Glance image signing
This patch adds ability to sign glance images and add required users
to secret acl used in image signing, This is required in order to
full tempest can pass with barbican enabled.
Depends-On: Idad75a8445a874e62c2e2d729cb8e98d7a37d6bd
Depends-On: I9d885aa9b139b440dcbc08263341bc7ff1f38f05
Change-Id: Idc27ff57e8ea6e214495946b3ac45943cfed0460
Related-Prod: https://mirantis.jira.com/browse/PROD-18731
diff --git a/metadata/service/tempest/cert.yml b/metadata/service/tempest/cert.yml
new file mode 100644
index 0000000..1ef2975
--- /dev/null
+++ b/metadata/service/tempest/cert.yml
@@ -0,0 +1,18 @@
+parameters:
+ _param:
+ tempest_ca_hostname: ${linux:system:name}
+ tempest_ca_host: ${_param:tempest_ca_hostname}.${_param:cluster_domain}
+ tempest_ca_authority: salt_master_ca
+ tempest_cert_key: /tmp/test.key
+ tempest_cert_file: /tmp/test.crt
+ salt:
+ minion:
+ cert:
+ tempest:
+ host: ${_param:tempest_ca_host}
+ authority: ${_param:tempest_ca_authority}
+ common_name: tempest_test
+ signing_policy: cert_server
+ key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
+ key_file: ${_param:tempest_cert_key}
+ cert_file: ${_param:tempest_cert_file}