identity.admin.v3 package

Submodules

identity.admin.v3.test_application_credentials module

class ApplicationCredentialsV3AdminTest(*args, **kwargs)

Bases: BaseApplicationCredentialsV3Test, BaseIdentityV3AdminTest

Test keystone application credentials

test_create_application_credential_with_roles()

Test idempotent id: 3b3dd48f-3388-406a-a9e6-4d078a552d0e

Test creating keystone application credential with roles

identity.admin.v3.test_credentials module

class CredentialsTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone credentials

test_credentials_create_get_update_delete()

Test idempotent id: 7cd59bf9-bda4-4c72-9467-d21cab278355

Test creating, getting, updating, deleting of credentials

test_credentials_list_delete()

Test idempotent id: 13202c00-0021-42a1-88d4-81b44d448aab

Test listing credentials

identity.admin.v3.test_default_project_id module

class TestDefaultProjectId(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test creating a token without project will default to user’s project

test_default_project_id()

Test idempotent id: d6110661-6a71-49a7-a453-b5e26640ff6d

Creating a token without project will default to user’s project

identity.admin.v3.test_domain_configuration module

class DomainConfigurationTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test domain configuration

test_create_domain_config_and_show_config_groups_and_options()

Test idempotent id: 9e3ff13c-f597-4f01-9377-d6c06c2a1477

Test creating and showing keystone config groups and options

test_create_update_and_delete_domain_config()

Test idempotent id: 7161023e-5dd0-4612-9da0-1bac6ac30b63

Test creating, updating and deleting keystone domain config

test_create_update_and_delete_domain_config_groups_and_opts()

Test idempotent id: c7510fa2-6661-4170-9c6b-4783a80651e9

Test create/update/delete keystone domain config groups and opts

test_show_default_group_config_and_options()

Test idempotent id: 11a02bf0-6f94-4380-b3b0-c8dc18fc0d22

Test showing default keystone group config and options

The API supports only the identity and ldap groups. For the ldap group, a valid value is url or user_tree_dn. For the identity group, a valid value is driver.

identity.admin.v3.test_domains module

class DomainsTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test identity domains

test_create_domain_with_disabled_status()

Test idempotent id: 036df86e-bb5d-42c0-a7c2-66b9db3a6046

Test creating domain with disabled status

test_create_domain_without_description()

Test idempotent id: 2abf8764-309a-4fa9-bc58-201b799817ad

Test creating domain without description

test_create_update_delete_domain()

Test idempotent id: f2f5b44a-82e8-4dad-8084-0661ea3b18cf

Test creating, updating and deleting domain

test_domain_delete_cascades_content()

Test idempotent id: d8d318b7-d1b3-4c37-94c5-3c5ba0b121ea

Test deleting domain will delete its associated contents

test_list_domains()

Test idempotent id: 8cf516ef-2114-48f1-907b-d32726c734d4

Test listing domains

test_list_domains_filter_by_enabled()

Test idempotent id: 3fd19840-65c1-43f8-b48c-51bdd066dff9

Test listing domains filtering by enabled domains

test_list_domains_filter_by_name()

Test idempotent id: c6aee07b-4981-440c-bb0b-eb598f58ffe9

Test listing domains filtering by name

identity.admin.v3.test_domains_negative module

class DomainsNegativeTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Negative tests of identity domains

test_create_domain_with_empty_name()

Test idempotent id: 9018461d-7d24-408d-b3fe-ae37e8cd5c9e

Test creating domain with empty name should fail

Domain name should not be empty

test_create_domain_with_name_length_over_64()

Test idempotent id: 37b1bbf2-d664-4785-9a11-333438586eae

Test creating domain with name over length

Domain name length should not ne greater than 64 characters

test_delete_active_domain()

Test idempotent id: 1f3fbff5-4e44-400d-9ca1-d953f05f609b

Test deleting active domain should fail

test_delete_non_existent_domain()

Test idempotent id: 43781c07-764f-4cf2-a405-953c1916f605

Test attempting to delete a non existent domain should fail

test_domain_create_duplicate()

Test idempotent id: e6f9e4a2-4f36-4be8-bdbc-4e199ae29427

Test creating domain with duplicate name should fail

identity.admin.v3.test_endpoint_groups module

class EndPointGroupsTest(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test endpoint groups

test_create_list_show_check_delete_endpoint_group()

