tree a8d0424c6b167b0ff7a2ae96ddcd0c0ac7457a81
parent 67962acbee461ccb8802ef82316f4f20aa0051ab
author Lee Yarwood <lyarwood@redhat.com> 1559815039 +0100
committer Lee Yarwood <lyarwood@redhat.com> 1560944885 +0100

compute: Make image certificate validation a configurable feature

tempest.api.compute.servers.test_servers.ServerShowV263Test would
previously always run and provide the optional
trusted_image_certificates parameter to validate the 2.63 API
microversion. However if the test image had not been cached locally this
would actually cause the underlying certificate validation logic within
Nova to be called resulting in the test failing as the test image would
not have the required img_signature_* properties set and the provided
trusted certificates are just test strings.

This change makes this specific test optional (not running by default)
now by introducing two required compute configurables. These allow a
signed image with the required img_signature_* properties set along with
a valid list of trusted image certificates to also be used during the
test.

Ica1d32ca66d6f89692e9cc90e415bf569332f58d is currently attempting to
wire up various image certificate and signature validation tests under
the barbican-tempest-plugin.

Change-Id: Ib346d383c430d5151d9aafa6e856dd0a7cae8a23
Closes-bug: 1831866