Commit Graph

57179 Commits

Author SHA1 Message Date
melanie witt d40a0856ad Add packages required for pdf-docs run to bindep.txt
This adds packages needed to run 'tox -e pdf-docs' locally to our
bindep.txt for users, for example:

  bindep -l newline pdf-docs | xargs <package manager> install -y

The CI jobs don't use the 'pdf-docs' label for handling bindep for pdf
docs builds [1] and instead install a separate list of prereqs [2], so
this change is only relevant for local test runs.

[1] https://opendev.org/openstack/openstack-zuul-jobs/src/commit/64341d2e322b9e1c7f197bb0aafd63038d4e925c/zuul.d/jobs.yaml#L435
[2]
https://opendev.org/openstack/openstack-zuul-jobs/src/commit/64341d2e322b9e1c7f197bb0aafd63038d4e925c/roles/prepare-build-pdf-docs/tasks/main.yaml#L7-L20

Change-Id: Ib603baa1766b873073165c71772ada021c6e5036
2020-05-18 20:39:49 +00:00
OpenStack Release Bot b5ab89762a Update master for stable/ussuri
Add file to the reno documentation build to show release notes for
stable/ussuri.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/ussuri.

Change-Id: I1a2f8ffcf287120c4672686c7576b1892ea2b6ef
Sem-Ver: feature
2020-04-23 21:37:42 +00:00
Zuul 2cddf595a8 Merge "Revert "Temporarily skip TestNovaMigrationsMySQL"" 2020-04-23 19:33:04 +00:00
Zuul 7e36bf5f9a Merge "FUP: Amend ussuri prelude to add docs for policy concepts" 2020-04-23 17:22:51 +00:00
Zuul e48e85ffd0 Merge "Update compute rpc version alias for ussuri" 2020-04-23 09:59:10 +00:00
Zuul df374ec454 Merge "Ussuri 21.0.0 prelude section" 2020-04-23 09:01:48 +00:00
Sylvain Bauza 53092942fd FUP: Amend ussuri prelude to add docs for policy concepts
Now I00e678858a8e46786f3b69fbba3f5353932de49b is merge, we can amend
the reno prelude section to mention the policy docs.

Change-Id: I78492a54a48828eec8d002c366455ca3bf593e5d
2020-04-23 09:38:29 +02:00
Zuul d24de1440e Merge "Add docs and releasenotes for BP policy-defaults-refresh" 2020-04-23 07:30:02 +00:00
Ghanshyam Mann af21183082 Add docs and releasenotes for BP policy-defaults-refresh
This commit adds the documents to explain the new defaults,
migration plan and releases notes for policies changes in
BP policy-defaults-refresh

Partial implement blueprint policy-defaults-refresh

Change-Id: I00e678858a8e46786f3b69fbba3f5353932de49b
2020-04-23 02:06:06 +00:00
Zuul e264b58c7e Merge "Pass the actual target in quota class policy" 2020-04-23 01:28:44 +00:00
Sylvain Bauza 66e67a0f4a Ussuri 21.0.0 prelude section
Mostly based on cycle highlights and a couple of additions worth
mentioning.

https://releases.openstack.org/ussuri/highlights.html#nova-compute-service

Change-Id: I72f06fbfcf6e8387b8cb2f12bd06a2120cc03c2b
2020-04-22 14:32:43 +02:00
Zuul 58aaffade9 Merge "docs: Add stable device rescue docs" 2020-04-21 13:05:08 +00:00
Balazs Gibizer 8466f13ce6 Revert "Temporarily skip TestNovaMigrationsMySQL"
This reverts commit 316fef22c6.

As we said before this commit was temporary
Change-Id: I5f7f5779735e158688992ccc948e7305bae1c9c5
2020-04-21 12:03:15 +00:00
Zuul b0cc9bad3a Merge "Add missing white spaces between words in log messages" 2020-04-21 11:29:55 +00:00
Zuul f1e448d672 Merge "Use oslo policy flag to disable default change warning instead of all" 2020-04-21 10:04:19 +00:00
Lee Yarwood 30fcb2ddfd docs: Add stable device rescue docs
Adds the new mode to the existing user rescue docs and highlights some
known limitations.

