Commit 41ba1db3 authored by Helga Velroyen's avatar Helga Velroyen

QA: test renewing the cluster certificate only

Currently, there is not test for just running renew-crypto
to only renew the cluster certificate (and not the node
certificates). This patches adds the test.
Signed-off-by: default avatarHelga Velroyen <helgav@google.com>
Reviewed-by: default avatarKlaus Aehlig <aehlig@google.com>
parent 0d91aad4
......@@ -1245,6 +1245,12 @@ def TestClusterRenewCrypto():
_AssertSsconfCertFiles(master)
AssertCommand(["gnt-cluster", "verify"])
# Only renew cluster certificate
AssertCommand(["gnt-cluster", "renew-crypto", "--force",
"--new-cluster-certificate"])
_AssertSsconfCertFiles(master)
AssertCommand(["gnt-cluster", "verify"])
# Restore RAPI certificate
AssertCommand(["gnt-cluster", "renew-crypto", "--force",
"--rapi-certificate=%s" % rapi_cert_backup])
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment