CHANGES
=======

0.3.0
-----

* Add releasenotes to mark the start of Queens support
* Remove all v2.0 identity API tests
* RBAC tests for group type specs
* [Gate fix] Fix attach volume create server test timeout
* Replace curly quotes with straight quotes
* RBAC tests for reset group snapshot status policy
* Zuul: Remove project name
* Add waiter to test\_manage\_snapshot\_rbac to fix data race
* Remove unnecessary dir 'legacy'
* Zuul: Remove project name
* override\_role cleanup: Remove superfluous call in rbac\_rule\_validation
* Updated from global requirements
* Migrate to override\_role for volume module (part 3)
* Clean up exception message raised by policy authority module
* Add tests for update group types for volume module
* Add test coverage for volume types
* Make create\_server tests more policy-granular
* Migrate to override\_role for volume module (part 1)
* Optimize test\_requireemtns.txt and requirements.txt
* Updated from global requirements
* Migrate to override\_role for identity v2 module
* Updated from global requirements
* Migrate to override\_role for network security group tests
* Add Rbac test for "group\_snapshot"
* Migrate to override\_role for image module (part 2)
* Migrate to override\_role for network port tests
* Migrate to override\_role for volume module (part 4)
* Migrate to override\_role for volume module (part 2)
* Migrate to override\_role for volume module (last)
* Migrate to override\_role for network test\_networks\_rbac
* Migrate to override\_role for network metering tests
* Migrate to override\_role for network metering\_labels tests
* Migrate to override\_role for network multiprovider tests
* Migrate to override\_role for network tests-2
* Migrate to override\_role for image module (part 1)
* Migrate to override\_role for network tests
* [docs] Fix weird indentation in documentation
* Remove 'tempest' from patrole jobs name
* Migrate to override\_role for compute module (part 3)
* Migrate to override\_role for identity module (part 1)
* Migrate to override\_role for identity module (part 2)
* [Fix gate] Fix compute snapshot tests raising ServerFault
* [docs] Update rbac\_utils.rst documentation
* Fix wrong exception in test\_snapshot\_manage\_rbac
* Add "snapshot\_manage" Rbac test
* Fix min\_microversion in volume test\_groups\_rbac
* "get\_association\_qos" test using wrong policy rule
* Adding 'reset\_group\_status' rbac test
* [Gate fix] Change policy for create\_port/update\_port:fixed\_ips
* Adding Missing rbac test for Volume
* [TrivialFix] Use \_override\_role in rbac\_rule\_validation
* Migrate to override\_role for compute module (part 2)
* Migrate to override\_role for compute module (part 1)
* Implement RbacUtilsMixin for base RBAC classes
* Remove unusued BaseV1ImageRbacTest class
* Unskip volume show host test
* Complete coverage for volume transfers policies
* Updated from global requirements
* Update patrole entry\_point plugin name
* Base implementation of override\_role for automatic role re-switch
* Switch to use stestr for unit tests directly
* Update documentation with rbac\_utils details
* Remove dsvm prefix from in-repo zuul jobs
* Updated from global requirements
* Correct policy names for volume metadata tests
* Fix volume delete\_group data race in clean up
* Remove deprecrated [rbac] config group
* Improve gitignore for project
* Additional volume quota set RBAC tests
* Add get\_router high availaibility test policy
* Add missing volume RBAC test
* Migrate to Zuul v3
* Skip test\_show\_host volume test
* Deprecate strict\_policy\_enforce configuration option
* Rename function name to avoid confusion
* Remove Cinder v2 RBAC tests
* Remove setting of version/release from releasenotes
* Add Pause/Unpause policy tests
* Design principles README section
* Updated from global requirements
* Add RBAC test for 'get\_auth\_domains'
* Add 'fixed ips' APIs policy tests
* Add RBAC tests for volume limits client
* Add 'show\_trust' Policy Test for Identity
* Adding missing snapshot\_metadata RBAC tests
* Correct policy action for backup export volume endpoint
* Add Show ' update\_backup ' policy tests
* Correct policy action for reserve/unreserve volume actions
* Correct policy action for attach/detach volume actions
* Add Shelve/Unshelve policy tests
* Fix six.reraise bug in rbac\_rule\_validation
* RBAC test for unrescue server
