Merge pull request #92 from d34dh0r53/tlse-kuttls

Add TLSe KUTTL Tests

config/samples/tls-e/barbican_v1beta1_barbican.yaml

@@ -0,0 +1,66 @@
+apiVersion: barbican.openstack.org/v1beta1
+kind: Barbican
+metadata:
+  labels:
+    app.kubernetes.io/name: barbican
+    app.kubernetes.io/instance: barbican
+    app.kubernetes.io/part-of: barbican-operator
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/created-by: barbican-operator
+  name: barbican
+spec:
+  serviceAccount: barbican
+  serviceUser: barbican
+  databaseInstance: openstack
+  databaseUser: barbican
+  rabbitMqCusterName: barbican_rabbit
+  secret: osp-secret
+  passwordSelectors:
+    database: BarbicanDatabasePassword
+    service: BarbicanPassword
+  preserveJobs: true
+  nodeSelector:
+    node: controller
+  customServiceConfig: |
+    [DEFAULT]
+    debug = True
+  defaultConfigOverwrite:
+    policy.json: |
+      {"some": "custom policy"}
+  barbicanAPI:
+    nodeSelector:
+      optional_override: here
+    customServiceConfig: |
+      [optional]
+      overrides = True
+    defautlConfigOverwrite:
+      optional_policy.json: |
+        {"some": "custom policy"}
+    passwordSelectors:
+      database: BarbicanDatabasePassword
+      service: BarbicanPassword
+    tls:
+      api:
+        internal:
+          secretName: cert-barbican-internal-svc
+        public:
+          secretName: cert-barbican-public-svc
+      caBundleSecretName: combined-ca-bundle
+  barbicanWorker:
+    nodeSelector:
+      optional_override: here
+    customServiceConfig: |
+      [optional]
+      overrides = True
+    defautlConfigOverwrite:
+      optional_policy.json: |
+        {"some": "custom policy"}
+  barbicanKeystoneListener:
+    nodeSelector:
+      optional_override: here
+    customServiceConfig: |
+      [optional]
+      overrides = True
+    defautlConfigOverwrite:
+      optional_policy.json: |
+        {"some": "custom policy"}

config/samples/tls-e/kustomization.yaml

@@ -0,0 +1,4 @@
+## Append samples you want in your CSV to this file as resources ##
+resources:
+  - barbican_v1beta1_barbican.yaml
+#+kubebuilder:scaffold:manifestskustomizesamples

tests/kuttl/tests/barbican_tls/00-assert.yaml

@@ -0,0 +1,20 @@
+#
+# Check for:
+#
+# - 2 tls cert secrets
+# - 1 tls ca bundle secrets
+
+apiVersion: v1
+kind: secret
+metadata:
+  name: cert-barbican-internal-svc
+---
+apiVersion: v1
+kind: secret
+metadata:
+  name: cert-barbican-public-svc
+---
+apiVersion: v1
+kind: secret
+metadata:
+  name: combined-ca-bundle

