rotate certs use duration

stuggi · Jul 2, 2024 · ff3e385 · ff3e385
1 parent 1a573b8
commit ff3e385
Show file tree

Hide file tree

Showing 5 changed files with 28 additions and 22 deletions.
diff --git a/tests/kuttl/tests/ctlplane-tls-cert-rotation/02-get-endpoint-certs.yaml b/tests/kuttl/tests/ctlplane-tls-cert-rotation/02-get-endpoint-certs.yaml
@@ -0,0 +1,7 @@
+apiVersion: kuttl.dev/v1beta1
+kind: TestStep
+commands:
+  - script: |
+      echo "Get fingerprints of all service certs"
+      kubectl-kuttl version
+      oc exec -i openstackclient -n $NAMESPACE -- bash -s < ../../common/osp_endpoint_fingerprints.sh > /tmp/endpoint_fingerprints_before
diff --git a/...-rotation/02-assert-deploy-openstack.yaml → ...otation/03-assert-new-endpoint-certs.yaml b/...-rotation/02-assert-deploy-openstack.yaml → ...otation/03-assert-new-endpoint-certs.yaml
@@ -1,3 +1,24 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: keystone-public-route
+spec:
+  duration: 500h0m0s
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: keystone-public-svc
+spec:
+  duration: 500h0m0s
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: keystone-internal-svc
+spec:
+  duration: 500h0m0s
+---
 apiVersion: core.openstack.org/v1beta1
 kind: OpenStackControlPlane
 metadata:

diff --git a/tests/kuttl/tests/ctlplane-tls-cert-rotation/03-assert-service-ready.yaml b/tests/kuttl/tests/ctlplane-tls-cert-rotation/03-assert-service-ready.yaml
diff --git a/...ls-cert-rotation/02-deploy-openstack.yaml → ...ert-rotation/03-change-cert-duration.yaml b/...ls-cert-rotation/02-deploy-openstack.yaml → ...ert-rotation/03-change-cert-duration.yaml
diff --git a/tests/kuttl/tests/ctlplane-tls-cert-rotation/03-rotate-service-certs.yaml b/tests/kuttl/tests/ctlplane-tls-cert-rotation/03-rotate-service-certs.yaml