* Remove deprecated custom policy file options
* Cover more 'floating ips' APIs for policy tests
* Fix TypeError being raised by json.dumps in policy\_authority
* Rename base.rebuild\_server to base.recreate\_server
* Add Show ' os-attach-interfaces ' policy tests
* Skip floating IPs tests with new config options
* Auto-generate sample config file
* Use Tempest decorators in tempest.common.utils
* Clean up identity base class resources via addClassResourceCleanup
* Clean up image resource types class resources via addClassResourceCleanup
* Clean up network class resources via addClassResourceCleanup
* Clean up namespace class resources via addClassResourceCleanup
* Clean up volume class resources via addClassResourceCleanup
* Image create v1/v2 compatible in compute test\_images\_rbac
* Clean up test\_server\_actions\_rbac
* [flake8] Enable extra, optional hacking checks
* Clean up compute class resources via addClassResourceCleanup
* RBAC tests for extended server attributes policies
* Add os-create-backup compute RBAC test
* [Gate Fix] Fix AttributeError in ServerActionsRbacTest
* Updated from global requirements
* Improve test coverage for flavor\_access nova policies
* Remove urllib3/requests from requirements
* [Gate fix] Change expected\_error\_code to 403 for some subnetpool tests
* RBAC tests for key\_name in response
* Clean up rbac\_rule\_validation unit tests
* [TrivialFix] Remove redundant function in RbacUtils class
* Update policy authority documentation

0.2.0
-----

* Prepare release notes for release 0.2.0
* Volume test for backup:backup\_project\_attribute
* Rename rbac\_policy\_parser to policy\_authority
* Fix flavor\_rxtx\_rbac
* Remove a few tests from multinode gate
* Add a per-test log
* RBAC tests for os-extended-volumes policies
* Fix router tests expecting wrong error code
* [TrivialFix] Move security group tests into correct test file
* Do not use test.get\_service\_list()
* Updated from global requirements
* Remove identity v3 change\_password test
* Use create\_test\_server for attach volume server test
* Test coverage for compute flavor\_manage policies
* Add missing v3 volume tests for which v2 tests exist
* RBAC tests for extended availability zone policies
* Move some slow tests into the multinode gate
* Docstring for RbacAuthority class
* Updated from global requirements
* Use configured admin creds in rbac utils
* Update rbac\_rule\_validation docstrings
* Deprecate [rbac] configuration group
* Adds unit tests for hacking checks
* Update and replace http with https for doc links in patrole
* Only sleep following a role switch
* Add RBAC test for updating volume group
* Adds meaningful exceptions for missing attributes
* Update the documentation link
* Remove usage of credentials\_factory.AdminManager
* Fix a comment issue
* Adds update and delete agent tests
* Update tox to correctly use OS\_TEST\_PATH
* Change rbac\_utils.RbacUtils is\_admin to function
* RBAC tests for os-extended-status policies
* Move instance actions test into misc policy actions file
* Updated from global requirements
* Updated from global requirements
* Switch to enabled version of identity clients
* Replace test.attr with decorators.attr
* Create rbac utils fixture and refactor tests
* Add missing test for os-instance-usage-audit-log
* Update URLs in documents according to document migration
* README: Fix headers
* Remove need to include admin in credentials in base classes
* Rewrite Patrole README to be high-level document
* Add missing v3 token related testcases
* docs: Update configuration docs
* Update test.attr to decorators.attr
* Updates test\_volume\_types\_extra\_specs\_rbac
* Move config drive tests into misc policy actions file
* Updated from global requirements
* [Gate fix] Fix volumes\_client AttributeError
* Replace inconsistent skipException messages
* Correct policy action for check\_endpoint\_group test
* Unit tests for dynamic policy file discovery
* Move virtual interfaces test into misc policy actions file
* Dynamic policy file discovery
* Doc warnings as errors
* Add support for testing custom RBAC requirements
* Group together tests that create server and require network resources
* Move tenant usage tests into misc policy actions file
* Updated from global requirements
* Add docstring for rbac\_rule\_validation is\_authorized
* Replace os with os\_primary
