Merge pull request #1 from camille-rodriguez/master
Add functional tests
This commit is contained in:
commit
b5645c8958
@ -4,22 +4,17 @@ This subordinate charm provides a way to authenticate in Openstack for
|
|||||||
a specific domain with a Kerberos ticket. This provides an additional
|
a specific domain with a Kerberos ticket. This provides an additional
|
||||||
security layer. An external Kerberos server is necessary.
|
security layer. An external Kerberos server is necessary.
|
||||||
|
|
||||||
The following documentation is useful to understand better the charm
|
This kerberos subordinate charm is supported on Ubuntu Bionic (18.04 LTS) with
|
||||||
implementation:
|
the Openstack versions Queens and later.
|
||||||
|
|
||||||
* https://www.objectif-libre.com/fr/blog/2018/02/26/kerberos-authentication-for-keystone/
|
|
||||||
* https://jaosorior.dev/2018/keberos-for-keystone-with-mod_auth_gssapi/
|
|
||||||
|
|
||||||
|
|
||||||
# Usage
|
# Usage
|
||||||
|
|
||||||
Use this charm with the Keystone and Keystone-LDAP charms:
|
Use this charm with the Keystone charm:
|
||||||
|
|
||||||
juju deploy keystone
|
juju deploy keystone
|
||||||
juju deploy keystone-ldap
|
|
||||||
juju deploy openstack-dashboard
|
juju deploy openstack-dashboard
|
||||||
juju deploy keystone-kerberos
|
juju deploy keystone-kerberos
|
||||||
juju add-relation keystone keystone-ldap
|
|
||||||
juju add-relation keystone openstack-dashboard
|
juju add-relation keystone openstack-dashboard
|
||||||
juju add-relation keystone keystone-kerberos
|
juju add-relation keystone keystone-kerberos
|
||||||
|
|
||||||
@ -47,8 +42,7 @@ In a bundle:
|
|||||||
|
|
||||||
To authenticate against Keystone and Kerberos from a host, the following
|
To authenticate against Keystone and Kerberos from a host, the following
|
||||||
librairies need to be installed :
|
librairies need to be installed :
|
||||||
- sudo apt install krb5-user gcc python-dev libkrb5-dev python-pip
|
- sudo apt install krb5-user python3-openstackclient python3-requests-kerberos
|
||||||
- pip install keystoneauth1[kerberos]
|
|
||||||
|
|
||||||
# Configuration
|
# Configuration
|
||||||
|
|
||||||
|
@ -11,7 +11,7 @@ tags:
|
|||||||
- ldap
|
- ldap
|
||||||
series:
|
series:
|
||||||
- bionic
|
- bionic
|
||||||
- eoan
|
- focal
|
||||||
subordinate: true
|
subordinate: true
|
||||||
provides:
|
provides:
|
||||||
keystone-fid-service-provider:
|
keystone-fid-service-provider:
