Browse Source

Add TLS support for tempest

Change-Id: I9e8e1d9e3a3dff82f69689429c746bde969ebe32
Sergey Reshetnyak 2 years ago
parent
commit
91bf2ba205
3 changed files with 8 additions and 1 deletions
  1. 4
    1
      service/actions/tempest.yaml
  2. 1
    0
      service/files/ca-cert.pem.j2
  3. 3
    0
      service/files/run-tempest.sh.j2

+ 4
- 1
service/actions/tempest.yaml View File

@@ -3,7 +3,7 @@ actions:
3 3
     image: rally-tempest
4 4
     dependencies:
5 5
       - keystone
6
-    command: /var/lib/rally/run-tempest.sh
6
+    command: bash /var/lib/rally/run-tempest.sh
7 7
     files:
8 8
       - path: /var/lib/rally/tempest.conf
9 9
         content: tempest.conf.j2
@@ -13,3 +13,6 @@ actions:
13 13
       - path: /var/lib/rally/static.pem
14 14
         content: static.pem.j2
15 15
         perm: "0600"
16
+      - path: /opt/ccp/etc/tls/ca.pem
17
+        content: ca-cert.pem.j2
18
+        perm: "0400"

+ 1
- 0
service/files/ca-cert.pem.j2 View File

@@ -0,0 +1 @@
1
+{{ security.tls.ca_cert }}

+ 3
- 0
service/files/run-tempest.sh.j2 View File

@@ -19,6 +19,9 @@ export OS_PROJECT_DOMAIN_NAME=default
19 19
 export OS_PROJECT_NAME={{ openstack.project_name }}
20 20
 export OS_USERNAME={{ openstack.user_name }}
21 21
 export OS_USER_DOMAIN_NAME=default
22
+{% if keystone.tls.enabled %}
23
+export OS_CACERT="/opt/ccp/etc/tls/ca.pem"
24
+{% endif %}
22 25
 
23 26
 rally-manage db create
24 27
 rally deployment create --fromenv --name=to-be-verified-by-tempest

Loading…
Cancel
Save