* Add test cases for oauth1 token related APIs
* RBAC tests for volume v3 groups and group types
* Minimize number of servers created for more tests
* Additional volume v2 backup RBAC tests
* Switch from oslosphinx to openstackdocstheme
* RBAC tests for compute quota class sets
* Replace the usage of 'admin\_manager' with 'os\_admin'
* Policy update for volume v2 qos-specs RBAC tests
* Use admin creds for waiting
* Remove unusued create\_test\_server
* Remove unnecessary LOG/CONF statements
* Add missing v2 token related testcases
* Identity v3 RBAC Tests - EP Filter Groups
* Minimize number of servers created for certain tests
* Docstring for rbac\_rule\_validation \_get\_exception\_type
* Refactor policy parser init so that validate service is in helper
* Volume test for volume\_extension:volume\_actions:upload\_public
* Add waiter to test\_volume\_backup\_delete
* Adds lock server tests
* Fix snapshot rbac test race condition
* Additional network router RBAC tests
* Subnet rbac tests
* RBAC tests for Tempest network agents\_client
* Adds server security group tests
* Fix test\_volumes\_snapshots\_rbac throwing BadRequest
* Show team and repo badges on README
* Adds service\_providers client tests
* Patrole should only test glance v2 api
* Fix volume backup tests throwing BadRequest
* Update Patrole documentation
* Clean up test\_admin\_password\_rbac
* Adds extension skip checks for Neutron tests
* Remove support for py34
* Add vol extra specs/type access RBAC tests
* Fix test\_force\_detach\_volume\_from\_instance
* Adds console output RBAC tests
* Update plugin.py
* Correct reno list formatting
* Adds tests for compute snapshots API
* Optimize the link address
* RBAC test for update\_subnetpool:is\_default
* Add a page for release 0.1.0 to release notes
* RBAC test for "dhcp\_agent\_scheduler" network policy
* Update test/installation documentation
* Add RBAC test for communitize\_image policy
* Add rbac\_utils is\_admin helper method
* RBAC tests for image\_size compute policy action
* [Gate fix] Fix py35 gate due to incompatible import
* Additional port-related RBAC tests
* Patrole devstack plugin
* [Gate fix] Fix test\_server\_actions raising BadRequest
* Add hacking check to enforce no client aliases

0.1.0
-----

* List hypervisors with details rbac test
* Compute server metadata rbac tests
* Adds volume summary test reno
* Fix rbac\_rule\_validation log statement raises TypeError
* Fix compute create volume test race condition
* Remove incorrect compute min\_microversions
* Prepare release notes for release 0.1.0
* Remove assisted volume snapshot RBAC tests
* Fix setup.cfg using incorrect entry point
* Add oslo.policy requirement to requirements.txt
* Removes client aliases
* Remove singleton from RbacUtils constructor
* Fix plugin.py test directory
* Include class name in resource names for resource cleanup debugging
* Hacking: enable extensions H106, H203 and H904
* Extra hypervisor rbac tests
* [Gate fix] Fix volume metadata RBAC tests
* Identity V3 Tests - Domain Configurations
* Remove enforce\_type=True from oslo.config set\_override
* Nova test for Volume client
* Remove unnecessary create\_volume calls
* Add RBAC tests for v3 auth policy actions
* Rename "Rbac Flag" to "Rbac testing" in skip exceptions
* Adds initial hacking checks to Patrole
* Corrects compute microversion docstrings
* Volume services rbac test
* Remove cinder v1 artifacts from code base
* Change "admin" literal for admin role to CONF admin\_role
* Added stable interface and release information to documentation
* Consolidates rbac\_base for v2 and v3 identity tests
* Add force detach volume test
* Removes force\_backup\_delete test
* Adds create metadef resource test
* [Fix gate] Fix failing identity v2 admin tests
* Remove heat tests from patrole
* Add RBAC tests for cinder os-quota-class-sets API
* Add RBAC test for force-deleting a backup
* Adds missing volumes client tests
* Replace generic api\_extensions checks
* Creates config options for policy.json paths
* Stop using aliases for creds manager
* Fix up test\_volume\_actions\_rbac
* Keystone v3 tests for endpoint filters for projects
* Add additional tests to test\_images\_rbac
* Add encryption types test
* Move tests from volumes into volumes actions
* Add RBAC test cases to manage cinder volume
* Improve patrole core documentation
* Fix: the tox cover job was not updating coverage report
