Red Hat OpenStack Certification Workflow Guide
For Use with Red Hat OpenStack 17
Abstract
Making open source more inclusive
Red Hat is committed to replacing problematic language in our code and documentation. We are beginning with these four terms: master, slave, blacklist, and whitelist. Due to the enormity of this endeavor, these changes will be gradually implemented over upcoming releases. For more details on making our language more inclusive, see our CTO Chris Wright’s message.
Chapter 1. Introduction to Red Hat OpenStack certification program
Use this guide to certify your hardware, software, and applications relying on OpenStack services or APIs.
1.1. The Red Hat certification program overview
The Red Hat certification program ensures the compatibility of your hardware, software, and cloud products on the OpenStack Platform. The program has three main elements:
- Test suite: Comprises tests for hardware or software applications undergoing certification.
- Red Hat Certification Ecosystem: Helps to explore and find certified products including hardware, software, cloud, and service providers.
- Support: A joint support relationship between you and Red Hat.
This table summarizes the basic differences between a product listing and components:
Product listing | Component (Project) |
---|---|
Includes detailed information about your product. | The individual containers, operators, helm charts, and infrastructure services that you test, certify, and then add to the product listing. |
Products are composed of one or more components. | Components are added to a product listing. |
You add components to a product for proceeding with certification. | A component can be used in multiple products by adding it to each product listing. |
A product can not be published without certified components. | Certified components are published as part of a product listing. |
1.2. Certification workflow
Follow these high-level steps to certify your hardware, software, and cloud products:
Red Hat recommends that you are a Red Hat Certified Engineer or hold equivalent experience before starting the certification process.
Task Summary
The certification workflow includes three primary stages -
1.2.1. Certification onboarding
Perform the steps outlined for certification onboarding:
- Join the Red Hat Connect for Technology Partner Program.
- Agree to the program terms and conditions.
Create your product listing by selecting your desired product category. You can select from the available product categories:
- Containerized Application
- Standalone Application
- OpenStack Infrastructure
- Complete your company profile.
- Add components to the product listing.
- Certify components for your product listing.
1.2.2. Certification testing
Follow these high-level steps to run a certification test:
- Log in to the Red Hat Certification portal.
- Download the test plan.
- Configure the system under test (SUT) for running the tests.
- Download the test plan to our SUT.
- Run the certification tests on your system.
- Review and upload the test results to the certification portal.
1.2.3. Publishing the certified application
When you complete all the certification checks successfully, you can submit the test results to Red Hat. Upon successful validation, you can publish your product on the Red Hat Ecosystem Catalog.
Additional resources
- For more information about the requirements and policies for Red Hat OpenStack Certification, see Red Hat OpenStack Certification Policy Guide.
1.3. Getting support and giving feedback
For any questions related to the Red Hat certification toolset, certification process, or procedure described in this documentation, refer to the KB Articles, Red Hat Customer Portal, and Red Hat Partner Connect.
You can also open a support case to get support or submit feedback.
To open a support case see, How do I open and manage a support case on the Customer Portal?
Questions During Certification
If you have any questions or responses about a specific certification, record them in the Comments section of the Dialog Tab of the certification entry.
Issues that can block a certification and might require resolution must be resolved through your Engineering Partner Manager or other engineering engagements.
Chapter 2. Onboarding certification partners
Use the Red Hat Customer Portal to create a new account if you are a new partner, or use your existing Red Hat account if you are a current partner to onboard with Red Hat for certifying your products.
2.1. Onboarding existing certification partners
As an existing partner you could be:
A member of the one-to-many EPM program who has some degree of representation on the EPM team, but does not have any assistance with OpenStack certification.
OR
- A member fully managed by the EPM team in the traditional manner with a dedicated EPM team member who is assigned to manage the partner, including questions about OpenStack certification requests.
Prerequisites
You have an existing Red Hat account.
Procedure
- Access Red Hat Customer Portal and click Log in.
Enter your Red Hat login or email address and click Next.
Then, use either of the following options:
- Log in with company single sign-on
- Log in with Red Hat account
From the menu bar on the header, click your avatar to view the account details.
- If an account number is associated with your account, then contact the certification team to proceed with the certification process.
If an account number is not associated with your account, then first contact the Red Hat global customer service team to raise a request for creating a new account number.
After you get an account number, contact the certification team to proceed with the certification process.
2.2. Onboarding new certification partners
Creating a new Red Hat account is the first step in onboarding new certification partners.
- Access Red Hat Customer Portal and click Register.
Enter the following details to create a new Red Hat account:
Select Corporate in the Account Type field.
If you have created a Corporate type account and require an account number, contact the Red Hat global customer service team.
Ensure that you create a company account and not a personal account. The account created during this step is also used to sign in to the Red Hat Ecosystem Catalog when working with certification requests.
- Choose a Red Hat login and password.
If your login ID is associated with multiple accounts, then do not use your contact email as the login ID as this can cause issues during login. Also, you cannot change your login ID once created.
- Enter your Personal information and Company information.
Click Create My Account.
A new Red Hat account is created.
- Contact your Ecosystem Partner Management (EPM) representative, if available. Else contact the certification team to proceed with the certification process.
2.3. Exploring the Partner landing page
After logging in to Red Hat Partner Connect, the partner landing page opens. This page serves as a centralized hub, offering access to various partner services and capabilities that enable you to start working on opportunities.
