classes:
  - service.runtest.tempest.cert
  - service.runtest.tempest.test_accounts
parameters:
  _param:
    # barbican tempest tests require admin accounts access
    runtest_tempest_test_accounts_admin_access_enabled: True
    runtest_tempest_test_accounts_roles:
      - creator
      - key-manager:service-admin
  barbican:
    client:
      enabled: True
      resources:
        v1:
          enabled: true
          cloud_name: admin_identity
          secrets:
            TestSecret:
              type: certificate
              algorithm: RSA
              payload_content_type: application/octet-stream
              payload_content_encoding: base64
              payload_path: ${_param:tempest_cert_file}
              encodeb64_payload: true
  runtest:
    tempest:
      test_cert_key: ${_param:tempest_cert_key}
      test_cert_crt: ${_param:tempest_cert_file}
      barbican_secret_name: TestSecret