Skip to content

scs-0128: remove ListUserImagesTest due to Glance format enforcement - #1300

Open
shresth-kumar-lal wants to merge 1 commit into
SovereignCloudStack:mainfrom
shresth-kumar-lal:fix-1299-glance-format-enforcement
Open

shresth-kumar-lal wants to merge 1 commit into
SovereignCloudStack:mainfrom
shresth-kumar-lal:fix-1299-glance-format-enforcement

Conversation

@shresth-kumar-lal

Copy link
Copy Markdown

Description

Glance now enforces image format validation by default to mitigate security vulnerabilities (OSSA-2024-001). Under strict format validation, Tempest tests under ListUserImagesTest fail because bogus/synthetic test payloads uploaded during test setup are rejected by Glance.

Following the discussion in #1299, these tests are incompatible with upstream Glance security defaults and should be removed from the non-admin test suite.

Changes

  • Removed tempest.api.image.v2.test_images.ListUserImagesTest.* from Tests/iaas/scs_0128_e2e_testing/tempest-tests-non-admin.lst.

Fixes #1299.

OpenStack Glance enables image format enforcement by default following
OSSA-2024-001. Under format enforcement, Tempest's ListUserImagesTest
fails because dummy/synthetic image data uploaded during test setup is
rejected by Glance.

Remove these tests from tempest-tests-non-admin.lst to prevent false
failures against compliant Glance deployments.

Fixes SovereignCloudStack#1299

Signed-off-by: Shresth Kumar Lal <shresthkumarlal@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

glance image_format_enforcement breaks test - bogus image data not allowed

1 participant