The Partner landing page offers the following services:
- Certified technology portal
- Deal registrations
- Red Hat Partner Training Portal
- Access to our library of marketing, sales & technical content
- Help and support
- Email preference center
- Partner subscriptions
- User account
As part of the Red Hat partnership, partners receive access to various Red Hat systems and services that enable them to create shared value with Red Hat for our joint customers.
Select the Certified technology portal tile to begin your product certification journey. The personalized Certified Technology partner dashboard opens.
Chapter 3. Create a product
The product listing provides marketing and technical information, showcasing your product’s features and advantages to potential customers. It lays the foundation for adding all necessary components to your product for certification.
Prerequisites
Verify the functionality of your product on the target Red Hat platform, in addition to the specific certification testing requirements. If running your product on the targeted Red Hat platform results in a substandard experience then you must resolve the issues before certification.
Procedure
Red Hat recommends completing all optional fields in the listing tabs for a comprehensive product listing. More information helps mutual customers make informed choices.
Red Hat encourages collaboration with your product manager, marketing representative, or other product experts when entering information for your product listing.
Fields marked with an asterisk (*) are mandatory.
Procedure
- Log in to the Red Hat Partner Connect Portal.
- Go to the Certified technology portal tab and click Visit the portal.
- On the header bar, click Product management.
- From the Listing and certification tab click Manage products.
From the My Products page, click Create Product.
A Create New Product dialog opens.
- Enter the Product name.
From the What kind of product would you like to certify? drop-down, select the required product category and click Create product. For example, select OpenStack Infrastructure for creating an OpenStack platform based product listing.
A new page with your Product name opens. It comprises the following tabs:
- Section 3.1, “Overview”
- Section 3.2, “Product Information”
- Section 3.3, “Components”
Along with the following tabs, the page header provides the Product Score details. Product Score evaluates your product information and displays a score. It can be:
- Fair
- Good
- Excellent
Best
Click How do I improve my score? to improve your product score.
- After providing the product listing details, click Save before moving to the next section.
3.1. Overview
This tab consists of a series of tasks that you must complete to publish your product:
3.1.1. Complete product listing details
To complete your product listing details, click Start.
The Product Information tab opens.
- Enter all the essential product details and click Save.
3.1.2. Complete company profile information
- To complete your company profile information, click Start. After entering all the details, click Submit.
- To modify the existing details, click Review. The Account Details page opens.
- Review and modify the Company profile information and click Submit.
3.1.3. Add at least one product component
Click Start. You are redirected to the Components tab.
To add a new or existing product component, click Add component.
For adding a new component,
- In the Component Name text box, enter the component name.
- For What kind of standalone component are you creating? select OpenStack Infrastructure for certifying a plugin or driver that uses your own container images on Red Hat OpenStack Platform.
- Click Next.
Are your product’s containers already a part of the Red Hat OpenStack Platform distribution? Your product must use container images provided by Red Hat as part of the RHOSP native distribution.
- If you have not customized the container images, select Yes. Your container images are already certified, and you need to certify your product only.
- If you have customized the container images with, for example, additional software, select No. You will need to certify your container images as well as your product.
From the Services drop-down menu, select the function of your product:
- Neutron (Networking)
- Cinder (Block Storage)
- Manila (File Storage)
- Click Add Component.
- For the Red Hat OpenStack Version, version 17 is enabled by default.
For adding an existing component, from the Add Component dialog, select Existing Component.
- From the Available components list, search and select the components that you wish to certify and click the forward arrow. The selected components are added to the Chosen components list.
- Click Attach existing component.
3.1.4. Certify components for your listing
To certify the components for your listing, click Start. If you have existing product components, you can view the list of Attached Components and their details:
- Name
- Certification
- Security
- Type
- Created
- Click more options to archive or remove the components
- Select the components for certification.
After completing all the above tasks you will see a green tick mark corresponding to all the options.
The Overview tab also provides the following information:
Product contacts - Provides Product marketing and Technical contact information.
- Click Add contacts to product to provide the contact information
- Click Edit to update the information.
Components in product - Provides the list of the components attached to the product along with their last updated information.
- Click Add components to product to add new or existing components to your product.
- Click Edit components to update the existing component information.
After publishing the product listing, you can view your Product Readiness Score and Ways to raise your score on the Overview tab.
3.2. Product Information
Through this tab you can provide all the essential information about your product. The product details are published along with your product on the Red Hat Ecosystem catalog.
General tab:
Provide basic details of the product, including product name and description.
- Enter the Product Name.
- Optional: Upload the Product Logo according to the defined guidelines.
- Enter a Brief description and a Long description.
- Click Save.
Features & Benefits tab:
Provide important features of your product.
- Optional: Enter the Title and Description.
- Optional: To add additional features for your product, click + Add new feature.
- Click Save.
Quick start & Config tab:
Add links to any quick start guide or configuration document to help customers deploy and start using your product.
- Optional: Enter Quick start & configuration instructions.
- Click Save.
- Select Hide default instructions check box, if you don’t want to display them.
Linked resources tab:
Add links to supporting documentation to help our customers use your product. The information is mapped to and is displayed in the Documentation section on the product’s catalog page.
It is mandatory to add a minimum of three resources. Red Hat encourages you to add more resources, if available.
- Select the Type drop-down menu, and enter the Title and Description of the resource.
- Enter the Resource URL.
- Optional: To add additional resources for your product, click + Add new Resource.
- Click Save.
FAQs tab:
Add frequently asked questions and answers of the product’s purpose, operation, installation, or other attribute details. You can include common customer queries about your product and services.
