5117 Commits

Author SHA1 Message Date
Jenkins
cfae7533a3 Merge "Add sign-the-data signature verification" 2016-02-29 18:20:44 +00:00
Jenkins
0b5171384b Merge "Updated from global requirements" 2016-02-29 16:11:25 +00:00
Jenkins
eff96cb573 Merge "Make sure the generated glance-api.conf.sample is always the same" 2016-02-29 16:11:16 +00:00
Jenkins
68ae165929 Merge "Add unit test for default number of workers" 2016-02-29 16:11:08 +00:00
Jenkins
971fd94534 Merge "Do not use constraints for venv" 2016-02-29 14:33:21 +00:00
OpenStack Proposal Bot
161ac5df88 Updated from global requirements
Change-Id: I3a8fb9f5492fc0b5ef5cf1906938a8f320f1f339
2016-02-28 22:20:06 +00:00
Jenkins
78280d8654 Merge "Remove py33 from tox envlist" 2016-02-28 22:05:08 +00:00
Jenkins
c3842914b3 Merge "Fix BaseException.message deprecation warnings" 2016-02-28 22:00:22 +00:00
Andreas Jaeger
4a51e384c9 Remove unused pngmath sphinx extension
The extension is not used, remove it.

Change-Id: I3ea4b529025c8ac3c4092f3720124647861e6668
2016-02-28 20:36:08 +01:00
Andreas Jaeger
162ed97f80 Do not use constraints for venv
The venv environment is used by infra scripts to build tarballs and
documents - and used by both check and post jobs. In post jobs, we
currently do not support constraints, so add the non-constraints install
command here so that nova-docs (publishing of documents to
docs.openstack.org) and the tarball jobs work again.

Change-Id: I7116134ca0963de001223ba905619947fcbda07a
2016-02-28 19:12:38 +01:00
ChangBo Guo(gcb)
82ea7ab0d0 Fix BaseException.message deprecation warnings
message attribute in Exception has been deprecated since python 2.6,
and was removed in Python 3. Use encodeutils.exception_to_unicode to
convert an exception as we did in other places.

Change-Id: Ie066da8f62ba2367814e030760f5e99c7b3127ca
2016-02-28 00:10:29 +08:00
ChangBo Guo(gcb)
335b050aac Remove py33 from tox envlist
Current infra team don't run python3.3 jobs, so
need remove py33 support.

Change-Id: I736b6a677645c72bc5194b49d9951310568ce375
2016-02-27 23:42:40 +08:00
Jenkins
35e3211a1d Merge "Move bandit into pep8" 2016-02-26 20:09:49 +00:00
Jenkins
bad6ec0fe9 Merge "Added support new v2 API image filters" 2016-02-26 18:20:26 +00:00
Jenkins
80d034bd58 Merge "Updated from global requirements" 2016-02-26 07:41:27 +00:00
Andreas Jaeger
e09c00d44f Move bandit into pep8
Run security linter bandit as part of pep8. Pep8 is the usual linter
target and thus let's use it there instead of starting another node for
this short-running job.

Move bandit requirement to test-requirements.

Disable temporarily some tests in bandit.yaml since they advocate using
defusedxml which is not in global-requirements.txt and thus cannot be
used inside bandit (bug#1550161).

Change-Id: Ie3c9f4ee6e061ea090fa882f4f029f2761706951
2016-02-26 08:12:45 +01:00
Jenkins
6c64bc1b6a Merge "Support importing OVA/OVF package to Glance" 2016-02-26 06:07:54 +00:00
OpenStack Proposal Bot
36eea83593 Updated from global requirements
Change-Id: I28d7b1fc1647eb01e03fe6b592503eb17b6e3f9d
2016-02-26 01:47:18 +00:00
Jenkins
7470d5fc1e Merge "remove redundant "#!/usr/bin/env python" header" 2016-02-26 01:12:03 +00:00
Jenkins
5be9a71ec4 Merge "clean up auto-generated docs for configuration options" 2016-02-25 13:14:33 +00:00
Kent Wang
b00048742e Support importing OVA/OVF package to Glance
Supports import of OVA/OVF package to Glance by adding a new task to
the existing Glance import workflow. Automatically extracts single disk
image from OVA tarball and saves it to the Glance image store. It also
parses the included OVF file for interested metadata. Extracted
metadata is included as uploaded image's properties.

