This commit adds some basic protection tests so that we can start
testing the secure RBAC changes proposed to glance.

Depends-On: If2001ef652e21f54048db0fc67893337681a2b6f
Change-Id: I4125fe0bfd8c039dbd4f60099b85e0766056135b

There are still some images which are not cleaned up after
creation.

Cleaning up the same.

Closes-Bug: #1938939
Change-Id: Id8da72b6725887c5c75e60e6f6e5df80f0fbf6b9

This commit adds some basic protection tests so that we can start
testing the secure RBAC changes proposed to glance.

Depends-On: I7bc678b1f61b204574f3a59b6c686fd771af5f54
Change-Id: I718cb014547d9c182506d123d60a1660eae85fa2

This makes the RbacBaseTests class inherit from the tempest base class
so that the image tests can inherit from it in a straight line without
all the mixing in.

Change-Id: I61de3313765635be8eab2ae869c0e241e1ad6ed0

This option was superceded by a tempest option for turning on enforce
scope in tempest [0]. As a result, we stopped using the option we
defined in glance-tempest-plugin [1]. This commit removes the
enforce_scope option in favor of the tempest-specific option, since
nothing is using it anymore.

[0] https://review.opendev.org/c/openstack/devstack/+/778945
[1] https://review.opendev.org/c/openstack/glance-tempest-plugin/+/807366

Change-Id: Ie1f1a25ab6d061c6a4f055684aa9084999349674

A set of changes moved the glance specific bits to use the tempest
configuration option for detecting if the secure RBAC tests should be
run [0][1]. But, we didn't update the tests themselves to use the new option,
causing the tests to be skipped without our knowledge.

This commit updates the tests to use the new option and gets them
running again.

[0] https://review.opendev.org/c/openstack/glance/+/778952
[1] https://review.opendev.org/c/openstack/devstack/+/778945

Change-Id: I01e0db7f0d79f072211ee63ea48a6558d008d285

Setuptools v54.1.0 introduces a warning that the use of dash-separated
options in 'setup.cfg' will not be supported in a future version [1].
Get ahead of the issue by replacing the dashes with underscores. Without
this, we see 'UserWarning' messages like the following on new enough
versions of setuptools:

  UserWarning: Usage of dash-separated 'description-file' will not be
  supported in future versions. Please use the underscore name
  'description_file' instead

[1] https://github.com/pypa/setuptools/commit/a2e9ae4cb

Change-Id: If591a633ecc4aa58b5824e0cf79c0f168ed0dd8d

One of the advantages of protection tests is to make sure glance is
doing the right thing with oslo.policy. This commit increase the
oslo.policy debug logging so we can more easily see what's going on in
logs.

Change-Id: I9515dff85f8d00c657ca7053b21202d530098ccf

This commit builds on
https://review.opendev.org/c/openstack/glance-tempest-plugin/+/773568 by
adding explicit tempest protection tests for sharing images between
projects, image deactivation, and reactivation.

Depends-On: https://review.opendev.org/c/openstack/tempest/+/778753

Change-Id: Ia57440962140fe9f8d47c29b1b49dfbe9f846149

This commit lays down some basic protection tests so that we can start
testing the secure RBAC changes proposed to glance. It also adds a
.zuul.yaml so that we can run the tests as check and gate jobs.

Change-Id: I35d6b546da260f3f6b5c427a17ee3509cdc41277

This must have been left over copy/pasta from when the tempest plumbing
was laid down during the community goal.

Change-Id: Id4e788395483187e15f000b11b1ad612b5c5093e

We need to specify doc requirements in doc/requirements.txt
to avoid problems with the pip resolver [1] for the release team [2][3].
Removed specific doc requirements from test-requirements.txt.

The problem here is that this repos haven't doc/requirements.txt file
and by default in this case zuul will use the test-requirements.txt file
to pull requirements [4].

This requirements file contains extra requirements like flake8 that
collided with those allowed in our job environment and so the new pip
resolver fails to install these requirements and the job exits in error.

This project meet the conditions leading to the bug.

[1] http://lists.openstack.org/pipermail/release-job-failures/2021-January/001500.html
[2] http://lists.openstack.org/pipermail/openstack-discuss/2021-January/019611.html
[3] http://lists.openstack.org/pipermail/openstack-discuss/2021-January/019612.html
[4] https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/ensure-sphinx/tasks/main.yaml#L36

Change-Id: If9...