- Enter Question and Answer.
- Optional: To add additional FAQs for your product, click + Add new FAQ.
- Click Save.
Support tab:
This tab lets you provide contact information of your Support team.
- Enter the Support description, Support web site, Support phone number, and Support email address.
- Click Save.
Contacts tab:
Provide contact information of your marketing and technical team.
- Enter the Marketing contact email address and Technical contact email address.
- Optional: To add additional contacts, click + Add another.
- Click Save.
Legal tab:
Provide the product related license and policy information.
- Enter the License Agreement URL for the product and Privacy Policy URL.
- Click Save.
SEO tab:
Use this tab to improve the discoverability of your product for our mutual customers, enhancing visibility both within the Red Hat Ecosystem Catalog search and on internet search engines. Providing a higher number of search aliases (key and value pairs) will increase the discoverability of your product.
- Select the Product Category.
- Enter the Key and Value to set up Search aliases.
- Click Save.
- Optional: To add additional key-value pair, click + Add new key-value pair.
Add at least one Search alias for your product. Red Hat encourages you to add more aliases, if available.
3.3. Components
Use this tab to add components to your product listing. Through this tab you can also view a list of attached components linked to your Product Listing.
Alternatively, to attach a component to the Product Listing, you can complete the Add at least one product component option available on the Overview tab of a product listing.
- To add a new or existing product component, click Add component.
For adding a new component, in the Component Name text box, enter the component name.
- For What kind of standalone component are you creating? select OpenStack Infrastructure for certifying a plugin or driver that uses your own container images on Red Hat OpenStack Platform.
- Click Next.
Are your product’s containers already a part of the Red Hat OpenStack Platform distribution? Your product must use container images provided by Red Hat as part of the RHOSP native distribution.
- If you have not customized the container images, select Yes. Your container images are already certified, and you need to certify your product only.
- If you have customized the container images with, for example, additional software, select No. You will need to certify your container images as well as your product.
From the Services drop-down menu, select the function of your product:
- Neutron (Networking)
- Cinder (Block Storage)
Manila (File Storage)
- Click Add Component.
- For the Red Hat OpenStack Version, version 17 is enabled by default.
For adding an existing component, from the Add Component dialog, select Existing Component.
- From the Available components list, search and select the components that you wish to certify and click the forward arrow. The selected components are added to the Chosen components list.
- Click Attach existing component.
You can add the same component to multiple products listings. All attached components must be published before the product listing can be published.
After attaching components, you can view the list of Attached Components and their details:
- Name
- Certification
- Security
- Type
- Created
- Click more options to archive or remove the attached components
Alternatively, to search for specific components, type the component’s name in the Search by component Name text box.
3.4. Support
The Red Hat Partner Acceleration Desk (PAD) is a Products and Technologies level partner help desk service that allows the current and prospective partners a central location to ask non-technical questions pertaining to Red Hat offerings, partner programs, product certification, engagement process, and so on.
You can also contact the Red Hat Partner Acceleration Desk for any technical questions you may have regarding the Certification. Technical help requests will be redirected to the Certification Operations team.
Through the Partner Subscriptions program, Red Hat offers free, not-for-resale software subscriptions that you can use to validate your product on the target Red Hat platform. To request access to the program, follow the instructions on the Partner Subscriptions site.
- To request support, click Open a support case. See PAD - How to open & manage PAD cases, to open a PAD ticket.
- To view the list of existing support cases, click View support cases.
3.5. Removing a product
After creating a product listing if you wish to remove it, go to the Overview tab and click Delete.
A published product must first be unpublished before it can be deleted. Red Hat retains information related to deleted products even after you delete the product.
Chapter 4. Adding certification components
4.1. For OpenStack Infrastructure Containerized applications
After creating the new product listing, add the certification components for the newly created product listing.
You can configure the following options for the newly added components:
The component configurations differ for different product categories.
To configure the options, go to the Components tab and click on any of the existing components.
4.1.1. Images
The Images tab provides the test results for the container images that you submit by using the preflight tool. You have to configure preflight and push your container images to view the test results.
- To push your container images, click Set up Preflight.
- For detailed instructions about certification testing, see Running the certification test suite.
When your testing is complete you can see two categories of images:
- Manifest Digests - denotes container images that are available for multiple architectures.
- Standalone Container Images - denotes container images that are available only for a single architecture.
This page provides the following details of your container images:
- Specific image ID or the SHA ID
- Image Tag(s)
- Certification - Certified or Not certified, pass or fail status based on the checks performed. Click on it for more details.
- Architecture - specific architecture of your image, if applicable.
- Security - check for any vulnerabilities, if any.
- Health Index - Container Health Index is a measure of the oldest and most severe security updates available for a container image. 'A' is more up-to-date than 'F'. See Container Health Index grades as used inside the Red Hat Container Catalog for more details.
- Created - the day on which you submitted the certification.
Click the Actions menu to perform the following tasks:
- Delete Image - click this option to delete your container image when your image is unpublished.
- Sync Tags - when you have altered your image tag, use this option to synchronize the container image information available on both Red Hat Partner Connect and Red Hat Container catalog.
- View in Catalog - When your container image is published, click this option to view the published container image on the Red Hat Ecosystem Container catalog.
- Click Publish, to publish your certified container images.
4.1.2. Certification
The Certification tab provides detailed information about the Export control questionnaire and all the certification tests performed for the attached container images.
