Bug 1740708

Summary: [RHOS-15] Required image properties for signature verification do not exist.
Product: Red Hat OpenStack Reporter: Martin Kopec <mkopec>
Component: openstack-tempestAssignee: Chandan Kumar <chkumar>
Status: CLOSED ERRATA QA Contact: Martin Kopec <mkopec>
Severity: medium Docs Contact:
Priority: medium    
Version: 15.0 (Stein)CC: apevec, lhh, slinaber, udesale
Target Milestone: z2Keywords: Triaged, ZStream
Target Release: 15.0 (Stein)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tempest-21.0.0-0.20191209200452.702b21c.el8ost Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-05 12:02:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1719940    
Bug Blocks:    
Attachments:
Description Flags
verification output none

Description Martin Kopec 2019-08-13 14:25:12 UTC 
Version-Release number of selected component (if applicable):
[stack@undercloud-0 ~]$ rpm -qa | grep tempest
python3-tempest-21.0.0-0.20190726140456.702b21c.el8ost.noarch
openstack-tempest-21.0.0-0.20190726140456.702b21c.el8ost.noarch
python3-tempestconf-2.2.1-0.20190701090409.aa20435.el8ost.noarch

Steps to Reproduce:
1. deploy 1,compute:1 deployment, barbican enabled
2. Create an image with required image_signature* properties, see for example https://docs.openstack.org/nova/rocky/user/certificate-validation.html
3. Set tempest.conf and provide a reference to the image and certificates created in the step above:
(overcloud) [stack@undercloud-0 cloud]$ cat etc/tempest.conf | grep compute -A2
[compute-feature-enabled]
live_migration = false
live_migrate_paused_instances = true
--
[compute]
certified_image_ref = 1cef4fe0-45c5-4d7d-874c-29084c0d139c
certified_image_trusted_certs = 83d697be-c029-4bb0-9276-3e46bcebdb06,4f664f44-80fd-4597-b513-3bd16bb45bd1,d843e155-de56-4774-ad69-deaf9105375b
4. tempest run --regex tempest.api.compute.servers.test_servers.ServerShowV263Test.test_show_update_rebuild_list_server

Actual results:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/tempest/api/compute/servers/test_servers.py", line 216, in test_show_update_rebuild_list_server
    server['id'], 'ACTIVE')
  File "/usr/lib/python3.6/site-packages/tempest/common/waiters.py", line 76, in wait_for_server_status
    server_id=server_id)
tempest.exceptions.BuildErrorException: Server 93f04f3c-426a-487f-8709-5bb48621b770 failed to build and is in ERROR status
Details: {'code': 500, 'created': '2019-08-12T19:37:59Z', 'message': 'Signature verification for the image failed: Required image properties for signature verification do not exist. Cannot verify signature. Missing property: img_signature_uuid.'}

Expected results:
No traceback

Additional info:
See the linked Launchpad bug for additional information.
Comment 7 Martin Kopec 2019-12-19 10:24:48 UTC 
Created attachment 1646398 [details]
verification output

The fixed in version package contains needed fix. The package is available in our repositories (also via latest symlink - passed testing by phases 1 and 2).

I was able to run the tempest.api.compute.servers.test_servers.ServerShowV263Test.test_show_update_rebuild_list_server test successfully. A verification output can be found in the attachments. 

Tested with core_puddle: RHOS_TRUNK-15.0-RHEL-8-20191212.n.0
Comment 9 errata-xmlrpc 2020-03-05 12:02:22 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0710