Add secure-rbac tests for SecretStores API
This patch adds basic RBAC test for the Secret Stores API for
the reader, member and admin personas with project scope.
The tests are skipped by a config option, as they require
the multiple-backends feature to be enabled in barbican.
The devstack instace we're using for gate tests does not have
this enabled, so we default to False for now.
Change-Id: Ibca9d44fb3d0f4fd9945a7e6c636e0fbf6beb42e
diff --git a/barbican_tempest_plugin/plugin.py b/barbican_tempest_plugin/plugin.py
index 2acd7cc..7586050 100644
--- a/barbican_tempest_plugin/plugin.py
+++ b/barbican_tempest_plugin/plugin.py
@@ -33,6 +33,10 @@
conf.register_opt(project_config.service_option,
group='service_available')
+ conf.register_group(project_config.barbican_tempest_group)
+ conf.register_opts(project_config.BarbicanGroupOpts,
+ project_config.barbican_tempest_group)
+
# Register ephemeral storage encryption options
conf.register_group(project_config.ephemeral_storage_encryption_group)
conf.register_opts(project_config.EphemeralStorageEncryptionGroup,
@@ -60,7 +64,8 @@
'OrderClient',
'QuotaClient',
'SecretClient',
- 'SecretMetadataClient'
+ 'SecretMetadataClient',
+ 'SecretStoresClient'
],
}
return [v1_params]