tests/kuttl/tests/barbican_tls/00-tls_ca_bundle.yaml

@@ -0,0 +1,65 @@
+#
+# Internal CA created with:
+#
+# apiVersion: cert-manager.io/v1
+# kind: Issuer
+# metadata:
+#   name: rootca-kuttl-internal
+#   namespace: openstack
+# spec:
+#   ca:
+#     secretName: rootca-kuttl-internal
+#
+# apiVersion: cert-manager.io/v1
+# kind: Certificate
+# metadata:
+#   name: rootca-kuttl-internal
+#   namespace: openstack
+# spec:
+#   commonName: rootca-kuttl-internal
+#   duration: 87600h0m0s
+#   isCA: true
+#   issuerRef:
+#     name: selfsigned-issuer
+#   privateKey:
+#     algorithm: ECDSA
+#     size: 256
+#   secretName: rootca-kuttl-internal
+#
+# External CA created with:
+#
+# apiVersion: cert-manager.io/v1
+# kind: Issuer
+# metadata:
+#   name: rootca-kuttl-public
+#   namespace: openstack
+# spec:
+#   ca:
+#     secretName: rootca-kuttl-public
+#
+# apiVersion: cert-manager.io/v1
+# kind: Certificate
+# metadata:
+#   name: rootca-kuttl-public
+#   namespace: openstack
+# spec:
+#   commonName: rootca-kuttl-public
+#   duration: 87600h0m0s
+#   isCA: true
+#   issuerRef:
+#     name: selfsigned-issuer
+#   privateKey:
+#     algorithm: ECDSA
+#     size: 256
+#   secretName: rootca-kuttl-public
+#
+# Then extracted both CAs and created added them as the bundle:
+apiVersion: v1
+data:
+  tls-ca-bundle.pem: IyByb290Y2EtaW50ZXJuYWwKLS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJmekNDQVNhZ0F3SUJBZ0lRUWxlcTNZcDBtU2kwVDNiTm03Q29UVEFLQmdncWhrak9QUVFEQWpBZ01SNHcKSEFZRFZRUURFeFZ5YjI5MFkyRXRhM1YwZEd3dGFXNTBaWEp1WVd3d0hoY05NalF3TVRFMU1URTBOelUwV2hjTgpNelF3TVRFeU1URTBOelUwV2pBZ01SNHdIQVlEVlFRREV4VnliMjkwWTJFdGEzVjBkR3d0YVc1MFpYSnVZV3d3CldUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTRk9rNHJPUldVUGhoTjUrK09EN1I2MW5Gb1lBY0QKenpvUS91SW93NktjeGhwRWNQTDFxb3ZZUGxUYUJabEh3c2FpNE50VHA4aDA1RHVRSGZKOE9JNXFvMEl3UURBTwpCZ05WSFE4QkFmOEVCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVXE3TGtFSk1TCm1MOVpKWjBSOUluKzZkclhycEl3Q2dZSUtvWkl6ajBFQXdJRFJ3QXdSQUlnVlN1K00ydnZ3QlF3eTJHMVlhdkkKQld2RGtSNlRla0I5U0VqdzJIblRSMWtDSUZSNFNkWGFPQkFGWjVHa2RLWCtSY2IzaDFIZm52eFJEVW96bTl2agphenp3Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0KIyByb290Y2EtcHVibGljCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlCZXpDQ0FTS2dBd0lCQWdJUU5IREdZc0JzNzk4aWJERDdxL28ybGpBS0JnZ3Foa2pPUFFRREFqQWVNUnd3CkdnWURWUVFERXhOeWIyOTBZMkV0YTNWMGRHd3RjSFZpYkdsak1CNFhEVEkwTURFeE5URXdNVFV6TmxvWERUTTAKTURFeE1qRXdNVFV6Tmxvd0hqRWNNQm9HQTFVRUF4TVRjbTl2ZEdOaExXdDFkSFJzTFhCMVlteHBZekJaTUJNRwpCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkQ3OGF2WHFocmhDNXc4czlXa2Q0SXBiZUV1MDNDUitYWFVkCmtEek9SeXhhOXdjY0lkRGl2YkdKakpGWlRUY1ZtYmpxMUJNWXNqcjEyVUlFNUVUM1ZscWpRakJBTUE0R0ExVWQKRHdFQi93UUVBd0lDcERBUEJnTlZIUk1CQWY4RUJUQURBUUgvTUIwR0ExVWREZ1FXQkJUS0ppeldVSjllVUtpMQpkczBscjZjNnNEN0VCREFLQmdncWhrak9QUVFEQWdOSEFEQkVBaUJJWndZcTYxQnFNSmFCNlVjRm9Sc3hlY3dICjV6L3pNT2RyT3llMG1OaThKZ0lnUUxCNHdES3JwZjl0WDJsb00rMHVUb3BBRFNZSW5yY2ZWdTRGQnVZVTNJZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
+kind: Secret
+metadata:
+  labels:
+    combined-ca-bundle: ""
+  name: combined-ca-bundle
+type: Opaque

tests/kuttl/tests/barbican_tls/00-tls_cert_barbican-internal-svc.yaml

@@ -0,0 +1,44 @@
+#
+# Cert created with:
+#
+# apiVersion: cert-manager.io/v1
+# kind: Certificate
+# metadata:
+#   name: barbican-kuttl-internal-svc
+#   namespace: openstack
+# spec:
+#   dnsNames:
+#   - barbican-default-internal.openstack.svc
+#   duration: 87600h0m0s
+#   issuerRef:
+#     group: cert-manager.io
+#     kind: Issuer
+#     name: rootca-kuttl-internal
+#   secretName: cert-barbican-default-internal-svc
+#   secretTemplate: {}
+#   usages:
+#   - key encipherment
+#   - digital signature
+#   - server auth
+#
+
+apiVersion: v1
+data:
+  ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJmekNDQVNhZ0F3SUJBZ0lRUWxlcTNZcDBtU2kwVDNiTm03Q29UVEFLQmdncWhrak9QUVFEQWpBZ01SNHcKSEFZRFZRUURFeFZ5YjI5MFkyRXRhM1YwZEd3dGFXNTBaWEp1WVd3d0hoY05NalF3TVRFMU1URTBOelUwV2hjTgpNelF3TVRFeU1URTBOelUwV2pBZ01SNHdIQVlEVlFRREV4VnliMjkwWTJFdGEzVjBkR3d0YVc1MFpYSnVZV3d3CldUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTRk9rNHJPUldVUGhoTjUrK09EN1I2MW5Gb1lBY0QKenpvUS91SW93NktjeGhwRWNQTDFxb3ZZUGxUYUJabEh3c2FpNE50VHA4aDA1RHVRSGZKOE9JNXFvMEl3UURBTwpCZ05WSFE4QkFmOEVCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVXE3TGtFSk1TCm1MOVpKWjBSOUluKzZkclhycEl3Q2dZSUtvWkl6ajBFQXdJRFJ3QXdSQUlnVlN1K00ydnZ3QlF3eTJHMVlhdkkKQld2RGtSNlRla0I5U0VqdzJIblRSMWtDSUZSNFNkWGFPQkFGWjVHa2RLWCtSY2IzaDFIZm52eFJEVW96bTl2agphenp3Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+  tls.crt: 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
+  tls.key: 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
+kind: Secret
+metadata:
+  annotations:
+    cert-manager.io/alt-names: barbican-internal.openstack.svc
+    cert-manager.io/certificate-name: barbican-kuttl-internal-svc
+    cert-manager.io/common-name: ""
+    cert-manager.io/ip-sans: ""
+    cert-manager.io/issuer-group: cert-manager.io
+    cert-manager.io/issuer-kind: Issuer
+    cert-manager.io/issuer-name: rootca-kuttl-internal
+    cert-manager.io/uri-sans: ""
+  labels:
+    controller.cert-manager.io/fao: "true"
+  name: cert-barbican-internal-svc
+type: kubernetes.io/tls

tests/kuttl/tests/barbican_tls/00-tls_cert_barbican-public-svc.yaml

@@ -0,0 +1,44 @@
+#
+# Cert created with:
+#
+# apiVersion: cert-manager.io/v1
+# kind: Certificate
+# metadata:
+#   name: barbican-kuttl-public-svc
+#   namespace: openstack
+# spec:
+#   dnsNames:
+#   - barbican-default-public.openstack.svc
+#   duration: 87600h0m0s
+#   issuerRef:
+#     group: cert-manager.io
+#     kind: Issuer
+#     name: rootca-kuttl-public
+#   secretName: cert-barbican-default-public-svc
+#   secretTemplate: {}
+#   usages:
+#   - key encipherment
+#   - digital signature
+#   - server auth
+#
+
+apiVersion: v1
+data:
+  ca.crt: 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
+  tls.crt: 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
+  tls.key: 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
+kind: Secret
+metadata:
+  annotations:
+    cert-manager.io/alt-names: barbican-public.openstack.svc
+    cert-manager.io/certificate-name: barbican-kuttl-public-svc
+    cert-manager.io/common-name: ""
+    cert-manager.io/ip-sans: ""
+    cert-manager.io/issuer-group: cert-manager.io
+    cert-manager.io/issuer-kind: Issuer
+    cert-manager.io/issuer-name: rootca-kuttl-public
+    cert-manager.io/uri-sans: ""
+  labels:
+    controller.cert-manager.io/fao: "true"
+  name: cert-barbican-public-svc
+type: kubernetes.io/tls