Currently, there is not test for just running renew-crypto to only renew the cluster certificate (and not the node certificates). This patches adds the test.
Signed-off-by: Helga Velroyen <[email protected]> --- qa/qa_cluster.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/qa/qa_cluster.py b/qa/qa_cluster.py index 1dfc49a..4aad0a5 100644 --- a/qa/qa_cluster.py +++ b/qa/qa_cluster.py @@ -1245,6 +1245,12 @@ def TestClusterRenewCrypto(): _AssertSsconfCertFiles(master) AssertCommand(["gnt-cluster", "verify"]) + # Only renew cluster certificate + AssertCommand(["gnt-cluster", "renew-crypto", "--force", + "--new-cluster-certificate"]) + _AssertSsconfCertFiles(master) + AssertCommand(["gnt-cluster", "verify"]) + # Restore RAPI certificate AssertCommand(["gnt-cluster", "renew-crypto", "--force", "--rapi-certificate=%s" % rapi_cert_backup]) -- 2.2.0.rc0.207.ga3a616c
