UUID vs PKI docs

Change-Id: I698516e212e3a1f470a8131aca207e96925b3a40
refactor test_catalog

- Tests for "missing" attributes are actually testing with null values,
  not missing keys.
- Not being able to explicitly provide alternative URLs resulting in
  hacky workarounds that can be avoiding by simply exposing kwargs with
  reasonable defaults
- Several tests redundantly asserted the expected response status, which
  is already handled by the test framework

Change-Id: Icadb4927bcf03ca7e79fef1507e419a4932f32a9
Related-Bug: 1250765
Easy testing with alternate keystoneclient

It wasn't easy to test with an alternative keystoneclient, just
the checked out ones.

This change makes it easy to test with an alternative local
keystoneclient, just set KSCTEST_PATH to the path:

 KSCTEST_PATH=/opt/stack/python-keystoneclient tox -e py27 KcOptTestCase

Change-Id: I0af834d2861220b72b93265a1ddbfd8bc3d13d49
Allow caching to be disabled and tests still pass

Skip cache specific tests if caching is disabled.  Cache should only
be disabled to eliminate caching as an issue with tests, but in all
cases tests should pass in either configuration.  The default is
to use caching for all tests.

The caching options can be changed for testing purposes in the
keystone/tests/test_overrides.conf file.  The specific options
and sections that support caching can be located in the
configuration document in the section covering the caching layer.

Change-Id: I7848128aeaf3f578b89ab0b9201c45e00efecf11
Add index to cover revoked token list

The individual expires and valid indexes do not fully cover the most
common query, which is the one that lists revoked tokens.

Change-Id: I112332b49dac148e5231b76f3399fe60174a702d
Partial-Bug: #1253755
Formalize deprecation of token_api.list_tokens

The token_api.list_tokens method should really only be used internally
to keystone.  This has been the case (as per the docstring) since the
Havana development cycle.  This patchset formalizes the deprecation and
slates the public access to token_api.list_tokens to be removed once
Icehouse ships.

bp: deprecated-as-of-icehouse
Change-Id: I30a066d3775e67fd4a84f07dc351fcfd62751045
Don't run non-tests

Some functions in keystone.tests.core were running that were not
tests because the name contained "test".

Functions that are not tests should not be run as tests, so these
functions were renamed.

Change-Id: Icb0f0186b2b20e7b6e5a42e068fde2b89e771741
Merge "Easy testing with alternate keystoneclient"
Sync rpc fix from oslo-incubator

Sync the following fixes from oslo-incubator:

ef406a2 Create a shared queue for QPID topic consumers
e227c0e Properly reconnect subscribing clients when QPID broker restarts

Closes-bug: #1251757
Closes-bug: #1257293

Change-Id: I45257c62168163d2d4ceda994c94ff2d16a27300
Remove deprecated code

Essex and keystoneclient 0.1.1 have deprecated and is no
longer supported by the Openstack project so remove
the keystoneclient tests for them.

Change-Id: Ia083ecbfa8e488fd33eb3e8c47fc532196de7ca8
Signed-off-by: Chuck Short <chuck.short@canonical.com>
Merge "Add index to cover revoked token list"
Remove roles from OS-TRUST list responses

According to the docs, the list responses should not contain
the roles, only the detailed response when you get a trust
explicitly by ID.  So remove the roles and modify the tests
appropriately.

Note it was also observed that expires_at is present in all
GET resonses, but not in the docs, but this has been agreed
as a docs error so will be addressed via a docs patch.

Change-Id: I5387021a53f3284add9e5e71e9e005c4dd31b76c
Closes-Bug: #1245590
Merge "Allow caching to be disabled and tests still pass"
Narrow columns used in list_revoked_tokens sql

Currently the SQL backend lists revoked tokens by selecting all of the
columns, including the massive "extra" column. This places a significant
burden on the client library and wastes resources. We only need the
id/expired columns to satisfy the API call.

In tests this query was several orders of magnitude faster with just two
thousand un-expired revoked tokens.

Change-Id: I04d62b98d5d760a3fbc3c8db61530f7ebccb0a48
Closes-Bug: #1253755
Merge "Sync rpc fix from oslo-incubator"
Merge "Narrow columns used in list_revoked_tokens sql"
Merge "refactor test_catalog"
replace "global" roles var names with "all" roles

I found this really confusing during in a code review.

Change-Id: I48695450a3271b561838853638024c5c8c00a4f3
Cleanup duplication in test_backend

There was some code duplicated in test_backend so this removes
the duplication by providing a function.

Change-Id: I6635f98932812fe2adae04feed9c07f3aa81eb5d
Merge "Formalize deprecation of token_api.list_tokens"