Explicit admin specific RBAC tests are not required
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Patrole |
Fix Released
|
Undecided
|
Mh Raies |
Bug Description
In RBAC testing, we are using admin specific clients and associated test cases a number of times.
for example -
https:/
But in case of RBAC we need not to write "admin" specific tests explicitly.
Although during execution of test cases it will pass because of switch_role method internals.
But writing and mentioning them as a admin does not mean here anything.
In the rbac base we are writing"credentials = ['primary', 'admin']", which in turn will create 2 tenants -
1. primary tenant
2. admin tenant
In tempest we need above credentials because some tests are admin restricted only.
But in case of RBAC as we are intended to test Policy only and in RBAC we need single tenant (initially admin tenant only) only and for that we can take credential as -
"credentials = ['admin']"
In RBAC initially we are taking tenant as admin, later during action we are switching role to rbac_role WITH IN SAME TENANT. Thus initially created tenant should be admin itself. So considering separate admin tenant and separate primary does not make any significant value rather overhead.
So, we have remove "primary" specific credentials and related things as it will cause confusion.
Changed in patrole: | |
assignee: | nobody → Mh Raies (raiesmh08) |
summary: |
- admin specific client no needed in RBAC tests. + admin specific client not needed in RBAC tests. |
summary: |
- admin specific client not needed in RBAC tests. + admin specific client not needed in RBAC test cases |
description: | updated |
description: | updated |
summary: |
- admin specific client not needed in RBAC test cases + admin specific RBAC tests are not |
description: | updated |
description: | updated |
description: | updated |
summary: |
- admin specific RBAC tests are not + Explicit admin specific RBAC tests are not required |
Changed in patrole: | |
status: | New → Opinion |
Fix proposed to branch: master /review. openstack. org/433741
Review: https:/