This patch fixes a bug with the barbican_tempest option group that was
breaking tempest init by returning the wrong object.
Change-Id: Ia62c43fc67114c89be5f481dab2cb11df6ee82b0
Tempest and a few other plugins such as manila-tempest-plugin registers
the option to enable scope enforcement tests in the [enforce_scope]
option. This renames the option so that this plugin follows that
standard.
Change-Id: Ibd6962947c64f04ff1948a19c4afe9f26d0b47bb
This patch adds basic RBAC tests for the Transport Keys API for
the reader, admin, and member personas with project scope.
Some tests will need additional work because they require transport
keys to be present, which can only be done by a system-scope admin
Change-Id: I269618fd760cffd992ca450bb9f13b9788b50b54
This patch adds basic RBAC test for the Secret Stores API for
the reader, member and admin personas with project scope.
The tests are skipped by a config option, as they require
the multiple-backends feature to be enabled in barbican.
The devstack instace we're using for gate tests does not have
this enabled, so we default to False for now.
Change-Id: Ibca9d44fb3d0f4fd9945a7e6c636e0fbf6beb42e
Without this patch, if the barbican tempest plugin is installed in an
environment running with `[glance]/verify_glance_signatures] set to
false in nova.conf, which is the default value, the test will fail.
Enabling glance signature verification unconditionally in order to
support this test is not realistic, as it then prevents users from
booting from unsigned images which may not always be desired. This patch
adds a configuration option to allow for disabling the
`test_signed_image_upload_boot_failure` test, so that we can still run
the majority of the plugin tests for a standard environment with default
nova configuration. The new option defaults to `True`, meaning assume
that nova's configuration has been overrridden to enforce image
verification, which allows the barbican CI to run as normal with no
configuration changes, but it allows operators to explicitly disable the
test as needed.
Change-Id: Ibb5c06ce2773e0ee13bda97717e8e18e77e0be7c
Adds ephemeral-disk-encryption group to Barbican Tempest configuration
options.
Enables ephemeral disk encryption for Barbican Tempest tests by updating
pre_test_hook.sh, which is run at the start of relevant gate tests.
Adds an ephemeral disk encryption scenario test to verify the
functionality of encrypted ephemeral storage. The test creates an image,
boots an instance from the created image, and writes to a new file in
the instance. Improper calls to encrypt the LVM ephemeral disk that is
being written to will be caught with this test.
Change-Id: I5f194f3c2a91263d4d34204db5cd5845197169bb
This change adds a QuotaClient for testing the Barbican quota API.
It adds a quota test suite and integrates the QuotaClient with the
plugin testing infrastructure.
Change-Id: I3249fb879f519da63129e0ec5117377a21094974
Depends-On: I813648476a3a7b0b0e416a524d4629dffe36c92e
Implements: bp tempest-plugin
This change adds an OrderClient for testing the Barbican order API.
It adds an order test suite and integrates the OrderClient with the
plugin testing infrastructure.
Change-Id: I813648476a3a7b0b0e416a524d4629dffe36c92e
Depends-On: I844d1a97ffb82aa67a4ef3b89bd82c90aa221cbb
Implements: bp tempest-plugin
This change adds a ConsumerClient for testing the Barbican
consumer API. It adds a consumer test suite and integrates
the ConsumerClient with the plugin testing infrastructure.
Change-Id: I844d1a97ffb82aa67a4ef3b89bd82c90aa221cbb
Depends-On: I930455c6ae1e1127706480f24c0ea46f5cc81e85
Implements: bp tempest-plugin
This change adds a ContainerClient for testing the
Barbican container API. It adds a container test suite
and integrates the ContainerClient with the plugin
testing infrastructure.
Change-Id: I930455c6ae1e1127706480f24c0ea46f5cc81e85
Depends-On: I27f15375c46faa48cd56c8d52ecfd585fb325239
Implements: bp tempest-plugin
Add first API test and register the client with
the new tempest.lib client interface.
Change-Id: I27f15375c46faa48cd56c8d52ecfd585fb325239
Implements: bp tempest-plugin
Douglas Mendizábal