In wallaby, we move certificate generation from puppet-certmonger
to linux-system-roles, and lost the ability to specify the certmonger
cert request ID. So the tests that check for the existence of certs
using this ID now fail. We need to look for certs using principal
name instead.
Change-Id: I23df0b30baf67341cec87017ac00a049ad313064
As tempest.scenario.manager was announced stable interface in Tempest
27.0.0[1] it can be now reused in plugins.
Removed methods:
* create_volume
* create_volume_type
* nova_volume_attach
* nove_volume_detach
* get_timestamp
* create_timestamp
* _default_security_group
* _create_security_group
* _create_loginable_secgroup_rule
* _create_security_group_rule
Etherpad concerning this effort:
https://etherpad.opendev.org/p/tempest-scenario-manager-cleanup
[1] https://docs.openstack.org/releasenotes/tempest/v27.0.0.html#release-notes-27-0-0
Change-Id: I3e63c5754d1ead738405edfd823eea3bf2300dde
Starting Tempest 25.0.0 release, CONF.scenario.img_file needs
a full path for the image. CONF.scenario.img_dir was deprecated
and is removed in 27.0.0 release [2].
This patch does analogically the same change as was done in Tempest,
in order to give users of the plugin some time for removing img_dir.
[1] https://review.opendev.org/#/c/710996
[2] https://review.opendev.org/c/openstack/tempest/+/754927
Related-Bug: #1393881
Change-Id: I81313bd2b87f1c0603221ac3e04050f85215c846
When we have TLS-E with public certs, some certs may be not be
provided by certmonger. We add a skip list that should be
configured in that case to skip tests for whether a cert tag is
tracked by certmonger for those certs.
The parameter is tripleo_exclude_cert_tags and it is expected to
be a list of cert_tags. For the case of public TLS +TLS-E, we
expect that to include the haproxy-external-cert
Change-Id: Ia1c609b0d6da4272ee4cd510955b210706767b57
1. Add option to skip enrollment tests -- not applicable without novajoin
2. Fix skip-tripleo option
3. Fix mysql test - podman ps instead of podman ls
4. For pre-provisioned nodes,
- add ability to read server metadata from the mistral yanl file.
- add ability to get server ip from hosts/dns
5. Fix hard-coded heat-admin
Change-Id: I051b08b02d7cfedecd28ccabb47c22d141ae7d8c
Currently the undercloud user is hardcoded to stack but in CI
we use zuul, it leads to failure while finding the respective
hardcoded file. Making it configurable and defaulting to stack
fixes the issue.
Change-Id: Ib9496024f7beeb27d13377c8062adf80e97f2c4a
Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
The mysql test only worked on the first controller, because the
mysql container has different names (with a different suffix) on
different controllers. Added logic to get the right controller
name.
Also added retry logic to the test on whether a node was an
ipa client. Sometimes, this would query the client before it had
been fully enrolled, causing the test to fail.
Change-Id: Ibe52985f9ee15e1e30543f2d394fde141b06dc53
Add option to set connect_retries, should be more than 1 to
get consistent results, especially with the server enrollment
tests. Also, add an 'ironic' type for server enrollment tests
on the undercloud.
Change-Id: Ic5273e228a559d0ca6c6a95077e39bbe9e27ddef
Some fixes were needed to make sure the ipa client code was
accessing the right config parameters for connect_retries and
keytab.
Also, more attributes needed to be added to the flavors to make
the enrollment tests successful. This prevents nova returning
No Valid Host available errors.
Change-Id: I018a2dd8f3de9598e19394ea2b3f0a0bfdf4c669
This adds mysql_executable configuration option and changes it to run
inside the galera container.
Related: rhbz#1730072
Co-Authored-By: Ade Lee <alee@redhat.com>
Change-Id: Iac82bd23c45e9200f4bc7049b6eafb26afbd7397
Avoid throwing an index error when there are no servers or networks
returned.
Resolves: rhbz#1730757
Co-Authored-By: Ade Lee <alee@redhat.com>
Change-Id: I22983ffad0e0801cc192de2d37fae611fa6f11aa
subprocess.check_output returns a bytes object in Python 3 [1], which causes
a few tests to fail because Python 3 won't compare the expected string
values against a bytes result.
This patch ensures that string objects are returned for test comparisons in
Python 3. The tests should continue to pass in Python 2 as well.
[1] https://docs.python.org/3.6/library/subprocess.html#subprocess.check_output
Change-Id: I6f666e5059a0b63be245b3745c230e1cb586d6aa
Now that python3 it's already UTF-8 compatible, there is no
need to decode from UTF-8 anymore. We just need to use
six.text_type() instead.
Change-Id: Ica16721ca43300bc51b292591a3cfa602944df3d
This caused issues with zuul jobs, because the user home directories
differ. This also removes hardcoded path from ipa_client.py and
throws a nicer exception if the file is not there.
Change-Id: I6188fe40af1bc5c6549767f45a0acc9f554e5b1e
Tests can get confused if one test fails to clean up
properly, or if the tests are run in parallel. To help resolve
this, the managed service entry is set to be different for different
tests.
Change-Id: Ia5f46d8b543ca64b42404f2aec75f5321cb3bad7
1. Set parameters to set flavor and image for baremetal
2. add and reorganize timeouts/retry code
3. fix changed call to verify compact services
4. fix user to ssh into the image
Change-Id: I80cc2e0cd8abc5d860b22349276ef4a40282e4f2
services folder has nothing in it and it is better to remove it
when we add service client stuff for novajoin tempest plugin
we can add it.
Change-Id: I1c7ed9e678fe91bf442294f048f1ba01c85119c5
1. for compact_services, some services that were not ssl enabled
are now enabled. Updated TLS_EXCEPTIONS
2. haproxy.stats is only accessible on localhost on the node that
had the stats vip. Check to make sure we have this controller
before checking connections.
3. certs are only issued for networks that are defined for a controller.
Therefore do not check for the cert to be issued or tracked if the
network is not enabled for that controller.
Change-Id: Ied35638bcbdff2260c2c4bb5d6c84329d6894ab1
IPA code has changed requiring changes to update module paths.
Also, tripleo has improved security and changed which networks are
accessible, and requiring password authentication for mysql.
Also, the format for compact_services has changed.
Change-Id: If899dda3950a8020ac1c3e8263a38a3bdcccd325
For some reason, when connecting to libvirt port on compute node,
sometimes the connection returns 104 error status when -quiet
is used. We need to investigate. but for now, do not use -quiet.