tree b74adaa96968fd6af058e99dd7f3663821b9703a
parent 7a9a96098703bff036145607c9b6e2ec7ea811e6
author Pavlo Shchelokovskyy <shchelokovskyy@gmail.com> 1534183158 +0300
committer Vasyl Saienko <vsaienko@mirantis.com> 1579443401 +0000

Allow to pass --insecure options into VMs

currently Heat tests have troubles running when self-signed SSL CA is
used on public Heat API and standard upstream images (Cirros, Ubuntu)
are used as those lack trust to those CA - example is DevStack
with tls-proxy service enabled.

A workaround is to set [clients_heat]insecure=True, but that is
not really a production-ready setting, and does not work for CFN-style
signaling, only for WaitConditions.

Instead, this patch adds an extra config option
`vm_to_heat_api_insecure` (defaults to False), and when enabled tests will
pass the correct option to the curl or cfn-signal commands running from
instance's user data via new parameters that test templates are now
accepting.

Related-prod: PRODX-351

Change-Id: I94a82caf1fcb6999151ff1e6fbbe1e2ba211bbb9