|
||||||
|
@ -5,4 +5,4 @@
|
|||||||
#
|
#
|
||||||
# Functional Test Requirements (let Zaza's dependencies solve all dependencies here!)
|
# Functional Test Requirements (let Zaza's dependencies solve all dependencies here!)
|
||||||
git+https://github.com/openstack-charmers/zaza.git#egg=zaza
|
git+https://github.com/openstack-charmers/zaza.git#egg=zaza
|
||||||
git+https://github.com/openstack-charmers/zaza-openstack-tests.git#egg=zaza.openstack
|
git+https://github.com/openstack-charmers/zaza-openstack-tests.git#egg=zaza.openstack
|
||||||
|
47
src/tests/bundles/bionic-queens.yaml
Normal file
47
src/tests/bundles/bionic-queens.yaml
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
series: bionic
|
||||||
|
comment:
|
||||||
|
- 'machines section to decide order of deployment. database sooner = faster'
|
||||||
|
machines:
|
||||||
|
'0':
|
||||||
|
constraints: mem=3072M
|
||||||
|
'1':
|
||||||
|
'2':
|
||||||
|
'3':
|
||||||
|
relations:
|
||||||
|
- - keystone:shared-db
|
||||||
|
- mysql:shared-db
|
||||||
|
- - keystone
|
||||||
|
- keystone-kerberos
|
||||||
|
applications:
|
||||||
|
mysql:
|
||||||
|
charm: cs:~openstack-charmers-next/percona-cluster
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '0'
|
||||||
|
keystone:
|
||||||
|
charm: cs:~openstack-charmers-next/keystone
|
||||||
|
num_units: 1
|
||||||
|
options:
|
||||||
|
token-provider: 'fernet'
|
||||||
|
token-expiration: 60
|
||||||
|
to:
|
||||||
|
- '1'
|
||||||
|
keystone-kerberos:
|
||||||
|
charm: ../../../keystone-kerberos
|
||||||
|
options:
|
||||||
|
kerberos-realm: 'TESTUBUNTU.COM'
|
||||||
|
kerberos-server: 'kerberos.testubuntu.com'
|
||||||
|
kerberos-domain: 'k8s'
|
||||||
|
resource:
|
||||||
|
keystone_keytab: keystone.keytab
|
||||||
|
|
||||||
|
kerberos-server:
|
||||||
|
charm: cs:~openstack-charmers-next/kerberos-test-fixture
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '2'
|
||||||
|
ubuntu-test-host:
|
||||||
|
charm: cs:ubuntu
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '3'
|
47
src/tests/bundles/bionic-rocky.yaml
Normal file
47
src/tests/bundles/bionic-rocky.yaml
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
series: bionic
|
||||||
|
comment:
|
||||||
|
- 'machines section to decide order of deployment. database sooner = faster'
|
||||||
|
machines:
|
||||||
|
'0':
|
||||||
|
constraints: mem=3072M
|
||||||
|
'1':
|
||||||
|
'2':
|
||||||
|
'3':
|
||||||
|
relations:
|
||||||
|
- - keystone:shared-db
|
||||||
|
- mysql:shared-db
|
||||||
|
- - keystone
|
||||||
|
- keystone-kerberos
|
||||||
|
applications:
|
||||||
|
mysql:
|
||||||
|
charm: cs:~openstack-charmers-next/percona-cluster
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '0'
|
||||||
|
keystone:
|
||||||
|
charm: cs:~openstack-charmers-next/keystone
|
||||||
|
num_units: 1
|
||||||
|
options:
|
||||||
|
token-provider: 'fernet'
|
||||||
|
token-expiration: 60
|
||||||
|
to:
|
||||||
|
- '1'
|
||||||
|
keystone-kerberos:
|
||||||
|
charm: ../../../keystone-kerberos
|
||||||
|
options:
|
||||||
|
kerberos-realm: 'TESTUBUNTU.COM'
|
||||||
|
kerberos-server: 'kerberos.testubuntu.com'
|
||||||
|
kerberos-domain: 'k8s'
|
||||||
|
resource:
|
||||||
|
keystone_keytab: keystone.keytab
|
||||||
|
|
||||||
|
kerberos-server:
|
||||||
|
charm: cs:~openstack-charmers-next/kerberos-test-fixture
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '2'
|
||||||
|
ubuntu-test-host:
|
||||||
|
charm: cs:ubuntu
