OpenShift/Kubernetes Test Plan Prerequisites and test cases for OpenShift Virtualization on OCP 4.21 SNO bare-metal. https://tests.stdin.at/ 2026-08-03T06:07:40.119Z TC-STG-001: Verify golden image import and PVC clone https://tests.stdin.at/tests/TC-STG-001?product=virt 2026-08-03T06:07:40.119Z TC-VM-001: Create and boot first VM from template (RHEL 9) https://tests.stdin.at/tests/TC-VM-001?product=virt 2026-08-03T06:07:40.119Z TC-VM-003: VM live migration (SNO: expected failure) https://tests.stdin.at/tests/TC-VM-003?product=virt 2026-08-03T06:07:40.119Z TC-VM-004: Create VM snapshots and perform restore https://tests.stdin.at/tests/TC-VM-004?product=virt 2026-08-03T06:07:40.119Z TC-VM-005: Clone VM and use as template (Golden VM pattern) https://tests.stdin.at/tests/TC-VM-005?product=virt 2026-08-03T06:07:40.119Z TC-NET-001: Pod network (masquerade) and VM access via Service https://tests.stdin.at/tests/TC-NET-001?product=virt 2026-08-03T06:07:40.119Z TC-NET-002: VM directly reachable on LAN (OVN-K localnet) -- ⚠ HETZNER TOS VIOLATION https://tests.stdin.at/tests/TC-NET-002?product=virt 2026-08-03T06:07:40.119Z TC-NET-003: SR-IOV – high-performance networking (HW missing) https://tests.stdin.at/tests/TC-NET-003?product=virt 2026-08-03T06:07:40.119Z TC-VLAN-001: Test VLAN isolation — VMs in separate software bridges https://tests.stdin.at/tests/TC-VLAN-001?product=virt 2026-08-03T06:07:40.119Z TC-VLAN-002: Inter-VLAN routing via router VM (br-net1 ↔ br-net2) https://tests.stdin.at/tests/TC-VLAN-002?product=virt 2026-08-03T06:07:40.119Z TC-MULTUS-001: VM with 3 Network Interfaces (Management + Data + Storage) https://tests.stdin.at/tests/TC-MULTUS-001?product=virt 2026-08-03T06:07:40.119Z TC-MULTUS-002: OVN-Kubernetes UserDefinedNetwork (Layer2 Overlay) https://tests.stdin.at/tests/TC-MULTUS-002?product=virt 2026-08-03T06:07:40.119Z TC-MLB-001: Verify MetalLB Basic Functionality https://tests.stdin.at/tests/TC-MLB-001?product=virt 2026-08-03T06:07:40.119Z TC-MLB-002: Expose VM Services via MetalLB (SSH) https://tests.stdin.at/tests/TC-MLB-002?product=virt 2026-08-03T06:07:40.119Z TC-MLB-003: MetalLB BGP Mode with Router Peering https://tests.stdin.at/tests/TC-MLB-003?product=virt 2026-08-03T06:07:40.119Z TC-MLB-004: Multiple IP Pools and Namespace Isolation https://tests.stdin.at/tests/TC-MLB-004?product=virt 2026-08-03T06:07:40.119Z TC-MLB-005: MetalLB + Isolated Software Bridges: LB IPs per Bridge Interface https://tests.stdin.at/tests/TC-MLB-005?product=virt 2026-08-03T06:07:40.119Z TC-HCP-001: Verify HyperShift Operator and MCE https://tests.stdin.at/tests/TC-HCP-001?product=virt 2026-08-03T06:07:40.119Z TC-HCP-002: Create Hosted Cluster with KubeVirt provider https://tests.stdin.at/tests/TC-HCP-002?product=virt 2026-08-03T06:07:40.119Z TC-HCP-003: Scale NodePool and change VM flavour https://tests.stdin.at/tests/TC-HCP-003?product=virt 2026-08-03T06:07:40.119Z TC-HCP-004: Remove Hosted Cluster cleanly (destroy) https://tests.stdin.at/tests/TC-HCP-004?product=virt 2026-08-03T06:07:40.119Z TC-STG-002: DataVolume import from multiple sources https://tests.stdin.at/tests/TC-STG-002?product=virt 2026-08-03T06:07:40.119Z TC-BKP-001: Create VM backup with OADP https://tests.stdin.at/tests/TC-BKP-001?product=virt 2026-08-03T06:07:40.119Z TC-BKP-002: Restore VM from OADP backup https://tests.stdin.at/tests/TC-BKP-002?product=virt 2026-08-03T06:07:40.119Z TC-OPENBAO-OCP-001: Enable TLS end-to-end on OpenBao (OpenShift) https://tests.stdin.at/tests/TC-OPENBAO-OCP-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UNSEAL-001: Manual init and unseal — loop script (Approach 1) https://tests.stdin.at/tests/TC-OPENBAO-UNSEAL-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UNSEAL-002: Seal migration — Shamir to Transit auto-unseal https://tests.stdin.at/tests/TC-OPENBAO-UNSEAL-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UNSEAL-003: Seal migration — Shamir to AWS KMS auto-unseal https://tests.stdin.at/tests/TC-OPENBAO-UNSEAL-003?