Change-Id: Iaa2f27ccb2a77102fde6b24b76c9d5ae54608cca
2020-04-21 10:54:18 +01:00
Zuul 9d88f821df Merge "Add new default roles in quota class policies" 2020-04-21 08:39:41 +00:00
Zuul 418eb770fc Merge "Allocate mdevs when resizing or reverting resize" 2020-04-21 00:42:44 +00:00
Zuul 878fb78dbe Merge "Pass allocations to virt drivers when resizing" 2020-04-20 19:16:59 +00:00
Zuul 8af40c844f Merge "Fix follow up comments on policy work" 2020-04-20 19:13:52 +00:00
Zuul ea5017c6f5 Merge "Add new default roles in remaining servers policies" 2020-04-20 18:34:17 +00:00
Zuul 803c882c16 Merge "Introduce scope_types in remaining servers Policies" 2020-04-20 18:34:10 +00:00
Zuul 95638fa15e Merge "Add test coverage of existing remaining servers policies" 2020-04-20 18:34:02 +00:00
Zuul 4bc63ab139 Merge "Add new default roles in servers attributes policies" 2020-04-20 18:33:56 +00:00
Zuul 78998fa50a Merge "Introduce scope_types in servers attributes Policies" 2020-04-20 18:23:59 +00:00
Zuul 1fe4156795 Merge "Add retry to cinder API calls related to volume detach" 2020-04-20 17:36:33 +00:00
Sylvain Bauza d2e0afc1f7 Allocate mdevs when resizing or reverting resize
Now that allocations are passed to the methods, we can ask whether we
need to use mediated devices for the instance.

Adding a large functional test for verifying it works.

Change-Id: I018762335b19c98045ad42147080203092b51c27
Closes-Bug: #1778563
2020-04-20 14:48:16 +02:00
Zuul 702ffe64b8 Merge "doc: mark the max microversion for ussuri" 2020-04-19 15:15:43 +00:00
Ghanshyam Mann 9669c69da5 Add new default roles in remaining servers policies
This adds new defaults roles in remaining servers
as PROJECT_ADMIN with TODO to move the to SYSTEM_ADMIN.

Also add tests to simulates the future where we drop the deprecation
fall back in the policy by overriding the rules with a version where
there are no deprecated rule options. Operators can do the same by
adding overrides in their policy files that match the default but
stop the rule deprecation fallback from happening.

Partial implement blueprint policy-defaults-refresh

Change-Id: I72b48eb78fde29083bc23ddb25459f6c41590c37
2020-04-18 18:04:19 +00:00
Ghanshyam Mann 15a4651e90 Introduce scope_types in remaining servers Policies
oslo.policy introduced the scope_type feature which can
control the access level at system-level and project-level.
 - https://docs.openstack.org/oslo.policy/latest/user/usage.html#setting-scope
 - http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html

Appropriate scope_type for nova case:
- https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html#scope

This commit introduce scope_type for remaining server policies
as 'system' and project.

Also adds the test case with scope_type enabled and verify we
pass and fail the policy check with expected context.

Partial implement blueprint policy-defaults-refresh

Change-Id: I7801685b8ded35c4aece27e2193674b70bd0633a
2020-04-18 18:04:08 +00:00
Ghanshyam Mann 95c74a26d4 Add test coverage of existing remaining servers policies
Current tests do not have good test coverage of existing policies.
Either tests for policies do not exist or if they exist then they
do not cover the actual negative and positive testing.

For Example, if any policy with default rule as admin only then
test should verify:
- policy check pass with context having admin or server owner
- policy check fail with context having non-admin and not server owner

As discussed in policy-defaults-refresh, to change the policies
with new default roles and scope_type, we need to have the enough
testing coverage of existing policy behavior.

When we will add the scope_type in policies or new default roles,
then these test coverage will be extended to adopt the new changes
and also make sure we do not break the existing behavior.

This commit covers the testing coverage of existing remaining server
policies.

Partial implement blueprint policy-defaults-refresh

Change-Id: Ibfc1917d35ab9e7657b13ec32582891f06d88176
2020-04-18 18:03:56 +00:00
Ghanshyam Mann 76d3457bd9 Add new default roles in servers attributes policies
This adds new defaults roles in servers extended attributes
and host_status policies as SYSTEM_ADMIN but passing
project_id of server as these policies are scoped with
system and project.

Also add tests to simulates the future where we drop the deprecation
fall back in the policy by overriding the rules with a version where
there are no deprecated rule options. Operators can do the same by
adding overrides in their policy files that match the default but
stop the rule deprecation fallback from happening.

