Unhardcoded [security_compliance] section.
Change-Id: I075e4b7171e037e656f0ee330dbfb1cb15836d2c
Related-PROD: PROD-26638
Related-PROD: PROD-27663
diff --git a/tests/integration/pike/single/config_spec.rb b/tests/integration/pike/single/config_spec.rb
index 5937921..7f7bd01 100644
--- a/tests/integration/pike/single/config_spec.rb
+++ b/tests/integration/pike/single/config_spec.rb
@@ -118,6 +118,18 @@
'remote_id_attribute' => 'HTTP_OIDC_ISS'
}
+keystone_security_compliance = {
+ 'disable_user_account_days_inactive' => '90',
+ 'lockout_failure_attempts' => '5',
+ 'lockout_duration' => '600',
+ 'password_expires_days' => '90',
+ 'unique_last_password_count' => '10',
+ 'minimum_password_age' => '0',
+ 'password_regex' => '^(?=.*\d)(?=.*[a-zA-Z]).{7,}$$',
+ 'password_regex_description' => 'Your password must contains at least 1 letter, 1 digit, and have a minimum length of 7 characters',
+ 'change_password_upon_first_use' => 'True',
+}
+
keystone_federation = {
'cache_group_membership_in_db' => 'True',
}
@@ -215,6 +227,9 @@
its('saml2') {
should include(keystone_saml2)
}
+ its('security_compliance') {
+ should include(keystone_security_compliance)
+ }
its('federation') {
should include(keystone_federation)
}