From 4bc22b420a81874e71d4c3a316554075e54bed4d Mon Sep 17 00:00:00 2001 From: Casey Bodley Date: Tue, 30 Jun 2026 09:33:35 -0400 Subject: [PATCH] Revert "Reapply "qa/rgw/crypt: disable failing kmip testing"" This reverts commit d27261d0c2641e92365cf590684567c58bbfb905. Fixes: https://tracker.ceph.com/issues/77873 Signed-off-by: Casey Bodley (cherry picked from commit c63915350ff7e647b2c9cb9a41c17f5e8a8c03ee) --- qa/suites/rgw/crypt/2-kms/kmip.yaml | 37 +++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 qa/suites/rgw/crypt/2-kms/kmip.yaml diff --git a/qa/suites/rgw/crypt/2-kms/kmip.yaml b/qa/suites/rgw/crypt/2-kms/kmip.yaml new file mode 100644 index 000000000000..0057d954e320 --- /dev/null +++ b/qa/suites/rgw/crypt/2-kms/kmip.yaml @@ -0,0 +1,37 @@ +overrides: + ceph: + conf: + client: + rgw crypt s3 kms backend: kmip + rgw crypt kmip ca path: /etc/ceph/kmiproot.crt + rgw crypt kmip client cert: /etc/ceph/kmip-client.crt + rgw crypt kmip client key: /etc/ceph/kmip-client.key + rgw crypt kmip kms key template: pykmip-$keyid + rgw: + client.0: + use-pykmip-role: client.0 + +tasks: +- openssl_keys: + kmiproot: + client: client.0 + cn: kmiproot + key-type: rsa:4096 + kmip-server: + client: client.0 + ca: kmiproot + kmip-client: + client: client.0 + ca: kmiproot + cn: rgw-client +- exec: + client.0: + - chmod 644 /home/ubuntu/cephtest/ca/kmip-client.key +- pykmip: + client.0: + clientca: kmiproot + servercert: kmip-server + clientcert: kmip-client + secrets: + - name: pykmip-my-key-1 + - name: pykmip-my-key-2 -- 2.47.3