[tls] Improve the TLS kuttl scenarios

Deydra71 commented 6 months ago

Test scenarios:

Custom Issuer
- Deploy with the default internal issuer, then switch to a custom internal issuer (and vice versa),
- Deploy with the default ingress issuer, then switch to a custom ingress issuer (and vice versa),
Service Certificate Rotation
- After deployment, certificate secrets are deleted, triggering service restarts. The test checks whether new secrets are mounted in service pods and if route configurations use these new secrets.
Custom CA cert added to a bundle
Customize cert and CA cert duration parameters

Test scenarios to be added: ~~CA cert rotation~~

Deydra71 commented 6 months ago

The kuttl test may be failing because Swift remains in a NotReady condition, even though all pods have been successfully restarted with new secrets. In the local testing environment, simply deleting the Swift pods was enough to trigger a change to the ready condition. This issue has already been discussed with @stuggi, and it is on the todo list after the freeze.

Deydra71 commented 6 months ago

The scripts are now using cert-manager label controller.cert-manager.io/fao=true to delete service and route secrets. The core.openstack.org/openstackcontrolplane label is now used to query the ctlplane without specifying the object name.

softwarefactory-project-zuul[bot] commented 5 months ago

Build failed (check pipeline). Post recheck (without leading slash) to rerun all jobs. Make sure the failure cause has been resolved before you rerun jobs.

https://review.rdoproject.org/zuul/buildset/71d6563eb9f5403fa274c9b23ab38fee

:heavy_check_mark: openstack-k8s-operators-content-provider SUCCESS in 2h 08m 34s :x: podified-multinode-edpm-deployment-crc FAILURE in 1h 10m 27s :heavy_check_mark: cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 26m 45s :x: openstack-operator-tempest-multinode POST_FAILURE in 1h 50m 42s

Deydra71 commented 5 months ago

recheck

softwarefactory-project-zuul[bot] commented 5 months ago

Build failed (check pipeline). Post recheck (without leading slash) to rerun all jobs. Make sure the failure cause has been resolved before you rerun jobs.

https://review.rdoproject.org/zuul/buildset/b25faba20af94c3c83e19f3d207b4cbe

:heavy_check_mark: openstack-k8s-operators-content-provider SUCCESS in 2h 21m 11s :heavy_check_mark: podified-multinode-edpm-deployment-crc SUCCESS in 1h 19m 40s :x: cifmw-crc-podified-edpm-baremetal RETRY_LIMIT in 5s :heavy_check_mark: openstack-operator-tempest-multinode SUCCESS in 1h 39m 16s

Deydra71 commented 5 months ago

/retest

softwarefactory-project-zuul[bot] commented 5 months ago

Build failed (check pipeline). Post recheck (without leading slash) to rerun all jobs. Make sure the failure cause has been resolved before you rerun jobs.

https://review.rdoproject.org/zuul/buildset/07ed08536d0b42099b6879d7d56031c3

:heavy_check_mark: openstack-k8s-operators-content-provider SUCCESS in 2h 53m 16s :x: podified-multinode-edpm-deployment-crc FAILURE in 1h 40m 33s :x: cifmw-crc-podified-edpm-baremetal FAILURE in 1h 31m 07s :x: openstack-operator-tempest-multinode FAILURE in 1h 45m 52s

softwarefactory-project-zuul[bot] commented 5 months ago

Merge Failed.

This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset.

Deydra71 commented 5 months ago

/retest

Deydra71 commented 5 months ago