Export Control Questionnaire
The Export control questionnaire contains a series of questions through which the Red Hat legal team evaluates the export compliance by third-party vendors. Partner’s legal representative must review and answer the questions. Red Hat takes approximately five business days to evaluate the responses and based on the responses Red Hat approves partner or declines partner or defers decision or requests more information.
- Click Start questionnaire, to enter all the legal information about your product.
- Click Review to modify the existing details.
If you are using a version of Universal Base Image (UBI) to build your container image, you can host your image in a private repository. This allows you to skip the Export Compliance questionnaire. This form is required only if you are hosting your images on the Red Hat Container Catalog.
Validate the functionality of your product on this Red Hat OpenStack release
Validate the functionality of your product on this Red Hat OpenStack release by using the Certification tab. You can perform the following functions:
- Run the Red Hat Certification Tool locally.
- Download the test plan.
- Share the test results with the Red Hat certification team.
Interact with the certification team, if required.
To validate the functionality of your product perform the following steps:
- If you are a new partner, click Request a partner subscription. When your request is approved, you get active subscriptions added to your account.
When you have active partner subscriptions, then click Start certification and then click Go to Red Hat certification tool.
A new certification case gets created on the Red Hat Certification portal, and you are redirected to the appropriate certification portal page.
The certification team will contact you to start the certification testing process, and will follow up with you in case of a problem. After successful verification, a green check mark is displayed with the validate complete message.
To review the validated product details, click Review.
Submit your container image for verification
- Run the certification suite on your container image. See Running certification tests for OpenStack certification.
Upload the test results.
You can later see the test results on the Images tab.
- Publish the container image certification on the Red Hat catalog.
This step certifies your container only. Use the Certifications tab to certify the functionality.
4.1.3. Security
The security tab provides the health status of the attached product components. Red Hat uses a Health Index to identify security risks with your components that Red Hat provides through the Red Hat Ecosystem Catalog.
The Health Index is a measure of the oldest and most severe security updates available for a container image. An image with a grade of 'A' is more up-to-date than one with a grade of 'F. For more information, see Container Health Index grades as used inside the Red Hat Container Catalog.
This tab provides the health index of your images which includes the following details:
- Image ID
- Health index
4.1.4. Repository information
You can configure the registry and repository details by using the Repository information tab.
Enter the required details in the following fields:
Field name | Description |
---|---|
Container registry namespace | Registry name set when the container was created. This field becomes non-editable when the container gets published. |
Outbound repository name | Repository name that you have selected or the name obtained from your private registry in which your image is hosted, for example, ubi-minimal. |
Repository summary | Repository summary obtained from the container image. |
Repository description | Repository description obtained from the container image. |
Instructions for users to get your company’s image on the Red Hat Container catalog | Provide specific instructions that you want users to follow when they get your container image. This field is applicable only for container images. |
After configuring all the mandatory fields click Save.
All the fields marked with an asterisk * are required and must be completed before you can proceed with container certification.
4.1.5. Component details
Configure the product component details by using this tab.
Enter the required details in the following fields:
Field name | Description |
---|---|
Image Type | Select the respective image type for your product component.
|
Application categories | Select the respective application type of your software product. |
Host level access | Select between the two options:
Note If your product’s functionality requires root access, you must select the privileged option, before running the preflight tool. This setting is subject to Red Hat review. |
Release Category | Select between the two options:
|
Project name | Name of the project for internal purposes. |
Auto-publish | When you enable this option, the container image gets automatically published on the Red Hat Container catalog, after passing all the certification tests. |
Red Hat OpenStack platform | It denotes the version of the OpenStack platform on which you are certifying your containerized application. Note This field is non-editable and is applicable only for containerized applications on OpenStack platform. |
4.1.6. Contact information for containerized applications
Providing information for this tab is optional.
In the Contact Information tab, enter the primary technical contact details of your product component.
- Optional: In the Technical contact email address field, enter the email address of the image maintainer.
- Optional: To add additional contacts for your component, click + Add new contact.
- Click Save.
4.1.7. Associated products
The Associated Product tab provides the list of products that are associated with your product component along with the following information:
- Product Name
- Type
- Visibility - Published or Not Published
- Last Activity - number of days before you ran the test
To add products to your component, perform the following:
- If you want to find a product by its name, enter the product name in the Search by name text box and click the search icon.
- If you are not sure of the product name, click Find a product. From the Add product dialog, select the required product from the Available products list box and click the forward arrow. The selected product is added to the Chosen products list box. Click Update attached products. Added products are listed in the Associated product list.
All the fields marked with an asterisk * are required and must be completed before you can proceed with the certification.
4.2. For OpenStack Infrastructure Non-containerized applications
After creating the new product listing, add the certification components for the newly created product listing. You can configure the following options for the newly added components:
The component configurations differ for different product categories.
To configure the component options, go to the Components tab and click on any of the existing components.
4.2.1. Certification for non-containers
Validate the functionality of your product on this Red Hat OpenStack release
Validate the functionality of your product on this Red Hat OpenStack release by using the Certification tab.
This feature allows you to perform the following functions:
- Run the Red Hat Certification Tool locally.
- Share the test results with the Red Hat certification team.
- Interact with the certification team, if required.
To validate the functionality of your product, perform the following steps:
- If you are a new partner, click Request a partner subscription. When your request is approved, you get active subscriptions added to your account.
- When you have active partner subscriptions, then click Start certification.
- Click Go to Red Hat certification tool.