To kick off this flow, specify 'ova' as 'container_format' in the
task-create request. Specify interested metadata in the
'ovf-metadata.json' conf file, generally located at /etc/glance. Any
other additional metadata found in the OVF file will be ignored.

Currently this is an admin only feature and only supports upload of
single disk images. Also currently we will only be supporting extracting
properties from CIM_ProcessorAllocationSettingData.

Co-Authored-By: Jakub Jasek <jakubx.jasek@intel.com>
Co-Authored-By: Deepti Ramakrishna <deepti.ramakrishna@intel.com>
Change-Id: I4c9c9566895c2426f26d2750c8e2a23b39468fb1
Implements: blueprint ovf-lite
2016-02-24 14:35:19 -08:00
Jenkins
978ecfbe78 Merge "Always use constraints" 2016-02-24 18:13:54 +00:00
Jenkins
4fc820f250 Merge "Encourage usage of identity API v3" 2016-02-24 16:50:33 +00:00
Jenkins
1fb2222a4f Merge "Updated from global requirements" 2016-02-24 16:50:08 +00:00
Andreas Jaeger
00a01d012c Always use constraints
This flips the tox.ini to always use constraints installation for all
targets. It drops the extra -constraints targets in the process. This
makes it so there is no developer change required to operate in our new
world order.

Note that coverage and release-notes jobs cannot use constraints yet to
limitations of the tools we use. So, they continue to use the normal
non-constraint install.

Change-Id: I218f16c585b7b8a9ea73c6cf1c5b0aef2dcde015
Depends-On: Ia08c15914d9dbfc3f5dc04ca69a7be26efb6fe64
2016-02-24 15:15:25 +01:00
Jenkins
6ae4824085 Merge "Python 3: fix a few simple "str vs bytes" issues." 2016-02-24 14:06:11 +00:00
Jenkins
ac4937bd8a Merge "Python 3: fix glance.tests.functional.db.simple" 2016-02-24 14:06:01 +00:00
OpenStack Proposal Bot
167fdde249 Updated from global requirements
Change-Id: Iffba4bb262a6d90c5b7aadab8e92cb34fa930c08
2016-02-24 08:31:31 +00:00
Cyril Roelandt
dc9aefada3 Include registry_client_* options in glance-scrubber.conf
These options are useful but were not included in the sample
configuration file generated by "tox -egenconfig".

Change-Id: I257b5cefd259c629445a09dc0373d1ad6bda24f1
Closes-Bug: #1548825
2016-02-24 00:25:47 +01:00
Jenkins
b85a44f1b3 Merge "Reuse encodeutils.to_utf8()" 2016-02-23 22:56:15 +00:00
Cyril Roelandt
07eac10c6a Python 3: fix a few simple "str vs bytes" issues.
The HTTP body must be bytes.

This commit fixes:
  glance.tests.functional.test_client_exceptions
  glance.tests.functional.v1.test_multiprocessing

Change-Id: Ifbe98e68000625b0f5c721f815e40bd1244c1200
2016-02-23 16:40:56 +01:00
Jenkins
f4d202b8b5 Merge "Fix 500 status code when we add in "depend_on" yourself" 2016-02-23 14:30:35 +00:00
Qiaowei Ren
464e175de2 remove redundant "#!/usr/bin/env python" header
There are some general python code files which have the
"#!/usr/bin/env python" header. This patch removes it.

Change-Id: Ie874a8df9e0b7027247ee961fd09f6fb098cf0a4
2016-02-23 22:30:05 +08:00
Henrique Truta
e9130a1af7 Encourage usage of identity API v3
Identity API v2.0 will be marked as deprecated in Mitaka.
Keystone team is then moving towards making all components use
API v3 by default.

Change-Id: I3c3007028381dcab92075efd390d16aed3c36bcd
2016-02-22 11:40:00 -03:00
Cyril Roelandt
7e161ada97 Python 3: fix glance.tests.functional.db.simple
We need to avoid comparing None to another type, as the comparison will be
invalid on Python 3.

Change-Id: I2beee405c17e2c6cdd6198b9d089e806a9c56c70
2016-02-22 15:01:10 +01:00
Victor Stinner
ee04a0a0ce Reuse encodeutils.to_utf8()
oslo.utils 3.5 got a new to_utf8() function which can be used instead
of the common pattern:

    if isinstance(text, six.text_type):
        text = text.encode('utf-8')

Update oslo.utils requirements to get at least oslo.utils 3.5.