Test idempotent id: 7c69e7a1-f865-402d-a2ea-44493017315a

Test create/list/show/check/delete of endpoint group

test_update_endpoint_group()

Test idempotent id: 51c8fc38-fa84-4e76-b5b6-6fc37770fb26

Test updating endpoint group

identity.admin.v3.test_endpoints module

class EndPointsTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone endpoints

test_create_list_show_delete_endpoint()

Test idempotent id: 0e2446d2-c1fd-461b-a729-b9e73e3e3b37

Test creating, listing, showing and deleting keystone endpoint

test_list_endpoints()

Test idempotent id: c19ecf90-240e-4e23-9966-21cee3f6a618

Test listing keystone endpoints by filters

test_update_endpoint()

Test idempotent id: 37e8f15e-ee7c-4657-a1e7-f6b61e375eff

Test updating keystone endpoint

identity.admin.v3.test_endpoints_negative module

class EndpointsNegativeTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Negative tests of endpoint

test_create_with_enabled_False()

Test idempotent id: ac6c137e-4d3d-448f-8c83-4f13d0942651

Test creating endpoint with invalid enabled value ‘False’

Enabled should be a boolean, not a string like ‘False’

test_create_with_enabled_True()

Test idempotent id: 9c43181e-0627-484a-8c79-923e8a59598b

Test creating endpoint with invalid enabled value ‘True’

Enabled should be a boolean, not a string like ‘True’

test_update_with_enabled_False()

Test idempotent id: 65e41f32-5eb7-498f-a92a-a6ccacf7439a

Test updating endpoint with invalid enabled value ‘False’

Enabled should be a boolean, not a string like ‘False’

test_update_with_enabled_True()

Test idempotent id: faba3587-f066-4757-a48e-b4a3f01803bb

Test updating endpoint with invalid enabled value ‘True’

Enabled should be a boolean, not a string like ‘True’

identity.admin.v3.test_groups module

class GroupsV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone groups

test_group_create_update_get()

Test idempotent id: 2e80343b-6c81-4ac3-88c7-452f3e9d5129

Test creating, updating and getting keystone group

test_group_users_add_list_delete()

Test idempotent id: 1598521a-2f36-4606-8df9-30772bd51339

Test adding/listing/deleting group users

test_list_groups()

Test idempotent id: cc9a57a5-a9ed-4f2d-a29f-4f979a06ec71

Test listing groups

test_list_user_groups()

Test idempotent id: 64573281-d26a-4a52-b899-503cb0f4e4ec

Test listing user groups when the user is in two groups

identity.admin.v3.test_inherits module

class InheritsV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone inherits

test_inherit_assign_check_revoke_roles_on_projects_group()

Test idempotent id: 26021436-d5a4-4256-943c-ded01e0d4b45

Test assign/list/check/revoke inherited role on project group

test_inherit_assign_check_revoke_roles_on_projects_user()

Test idempotent id: 18b70e45-7687-4b72-8277-b8f1a47d7591

Test assign/list/check/revoke inherited role on project user

test_inherit_assign_list_check_revoke_roles_on_domains_group()

Test idempotent id: c7a8dda2-be50-4fb4-9a9c-e830771078b1

Test assign/list/check/revoke inherited role on domain group

test_inherit_assign_list_check_revoke_roles_on_domains_user()

Test idempotent id: 4e6f0366-97c8-423c-b2be-41eae6ac91c8

Test assign/list/check/revoke inherited role on domain user

test_inherit_assign_list_revoke_user_roles_on_domain()

Test idempotent id: 3acf666e-5354-42ac-8e17-8b68893bcd36

Test assign/list/check/revoke inherited role on domain

test_inherit_assign_list_revoke_user_roles_on_project_tree()

Test idempotent id: 9f02ccd9-9b57-46b4-8f77-dd5a736f3a06

Test assign/list/check/revoke inherited role on project tree

identity.admin.v3.test_list_projects module

class BaseListProjectsTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

class ListProjectsStaticTestJSON(*args, **kwargs)

Bases: BaseListProjectsTestJSON

Test listing projects

These tests can be executed in clouds using the pre-provisioned users

test_list_projects()

Test idempotent id: 1d830662-22ad-427c-8c3e-4ec854b0af44

Test listing projects

test_list_projects_with_domains()

