octavia_tempest_plugin.tests.barbican_scenario.v2 package

Submodules

octavia_tempest_plugin.tests.barbican_scenario.v2.test_tls_barbican module

class TLSWithBarbicanTest(*args, **kwargs)

Bases: LoadBalancerBaseTestWithCompute

classmethod resource_setup()

Setup resources needed by the tests.

classmethod skip_checks()

Check if we should skip all of the children tests.

test_alpn_fallback_tls_traffic()

Test idempotent id: ee0d15a3-05b7-498d-9b2f-280d4896e597

Test ALPN protocol negotiation fallback

test_alpn_proto_not_supported_tls_traffic()

Test idempotent id: 56f4274a-ebd9-42f7-b897-baebc4b8eb5b

Test failed ALPN protocol negotiation

test_alpn_tls_traffic()

Test idempotent id: 19bade6f-302f-45dc-b316-553f1dfff49c

Test ALPN protocol negotiation

test_basic_h2_listener_http_listener_pool_reencryption()

Test idempotent id: d3e4c5fe-1726-49e4-b0b0-7a5a47749fc9

Test both h2 and HTTP traffic on the same load balancer.

In this test we deploy the following Octavia resources:

HTTPS_TERMINATED listener with h2 alpn protocols HTTP listener HTTP pool with both h2 alpn protocols and backend re-encryption

we send both h2 and http traffic from a client to the load balancer vip and we make sure h2 traffic was negotiated when it was sent on 443 port :raises self.skipException: ALPN support for pools not available prior to v2.24.

test_basic_tls_SNI_multi_listener_traffic()

Test idempotent id: bfac9bf4-8cd0-4519-8d99-5ad0c75abf5c

Make sure certificates are only used on the correct listeners.

test_basic_tls_SNI_traffic()

Test idempotent id: 08405802-4411-4454-b008-8607408f424a

test_basic_tls_traffic()

Test idempotent id: 887ece26-0f7b-4933-89ab-5bb00b106ee0

test_http_1_1_tls_hsts_traffic()

Test idempotent id: 7436c6b7-44be-4544-a40b-31d2b7b2ad0b

test_http_1_1_tls_traffic()

Test idempotent id: a0dff0f2-d53e-497c-9ded-dca64e82991f

test_http_2_tls_traffic()

Test idempotent id: 9965828d-24af-4fa0-91ae-21c6bc47ab4c

test_mixed_http_https_traffic()

Test idempotent id: dcf11f78-7af3-4832-b716-9a01648f439c

test_pool_reencryption()

Test idempotent id: ee0faf71-d11e-4323-8673-e5e15779749b

test_pool_reencryption_client_authentication()

Test idempotent id: 11b67c96-a553-4b47-9fc6-4c3d7a2a10ce

test_tls_client_auth_mandatory()

Test idempotent id: af6bb7d2-acbb-4f6e-861f-39a2a3f02331

test_tls_client_auth_optional()

Test idempotent id: 42d696bf-e7f5-44f0-9331-4a5e01d69ef3

test_tls_multi_listener_client_auth()

Test idempotent id: 13271ce6-f9f7-4017-a017-c2fc390b9438

Test client authentication in a multi-listener LB.

Validates that certificates and CRLs don’t get cross configured between multiple listeners on the same load balancer.

test_tls_prometheus_client_auth_mandatory()

Test idempotent id: 7d9dcae6-3e2c-4eae-9bfb-1ef0d00aa530

Module contents