IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

ipatests: mark xfail tests using dnssec

Browse Source 
In fedora 37+, the signing of DNS zones is failing.
Mark xfail the gating tests impacted by this issue, to avoid
breaking the CI gating when we move to f37.

Related: https://pagure.io/freeipa/issue/9216
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>
This commit is contained in:
Florence Blanc-Renaud 2022-09-15 14:20:11 +02:00
parent 4a4f7e76da
commit 96cf293f1f
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ipatests/test_integration/test_dnssec.py
View File

@ -20,6 +20,7 @@ from ipatests.test_integration.base import IntegrationTest
from ipatests.pytest_ipa.integration import tasks from ipatests.pytest_ipa.integration import tasks
from ipatests.pytest_ipa.integration.firewall import Firewall from ipatests.pytest_ipa.integration.firewall import Firewall
from ipaplatform.tasks import tasks as platform_tasks from ipaplatform.tasks import tasks as platform_tasks
from ipaplatform.osinfo import osinfo
from ipaplatform.paths import paths from ipaplatform.paths import paths
from ipapython.dnsutil import DNSResolver from ipapython.dnsutil import DNSResolver
@ -324,6 +325,9 @@ class TestInstallDNSSECFirst(IntegrationTest):
super(TestInstallDNSSECFirst, cls).uninstall(mh) super(TestInstallDNSSECFirst, cls).uninstall(mh)
@pytest.mark.xfail(
osinfo.id == 'fedora' and osinfo.version_number >= (37,),
reason='freeipa ticket 9216', strict=True)
def test_sign_root_zone(self): def test_sign_root_zone(self):
dnszone_add_dnssec(self.master, root_zone) dnszone_add_dnssec(self.master, root_zone)
@ -355,6 +359,9 @@ class TestInstallDNSSECFirst(IntegrationTest):
self.replicas[0].ip, root_zone, timeout=300 self.replicas[0].ip, root_zone, timeout=300
), "Zone %s is not signed (replica)" % root_zone ), "Zone %s is not signed (replica)" % root_zone
@pytest.mark.xfail(
osinfo.id == 'fedora' and osinfo.version_number >= (37,),
reason='freeipa ticket 9216', strict=True)
def test_delegation(self): def test_delegation(self):
dnszone_add_dnssec(self.master, example_test_zone) dnszone_add_dnssec(self.master, example_test_zone)
@ -420,6 +427,9 @@ class TestInstallDNSSECFirst(IntegrationTest):
rtype="DS" rtype="DS"
), "No DS record of '%s' returned from replica" % example_test_zone ), "No DS record of '%s' returned from replica" % example_test_zone
@pytest.mark.xfail(
osinfo.id == 'fedora' and osinfo.version_number >= (37,),
reason='freeipa ticket 9216', strict=True)
def test_chain_of_trust_drill(self): def test_chain_of_trust_drill(self):
""" """
Validate signed DNS records, using our own signed root zone Validate signed DNS records, using our own signed root zone
@ -467,6 +477,9 @@ class TestInstallDNSSECFirst(IntegrationTest):
self.master.run_command(args) self.master.run_command(args)
self.replicas[0].run_command(args) self.replicas[0].run_command(args)
@pytest.mark.xfail(
osinfo.id == 'fedora' and osinfo.version_number >= (37,),
reason='freeipa ticket 9216', strict=True)
def test_chain_of_trust_delv(self): def test_chain_of_trust_delv(self):
""" """
Validate signed DNS records, using our own signed root zone Validate signed DNS records, using our own signed root zone