search

redpanda-data / redpanda

Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!
https://redpanda.com
9.7k stars 591 forks source link

[v24.2.x] [CORE-7851] Adjust cipher strings to include ECDSA ciphers #24209

Closed michael-redpanda closed 4 days ago

michael-redpanda commented 4 days ago

Backport of PR https://github.com/redpanda-data/redpanda/pull/24191

Fixes: CORE-8274 Fixes: #24207

michael-redpanda commented 4 days ago

Conflict in tls.py because upstream has some PKCS#12 support and v24.2 does not

vbotbuildovich commented 4 days ago

non flaky failures in https://buildkite.com/redpanda/redpanda/builds/58365#01934acd-42ab-499a-a545-f6dbfb5674b2:

"rptest.tests.audit_log_test.AuditLogTestInvalidConfigMTLS.test_invalid_config_mtls"
"rptest.tests.redpanda_oauth_test.RedpandaOIDCTlsTest.test_init"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=mtls_identity.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=sasl.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=mtls_identity.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=sasl.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=mtls_identity.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=sasl.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=mtls_identity.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=sasl.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=mtls_identity.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=sasl.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=mtls_identity.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=sasl.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_mtls_principal.rules=RULE.O=Redpanda.CN=.1.L.fail=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_mtls_principal.rules=RULE.O=Redpanda.CN=.redpanda.service.admin.admin.1.RULE.O=.CN=.1.fail=True"
"rptest.tests.crl_test.CertificateRevocationTest.test_kafka"
"rptest.tests.crl_test.CertificateRevocationTest.test_sr_client"
"rptest.tests.pandaproxy_test.PandaProxyMTLSTest.test_mtls"
"rptest.tests.rpk_registry_test.RpkRegistryTest.test_produce_consume_proto"
"rptest.tests.rpk_registry_test.RpkRegistryTest.test_registry_subject"
"rptest.tests.rpk_start_test.RpkRedpandaStartTest.test_rpc_tls_start"
"rptest.tests.tls_metrics_test.TLSMetricsTest.test_metrics"
"rptest.tests.tls_metrics_test.TLSMetricsTestExpiring.test_detect_expired_cert"

non flaky failures in https://buildkite.com/redpanda/redpanda/builds/58365#01934acd-42a6-4241-9e4f-c558dfb76151:

"rptest.tests.rpk_registry_test.RpkRegistryTest.test_registry_mode"
"rptest.tests.redpanda_oauth_test.RedpandaOIDCTlsTest.test_admin_revoke"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=None.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=none.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=None.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=none.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=none.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=None.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=None.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=none.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=None.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=none.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=None.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=none.client_auth=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_mtls_principal.rules=RULE.O=Redpanda.CN=.admin.redpanda.service.admin.1.RULE.O=Redpanda.CN=.1.L.fail=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_security_feature_migration.authn_method=sasl"
"rptest.tests.crl_test.CertificateRevocationTest.test_pp_api"
"rptest.tests.rpk_registry_test.RpkRegistryTest.test_produce_consume_avro"
"rptest.tests.rpk_start_test.RpkRedpandaStartTest.test_rpc_tls_enable"
"rptest.tests.schema_registry_test.SchemaRegistryMTLSTest.test_mtls"
"rptest.tests.tls_metrics_test.TLSMetricsTest.test_expiry_reload"
"rptest.tests.tls_metrics_test.TLSMetricsTest.test_services"

non flaky failures in https://buildkite.com/redpanda/redpanda/builds/58365#01934acd-42ae-4a1d-b228-007f90c97180:

"rptest.tests.rpk_registry_test.RpkRegistryTest.test_registry_compatibility_level"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=mtls_identity.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=sasl.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=mtls_identity.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=sasl.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=mtls_identity.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=sasl.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=mtls_identity.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=sasl.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=mtls_identity.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=sasl.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=mtls_identity.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=sasl.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_mtls_principal.rules=RULE.O=Redpanda.CN=.1.U.fail=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_security_feature_migration.authn_method=mtls_identity"
"rptest.tests.redpanda_oauth_test.RedpandaOIDCTlsTest.test_admin_invalidate_keys"
"rptest.tests.crl_test.CertificateRevocationTest.test_noncogent"
"rptest.tests.pandaproxy_test.PandaProxyMTLSTest.test_mtls_urllib"
"rptest.tests.schema_registry_test.SchemaRegistryMTLSAndBasicAuthTest.test_mtls_and_basic_auth"
"rptest.tests.tls_metrics_test.TLSMetricsTest.test_crc32c"
"rptest.tests.tls_metrics_test.TLSMetricsTest.test_public_metrics"

non flaky failures in https://buildkite.com/redpanda/redpanda/builds/58365#01934acd-42a9-4cbb-b54f-22795522537b:

"rptest.tests.audit_log_test.AuditLogTestKafkaTlsApi.test_mtls"
"rptest.tests.redpanda_oauth_test.RedpandaOIDCTlsTest.test_admin_whoami"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=None.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=False.authn_method=none.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=None.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=None.authn_method=none.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=None.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=False.enable_authz=True.authn_method=none.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=None.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=False.authn_method=none.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=None.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=None.authn_method=none.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=None.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_describe_acls.use_tls=True.use_sasl=True.enable_authz=True.authn_method=none.client_auth=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_mtls_principal.rules=DEFAULT.fail=True"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_mtls_principal.rules=RULE.O=Redpanda.CN=.cluster_describe.redpanda.service.admin.admin.1.fail=False"
"rptest.tests.acls_test.AccessControlListTestUpgrade.test_upgrade_sasl"
"rptest.tests.crl_test.CertificateRevocationTest.test_rpc"
"rptest.tests.pandaproxy_test.PandaProxyMTLSAndBasicAuthTest.test_mtls_and_basic_auth"
"rptest.tests.rpk_registry_test.RpkRegistryTest.test_produce_consume_json"
"rptest.tests.rpk_registry_test.RpkRegistryTest.test_registry_schema"
"rptest.tests.tls_metrics_test.TLSMetricsTest.test_labels"
"rptest.tests.tls_metrics_test.TLSMetricsTestChain.test_cert_chain_metrics"
vbotbuildovich commented 4 days ago

Retry command for Build#58365

please wait until all jobs are finished before running the slash command

/ci-repeat 1
tests/rptest/tests/audit_log_test.py::AuditLogTestInvalidConfigMTLS.test_invalid_config_mtls
tests/rptest/tests/redpanda_oauth_test.py::RedpandaOIDCTlsTest.test_init
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":false,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":false,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":false,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":false,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":false,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":false,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":false,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":false,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":false,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":false,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":false,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":false,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_mtls_principal@{"fail":false,"rules":"RULE:^O=Redpanda,CN=(.*?)$/$1/L"}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_mtls_principal@{"fail":true,"rules":"RULE:^O=Redpanda,CN=(redpanda.service.admin|admin)$/$1/, RULE:^O=([^,]+),CN=(.*?)$/$1/"}
tests/rptest/tests/crl_test.py::CertificateRevocationTest.test_kafka
tests/rptest/tests/crl_test.py::CertificateRevocationTest.test_sr_client
tests/rptest/tests/pandaproxy_test.py::PandaProxyMTLSTest.test_mtls
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_produce_consume_proto
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_registry_subject
tests/rptest/tests/rpk_start_test.py::RpkRedpandaStartTest.test_rpc_tls_start
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTest.test_metrics
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTestExpiring.test_detect_expired_cert
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_registry_mode
tests/rptest/tests/redpanda_oauth_test.py::RedpandaOIDCTlsTest.test_admin_revoke
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":false,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":false,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":false,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":false,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":false,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":false,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":false,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":false,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":false,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":false,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":false,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":false,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_mtls_principal@{"fail":true,"rules":"RULE:^O=Redpanda,CN=(admin|redpanda.service.admin)$/$1/, RULE:^O=Redpanda,CN=()$/$1/L"}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_security_feature_migration@{"authn_method":"sasl"}
tests/rptest/tests/crl_test.py::CertificateRevocationTest.test_pp_api
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_produce_consume_avro
tests/rptest/tests/rpk_start_test.py::RpkRedpandaStartTest.test_rpc_tls_enable
tests/rptest/tests/schema_registry_test.py::SchemaRegistryMTLSTest.test_mtls
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTest.test_expiry_reload
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTest.test_services
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_registry_compatibility_level
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":true,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":true,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":true,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":true,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":true,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":true,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":true,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":true,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":true,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":true,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"mtls_identity","client_auth":true,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"sasl","client_auth":true,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_mtls_principal@{"fail":true,"rules":"RULE:^O=Redpanda,CN=(.*?)$/$1/U"}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_security_feature_migration@{"authn_method":"mtls_identity"}
tests/rptest/tests/redpanda_oauth_test.py::RedpandaOIDCTlsTest.test_admin_invalidate_keys
tests/rptest/tests/crl_test.py::CertificateRevocationTest.test_noncogent
tests/rptest/tests/pandaproxy_test.py::PandaProxyMTLSTest.test_mtls_urllib
tests/rptest/tests/schema_registry_test.py::SchemaRegistryMTLSAndBasicAuthTest.test_mtls_and_basic_auth
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTest.test_crc32c
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTest.test_public_metrics
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaTlsApi.test_mtls
tests/rptest/tests/redpanda_oauth_test.py::RedpandaOIDCTlsTest.test_admin_whoami
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":true,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":true,"enable_authz":false,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":true,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":true,"enable_authz":null,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":true,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":true,"enable_authz":true,"use_sasl":false,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":true,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":true,"enable_authz":false,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":true,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":true,"enable_authz":null,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":null,"client_auth":true,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_describe_acls@{"authn_method":"none","client_auth":true,"enable_authz":true,"use_sasl":true,"use_tls":true}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_mtls_principal@{"fail":true,"rules":"DEFAULT"}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_mtls_principal@{"fail":false,"rules":"RULE:^O=Redpanda,CN=(cluster_describe|redpanda.service.admin|admin)$/$1/"}
tests/rptest/tests/acls_test.py::AccessControlListTestUpgrade.test_upgrade_sasl
tests/rptest/tests/crl_test.py::CertificateRevocationTest.test_rpc
tests/rptest/tests/pandaproxy_test.py::PandaProxyMTLSAndBasicAuthTest.test_mtls_and_basic_auth
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_produce_consume_json
tests/rptest/tests/rpk_registry_test.py::RpkRegistryTest.test_registry_schema
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTest.test_labels
tests/rptest/tests/tls_metrics_test.py::TLSMetricsTestChain.test_cert_chain_metrics
michael-redpanda commented 4 days ago

Force push 0967f6a:

vbotbuildovich commented 4 days ago

ducktape was retried in https://buildkite.com/redpanda/redpanda/builds/58392#01934b77-7754-48e7-8054-65796aba191c