* Adding server evacuate test
* Remove skip exception from virtual interfaces test
* Increase unit test coverage for policy parser
* Add volume user messages rbac test
* Identity V3 Tests - Domains
* Identity trust rbac tests
* Add capabilities and scheduler stats tests
* Create heat-specific patrole gate
* Add RBAC tests for namespace\_tags\_client
* Remove admin namespace throughout Patrole - Identity tests
* Fix non-existent cinder policy action tests
* Remove admin namespace throughout Patrole - Nova tests
* Remove admin namespace throughout Patrole - Volume tests
* Fix \_validate\_switch\_role throwing incorrect error message
* Fix rbac\_rule\_validation test being incorrectly skipped
* Renames switchToRbacRole to toggle\_rbac\_role
* Fix volume transfers rbac test
* Add py3.5 support in setup.cfg
* Fix role validation edge case bug in rbac\_utils
* RBAC test for compute os-multinic policy action
* Add RBAC tests for the Nova images API
* Add implied roles rbac tests to identity v3
* Fix test\_migration\_live throwing AttributeError
* Update installation guide
* Add role-switching validation to Patrole framework
* Identity V3 (ext) Tests - Oauth Consumers
* Update post\_test\_hook to use multinode environment
* Add role assignments rbac tests to identity v3
* Fix check-uuid not working
* Refactor identity v3 rbac\_base to use classmethods
* Identity V3 Tests - Roles
* Modify policy parser to combine custom and default policy files
* Add heat resource types rbac tests
* Compute API Compute Flavor Rxtx Test
* Tag additional slow tests to run in slow gate
* Network tests should take advantage of net\_utils to find unused ip
* Improve Patrole config options
* Add new regex for "slow test" gate
* Refactors exceptions in rbac\_rule\_validation decorator
* Remove special\_fields definition from volume tests
* Add server tests for nova
* Adding compute server tests
* Add missing requirements
* Fix oslo\_debug\_helper not running
* Standardize tox
* Configure devstack gate to use UUID tokens
* Identity V3 rbac\_base method refactor
* Identity V3 tests - Regions
* Fixes IpAddressAlreadyAllocated thrown by fixed\_ip port tests
* Fix failing v2 identity user tests by adding admin\_only kwarg
* Fix failing neutron port tests for Member role
* Enhance test\_server\_actions\_rbac with create image actions
* Fixes server fault thrown by delete password compute rbac test
* Enhance validation decorator with error code
* Fixes failing flavor access tests for Member role
* Fixes router external\_fixed\_ip tests sometimes failing with Conflict
* Update Cinder test that incorrectly handles 404
* Partially revert removal of time.sleep if v3 auth enabled in conf
* Fixes instance actions compute rbac test failing for Member role
* Fixes v3 identity tests with policy actions with rule admin\_or\_owner
* Throw skipException for invalid policy actions
* Fixes test\_volume\_backup\_delete failing during tearDown
* Fix broken volume tests
* Compute API Quota Sets RBAC tests
* Removal of re-switching of rbac-role from tearDown
* Switch to admin role during client set up to fix some gate bugs
* Fixes test\_images\_member\_rbac missing os credentials for image v2
* Decrease overall run time when identity auth is set to v3
* Add switchToRbacRole=True to test instance actions in compute
* Add service validation to Patrole framework
* Fix for V2 image failing test cases
* Fixes many failing identity tests for member
* Removing unused admin\_client
* Add negative lookahead to post\_test\_hook to skip slow tests
* Add @test.attr(type='slow') to slow tests to reduce test run time
* Fix failing compute volume attachment tests
* Add post\_test\_hook.sh to Patrole
* Switch to use stable data\_utils
* Add pip install patrole command to pre\_test\_hook.sh
* Compute API Server Actions Test
* Default rbac\_flag = True for testing in gates
* Neutron tests - Security Groups
* Fix test coverage tox command for patrole
* Orchestration API config tests
* Users RBAC test for Keystone API v2 users
* Add pre\_test\_hook.sh for devstack tempest gates
* Increase unit test coverage for rbac\_utils
* Compute API Keypairs
* Cinder tests - Volume types
* Cinder tests for Volume hosts policy actions
* Compute API Server Tags Test
* Refactors Patrole framework to only use admin tenant credential type
