test: Use ListenerClass external-unstable; Check SSL hostname in opensearchpy

Author: siegfriedweber

tests/templates/kuttl/ldap/30-test-opensearch.yaml

@@ -22,6 +22,10 @@ spec:
             # required for pip install
             - name: HOME
               value: /stackable
+            - name: NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
           volumeMounts:
             - name: script
               mountPath: /stackable/scripts
@@ -68,9 +72,12 @@ metadata:
   name: test-opensearch
 data:
   test.py: |
+    import os
     from opensearchpy import OpenSearch
 
-    host = 'opensearch'
+    namespace = os.environ['NAMESPACE']
+
+    host = f'opensearch.{namespace}.svc.cluster.local'
     port = 9200
     auth = ('integrationtest', 'integrationtest')
     ca_certs_path = '/stackable/tls/ca.crt'
@@ -81,8 +88,6 @@ data:
         http_auth = auth,
         use_ssl = True,
         verify_certs = True,
-        ssl_assert_hostname = False,
-        ssl_show_warn = False,
         ca_certs = ca_certs_path
     )
 

tests/templates/kuttl/metrics/20-install-opensearch.yaml.j2

@@ -27,7 +27,7 @@ spec:
             storage:
               data:
                 capacity: 100Mi
-          listenerClass: external-stable
+          listenerClass: external-unstable
         replicas: 3
     configOverrides:
       opensearch.yml:

tests/templates/kuttl/opensearch-dashboards/10-install-opensearch.yaml.j2

@@ -23,7 +23,7 @@ spec:
     roleGroups:
       default:
         config:
-          listenerClass: external-stable
+          listenerClass: external-unstable
         replicas: 1
         podOverrides:
           spec:

tests/templates/kuttl/smoke/10-assert.yaml.j2

@@ -869,7 +869,7 @@ metadata:
     kind: OpenSearchCluster
     name: opensearch
 spec:
-  className: external-stable
+  className: external-unstable
   extraPodSelectorLabels: {}
   ports:
   - name: http

tests/templates/kuttl/smoke/10-install-opensearch.yaml.j2

@@ -29,7 +29,7 @@ spec:
             storage:
               data:
                 capacity: 100Mi
-          listenerClass: external-stable
+          listenerClass: external-unstable
         replicas: 3
         podOverrides:
           spec:

tests/templates/kuttl/smoke/20-test-opensearch.yaml

@@ -22,6 +22,10 @@ spec:
             # required for pip install
             - name: HOME
               value: /stackable
+            - name: NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
           volumeMounts:
             - name: script
               mountPath: /stackable/scripts
@@ -70,9 +74,12 @@ data:
   test.py: |
     # https://docs.opensearch.org/docs/latest/clients/python-low-level/#sample-program
 
+    import os
     from opensearchpy import OpenSearch
 
-    host = 'opensearch'
+    namespace = os.environ['NAMESPACE']
+
+    host = f'opensearch.{namespace}.svc.cluster.local'
     port = 9200
     auth = ('admin', 'AJVFsGJBbpT6mChn') # For testing only. Don't store credentials in code.
     ca_certs_path = '/stackable/tls/ca.crt'
@@ -84,8 +91,6 @@ data:
         http_auth = auth,
         use_ssl = True,
         verify_certs = True,
-        ssl_assert_hostname = False,
-        ssl_show_warn = False,
         ca_certs = ca_certs_path
     )
 

tests/templates/kuttl/snapshot-s3/20-install-opensearch.yaml.j2

@@ -20,7 +20,7 @@ spec:
     config:
       logging:
         enableVectorAgent: {{ lookup('env', 'VECTOR_AGGREGATOR') | length > 0 }}
-      listenerClass: external-stable
+      listenerClass: external-unstable
     roleGroups:
       default:
         replicas: 1
@@ -51,7 +51,6 @@ spec:
       spec:
         initContainers:
           - name: init-keystore
-            # TODO Use somehow the image of the opensearch container
             image: oci.stackable.tech/sdp/opensearch:3.1.0-stackable0.0.0-dev
             command:
               - /bin/bash

tests/templates/kuttl/snapshot-s3/30-test-snapshot.yaml

@@ -22,6 +22,10 @@ spec:
             # required for pip install
             - name: HOME
               value: /stackable
+            - name: NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
           volumeMounts:
             - name: script
               mountPath: /stackable/scripts
@@ -68,10 +72,13 @@ metadata:
   name: test-opensearch
 data:
   test.py: |
+    import os
     from opensearchpy import OpenSearch
     from opensearchpy.exceptions import RequestError
 
-    host = 'opensearch'
+    namespace = os.environ['NAMESPACE']
+
+    host = f'opensearch.{namespace}.svc.cluster.local'
     port = 9200
     auth = ('admin', 'AJVFsGJBbpT6mChn') # For testing only. Don't store credentials in code.
     ca_certs_path = '/stackable/tls/ca.crt'
@@ -83,8 +90,6 @@ data:
         http_auth = auth,
         use_ssl = True,
         verify_certs = True,
-        ssl_assert_hostname = False,
-        ssl_show_warn = False,
         ca_certs = ca_certs_path
     )