From 8f44ab681ae6ed44939038726c914d77e0d4d4f4 Mon Sep 17 00:00:00 2001
From: Liam Young <liam.young@canonical.com>
Date: Tue, 7 Jul 2020 09:03:36 +0000
Subject: [PATCH] Add wait_for_cacert

wait_for_cacert will wait for keystone to recieve and install
a cacert. This is particularly useful when the certificate
issuer is in a different model.
---
 zaza/openstack/charm_tests/keystone/setup.py | 23 ++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/zaza/openstack/charm_tests/keystone/setup.py b/zaza/openstack/charm_tests/keystone/setup.py
index 6dbb7c1..748439f 100644
--- a/zaza/openstack/charm_tests/keystone/setup.py
+++ b/zaza/openstack/charm_tests/keystone/setup.py
@@ -14,8 +14,12 @@
 
 """Code for setting up keystone."""
 
+import logging
+
 import keystoneauth1
 
+import zaza.charm_lifecycle.utils as lifecycle_utils
+import zaza.model
 import zaza.openstack.utilities.openstack as openstack_utils
 from zaza.openstack.charm_tests.keystone import (
     BaseKeystoneTest,
@@ -30,6 +34,25 @@ from zaza.openstack.charm_tests.keystone import (
 )
 
 
+def wait_for_cacert(model_name=None):
+    """Wait for keystone to install a cacert.
+
+    :param model_name: Name of model to query.
+    :type model_name: str
+    """
+    logging.info("Waiting for cacert")
+    zaza.model.block_until_file_has_contents(
+        'keystone',
+        openstack_utils.KEYSTONE_REMOTE_CACERT,
+        'CERTIFICATE',
+        model_name=model_name)
+    zaza.model.block_until_all_units_idle(model_name=model_name)
+    test_config = lifecycle_utils.get_charm_config(fatal=False)
+    zaza.model.wait_for_application_states(
+        states=test_config.get('target_deploy_status', {}),
+        model_name=model_name)
+
+
 def add_demo_user():
     """Add a demo user to the current deployment."""
     def _v2():