Keystone's stable/newton gate is broken [0] [1]. The TL;DR is that our keystone_tempest_plugin is validating federated mappings before updating the protocol [2]. The lack of validation was a bug [3] that was fixed in Ocata, but the fix [4] was never backported.
Since stable/newton is in Phase II, I would consider this a critical fix to unblock the stable/newton gate. I have a backport up for review [5]. [0] https://review.openstack.org/#/c/469514/ [1] http://logs.openstack.org/14/469514/1/check/gate-keystone-dsvm-functional-ubuntu-xenial/a4aac66/console.html [2] https://github.com/openstack/keystone-tempest-plugin/blob/360bbafa385624f1e86841875baabbbf1104e877/keystone_tempest_plugin/tests/api/identity/v3/test_identity_providers.py#L228-L244 [3] https://bugs.launchpad.net/keystone/+bug/1571878 [4] https://review.openstack.org/#/c/362397/ [5] https://review.openstack.org/#/c/478994/
signature.asc
Description: OpenPGP digital signature
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
