commit f597729ab4e62473b42dd939091fbee0ec3df205
author PGlazov <pglazov@mirantis.com> Thu Nov 25 19:38:27 2021 +0400
committer PGlazov <pglazov@mirantis.com> Fri Dec 17 17:09:15 2021 +0400
tree 242bd5cfb66446a59234fdefdba9d80b07aa8ade
parent 6e6c2e68940060967c2fb389711af2addc3151b3

Create WA for ceph set global_id_reclaim

Change-Id: I05c285243a8d49063f3a3160a8ac366a2c95153e

tcp_tests/tests/system/test_mcp_update.py

diff --git a/tcp_tests/tests/system/test_mcp_update.py b/tcp_tests/tests/system/test_mcp_update.py
index c6033c1..74f2f95 100644
--- a/tcp_tests/tests/system/test_mcp_update.py
+++ b/tcp_tests/tests/system/test_mcp_update.py
@@ -125,6 +125,23 @@
 
 
 @pytest.fixture
+def wa_cve_2021_20288_global_id_reclaim(reclass_actions,
+                                        salt_actions):
+    tgt = "I@ceph:common"
+    context_file = "cluster/*/ceph/common.yml"
+    if not reclass_actions.check_existence(
+            'parameters.ceph.common.config.mon.'
+            + 'auth_allow_insecure_global_id_reclaim'):
+        reclass_actions.add_bool_key(
+            'parameters.ceph.common.config.mon.'
+            + 'auth_allow_insecure_global_id_reclaim', "False", context_file)
+        salt_actions.run_state(tgt, "state.apply", "ceph.common")
+        salt_actions.cmd_run(tgt, "systemctl restart ceph-mon.target")
+    else:
+        LOG.info("Skipping WA ceph set auth_allow_insecure_global_id_reclaim")
+
+
+@pytest.fixture
 def wa_for_alerta_password_prod35958(reclass_actions,
                                      salt_actions):
 
@@ -170,7 +187,8 @@
 @pytest.mark.usefixtures("switch_to_proposed_pipelines",
                          "update_to_tag",
                          "wa_for_galera_clustercheck_password_prod35705",
-                         "wa_for_alerta_password_prod35958")
+                         "wa_for_alerta_password_prod35958",
+                         "wa_cve_2021_20288_global_id_reclaim")
 class TestUpdateMcpCluster(object):
     """
     Following the steps in