commit 77d9dacf644b1c8a93dcc35d30d90b046b86c9fa
author Dmitry Teselkin <dteselkin@mirantis.com> Thu Apr 18 16:43:50 2019 +0300
committer Dmitry Teselkin <dteselkin@mirantis.com> Tue Apr 23 09:27:23 2019 +0300
tree 5eb0b682fbc5a389352087cdee35c69fe330750a
parent 0bd43408028d5326663e1c4fbafdc634767f26bb

Allow setting tls_priority option

Add tls_priority config option to libvirtd.conf config.

libvirt-4.0.0 supports this functionality out of the box.

To fully comply with PROD-27620 priority string should be set in reclass
to the following string:

  SECURE256:-VERS-ALL:+VERS-TLS1.2:-KX-ALL:+ECDHE-RSA:+ECDHE-ECDSA:\
  -CIPHER-ALL:+AES-256-GCM:+AES-256-CBC:-MAC-ALL:+AEAD:+SHA384

Also, fix some inconsistiences found:

* tests/pillar/compute_single.sls - change qemu's group name to 'nova' as
  'cinder' does not exists.

Change-Id: I56a8c3726e1af274e2d2fffce8dca4501745519e
Related-Prod: PROD-27620

.kitchen.yml

diff --git a/.kitchen.yml b/.kitchen.yml
index a2ab0d2..24684ec 100644
--- a/.kitchen.yml
+++ b/.kitchen.yml
@@ -87,5 +87,23 @@
             controller:
               version: <%=os_version%>
 <% end %>
+<% for os_version in ['queens', ] %>
+  - name: compute_single_ssl_<%=os_version%>
+    driver:
+      devices:
+        - /dev/mem
+      cap_add:
+        - SYS_RAWIO
+    provisioner:
+      pillars-from-files:
+        compute_single.sls: tests/pillar/compute_single.sls
+        nova.sls: tests/pillar/compute_single_ssl.sls
+        linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
+      pillars:
+        release.sls:
+          nova:
+            compute:
+              version: <%=os_version%>
+<% end %>
 
 # vim: ft=yaml sw=2 ts=2 sts=2 tw=125