tempest/releasenotes/notes/config_image_certificate_compute_feature-c56efb520d54aff5.yaml
Lee Yarwood 7f7c232b29 compute: Make image certificate validation a configurable feature
tempest.api.compute.servers.test_servers.ServerShowV263Test would
previously always run and provide the optional
trusted_image_certificates parameter to validate the 2.63 API
microversion. However if the test image had not been cached locally this
would actually cause the underlying certificate validation logic within
Nova to be called resulting in the test failing as the test image would
not have the required img_signature_* properties set and the provided
trusted certificates are just test strings.

This change makes this specific test optional (not running by default)
now by introducing two required compute configurables. These allow a
signed image with the required img_signature_* properties set along with
a valid list of trusted image certificates to also be used during the
test.

Ica1d32ca66d6f89692e9cc90e415bf569332f58d is currently attempting to
wire up various image certificate and signature validation tests under
the barbican-tempest-plugin.

Change-Id: Ib346d383c430d5151d9aafa6e856dd0a7cae8a23
Closes-bug: 1831866
2019-06-19 12:48:05 +01:00

9 lines
378 B
YAML

---
other:
- |
New configuration options ``[compute]/certified_image_ref`` and
``[compute]/certified_image_trusted_certs`` have been introduced. These
are required in order to run the ``ServerShowV263Test`` test and allow a
signed image with the required img_signature_* properties set along
with a list of trusted certificates to be used during the test.