Partial implement blueprint policy-defaults-refresh

Change-Id: I55a47d447f5f5b2d18754027f69e05e729d40338
2020-04-18 13:02:55 -05:00
Ghanshyam Mann 75f531d748 Introduce scope_types in servers attributes Policies
oslo.policy introduced the scope_type feature which can
control the access level at system-level and project-level.
 - https://docs.openstack.org/oslo.policy/latest/user/usage.html#setting-scope
 - http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html

Appropriate scope_type for nova case:
- https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html#scope

This commit introduce scope_type for server extended attr and
host_status policies as 'system' and 'project'.

Also adds the test case with scope_type enabled and verify we
pass and fail the policy check with expected context.

Partial implement blueprint policy-defaults-refresh

Change-Id: I06cd5bd497ef287ccc279672a71e36b2d4bc2adc
2020-04-18 12:47:42 -05:00
Zuul 19eeacfa72 Merge "fix scsi disk unit number of the attaching volume when cdrom bus is scsi" 2020-04-18 12:50:42 +00:00
Zuul acca121ad4 Merge "Follow-ups for host_status:unknown-only policy rule" 2020-04-18 12:50:36 +00:00
Zuul 10db1d8e55 Merge "images: Make JSON the default output format of calls to qemu-img info" 2020-04-16 22:37:18 +00:00
Zuul 966d21fa75 Merge "libvirt: Remove VIR_DOMAIN_BLOCK_REBASE_RELATIVE flag check" 2020-04-16 21:40:57 +00:00
Zuul b68b27064a Merge "Add test coverage of existing server attributes policies" 2020-04-16 17:10:54 +00:00
Zuul afff1b22ac Merge "Add new default roles in servers policies" 2020-04-16 17:10:47 +00:00
Zuul 2aa2ec817c Merge "Introduce scope_types in servers Policies" 2020-04-16 17:10:36 +00:00
Zuul a8625f16fc Merge "Add test coverage of existing server policies" 2020-04-16 17:10:24 +00:00
Zuul 5558258c0d Merge "Fix servers policy for admin_or_owner" 2020-04-16 17:10:09 +00:00
Lee Yarwood 3e06135bec images: Make JSON the default output format of calls to qemu-img info
oslo.utils is planning to make JSON the default output format parsed
when creating QemuImgInfo objects. As such this change makes JSON the
default output_format requested when calling qemu-img info.

The majority of this change is actually test removal from
nova.tests.unit.virt.libvirt.test_utils as these human readable qemu-img
based tests now duplicate tests found in oslo.utils itself.

Change-Id: I56676713571e79f05ee3f0bffc5da8386e02c5d4
2020-04-16 16:38:24 +01:00
Zuul e1359567e4 Merge "Fix server actions to be system and project scoped" 2020-04-16 08:19:05 +00:00
Zuul ab7224cc22 Merge "Pass the actual target in flavor access policy" 2020-04-16 07:34:05 +00:00
Ghanshyam Mann 125c60b1f3 Fix follow up comments on policy work
There are few typo or other comments
in policy defaults refresh BP work which
left to do in followup patch.

This is follow up patch to fix comments.
- https://review.opendev.org/#/c/715760/14/nova/tests/unit/policies/test_limits.py@69
- https://review.opendev.org/#/c/717554/3/nova/tests/unit/policies/test_suspend_server.py@95
- https://review.opendev.org/#/c/717176/7/nova/api/openstack/compute/server_groups.py@127
- https://review.opendev.org/#/c/662968/9/nova/tests/unit/policies/base.py@152

Partial implement blueprint policy-defaults-refresh

Change-Id: I88da1494788ff8cfa1b88652dcac7536bc6b2c51
2020-04-15 18:21:34 -05:00
Lee Yarwood e69acacf45 fup: Fix [workarounds]/rbd_volume_local_attach config docs
A newline is required to ensure the list renders correctly.

Change-Id: Id0fa637311e9656bdf42c4d4c60d7e8ed818383c
2020-04-15 16:38:29 +00:00
Zuul e70b7eeb73 Merge "libvirt: Change UEFI check to handle AArch64 better" 2020-04-15 16:29:31 +00:00
Zuul b70c7cb39a Merge "fup: Add missing docstrings from get_rescue_device|bus diskinfo funcs" 2020-04-15 16:16:23 +00:00
Zuul a6cc2767a1 Merge "fup: Remove the use of the term unstable rescue INFO logs" 2020-04-15 16:16:16 +00:00