A new certification case gets created on the Red Hat Certification portal, and you are redirected to the appropriate component portal page. This page has four tabs:
- Summary - It includes the Certification Case, Partner Product and Progress details of the new certification case. On the Summary tab, navigate to the Files section and click Upload, to upload your test results. Add any relevant comments in the Discussions section, and then click Add Comment.
- Test Plans - displays the Test Plan Summary details of the new certification case.
- Related Certifications - displays the details of the related certification cases.
Properties - displays the certification properties. It includes the following details:
General - Provide the base certification version and platform information for your product certification and click Update Values:
Platform - Select the required information for the following fields from the respective drop-down list:
- Product Version
- Base Version
- Support Case - Add any existing support cases or knowledge base articles that you want to reference with your certification case.
- OpenStack - Provide the details of the Red Hat OpenStack plugin components for certification and click Update. All the provided details along with the selected features and their respective protocols are available on the CertOps hub.
The certification team will contact you to start the certification testing process and will follow up with you in case of a problem. After successful verification, a green check mark is displayed with the validate complete message.
To review the validated product details, click Review.
4.2.2. Component Details
Enter the required project details in the following fields:
- Project name - Enter the project name. This name is not published and is only for internal use.
- Red Hat OpenStack Version - Specifies the Red Hat OpenStack version on which you certify your non-containerized application component.
4.2.3. Contact Information for non containers
Providing information for this tab is optional.
In the Contact Information tab, enter the primary technical contact details of your product component.
- Optional: In the Technical contact email address field, enter the email address of the image maintainer.
- Optional: To add additional contacts for your component, click + Add new contact.
- Click Save.
4.2.4. Associated products for non containers
The Associated Product tab provides the list of products that are associated with your product component along with the following information:
- Product Name
- Type
- Visibility - Published or Not Published
- Last Activity - number of days before you ran the test
To add products to your component, perform the following:
- If you want to find a product by its name, enter the product name in the Search by name text box and click the search icon.
- If you are not sure of the product name, click Find a product. From the Add product dialog, select the required product from the Available products list box and click the forward arrow. The selected product is added to the Chosen products list box. Click Update attached products. Added products are listed in the Associated product list.
All the fields marked with an asterisk * are required and must be completed before you can proceed with the certification.
Chapter 5. Setting up the test environment
The first step towards certifying your product is setting up the environment where you can run the tests.
The test environment consists of three systems:
- Test host: A workstation, referred to as the test host, is used as a medium for accessing the Controller and Compute nodes. The tests are only initiated on this system but are run on the two nodes.
- Controller: The tests designed for the specific plugin undergoing certification are run on the Controller node.
- Compute: Remaining certification-related tests are run on the Compute node. In multi-host, information is provided to the Compute node for test execution.
5.1. Setting up the test host
The test host is used only to initiate a test run on the Controller and Compute node, display the progress of the tests, and present the final result file after gathering results from both nodes.
Prerequisites
- You have installed RHEL 8 or 9 on the system.
- You have enabled access to the Controller and Compute nodes from the test host.
- You have installed Cockpit on the system.
Procedure
Use your RHN credentials to register your system using Red Hat Subscription Management:
# subscription-manager register
Display the list of available subscriptions for your system:
# subscription-manager list --available*
- Search for the subscription that provides the Red Hat Certification (for RHEL Server) repository and make a note of the subscription and its Pool ID.
Attach the subscription to your system:
# subscription-manager attach --pool=<pool_ID>
Replace the pool_ID with the Pool ID of the subscription.
You don’t have to attach the subscription to your system, if you enable the option Simple content access for Red Hat Subscription Management. For more details, see How do I enable Simple Content Access for Red Hat Subscription Management?
Subscribe to the Red Hat Certification channel:
On RHEL 8:
# subscription-manager repos --enable=cert-1-for-rhel-8-<HOSTTYPE>-rpms
Replace HOSTTYPE with the system architecture. To find out the system architecture, run
uname -m
Example:
# subscription-manager repos --enable=cert-1-for-rhel-8-x86_64-rpms
On RHEL 9:
# subscription-manager repos --enable=cert-1-for-rhel-9-<HOSTTYPE>-rpms
Replace HOSTTYPE with the system architecture. To find out the system architecture, run
uname -m
Example:
# subscription-manager repos --enable=cert-1-for-rhel-9-x86_64-rpms
Install the certification and Cockpit RPMs.
# yum install redhat-certification-cockpit
Only on RHEL 9
# yum install redhat-certification
Generate a new SSH key pair on the test host, if it is not already present.
# ssh-keygen
View and copy the public key to enter it later during the set up of Controller and Compute node to allow secure and passwordless communication between the test host and each node. Replace <user> with your user name.
# cat /<user>/.ssh/id_rsa.pub
Example: # cat /root/.ssh/id_rsa.pub
5.2. Setting up the Controller and Compute nodes
Separate tests are run on the two nodes based on the defined role of each node in the test plan.
Repeat the following process for setting up each node.
Prerequisites
You have installed RHOSP on the system based on the supported RHEL version, as applicable.
The corresponding supported versions are as follows:
RHOSP version Supported RHEL version 17.0
9.0
17.1
9.2
- You have installed and enabled Cockpit on both nodes.
- You have installed the plugin that needs certification.
- This is applicable only to the Controller node.