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '3'
|
47
src/tests/bundles/bionic-stein.yaml
Normal file
47
src/tests/bundles/bionic-stein.yaml
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
series: bionic
|
||||||
|
comment:
|
||||||
|
- 'machines section to decide order of deployment. database sooner = faster'
|
||||||
|
machines:
|
||||||
|
'0':
|
||||||
|
constraints: mem=3072M
|
||||||
|
'1':
|
||||||
|
'2':
|
||||||
|
'3':
|
||||||
|
relations:
|
||||||
|
- - keystone:shared-db
|
||||||
|
- mysql:shared-db
|
||||||
|
- - keystone
|
||||||
|
- keystone-kerberos
|
||||||
|
applications:
|
||||||
|
mysql:
|
||||||
|
charm: cs:~openstack-charmers-next/percona-cluster
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '0'
|
||||||
|
keystone:
|
||||||
|
charm: cs:~openstack-charmers-next/keystone
|
||||||
|
num_units: 1
|
||||||
|
options:
|
||||||
|
token-provider: 'fernet'
|
||||||
|
token-expiration: 60
|
||||||
|
to:
|
||||||
|
- '1'
|
||||||
|
keystone-kerberos:
|
||||||
|
charm: ../../../keystone-kerberos
|
||||||
|
options:
|
||||||
|
kerberos-realm: 'TESTUBUNTU.COM'
|
||||||
|
kerberos-server: 'kerberos.testubuntu.com'
|
||||||
|
kerberos-domain: 'k8s'
|
||||||
|
resource:
|
||||||
|
keystone_keytab: keystone.keytab
|
||||||
|
|
||||||
|
kerberos-server:
|
||||||
|
charm: cs:~openstack-charmers-next/kerberos-test-fixture
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '2'
|
||||||
|
ubuntu-test-host:
|
||||||
|
charm: cs:ubuntu
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '3'
|
47
src/tests/bundles/bionic-train.yaml
Normal file
47
src/tests/bundles/bionic-train.yaml
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
series: bionic
|
||||||
|
comment:
|
||||||
|
- 'machines section to decide order of deployment. database sooner = faster'
|
||||||
|
machines:
|
||||||
|
'0':
|
||||||
|
constraints: mem=3072M
|
||||||
|
'1':
|
||||||
|
'2':
|
||||||
|
'3':
|
||||||
|
relations:
|
||||||
|
- - keystone:shared-db
|
||||||
|
- mysql:shared-db
|
||||||
|
- - keystone
|
||||||
|
- keystone-kerberos
|
||||||
|
applications:
|
||||||
|
mysql:
|
||||||
|
charm: cs:~openstack-charmers-next/percona-cluster
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '0'
|
||||||
|
keystone:
|
||||||
|
charm: cs:~openstack-charmers-next/keystone
|
||||||
|
num_units: 1
|
||||||
|
options:
|
||||||
|
token-provider: 'fernet'
|
||||||
|
token-expiration: 60
|
||||||
|
to:
|
||||||
|
- '1'
|
||||||
|
keystone-kerberos:
|
||||||
|
charm: ../../../keystone-kerberos
|
||||||
|
options:
|
||||||
|
kerberos-realm: 'TESTUBUNTU.COM'
|
||||||
|
kerberos-server: 'kerberos.testubuntu.com'
|
||||||
|
kerberos-domain: 'k8s'
|
||||||
|
resource:
|
||||||
|
keystone_keytab: keystone.keytab
|
||||||
|
|
||||||
|
kerberos-server:
|
||||||
|
charm: cs:~openstack-charmers-next/kerberos-test-fixture
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '2'
|
||||||
|
ubuntu-test-host:
|
||||||
|
charm: cs:ubuntu
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '3'
|
47
src/tests/bundles/bionic-ussuri.yaml
Normal file
47
src/tests/bundles/bionic-ussuri.yaml
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
series: bionic
|
||||||
|
comment:
|
||||||
|
- 'machines section to decide order of deployment. database sooner = faster'
|
||||||
|
machines:
|
||||||
|
'0':
|
||||||
|
constraints: mem=3072M
|
||||||
|
'1':
|
||||||
|
'2':
|
||||||
|
'3':
|
||||||
|
relations:
|
||||||
