Currently the cluster is only verified after a series of
renew-crypto operations is carried out. This makes it hard
to trace errors back to originating call. This patch adds
a verifcation step after each renew-crypto call.

Signed-off-by: Helga Velroyen <[email protected]>
---
 qa/qa_cluster.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/qa/qa_cluster.py b/qa/qa_cluster.py
index adf508a..e8c36df 100644
--- a/qa/qa_cluster.py
+++ b/qa/qa_cluster.py
@@ -1205,14 +1205,17 @@ def TestClusterRenewCrypto():
                    "--new-cluster-certificate", "--new-confd-hmac-key",
                    "--new-rapi-certificate", "--new-cluster-domain-secret",
                    "--new-node-certificates"])
+    AssertCommand(["gnt-cluster", "verify"])
 
     # Only renew node certificates
     AssertCommand(["gnt-cluster", "renew-crypto", "--force",
                    "--new-node-certificates"])
+    AssertCommand(["gnt-cluster", "verify"])
 
     # Restore RAPI certificate
     AssertCommand(["gnt-cluster", "renew-crypto", "--force",
                    "--rapi-certificate=%s" % rapi_cert_backup])
+    AssertCommand(["gnt-cluster", "verify"])
   finally:
     AssertCommand(["rm", "-f", rapi_cert_backup])
 
-- 
2.2.0.rc0.207.ga3a616c

Reply via email to