Procedure
Use your RHN credentials to register your system using Red Hat Subscription Management:
# subscription-manager register
Display the list of available subscriptions for your system:
# subscription-manager list --available*
Search for the subscription that provides the Red Hat Certification (for RHEL Server) repository and make a note of the subscription and its Pool ID.
Attach the subscription to your system:
# subscription-manager attach --pool=<pool_ID>
Replace the pool_ID with the Pool ID of the subscription.
Subscribe to the Red Hat Certification channel:
On RHEL 8:
# subscription-manager repos --enable=cert-1-for-rhel-8-<HOSTTYPE>-rpms
Replace HOSTTYPE with the system architecture. To find out the system architecture, run
uname -m
Example:
# subscription-manager repos --enable=cert-1-for-rhel-8-x86_64-rpms
On RHEL 9:
# subscription-manager repos --enable=cert-1-for-rhel-9-<HOSTTYPE>-rpms
Replace HOSTTYPE with the system architecture. To find out the system architecture, run
uname -m
Example:
# subscription-manager repos --enable=cert-1-for-rhel-9-x86_64-rpms
Install the certification RPM.
# yum install redhat-certification
Install OpenStack test suite package:
# yum install redhat-certification-openstack
Open the authorized keys file in the Controller and Compute node and paste the public key of the test host that you copied earlier, and then save the file. This will allow secure and passwordless communication between the test host and each node.
Replace <user> with your user name.
# vi /<user>/.ssh/authorized_keys
Example:
# vi /root/.ssh/authorized_keys
Additional resources
Chapter 6. Downloading the test plan from Red Hat Certification Portal
You must download the test plan to the test host.
Procedure
- Log in to Red Hat Certification portal.
- Search for the case number related to your product certification, and copy it.
- Click Cases → enter the product case number.
Optional: Click Test Plans.
The test plan displays a list of components that will be tested during the test run.
- Click Download Test Plan.
Next steps
If you plan to use Cockpit to run the tests, see Configuring the systems and running tests by using Cockpit
Otherwise, if you plan to use CLI to run the tests, see Configuring the systems and running tests by using CLI.
Chapter 7. Configuring the systems and running tests using Cockpit
To run the certification tests using Cockpit, you must first set up the Cockpit, add systems, upload the test plan to Cockpit.
7.1. Setting up the Cockpit server
Cockpit is a RHEL tool that lets you change the configuration of your systems as well as monitor their resources from a user-friendly web-based interface.
The Cockpit uses RHCert CLI locally and through SSH to other hosts.
- You must set up Cockpit on the same system as the test host.
- Ensure that the Cockpit can access both the Controller and Compute nodes.
For more information on installing and configuring Cockpit, see Getting Started using the RHEL web console on RHEL 8, Getting Started using the RHEL web console on RHEL 9 and Introducing Cockpit.
Prerequisites
- You have installed the Cockpit plugin on the test host.
- You have enabled the Cockpit service.
Procedure
- Log in to the test host.
Install the Cockpit RPM provided by the Red Hat Certification team.
# yum install redhat-certification-cockpit
You must run Cockpit on port 9090.
Verification
- Log in to the Cockpit web application in your browser, http://<Cockpit_system_IP>:9090/ and verify the addition of Tools → Red Hat Certification tab on the left panel.
7.2. Adding the test systems to Cockpit
Adding the test host, Controller, and Compute nodes to Cockpit establishes a connection between the test host and each node.
Repeat the following process for adding each node.
Prerequisites
- You have the IP address of the test host, Controller, and Compute nodes.
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser to launch the Cockpit web application.
- Enter the username and password, and then click Login.
Click the down-arrow on the logged-in cockpit user name→Add new host.
The dialog box displays.
- In the Host field, enter the IP address or hostname of the system.
In the User name field, enter from one of the three applicable accounts:
Note- Enter “tripleo-admin” if you use RHOSP 17.1 or later.
- Enter “heat-admin” if you use RHOSP 17 or earlier.
- Enter “root” if you have configured root as the ssh user for Controller and Compute nodes.
- Click Accept key and connect.
- Optional: Select the predefined color or select a new color of your choice for the host added.
- Click Add.
Verification
On the left panel, click Tools →Red Hat Certification.
Verify that the system you just added displays under the Hosts section on the right.
7.3. Getting authorization on the Red Hat SSO network
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser’s address bar to launch the Cockpit web application.
- Enter the username and password, and then click Login.
- Select Tools → Red Hat Certification in the left panel.
On the Cockpit homepage, click Authorize, to establish connectivity with the Red Hat system.
The Log in to your Red Hat account page displays.
Enter your credentials and click Next.
The Grant access to rhcert-cwe page displays.
- Click Grant access. A confirmation message displays a successful device login. You are now connected to the Cockpit web application.
7.4. Downloading test plans in Cockpit from Red Hat certification portal
For Non-authorized or limited access users:
- To download the test plan, see Downloading the test plan from Red Hat Certification portal.
For authorized users:
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser’s address bar to launch the Cockpit web application.
- Enter the username and password, and then click Login.
- Select Tools → Red Hat Certification in the left panel.
- Click the Test Plans tab. A list of Recent Certification Support Cases will appear.
- Click Download Test Plan. A message displays confirming the successful addition of the test plan.
- The downloaded test plan will be listed under the File Name of the Test Plan Files section.
7.5. Using the test plan to provision the Controller and Compute nodes for testing
Provisioning the Controller and Compute nodes through the test host performs several operations, such as installing the required packages on the two nodes based on the certification type and creating a final test plan to run. The final test plan is generated based on the test roles defined for each node and has a list of common tests taken from both the test plan provided by Red Hat and tests generated on discovering the system requirements.
