From 21af4f6a1ac489c9b7dff7466f81b6aad9fe1892 Mon Sep 17 00:00:00 2001 From: Dusty Mabe Date: Mon, 17 Nov 2025 15:40:40 -0500 Subject: [PATCH] mantle/kola: add remote resource fetching to fips test This should help us catch cases like [1] where we regressed on FIPS downstream. [1] https://issues.redhat.com/browse/OCPBUGS-65684 --- mantle/kola/tests/fips/fips.go | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/mantle/kola/tests/fips/fips.go b/mantle/kola/tests/fips/fips.go index bc6ebff0e3..c1217305c3 100644 --- a/mantle/kola/tests/fips/fips.go +++ b/mantle/kola/tests/fips/fips.go @@ -1,19 +1,24 @@ package fips import ( + "github.com/coreos/coreos-assembler/mantle/kola" "github.com/coreos/coreos-assembler/mantle/kola/cluster" "github.com/coreos/coreos-assembler/mantle/kola/register" "github.com/coreos/coreos-assembler/mantle/platform/conf" ) func init() { - // Minimal test case to test FIPS enabling at first boot + // Minimal test case to test FIPS enabling at first boot. + // Also tests that using TLS works in FIPS mode by having Ignition + // fetch a remote resource to make sure [1] doesn't happen again. + // [1] https://issues.redhat.com/browse/OCPBUGS-65684 register.RegisterTest(®ister.Test{ Run: fipsEnableTest, ClusterSize: 1, Name: `fips.enable`, Description: "Verify that fips enabled works.", Flags: []register.Flag{}, + Tags: []string{kola.NeedsInternetTag}, Distros: []string{"rhcos"}, UserData: conf.Ignition(`{ "ignition": { @@ -46,6 +51,12 @@ func init() { "verification": {} }, "mode": 420 + }, + { + "path": "/var/resource/https", + "contents": { + "source": "https://ignition-test-fixtures.s3.amazonaws.com/resources/anonymous" + } } ] }