This patch fixes a zuul syntax error due to a deprecated definition that
was still in use in our configuration.

It also makes the grenade job non-voting as it is currently failing.  A
follow up patch will fix grenade and re-enable voting.

Change-Id: I271a3d50dba5f1c7c58c01838fa68b4c8adbd72c
(cherry picked from commit d8ffdf9)

Change-Id: I6a855a3d74034a46a125d03475f5853d25e2385e

Update the URL to the upper-constraints file to point to the redirect
rule on releases.openstack.org so that anyone working on this branch
will switch to the correct upper-constraints list automatically when
the requirements repository branches.

Until the requirements repository has as stable/zed branch, tests will
continue to use the upper-constraints list on master.

Change-Id: I386a3ae6ad057222bc82116f756ebf8381449863

This makes the resource_id unique together with
service and resource_type (in addition to secret_id).
Additionaly the auto-generated alembic migration also
adds the missing foreign key for project_id.

Change-Id: I4b266782638a4f79357df2b1fe26ea3427479abf
(cherry picked from commit dd94fa2)

This patch fixes a security vunlerability where the contents of a
request query string were mistakenly being used in the RBAC policy
engine.

(cherry picked from commit 6112c30)

Change-Id: I5797988e4c63c75fccf85277c52815d9bf684cff

Story: #2010435
Task: #46851
Depends-On: https://review.opendev.org/c/openstack/requirements/+/865276
Change-Id: I4896f1508e34785864c260e64484ae0138100ef4
(cherry picked from commit 455057c)

After migrating from cryptography===36.0.2 to 38.0.2, the function
generating a not signed CSR fails during the serialization process.

This fix returns a pre-generated CSR from cryptography===36.0.2

Change-Id: Ib538184bf224fd76a892509752fdb2000c205f38
(cherry picked from commit 564c1e5)

…e/zed

Unfortunately, stable/zed branch of TripleO will be unmaintained. Let's
remove the TripleO job from this branch now before CI is broken.

Change-Id: I13c88c3bfdea35205621c3b792164584965d60fe

Change-Id: Ib09b12f678070f0bf257f27b50b13ba41b3dc65f

Use zed-last tagged version of barbican-tempest-plugin.
Moreover, a barbican-tempest-plugin patch removed zed version of some
jobs [1]. This patch adds their definitions to barbican in the current
branch.

Jobs barbican-tempest-plugin-simple-crypto-secure-rbac and
barbican-tempest-plugin-simple-crypto-secure-rbac are set as non-voting
to unblock the gate. As soon as they are fixed we can set them back as
voting.

This patsh also includes (Icba7968657ac476861a4fe4cbffd05a728ca54b0):
Fix functional tests

This adds find to the allow list in tox.

(cherry picked from commit 64eac24)
(cherry picked from commit b38b213)

Moreover, barbican-tox-functional needs another fix, because the upper
constraints are not used for installing the barbican package itself,
only for the installation for the dependencies. This patch adds
requirements.txt to deps, so that all direct dependencies will be
pre-installed with the correct, constrained version.

[1] https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/930820

Change-Id: I05d768b7eaec6a1048ed676bbbaef6fa5c42e54d