For instance, required OpenStack packages will be installed if the test plan is designed for certifying an OpenStack plugin.
Prerequisites
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser address bar to launch the Cockpit web application.
- Enter the username and password, and then click Login.
- Select Tools →Red Hat Certification in the left navigation panel.
- Click the Hosts tab to see the list of systems added.
Click the Test Plans tab and click Upload.
- In the Upload Test Plan dialog box, click Upload, and then select the new test plan .xml file saved on the test host.
Click Upload to Host.
A successful upload message displays along with the file uploaded. Optionally, if you want to reuse the previously uploaded test plan, then select it again to reupload.
NoteDuring the certification process, if you receive a redesigned test plan for the ongoing product certification, then you can upload it following the previous step. However, you must run
rhcert-clean all
in the Terminal tab before proceeding.
Click Provision beside the test plan you want to use.
- In the Role field, enter the IP address of the Controller node, and from the Host drop-down menu, select Controller.
- In the Role field, enter the IP address of the Compute node, and from the Host drop-down menu, select Compute.
- In the Provisioning Host field, enter the IP address of the test host.
- Select the Run with sudo check box.
Click Provision.
The terminal is displayed.
7.6. Running the certification tests using Cockpit
The tests run in the foreground on the Controller node, they are interactive and will prompt you for inputs, whereas the tests run in the background on the Compute node and are non-interactive.
Prerequisites
- You have prepared the Controller and Compute nodes
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser address bar to launch the Cockpit web application.
- Enter the username and password, and click Login.
- Select Tools → Red Hat Certification in the left panel.
- Click the Hosts tab and click on the host on which you want to run the tests, then click the Terminal tab.
Click Run.
The
rhcert-run
command will appear and run on the Terminal window.When prompted, choose whether to run each test by typing
yes
orno
.You can also run particular tests from the list by typing
select
.
7.7. Reviewing and downloading the test results file
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser address bar to launch the Cockpit web application.
- Enter the username and password, and then click Login.
- Select Tools → Red Hat Certification in the left panel.
Click the Result Files tab to view the test results generated.
- Optional: Click Preview to view the results of each test.
Click Download beside the result files.
By default, the result file is saved as
/var/rhcert/save/rhcert-multi-openstack-<certification ID>-<timestamp>.xml
.
7.8. Submitting the test results from Cockpit to the Red Hat Certification Portal
Procedure
- Enter http://<Cockpit_system_IP>:9090/ in your browser’s address bar to launch the Cockpit web application.
- Enter the username and password, and then click Login.
- Select Tools → Red Hat Certification in the left panel.
Click the Result Files tab and select the case number from the displayed list.
- For the authorized users click Submit. A message displays confirming the successful upload of the test result file.
- For non-authorized users see, Uploading the results file of the executed test plan to Red Hat Certification portal.
The test result file of the executed test plan will be uploaded to the Red Hat Certification portal.
7.9. Uploading the test results file to Red Hat Certification portal
Prerequisites
- You have downloaded the test results file from the test host.
Procedure
- Log in to Red Hat Certification portal.
On the homepage, enter the product case number in the search bar.
Select the case number from the list that is displayed.
- On the Summary tab, under the Files section, click Upload.
Next steps
Red Hat will review the results file you submitted and suggest the next steps. For more information, visit Red Hat Certification portal.
Chapter 8. Configuring the systems and running tests using RHCert CLI Tool
Cockpit is the preferred method to configure systems and run tests. However, RHCert CLI will be continued as an alternative for performing the same tasks.
8.1. Using the test plan to provision the Controller and Compute nodes for testing
Provisioning the Controller and Compute nodes through the test host performs several operations, such as installing the required packages on the two nodes based on the certification type and creating a final test plan to run. The final test plan is generated based on the test roles defined for each node and has a list of common tests taken from both the test plan provided by Red Hat and tests generated on discovering the system requirements.
For instance, required OpenStack packages will be installed if the test plan is designed for certifying an OpenStack plugin.
Prerequisites
- You have the IP address of both the Controller and Compute nodes.
- You have downloaded the test plan to the test host.
Procedure
- Log into the test host using CLI.
Provision the Controller and Compute nodes from the test host.
# rhcert-provision <path_to_test_plan_document> --host controller:<IP address of the controller> --host compute:<IP address of the compute>
Replace <path_to_test_plan_document> with the test plan file saved on the test host.
Example:
# rhcert-provision rhosp_test_plan.xml --host controller:192.168.24.23 --host compute:192.168.24.32
In addition to starting the Controller and Compute nodes and sending the test plan to both the nodes where the tests actually run, the command also establishes communication between the test host and each node.
Select the RHOSP administrator account when prompted.
Note- Enter “tripleo-admin” if you use RHOSP 17.1 or later.
- Enter “heat-admin” if you use RHOSP 17 or earlier.
- Enter “root” if you have configured root as the ssh user for Controller and Compute nodes.
Select None for “What is this host’s role” when prompted.
Tests applicable for each node will be displayed.
8.2. Running the certification tests using CLI
The tests run in the foreground on the Controller node, they are interactive and will prompt you for inputs, whereas the tests run in the background on the Compute node and are non-interactive.
Procedure
Run tests
# rhcert-run --host controller:<_IP address of the controller_> --host compute:<_IP address of the compute_>
Example:
# rhcert-run --host controller:192.168.24.23 --host compute:192.168.24.32
Select the RHOSP administrator account when prompted.
