02-assert.yaml

apiVersion: v1
kind: Secret
metadata:
  name: cert-generic-service1-default-edpm-compute-0
  annotations:
    cert-manager.io/certificate-name: generic-service1-default-edpm-compute-0
    cert-manager.io/issuer-group: cert-manager.io
    cert-manager.io/issuer-kind: Issuer
    cert-manager.io/issuer-name: rootca-internal
  labels:
    hostname: edpm-compute-0
    osdp-service: generic-service1
    osdp-service-cert-key: default
    osdpns: openstack-edpm-tls
type: kubernetes.io/tls
---
apiVersion: v1
kind: Secret
metadata:
  name: cert-generic-service1-default-edpm-compute-1
  annotations:
    cert-manager.io/certificate-name: generic-service1-default-edpm-compute-1
    cert-manager.io/issuer-group: cert-manager.io
    cert-manager.io/issuer-kind: Issuer
    cert-manager.io/issuer-name: rootca-internal
  labels:
    hostname: edpm-compute-1
    osdp-service: generic-service1
    osdp-service-cert-key: default
    osdpns: openstack-edpm-tls
type: kubernetes.io/tls
---
apiVersion: v1
kind: Secret
metadata:
  name: cert-generic-service1-default-edpm-compute-2
  annotations:
    cert-manager.io/certificate-name: generic-service1-default-edpm-compute-2
    cert-manager.io/issuer-group: cert-manager.io
    cert-manager.io/issuer-kind: Issuer
    cert-manager.io/issuer-name: rootca-internal
  labels:
    hostname: edpm-compute-2
    osdp-service: generic-service1
    osdp-service-cert-key: default
    osdpns: openstack-edpm-tls
type: kubernetes.io/tls
---
# validate the alt-names - which is a list with elements that can be in any order
apiVersion: kuttl.dev/v1beta1
kind: TestAssert
commands:
  - script: |
      template='{{index .metadata.annotations "cert-manager.io/alt-names" }}'
      names=$(oc get secret cert-generic-service1-default-edpm-compute-0 -n openstack-kuttl-tests -o go-template="$template")
      echo $names > test123.data
      regex="(?=.*(edpm-compute-0\.internalapi\.example\.com))(?=.*(edpm-compute-0\.storage\.example\.com))(?=.*(edpm-compute-0\.tenant\.example\.com))(?=.*(edpm-compute-0\.ctlplane\.example\.com))"
      matches=$(grep -P "$regex" test123.data)
      rm test123.data
      if [ -z "$matches" ]; then
         echo "bad match: $names"
         exit 1
      else
         exit 0
      fi
---
apiVersion: v1
kind: Secret
metadata:
  name: openstack-edpm-tls-generic-service1-default-certs-0
  labels:
    numberOfSecrets: "3"
    secretNumber: "0"
  ownerReferences:
  - apiVersion: dataplane.openstack.org/v1beta1
    kind: OpenStackDataPlaneNodeSet
    name: openstack-edpm-tls
type: Opaque
---
apiVersion: v1
kind: Secret
metadata:
  name: openstack-edpm-tls-generic-service1-default-certs-1
  labels:
    numberOfSecrets: "3"
    secretNumber: "1"
  ownerReferences:
  - apiVersion: dataplane.openstack.org/v1beta1
    kind: OpenStackDataPlaneNodeSet
    name: openstack-edpm-tls
type: Opaque
---
apiVersion: v1
kind: Secret
metadata:
  name: openstack-edpm-tls-generic-service1-default-certs-2
  labels:
    numberOfSecrets: "3"
    secretNumber: "2"
  ownerReferences:
  - apiVersion: dataplane.openstack.org/v1beta1
    kind: OpenStackDataPlaneNodeSet
    name: openstack-edpm-tls
type: Opaque
---
apiVersion: batch/v1
kind: Job
metadata:
  generation: 1
  labels:
    app: openstackansibleee
    openstackdataplanedeployment: openstack-edpm-tls
    openstackdataplanenodeset: openstack-edpm-tls
    openstackdataplaneservice: install-certs-ovr
  name: install-certs-ovr-openstack-edpm-tls-openstack-edpm-tls
  namespace: openstack-kuttl-tests
  ownerReferences:
  - apiVersion: dataplane.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackDataPlaneDeployment
    name: openstack-edpm-tls
spec:
  backoffLimit: 6
  completionMode: NonIndexed
  completions: 1
  manualSelector: false
  parallelism: 1
  podReplacementPolicy: TerminatingOrFailed
  suspend: false
  template:
    metadata:
      labels:
        app: openstackansibleee
        openstackdataplanedeployment: openstack-edpm-tls
        openstackdataplanenodeset: openstack-edpm-tls
        openstackdataplaneservice: install-certs-ovr
    spec:
      containers:
      - args:
        - ansible-runner
        - run
        - /runner
        - -p
        - playbook.yaml
        - -i
        - install-certs-ovr-openstack-edpm-tls-openstack-edpm-tls
        env:
        - name: ANSIBLE_FORCE_COLOR
          value: "True"
        - name: RUNNER_PLAYBOOK
          value: |2+

            - hosts: localhost
              gather_facts: no
              name: kuttl play
              tasks:
                - name: Sleep
                  command: sleep 1
                  delegate_to: localhost


