freeipa

#7755 Enable firewall in the tests
Closed: fixed Opened by twoerner.

Closed: fixed
Reopen Issue

Currently the firewall is not enabled in the tests. The goal is to enable the file firewall using firewalld in the tests.

All uses of iptables and ip6tables commands in the tests need to be replaced.

Here is the upstream pull request: https://github.com/freeipa/freeipa/pull/2542

master:

  • fc70c78e45da57e323b39f7b56d721bd3683842b New firewall support class in ipatests/pytest_ipa/integration/firewall
  • e3d134e66f5bd0b46a316740709c5747826d5379 ipatests/pytest_ipa/integration/tasks.py: Configure firewall
  • d427e4b2badae9d1f33722614962a3b6dcce1eeb ipatests/test_integration/test_forced_client_reenrollment.py: Use unshare
  • 5a740144e06e26b26d7246ca58bdce64c36fdb71 ipatests/test_integration/test_http_kdc_proxy.py: Use new firewall import
  • 3ac830c7b4c7857bc86b7ae75bb93540e5a42ab9 ipatests/test_integration/test_dnssec.py: Enable dns firewall service
  • 3a7153c75c4d870d1d0964a0ebd1a14bd0396def ipatests/test_integration/test_replica_promotion.py: Configure firewall

Metadata Update from @twoerner:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 228d1c81c0d141d24407c1bb9a517e3eeb1ec593 ipatests integration/tasks.py: Honor clean for firewall in uninstall_master
  • 8e25ee64c8f6921c4e6d519e3e6677de2d873382 ipatests/test_integration/test_backup_and_restore.py: No clean master uninstall
  • f86b410ff52ae3cf3273f79051e013cbb2b87343 ipatests/test_integration/test_replica_promotion.py: Fix firewall config
  • a6862bd7af6eb768f150f2dc0372193ec826efa6 ipatests/test_integration/test_server_del.py: Enable dns in fw for dnssec

master:

  • 5ee687408bd4a0688fc31d28babbd6ad58081f8f Enable firewall in the tests for PR CI
Metadata
None
None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.