.11.0 # Apache-2.0
|
|
oslo.privsep>=2.6.2 # Apache-2.0
|
|
oslo.i18n>=5.1.0 # Apache-2.0
|
|
oslo.service>=2.8.0 # Apache-2.0
|
|
rfc3986>=1.2.0 # Apache-2.0
|
|
oslo.middleware>=3.31.0 # Apache-2.0
|
|
psutil>=3.2.2 # BSD
|
|
oslo.versionedobjects>=1.35.0 # Apache-2.0
|
|
os-brick>=5.2 # Apache-2.0
|
|
os-resource-classes>=1.1.0 # Apache-2.0
|
|
os-traits>=2.9.0 # Apache-2.0
|
|
os-vif>=3.1.0 # Apache-2.0
|
|
castellan>=0.16.0 # Apache-2.0
|
|
microversion-parse>=0.2.1 # Apache-2.0
|
|
tooz>=1.58.0 # Apache-2.0
|
|
cursive>=0.2.1 # Apache-2.0
|
|
retrying>=1.3.3,!=1.3.0 # Apache-2.0
|
|
os-service-types>=1.7.0 # Apache-2.0
|
|
python-dateutil>=2.7.0 # BSD
|
|
futurist>=1.8.0 # Apache-2.0
|
|
openstacksdk>=0.35.0 # Apache-2.0
|
|
PyYAML>=5.1 # MIT
|
|
packaging>=21.0 # Apache-2.0
|