|
- - keystone:shared-db
|
||||||
|
- mysql:shared-db
|
||||||
|
- - keystone
|
||||||
|
- keystone-kerberos
|
||||||
|
applications:
|
||||||
|
mysql:
|
||||||
|
charm: cs:~openstack-charmers-next/percona-cluster
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '0'
|
||||||
|
keystone:
|
||||||
|
charm: cs:~openstack-charmers-next/keystone
|
||||||
|
num_units: 1
|
||||||
|
options:
|
||||||
|
token-provider: 'fernet'
|
||||||
|
token-expiration: 60
|
||||||
|
to:
|
||||||
|
- '1'
|
||||||
|
keystone-kerberos:
|
||||||
|
charm: ../../../keystone-kerberos
|
||||||
|
options:
|
||||||
|
kerberos-realm: 'TESTUBUNTU.COM'
|
||||||
|
kerberos-server: 'kerberos.testubuntu.com'
|
||||||
|
kerberos-domain: 'k8s'
|
||||||
|
resource:
|
||||||
|
keystone_keytab: keystone.keytab
|
||||||
|
|
||||||
|
kerberos-server:
|
||||||
|
charm: cs:~openstack-charmers-next/kerberos-test-fixture
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '2'
|
||||||
|
ubuntu-test-host:
|
||||||
|
charm: cs:ubuntu
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '3'
|
47
src/tests/bundles/focal-ussuri.yaml
Normal file
47
src/tests/bundles/focal-ussuri.yaml
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
series: focal
|
||||||
|
comment:
|
||||||
|
- 'machines section to decide order of deployment. database sooner = faster'
|
||||||
|
machines:
|
||||||
|
'0':
|
||||||
|
constraints: mem=3072M
|
||||||
|
'1':
|
||||||
|
'2':
|
||||||
|
'3':
|
||||||
|
relations:
|
||||||
|
- - keystone:shared-db
|
||||||
|
- mysql:shared-db
|
||||||
|
- - keystone
|
||||||
|
- keystone-kerberos
|
||||||
|
applications:
|
||||||
|
mysql:
|
||||||
|
charm: cs:~openstack-charmers-next/percona-cluster
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '0'
|
||||||
|
keystone:
|
||||||
|
charm: cs:~openstack-charmers-next/keystone
|
||||||
|
num_units: 1
|
||||||
|
options:
|
||||||
|
token-provider: 'fernet'
|
||||||
|
token-expiration: 60
|
||||||
|
to:
|
||||||
|
- '1'
|
||||||
|
keystone-kerberos:
|
||||||
|
charm: ../../../keystone-kerberos
|
||||||
|
options:
|
||||||
|
kerberos-realm: 'TESTUBUNTU.COM'
|
||||||
|
kerberos-server: 'kerberos.testubuntu.com'
|
||||||
|
kerberos-domain: 'k8s'
|
||||||
|
resource:
|
||||||
|
keystone_keytab: keystone.keytab
|
||||||
|
|
||||||
|
kerberos-server:
|
||||||
|
charm: cs:~openstack-charmers-next/kerberos-test-fixture
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '2'
|
||||||
|
ubuntu-test-host:
|
||||||
|
charm: cs:ubuntu
|
||||||
|
num_units: 1
|
||||||
|
to:
|
||||||
|
- '3'
|
22
src/tests/tests.yaml
Normal file
22
src/tests/tests.yaml
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
charm_name: keystone-kerberos
|
||||||
|
smoke_bundles:
|
||||||
|
- bionic-train
|
||||||
|
gate_bundles:
|
||||||
|
- bionic-queens
|
||||||
|
- bionic-rocky
|
||||||
|
- bionic-stein
|
||||||
|
- bionic-train
|
||||||
|
dev_bundles:
|
||||||
|
- bionic-ussuri
|
||||||
|
- focal-ussuri
|
||||||
|
configure:
|
||||||
|
- zaza.openstack.charm_tests.kerberos.setup.run_all_configuration_steps
|
||||||
|
tests:
|
||||||
|
- zaza.openstack.charm_tests.kerberos.tests.CharmKeystoneKerberosTest
|
||||||
|
tests_options:
|
||||||
|
force_deploy:
|
||||||
|
- focal-ussuri
|
||||||
|
target_deploy_status:
|
||||||
|
keystone-kerberos:
|
||||||
|
workload-status: blocked
|
||||||
|
workload-status-message: "Kerberos configuration incomplete"
|
Loading…
x
Reference in New Issue
Block a user