]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commitdiff
Revert "qa/rgw/crypt: disable failing kmip testing"
authorKyr Shatskyy <kyrylo.shatskyy@clyso.com>
Tue, 7 Apr 2026 14:30:55 +0000 (16:30 +0200)
committerKyr Shatskyy <kyrylo.shatskyy@clyso.com>
Thu, 9 Apr 2026 00:16:10 +0000 (02:16 +0200)
This reverts commit 5df7b44727ebe1ae070b6af7a81bb5bf07681863.

Signed-off-by: Kyr Shatskyy <kyrylo.shatskyy@clyso.com>
qa/suites/rgw/crypt/2-kms/kmip.yaml [new file with mode: 0644]

diff --git a/qa/suites/rgw/crypt/2-kms/kmip.yaml b/qa/suites/rgw/crypt/2-kms/kmip.yaml
new file mode 100644 (file)
index 0000000..0057d95
--- /dev/null
@@ -0,0 +1,37 @@
+overrides:
+  ceph:
+    conf:
+      client:
+        rgw crypt s3 kms backend: kmip
+        rgw crypt kmip ca path: /etc/ceph/kmiproot.crt
+        rgw crypt kmip client cert: /etc/ceph/kmip-client.crt
+        rgw crypt kmip client key: /etc/ceph/kmip-client.key
+        rgw crypt kmip kms key template: pykmip-$keyid
+  rgw:
+    client.0:
+      use-pykmip-role: client.0
+
+tasks:
+- openssl_keys:
+    kmiproot:
+      client: client.0
+      cn: kmiproot
+      key-type: rsa:4096
+    kmip-server:
+      client: client.0
+      ca: kmiproot
+    kmip-client:
+      client: client.0
+      ca: kmiproot
+      cn: rgw-client
+- exec:
+    client.0:
+      - chmod 644 /home/ubuntu/cephtest/ca/kmip-client.key
+- pykmip:
+    client.0:
+      clientca: kmiproot
+      servercert: kmip-server
+      clientcert: kmip-client
+      secrets:
+      - name: pykmip-my-key-1
+      - name: pykmip-my-key-2