Bug 2193131

Summary:	Add enable_certificate_validation config option
Product:	Red Hat OpenStack	Reporter:	Lukas Piwowarski <lpiwowar>
Component:	python-barbican-tests-tempest	Assignee:	Lukas Piwowarski <lpiwowar>
Status:	CLOSED ERRATA	QA Contact:	Martin Kopec <mkopec>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	17.1 (Wallaby)	CC:	mkopec
Target Milestone:	ga	Keywords:	Triaged
Target Release:	17.1	Flags:	lpiwowar: needinfo+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	python-barbican-tests-tempest-1.6.0-1.20230509140958.9fe096e.el9ost	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-08-16 01:14:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Lukas Piwowarski 2023-05-04 12:16:06 UTC

We need to backport this in order to fix the SRBAC barbican 17.1. testing [1]:

This patch adds enable_certificate_validation config option. This option
can be used to skip tests that rely on image signature certificate
validation being enabled on the test environment
(test_signed_image_invalid_cert_boot_failure).

[1] https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/880936

Comment 1 Lukas Piwowarski 2023-05-05 08:31:18 UTC

The change is merged in upstream and a patch has been proposed to downstream gerrit. I'm moving this to POST.

Comment 13 errata-xmlrpc 2023-08-16 01:14:53 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:4577