        - name: RUNNER_EXTRA_VARS
          value: |2+

            edpm_override_hosts: openstack-edpm-tls
            edpm_service_type: install-certs-ovr


        imagePullPolicy: Always
        name: install-certs-ovr-openstack-edpm-tls-openstack-edpm-tls
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/lib/openstack/cacerts/install-certs-ovr
          name: install-certs-ovr-combined-ca-bundle
        - mountPath: /var/lib/openstack/certs/generic-service1/default
          name: openstack-edpm-tls-generic-service1-default-certs-0
        - mountPath: /var/lib/openstack/cacerts/generic-service1
          name: generic-service1-combined-ca-bundle
        - mountPath: /runner/env/ssh_key/ssh_key_openstack-edpm-tls
          name: ssh-key-openstack-edpm-tls
          subPath: ssh_key_openstack-edpm-tls
        - mountPath: /runner/inventory/hosts
          name: inventory
          subPath: inventory
      restartPolicy: Never
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: openstack-edpm-tls
      serviceAccountName: openstack-edpm-tls
      terminationGracePeriodSeconds: 30
      volumes:
      - name: install-certs-ovr-combined-ca-bundle
        secret:
          defaultMode: 420
          secretName: combined-ca-bundle
      - name: openstack-edpm-tls-generic-service1-default-certs-0
        projected:
          defaultMode: 420
          sources:
          - secret:
              name: openstack-edpm-tls-generic-service1-default-certs-0
          - secret:
              name: openstack-edpm-tls-generic-service1-default-certs-1
          - secret:
              name: openstack-edpm-tls-generic-service1-default-certs-2
      - name: generic-service1-combined-ca-bundle
        secret:
          defaultMode: 420
          secretName: combined-ca-bundle
      - name: ssh-key-openstack-edpm-tls
        secret:
          defaultMode: 384
          items:
          - key: ssh-privatekey
            path: ssh_key_openstack-edpm-tls
          secretName: dataplane-ansible-ssh-private-key-secret
      - name: inventory
        secret:
          defaultMode: 420
          items:
          - key: inventory
            path: inventory
          secretName: dataplanenodeset-openstack-edpm-tls
status:
  succeeded: 1
  uncountedTerminatedPods: {}
---
apiVersion: batch/v1
kind: Job
metadata:
  generation: 1
  labels:
    app: openstackansibleee
    openstackdataplanedeployment: openstack-edpm-tls
    openstackdataplanenodeset: openstack-edpm-tls
    openstackdataplaneservice: generic-service1
  name: generic-service1-openstack-edpm-tls-openstack-edpm-tls
  namespace: openstack-kuttl-tests
  ownerReferences:
  - apiVersion: dataplane.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackDataPlaneDeployment
    name: openstack-edpm-tls
spec:
  backoffLimit: 6
  completionMode: NonIndexed
  completions: 1
  manualSelector: false
  parallelism: 1
  podReplacementPolicy: TerminatingOrFailed
  suspend: false
  template:
    metadata:
      labels:
        app: openstackansibleee
        openstackdataplanedeployment: openstack-edpm-tls
        openstackdataplanenodeset: openstack-edpm-tls
        openstackdataplaneservice: generic-service1
    spec:
      containers:
      - args:
        - ansible-runner
        - run
        - /runner
        - -p
        - playbook.yaml
        - -i
        - generic-service1-openstack-edpm-tls-openstack-edpm-tls
        env:
        - name: ANSIBLE_FORCE_COLOR
          value: "True"
        - name: RUNNER_PLAYBOOK
          value: |2+

            - hosts: localhost
              gather_facts: no
              name: kuttl play
              tasks:
                - name: Sleep
                  command: sleep 1
                  delegate_to: localhost


        - name: RUNNER_EXTRA_VARS
          value: |2+

            edpm_override_hosts: openstack-edpm-tls
            edpm_service_type: generic-service1


        imagePullPolicy: Always
        name: generic-service1-openstack-edpm-tls-openstack-edpm-tls
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/lib/openstack/cacerts/generic-service1
          name: generic-service1-combined-ca-bundle
        - mountPath: /runner/env/ssh_key/ssh_key_openstack-edpm-tls
          name: ssh-key-openstack-edpm-tls
          subPath: ssh_key_openstack-edpm-tls
        - mountPath: /runner/inventory/hosts
          name: inventory
          subPath: inventory
      restartPolicy: Never
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: openstack-edpm-tls
      serviceAccountName: openstack-edpm-tls
      terminationGracePeriodSeconds: 30
      volumes:
      - name: generic-service1-combined-ca-bundle
        secret:
          defaultMode: 420
          secretName: combined-ca-bundle
      - name: ssh-key-openstack-edpm-tls
        secret:
          defaultMode: 384
          items:
          - key: ssh-privatekey
            path: ssh_key_openstack-edpm-tls
          secretName: dataplane-ansible-ssh-private-key-secret
      - name: inventory
        secret:
          defaultMode: 420
          items:
          - key: inventory
            path: inventory
          secretName: dataplanenodeset-openstack-edpm-tls
status:
  succeeded: 1
  uncountedTerminatedPods: {}