Change-Id: I4c708fa3c6bd18fdd8355fd63b11e43fea3ab6a3
2016-02-22 13:27:20 +01:00
Victor Stinner
14ad689e51 Fix OpenSSL DeprecationWarning on Python 3
validate_key_cert(): encode explicitly data to UTF-8 to avoid a
DeprecationWarning of OpenSSL.

crypto.sign() calls text_to_bytes_and_warn() to encode Unicode to
UTF-8 but it raises a DeprecationWarning. Encode in
validate_key_cert() to avoid the warning.

Example of warning:

   glance/common/utils.py:427: DeprecationWarning: str for data
                               is no longer accepted, use bytes
     crypto.verify(cert, out, data, digest)

Change-Id: Iae63dd6f5a208a8835e025618b989153056bc604
2016-02-22 11:04:34 +01:00
Darja Shakhray
6007061943 Added support new v2 API image filters
Added support filtering images based on lists using the 'in' operator.
Filters:
*id
*name
*container_format
*disk_format
*status

DocImpact
ApiImpact
Implements bp: in-filtering-operator

Change-Id: I9cac81b9d5cbec979e88cf2dd0e3b710ed45630c
2016-02-20 09:41:19 +00:00
Jenkins
89a66916f8 Merge "Fix typos in configuring.rst" 2016-02-19 15:19:34 +00:00
Jenkins
99fc89efdb Merge "Replace assertRaisesRegexp with assertRaisesRegex" 2016-02-19 15:17:58 +00:00
Jenkins
7e27d6ef05 Merge "Stop gridfs driver support" 2016-02-19 04:25:04 +00:00
Brianna Poulos
95ca43f30f Add sign-the-data signature verification
Per discussion on the mailing list [1] and the related nova
specification [2] it has been decided that the signature should be of
the image data directly, rather than of the glance MD5 "checksum" hash
of the image data.

This patch adds the ability to verify a signature of the image data
directly, using a verifier that is passed to the glance_store backend.
It is dependent on a glance_store patch which updates this verifier
object with the image data as it is creating the checksum (see
Depends-On below).

[1] http://bit.ly/1Q0M0C7
[2] https://review.openstack.org/#/c/188874/19

Depends-On: I43799e6a4a6643a23769af8d839a2beb4e0ff9bf
Partial-Bug: #1516031
Change-Id: If0c06b3094cecef6c8ca8a65753038b6b5a9d8fe
2016-02-18 14:20:16 -08:00
Jenkins
fd5b48e093 Merge "Updated from global requirements" 2016-02-18 14:21:20 +00:00
wangxiyuan
0d89611c1e Stop gridfs driver support
Gridfs was marked as deprecated some releases go and now it has
been removed from Glance_store. So Glance should not support this
driver anymore.

Change-Id: Ia81e109c3919ad8ee8336f9051fa7920780f5bbd
2016-02-18 11:17:47 +00:00
Jenkins
f7ac278b38 Merge "Set self and schema to readOnly" 2016-02-18 09:13:06 +00:00
OpenStack Proposal Bot
bd77b6f52c Updated from global requirements
Change-Id: Iea86d8c29bc5fe13f4c6e7c21ee5ab339b39e279
2016-02-18 06:52:18 +00:00
Jenkins
cc73fefbc8 Merge "Reuse jsonutils.dump_as_bytes()" 2016-02-18 06:48:14 +00:00
wangxiyuan
fd4158488d Set self and schema to readOnly
The "self" and "schema" setions in metadata-namespace,
image-member, task and metadata-objects'schemas should
be readOnly.

Change-Id: I10e919a2e33505468cbd3e0ae49d736917c64884
2016-02-17 22:21:35 +08:00
Jenkins
6a9ae42287 Merge "Include version number into glare factory path in paste" 2016-02-17 13:14:15 +00:00
Cyril Roelandt
24ae73b157 Make sure the generated glance-api.conf.sample is always the same
Currently, it depends on the machine on which it has been generated, since the
result of processutils.get_worker_count() is written in this file when running
"tox -egenconfig". This prevents us from having reproducible builds.

Change-Id: If34ac601dab65c567138a9c421b681ebebdeb7e2
Closes-Bug: #1542855
2016-02-17 11:53:39 +00:00