Test idempotent id: fab13f3c-f6a6-4b9f-829b-d32fd44fdf10

Test listing projects filtered by domain

test_list_projects_with_name()

Test idempotent id: fa178524-4e6d-4925-907c-7ab9f42c7e26

Test listing projects filtered by name

class ListProjectsTestJSON(*args, **kwargs)

Bases: BaseListProjectsTestJSON

Test listing projects

test_list_projects_with_enabled()

Test idempotent id: 0fe7a334-675a-4509-b00e-1c4b95d5dae8

Test listing the projects with enabled

test_list_projects_with_parent()

Test idempotent id: 6edc66f5-2941-4a17-9526-4073311c1fac

Test listing projects with parent

identity.admin.v3.test_list_users module

class UsersV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test listing keystone users

test_get_user()

Test idempotent id: b4baa3ae-ac00-4b4e-9e27-80deaad7771f

Get a user detail

test_list_user_domains()

Test idempotent id: 08f9aabb-dcfe-41d0-8172-82b5fa0bd73d

List users with domain

test_list_users()

Test idempotent id: b30d4651-a2ea-4666-8551-0c0e49692635

List users

test_list_users_with_name()

Test idempotent id: c285bb37-7325-4c02-bff3-3da5d946d683

List users with name

test_list_users_with_not_enabled()

Test idempotent id: bff8bf2f-9408-4ef5-b63a-753c8c2124eb

List the users with not enabled

identity.admin.v3.test_oauth_consumers module

class OAUTHConsumersV3Test(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

test_create_and_show_consumer()

Test idempotent id: c8307ea6-a86c-47fd-ae7b-5b3b2caca76d

Tests to make sure that a consumer with parameters is made

test_delete_consumer()

Test idempotent id: fdfa1b7f-2a31-4354-b2c7-f6ae20554f93

Tests the delete function.

test_list_consumers()

Test idempotent id: 09ca50de-78f2-4ffb-ac71-f2254036b2b8

Test for listing consumers

test_update_consumer()

Test idempotent id: 080a9b1a-c009-47c0-9979-5305bf72e3dc

Tests the update functionality

identity.admin.v3.test_policies module

class PoliciesTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone policies

test_create_update_delete_policy()

Test idempotent id: e544703a-2f03-4cf2-9b0f-350782fdb0d3

Test to update keystone policy

test_list_policies()

Test idempotent id: 1a0ad286-2d06-4123-ab0d-728893a76201

Test to list keystone policies

identity.admin.v3.test_project_tags module

class IdentityV3ProjectTagsTest(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone project tags

test_list_update_delete_project_tags()

Test idempotent id: 7c123aac-999d-416a-a0fb-84b915ab10de

Test listing, updating and deleting of project tags

identity.admin.v3.test_projects module

class ProjectsTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test identity projects

test_associate_user_to_project()

Test idempotent id: 59398d4a-5dc5-4f86-9a4c-c26cc804d6c6

Test associating a user to a project

test_create_is_domain_project()

Test idempotent id: a7eb9416-6f9b-4dbb-b71b-7f73aaef59d5

Test creating is_domain project

test_project_create_enabled()

Test idempotent id: 1f66dc76-50cc-4741-a200-af984509e480

Test creating a project that is enabled

test_project_create_not_enabled()

Test idempotent id: 78f96a9c-e0e0-4ee6-a3ba-fbf6dfd03207

Test creating a project that is not enabled

test_project_create_with_description()

Test idempotent id: 0ecf465c-0dc4-4532-ab53-91ffeb74d12d

Test creating project with a description

test_project_create_with_domain()

Test idempotent id: 5f50fe07-8166-430b-a882-3b2ee0abe26f

Test creating project with a domain

test_project_create_with_parent()

Test idempotent id: 1854f9c0-70bc-4d11-a08a-1c789d339e3d

Test creating root project without providing a parent_id

test_project_get_equals_list()

Test idempotent id: d1db68b6-aebe-4fa0-b79d-d724d2e21162

Test the result of getting project equals that of listing

test_project_update_desc()

Test idempotent id: f138b715-255e-4a7d-871d-351e1ef2e153

Test updating description attribute of a project

test_project_update_enable()

Test idempotent id: b6b25683-c97f-474d-a595-55d410b68100

Test updating the enabled attribute of a project

test_project_update_name()

