Skip to content

Add negative testing to Loki pipeline to verify mTLS is enforcing security rules#339

Open
myadla wants to merge 19 commits into
masterfrom
myadla_loki_neg_tests
Open

Add negative testing to Loki pipeline to verify mTLS is enforcing security rules#339
myadla wants to merge 19 commits into
masterfrom
myadla_loki_neg_tests

Conversation

@myadla
Copy link
Copy Markdown
Contributor

@myadla myadla commented Mar 23, 2026 •
edited
Loading

Task files below verify mTLS is enforcing security rules

    roles/telemetry_chargeback/tasks/neg_loki_nocerts.yml
    roles/telemetry_chargeback/tasks/neg_loki_unknown_certs.yml

myadla added 18 commits February 2, 2026 15:53
@myadla
Add playbooks to push and retreive ck data log to/from loki
e25c057
@myadla
Modified data stream to query serivce:cloudkitty
f16c300
@myadla
Removed hosts and var and included in main.yml
e0ed228
@myadla
Added a playbook to flush the data to loki storage
b6eea33
@myadla
Made changes to gix ansible lint errors
b15808f
@myadla
Modified playbooks to count the no. of data streams being ingested
df5792a
@myadla
Modified the message to count the correct data entries
bbf254d
@myadla
Addressed all comments and made modifications to the files
0fe68b8
@myadla
Added setup_loki_env.yaml to handle both URL discovery and Certificat…
00e2df0 
…e extraction
@myadla
Removed the redundant certs task from setup loki file
8fdaa9a
@myadla
Modified retrieve_loki file to change limit_logs to limit
5f578bf
@myadla
Renamed mTLS certs names in defaults/main.yml
57b0056
@myadla
Fixed ansible lint errors by rename namespace to openstack_ns
2773c25
@myadla
Removed logs_dir var from defaults/main.yml and using it from ci/var/…
793622e 
…common.yml
@myadla
Added new line in vars/main.yml
8b4ffdb
@myadla
Removed tags from tasks/main.yml
4443fe8
@myadla
explicitly override any inherited settings by adding ignore_errors: f…
d4f8afb 
…alse
@myadla
Add negative testing to Loki pipeline to verify mTLS is enforcing sec…
c69a65e 
…urity rules

OSPRH-26821
@myadla myadla marked this pull request as draft March 23, 2026 22:06
@softwarefactory-project-zuul
Copy link
Copy Markdown

softwarefactory-project-zuul Bot commented Mar 24, 2026

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/d92bb6eb3a094459b2f1df3dcad7c423

✔️ telemetry-openstack-meta-content-provider-master SUCCESS in 2h 08m 19s
❌ functional-chargeback-tests-osp18 FAILURE in 1h 46m 48s
✔️ feature-verification-tests-noop SUCCESS in 5s
❌ functional-tests-osp18 FAILURE in 1h 49m 49s

@softwarefactory-project-zuul
Copy link
Copy Markdown

softwarefactory-project-zuul Bot commented Mar 24, 2026

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/01e53512affa4bc6b6f0e2144935e8f1

✔️ telemetry-openstack-meta-content-provider-master SUCCESS in 2h 08m 04s
❌ functional-chargeback-tests-osp18 FAILURE in 1h 46m 21s
✔️ feature-verification-tests-noop SUCCESS in 5s
❌ functional-tests-osp18 FAILURE in 1h 49m 53s

@myadla
Copy link
Copy Markdown
Contributor Author

myadla commented Mar 26, 2026

recheck

@softwarefactory-project-zuul
Copy link
Copy Markdown

softwarefactory-project-zuul Bot commented Mar 26, 2026

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/bccc7647de794bdcb5c67a7593331706

✔️ telemetry-openstack-meta-content-provider-master SUCCESS in 2h 33m 32s
❌ functional-chargeback-tests-osp18 FAILURE in 29m 43s
✔️ feature-verification-tests-noop SUCCESS in 4s
✔️ functional-tests-osp18 SUCCESS in 2h 15m 16s

@myadla
Copy link
Copy Markdown
Contributor Author

myadla commented Apr 6, 2026

recheck

@softwarefactory-project-zuul
Copy link
Copy Markdown

softwarefactory-project-zuul Bot commented Apr 6, 2026

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/2895550ab22942549f21162c5eb2e459

✔️ telemetry-openstack-meta-content-provider-master SUCCESS in 2h 09m 10s
❌ functional-chargeback-tests-osp18 FAILURE in 1h 09m 36s
✔️ feature-verification-tests-noop SUCCESS in 4s
❌ functional-tests-osp18 FAILURE in 1h 52m 15s

@myadla myadla force-pushed the myadla_loki_neg_tests branch from edb32ad to aed777f Compare April 7, 2026 01:30
@myadla myadla marked this pull request as ready for review April 9, 2026 15:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@myadla