* Enhance rbac policy parser to correctly interpret user\_id policy actions
* Compute API Suspend Server Test
* Changes tox to only run unit tests and moves unit tests to tests/unit
* Assisted Volume snapshot RBAC test for Compute v2.1 API roles
* Compute API Server Password Test
* Roles RBAC test for Keystone API v2 roles
* Change name of rbac\_role\_converter to rbac\_policy\_parser
* Compute API Server Actions Test
* Adds missing switch to rbac role function call to hypervisors compute test
* Add compute API test for config\_drive policy action
* Compute API Deferred Delete Tests
* Compute API Availability Zone Tests
* Add Subnetpool test cases for RBAC. Rename FloatingIps class name to follow naming convention
* Fix for few failing network rbac tests
* Add floating IP test cases for RBAC
* Enhance test\_server\_actions\_rbac with index/detail/show server actions
* Add multi-provider networks test cases for RBAC
* Add metering labels and metering label rules test cases for RBAC
* Compute API Compute Tenant Networks Tests
* Compute API Instance Usage Audit Log Test
* Compute API Compute Flavor Extra Specs Test
* Fix for typo of correct volume status
* Fix for V3 identity failing test cases
* Compute API Aggregates Tests
* Fix for V2 identity failing test cases
* Compute API Floating Ip Pools Test
* Renamed Glance test file
* Identity V3 Tests - Policies
* Compute API Floating Ips Bulk Tests
* Compute API Floating Ips Tests
* Remove discoverable test from compute tests
* Compute API Agents Tests
* Compute API Attach Interfaces Tests
* Compute API Ips Tests
* Compute Admin Server Actions Test
* Services test for Keystone version 2 api services
* Compute API Hosts Tests
* Identity V3 Tests - Groups
* Projects test for Keystone version 2 api projects
* Compute API Flavor Access Tests
* Keystone tests - v2 Endpoints
* Identity V3 tests - Endpoints
* Neutron tests - Routers
* Tests for compute security groups
* Compute API Hypervisor Tests
* Removes test\_access\_ips\_rbac test because it cannot be tested
* Identity V3 Tests - Services
* Fixes test\_absolute\_limits testing the wrong action
* Compute API Instance Actions Tests
* Neutron tests - Ports
* Identity V3 Tests - Projects
* Identity V3 Tests - Credentials
* Identity V3 tests -  Users
* Compute API Migrations Tests
* Compute API Rescue Test
* Compute API Server Diagnostics Test
* Compute API Server Groups Test
* Compute API Server Usage Test
* Fix volume transfers RBAC tests
* Compute API Server Volume Attachments Test
* Copyright and other information correctness
* Cinder tests - Volume snapshot metadata
* Compute Access IPs tests
* Compute API Services Test
* Compute API Simple Tenant Usage Tests
* Fixes policy rules in neutron containing the keyword tenant\_id
* Cinder tests - Volume backend
* Cinder tests - Volume transfers
* Cinder tests - Volume actions
* Glance tests - Image Metadef Namespace Properties
* Improve is\_admin support in Patrole converter framework
* Glance tests - Image Metadef Namespace Resource Types
* Glance tests - Image Metadef Namespace and Namespace Objects
* Fixed AT&T Copyright statements
* Cinder tests - Volume List
* Cinder tests - Volume Snapshots
* Removing rbac\_roles from config.py
* Cinder tests - Volume QOS
* Glance tests - API version 1
* Rbac tests for compute absolute limits
* Cinder tests - Volume Extend
* Cinder tests - Volume Extensions
* Cinder tests - Volume Availability Zone
* Fix volume test copyrights
* Add try/except block to rbac\_rule\_validation
* Fixes converter not working for certain edge cases
* Fixes outdated CONF setting in test\_networks\_rbac
* Refactor rbac\_base class
* Initial neutron tests
* Glance tests - Image Member
* Improve documentation
* Initial Cinder tests
* Cinder tests - Volume Quotas
* Initial Cinder tests
* Initial Cinder tests
* Initial Cinder tests
* Remove 'MANIFEST.in'
* Switch to oslo\_log
* update homepage with developer documentation page
* Initial glance tests
* Initial functionality framework. Includes: rbac\_util - Utility for switching between roles for tests. rbac\_auth - Determines if a given role is valid for a given api call. rbac\_rule\_validation - Determines if a allowed proper access and denied improper access (403 error) rbac\_role\_converter - Converts policy.json files into a list of api's and the roles that can access them
* Initial Cookiecutter commit
* Added .gitreview
