Add ss_ou support

Allow security services created from tempest configuration to include the
optional organizational unit field introduced in API microversion 2.44.
Only pass the field when that microversion is supported.

oslo.config Dict values use commas to separate entries, which prevents a
multi-component OU distinguished name from containing commas directly in
tempest.conf. Allow semicolons in ss_ou and convert them to commas before
sending the value to Manila.

Closes-Bug: #2167938
Change-Id: I7b2144d2ed19d6517d29bbbfea2c5ef14580c4d6
Signed-off-by: medhac <medhac@netapp.com>

manila_tempest_tests/config.py

@@ -246,7 +246,11 @@ ShareGroup = [
                       "security_service = "
                       "ss_type:<ldap, kerberos or active_directory>, "
                       "ss_dns_ip:value, ss_user:value, ss_password=value, "
-                      "ss_domain:value, ss_server:value"),
+                      "ss_domain:value, ss_server:value, ss_ou:value. "
+                      "ss_ou is optional and maps to the security service "
+                      "organizational unit (API microversion 2.44+). "
+                      "oslo.config Dict values are comma-separated, so use "
+                      "semicolons in ss_ou."),
     cfg.ListOpt("capability_encryption_support",
                 default=[],
                 help="Encryption support capability. Possible values are "

manila_tempest_tests/tests/api/base.py

@@ -219,6 +219,11 @@ class BaseSharesTest(test.BaseTestCase):
                 "user": ss_config.get("ss_user"),
                 "password": ss_config.get("ss_password")
             }
+            # OU is optional. oslo.config Dict() splits on commas, so a
+            # multi-component DN must use semicolons in tempest.conf.
+            ss_ou = ss_config.get("ss_ou")
+            if ss_ou and utils.is_microversion_supported("2.44"):
+                ss_params["ou"] = ss_ou.replace(";", ",")
             ss_type = ss_config.get("ss_type")
             security_service = cls.create_security_service(
                 ss_type,

releasenotes/notes/bug-2167938-add-ss-ou.yaml

@@ -0,0 +1,4 @@
+---
+features:
+  - |
+    Add optional ``ss_ou`` to ``[share] security_service``.