You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Standards/scs-0115-v1-default-rules-for-security-groups.md
-5Lines changed: 0 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -134,8 +134,3 @@ $ openstack default security group rule list
134
134
The spec for introducing configurability for the default Security Groups Rules can be found [here](https://specs.openstack.org/openstack/neutron-specs/specs/2023.2/configurable-default-sg-rules.html).
135
135
136
136
More about Security Groups as a resource in OpenStack can be found [here](https://docs.openstack.org/nova/latest/user/security-groups.html).
137
-
138
-
## Conformance Tests
139
-
140
-
The conformance tests should check for the absence of any ingress traffic rules except traffic from the same Security Group in the `openstack default security group rule list`.
141
-
As having egress rules is allowed by this standard, but not forced and can be set in various ways, the tests should check for presence of any egress rules.
Copy file name to clipboardExpand all lines: Standards/scs-0116-w1-key-manager-implementation-testing.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,13 +41,13 @@ This can be done with a small change in the policy.yaml file. The `creator` has
41
41
42
42
## Automated Tests
43
43
44
-
The check for the presence of a Key Manager is done with a test script, that checks the presence of a Key Manager service in the catalog endpoint of Openstack.
45
-
This check can eventually be moved to the checks for the mandatory an supported service/API list, in case of a promotion of the Key Manager to the mandatory list.
44
+
We implemented the following testcases, in accordance with the standard:
46
45
47
-
### Implementation
46
+
- `scs-0116-presence` ensures that a service of type "key-manager" occurs in the service catalog;
47
+
- `scs-0116-permissions`ensures that a regular user has suitable access to the key-manager API.
48
48
49
-
The script [`check-for-key-manager.py`](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iaas/key-manager/check-for-key-manager.py)
50
-
connects to OpenStack and performs the checks described in this section.
Conformance tests include using the `/v3/{project_id}/backups` Block Storage API endpoint to create a volume and a backup of it as a non-admin user and subsequently restore the backup on a new volume while verifying the success of each operation.
91
-
These tests verify the mandatory part of the standard: providing the Volume Backup API.
92
-
93
-
There is a test suite in [`volume-backup-tester.py`](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iaas/volume-backup/volume-backup-tester.py).
94
-
The test suite connects to the OpenStack API and executes basic operations using the volume backup API to verify that the functionality requested by the standard is available.
95
-
Please consult the associated [README.md](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iaas/volume-backup/README.md) for detailed setup and testing instructions.
96
-
97
-
Note that these tests don't verify the optional part of the standard: providing a separate storage backend for Cinder volume backups.
98
-
This cannot be checked from outside of the infrastructure as it is an architectural property of the infrastructure itself and transparent to customers.
0 commit comments