Test idempotent id: f608f368-048c-496b-ad63-d286c26dab6b

Test updating name attribute of a project

identity.admin.v3.test_projects_negative module

class ProjectsNegativeStaticTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Negative tests of projects

These tests can be executed in clouds using the pre-provisioned users

test_create_project_by_unauthorized_user()

Test idempotent id: 8fba9de2-3e1f-4e77-812a-60cb68f8df13

Non-admin user should not be authorized to create a project

test_create_project_with_empty_name()

Test idempotent id: 7828db17-95e5-475b-9432-9a51b4aa79a9

Project name should not be empty

test_create_projects_name_length_over_64()

Test idempotent id: 502b6ceb-b0c8-4422-bf53-f08fdb21e2f0

Project name length should not be greater than 64 characters

test_delete_non_existent_project()

Test idempotent id: 7965b581-60c1-43b7-8169-95d4ab7fc6fb

Attempt to delete a non existent project should fail

test_list_projects_by_unauthorized_user()

Test idempotent id: 24c49279-45dd-4155-887a-cb738c2385aa

Non-admin user should not be able to list projects

test_project_create_duplicate()

Test idempotent id: 874c3e84-d174-4348-a16b-8c01f599561b

Project names should be unique

class ProjectsNegativeTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Negative tests of projects

test_project_delete_by_unauthorized_user()

Test idempotent id: 8d68c012-89e0-4394-8d6b-ccd7196def97

Non-admin user should not be able to delete a project

identity.admin.v3.test_regions module

class RegionsTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test regions

test_create_region_with_specific_id()

Test idempotent id: 2c12c5b5-efcf-4aa5-90c5-bff1ab0cdbe2

Test creating region with specific id

test_create_update_get_delete_region()

Test idempotent id: 56186092-82e4-43f2-b954-91013218ba42

Test creating, updating, getting and updating region

test_list_regions()

Test idempotent id: d180bf99-544a-445c-ad0d-0c0d27663796

Test getting a list of regions

test_list_regions_filter_by_parent_region_id()

Test idempotent id: 2d1057cb-bbde-413a-acdf-e2d265284542

Test listing regions filtered by parent region id

identity.admin.v3.test_roles module

class RolesV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test roles

test_assignments_for_domain_roles()

Test idempotent id: 3859df7e-5b78-4e4d-b10e-214c8953842a

Test assignments for domain roles

test_assignments_for_implied_roles_create_delete()

Test idempotent id: c8828027-df48-4021-95df-b65b92c7429e

Test assignments when implied roles are created and deleted

test_domain_roles_create_delete()

Test idempotent id: d92a41d2-5501-497a-84bb-6e294330e8f8

Test creating, listing and deleting domain roles

test_grant_list_revoke_role_to_group_on_domain()

Test idempotent id: 4bf8a70b-e785-413a-ad53-9f91ce02faa7

Test granting, listing, revoking role to group on domain

test_grant_list_revoke_role_to_group_on_project()

Test idempotent id: cbf11737-1904-4690-9613-97bcbb3df1c4

Test granting, listing, revoking role to group on project

test_grant_list_revoke_role_to_group_on_system()

Test idempotent id: c888fe4f-8018-48db-b959-542225c1b4b6

test_grant_list_revoke_role_to_user_on_domain()

Test idempotent id: 6c9a2940-3625-43a3-ac02-5dcec62ef3bd

Test granting, listing, revoking role to user on domain

test_grant_list_revoke_role_to_user_on_project()

Test idempotent id: c6b80012-fe4a-498b-9ce8-eb391c05169f

Test granting, listing, revoking role to user on project

test_grant_list_revoke_role_to_user_on_system()

Test idempotent id: e5a81737-d294-424d-8189-8664858aae4c

test_implied_domain_roles()

Test idempotent id: eb1e1c24-1bc4-4d47-9748-e127a1852c82

Test creating implied roles when roles are in domains

test_implied_roles_create_check_show_delete()

Test idempotent id: c90c316c-d706-4728-bcba-eb1912081b69

Test creating, checking, showing and deleting implied roles

test_list_all_implied_roles()

Test idempotent id: 3748c316-c18f-4b08-997b-c60567bc6235

Test listing all implied roles

test_list_roles()

Test idempotent id: f5654bcc-08c4-4f71-88fe-05d64e06de94

Test listing roles

test_role_create_update_show_list()

Test idempotent id: 18afc6c0-46cf-4911-824e-9989cc056c3a

Test creating, updating, showing and listing a role

test_roles_hierarchy()

Test idempotent id: dc6f5959-b74d-4e30-a9e5-a8255494ff00

Test creating implied role and listing role inferences rules

identity.admin.v3.test_services module

class ServicesTestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone services

test_create_service_without_description()

Test idempotent id: d1dcb1a1-2b6b-4da8-bbb8-5532ef6e8269

Create a keystone service only with name and type

test_create_update_get_service()

Test idempotent id: 5193aad5-bcb7-411d-85b0-b3b61b96ef06

Test creating, updating and getting of keystone service

test_list_services()

Test idempotent id: e55908e8-360e-439e-8719-c3230a3e179e

Create, List, Verify and Delete Keystone Services

identity.admin.v3.test_tokens module

class TokensV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test tokens

test_get_available_domain_scopes()

Test idempotent id: ec5ecb05-af64-4c04-ac86-4d9f6f12f185

Test getting available domain scopes

To verify that listing domain scopes for a user works if the user has a domain role or belongs to a group that has a domain role. For this test, admin client is used to add roles to alt user, which performs API calls, to avoid 401 Unauthorized errors.

test_get_available_project_scopes()

Test idempotent id: 08ed85ce-2ba8-4864-b442-bcc61f16ae89

Test getting available project scopes

test_rescope_token()

Test idempotent id: 565fa210-1da1-4563-999b-f7b5b67cf112

Rescope a token.

An unscoped token can be requested, that token can be used to request a scoped token. The scoped token can be revoked, and the original token used to get a token in a different project.

identity.admin.v3.test_trusts module

class TrustsV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone trusts

test_get_trusts_all()

Test idempotent id: 4773ebd5-ecbf-4255-b8d8-b63e6f72b65d

Test getting all keystone trusts

test_get_trusts_query()

Test idempotent id: 6268b345-87ca-47c0-9ce3-37792b43403a

Test getting keystone trusts

test_trust_expire()

Test idempotent id: 0ed14b66-cefd-4b5c-a964-65759453e292

Test expire attribute of keystone trust

To check we can create, get and delete a trust with an expiry specified

test_trust_expire_invalid()

Test idempotent id: 3e48f95d-e660-4fa9-85e0-5a3d85594384

Test invalid expire attribute of a keystone trust

To check an invalid expiry time is rejected with the correct error

test_trust_impersonate()

Test idempotent id: 5a0a91a4-baef-4a14-baba-59bf4d7fcace

Test keystone trust with impersonation enabled

To check we can create, get and delete a trust. Updates are not supported for trusts

test_trust_noimpersonate()

Test idempotent id: ed2a8779-a7ac-49dc-afd7-30f32f936ed2

Test keystone trust with impersonation disabled

To check we can create, get and delete a trust with impersonation=False

identity.admin.v3.test_users module

class UsersV3TestJSON(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Test keystone users

test_get_user()

Test idempotent id: c10dcd90-461d-4b16-8e23-4eb836c00644

Test getting a user detail

test_list_user_projects()

Test idempotent id: a831e70c-e35b-430b-92ed-81ebbc5437b8

Test listing the projects that a user has access upon

test_password_history_not_enforced_in_admin_reset()

Test idempotent id: 568cd46c-ee6c-4ab4-a33a-d3791931979e

Test setting same password when password history is not enforced

test_update_user_password()

Test idempotent id: 2d223a0e-e457-4a70-9fb1-febe027a0ff9

Test updating user password

test_user_update()

Test idempotent id: b537d090-afb9-4519-b95d-270b0708e87e

Test case to check if updating of user attributes is successful

identity.admin.v3.test_users_negative module

class UsersNegativeTest(*args, **kwargs)

Bases: BaseIdentityV3AdminTest

Negative tests of keystone users

test_authentication_for_disabled_user()

Test idempotent id: b3c9fccc-4134-46f5-b600-1da6fb0a3b1f

Attempt to authenticate for disabled user should fail

test_create_user_for_non_existent_domain()

Test idempotent id: e75f006c-89cc-477b-874d-588e4eab4b17

Attempt to create a user in a non-existent domain should fail

Module contents