Note- Enter “tripleo-admin” if you use RHOSP 17.1 or later.
- Enter “heat-admin” if you use RHOSP 17 or earlier.
- Enter “root” if you have configured root as the ssh user for Controller and Compute nodes.
When prompted, choose whether to run each test by typing
yes
orno
.You can also run particular tests from the list by typing
select
.Separate test results from each node are transferred to the test host, where they are merged into a single result file.
By default, the result file is saved as
/var/rhcert/save/rhcert-multi-openstack-<certification ID>-<timestamp>.xml
.
Chapter 9. Running certification tests for OpenStack certification
Run certification tests on the OpenStack deployment under test based on the type of OpenStack application undergoing certification.
9.1. Running certification tests for products implementing OpenStack APIs
If the OpenStack application undergoing certification implements OpenStack APIs, complete the following steps on the test server to run certification tests on the OpenStack deployment under test or test client.
This category includes OpenStack plugins and drivers which implement OpenStack APIs for Networking, Block Storage, and File Share services.
Additional resources
- For more information about products implementing OpenStack APIs, see Red Hat OpenStack Certification Policy Guide.
9.1.1. Running tempest_config test
The tempest_config test automatically generates a tempest.conf file at run time. If you need to change the default configurations of the test, replace tempest.conf
with a new file at the same location.
Although the updated configuration can address any known tempest issues, note that tempest still needs to fulfill certification testing requirements.
Prerequisites
- You have subscribed the application under test to the OpenStack product repositories to allow tempest to get installed.
- You have OpenStack administrator login privileges and credentials.
Procedure
The test is interactive. It checks for the presence of the tempest.conf file at location /etc/redhat-certification/openstack
. If the file exists, you will receive a prompt asking if you want to replace it and enter the details manually. If you choose no
, the test will use the keystone credentials from the existing file and proceed. However, if you choose yes
, or if the tempest.conf file is not present in the location you will be prompted to provide the following details:
- In the keystone auth url field, enter the URL to allow the test access the OpenStack platform service endpoints.
- Enter the OpenStack administrator username and password.
- Update the tempest.conf file to enable all the flags applicable for the plugins that you are certifying.
- Click Submit.
Additional resources
If you face any tempest issues unrelated to the certification testing, use the following links to raise bugs:
- Upstream tempest project
For Downstream bugs, use either RHOSP Tempest component or Red Hat Certification Component.
In the Component field:
- Select openstack-tempest for tempest-related issues.
- Select openstack-neutron, openstack-cinder, or openstack-manila for component-related issues.
9.2. Running certification tests for products consuming OpenStack APIs
Red Hat considers the following as products or applications consuming OpenStack APIs:
- Products that facilitate deploying an OpenStack environment.
- Products that complement the cloud infrastructure with additional functionality, such as configuration, scaling, and management.
- Applications for OpenStack management and monitoring.
- Applications that are OpenStack-enabled, such as virtual network functions (VNFs).
If the OpenStack application that you are certifying consumes OpenStack APIs, perform the following steps:
Procedure
- Review the policy information described in the Red Hat OpenStack Certification Policy Guide.
- Run the certification tests as described in the Setting up the test server section.
9.3. Running trusted container test
Procedure
- Navigate to the rhcert tool home page and select the trusted container test.
- Click on the Run Selected.
Perform the following actions when the test prompts you:
- Provide the reason why you configured non-Red Hat containers on the host under test.
- Select the checkboxes of the containers you want to run the test on.
9.4. Running the OpenStack director test and the supportability tests
Procedure
- On the Red Hat Certification home page, click the Server settings tab.
- In the Register a System field, enter the hostname or IP address of the overcloud node where you installed the application under test. Then, click Add.
Click the existing product entry from the Red Hat Certification home page. Then, click the relevant certification entry from the Certifications page.
The Progress page opens and displays the tests available. It also displays the status of the previous runs, if any.
- Click Testing to open the Testing tab.
- On the Testing tab, click Select Test Systems.
On the Select Host page, select the hostname of the overcloud node where you installed the application-under-test. Then, click Test to return to the Testing tab.
The rhcert tool now creates a certification test plan for the application-under-test.
When the test plan is ready, the status column displays "Finished test run". The Continue Testing button also appears.
- Click Continue Testing.
- Select interactive next to the openstack/supportable checkbox and then click Run Selected.
Certification tests are run on the application-under-test. The status of the certification test run is displayed on the Testing Page under the relevant hostname.
The tool now runs the certification tests. You can find the status of the test run on the Testing tab under the relevant hostname.
After the test run completes, the test logs from the openstack/supportable tests are stored in the same log file as for the openstack/director test on the test server.
9.5. Additional Resources
- For more information about certification targets, see Red Hat OpenStack Certification Policy Guide.
Chapter 10. Publishing on the catalog
After submitting your test results through the Red Hat certification portal, your application is scanned for vulnerabilities. When the scanning is completed, you can publish your product on the Red Hat Ecosystem Catalog.
A RHOSP infrastructure certification is generated if you have performed the following:
- You ran the required tests successfully.
- Red Hat reviewed the testing configuration report, and found it was valid and appropriate for the certification.
Perform the following steps to publish your product on the catalog:
Procedure
- Navigate to your Product listing page.
- Click Publish.
Your certified application is now published on the Red Hat Ecosystem Catalog.