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-KV-001: Enable and Use KV v2 Secrets Engine https://tests.stdin.at/tests/TC-OPENBAO-KV-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-KV-002: KV v2 Metadata and Custom Metadata https://tests.stdin.at/tests/TC-OPENBAO-KV-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-KV-003: KV Secret Rotation Pattern with CAS https://tests.stdin.at/tests/TC-OPENBAO-KV-003?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-PKI-001: Configure PKI Engine as Internal CA https://tests.stdin.at/tests/TC-OPENBAO-PKI-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-PKI-002: Auto-Rotate TLS Certificates with cert-manager https://tests.stdin.at/tests/TC-OPENBAO-PKI-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-PKI-003: Cross-Sign External CA with OpenBao PKI https://tests.stdin.at/tests/TC-OPENBAO-PKI-003?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-DB-001: Dynamic PostgreSQL Credentials https://tests.stdin.at/tests/TC-OPENBAO-DB-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-DB-002: Dynamic MySQL/MariaDB Credentials https://tests.stdin.at/tests/TC-OPENBAO-DB-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-AUTH-001: Kubernetes Auth Method https://tests.stdin.at/tests/TC-OPENBAO-AUTH-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-AUTH-002: OIDC Authentication with Keycloak/DEX https://tests.stdin.at/tests/TC-OPENBAO-AUTH-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-HA-001: Raft Cluster Operations https://tests.stdin.at/tests/TC-OPENBAO-HA-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-HA-002: Raft Snapshot and Restore https://tests.stdin.at/tests/TC-OPENBAO-HA-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-BK-001: Full OpenBao Backup Strategy https://tests.stdin.at/tests/TC-OPENBAO-BK-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-BK-002: Disaster Recovery Restore https://tests.stdin.at/tests/TC-OPENBAO-BK-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UC-001: TLS Certificates for OpenShift Routes via PKI https://tests.stdin.at/tests/TC-OPENBAO-UC-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UC-002: Dynamic PostgreSQL Credentials for Applications https://tests.stdin.at/tests/TC-OPENBAO-UC-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UC-003: Multi-Tenant Secret Isolation https://tests.stdin.at/tests/TC-OPENBAO-UC-003?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-UC-004: Encryption as a Service - Transit Encryption for Application Data https://tests.stdin.at/tests/TC-OPENBAO-UC-004?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-INT-001: External Secrets Operator with OpenBao https://tests.stdin.at/tests/TC-OPENBAO-INT-001?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-INT-002: CSI Secrets Store Driver with OpenBao https://tests.stdin.at/tests/TC-OPENBAO-INT-002?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-INT-003: OpenBao Agent Sidecar Injector https://tests.stdin.at/tests/TC-OPENBAO-INT-003?product=openbao 2026-08-03T06:07:40.119Z TC-OPENBAO-INT-004: Sealed Secrets Migration to OpenBao https://tests.stdin.at/tests/TC-OPENBAO-INT-004?product=openbao 2026-08-03T06:07:40.119Z PRE-01: Cluster Health Check — Starting Point https://tests.stdin.at/prereqs/PRE-01?product=virt 2026-08-03T06:07:40.119Z PRE-02: Clarify network topology — I.e. software bridges (variant A) https://tests.stdin.at/prereqs/PRE-02?product=virt 2026-08-03T06:07:40.119Z PRE-03: Install and verify NMState Operator https://tests.stdin.at/prereqs/PRE-03?product=virt 2026-08-03T06:07:40.119Z PRE-04: Configure Linux bridges via NMState (Hetzner: variant A — software bridges) https://tests.stdin.at/prereqs/PRE-04?product=virt 2026-08-03T06:07:40.119Z PRE-05: Install OpenShift Virtualization Operator https://tests.stdin.at/prereqs/PRE-05?product=virt 2026-08-03T06:07:40.119Z PRE-06: Set up LVM Storage Operator — storage for VMs https://tests.stdin.at/prereqs/PRE-06?product=virt 2026-08-03T06:07:40.119Z PRE-07: Pull secret, import golden image, prepare SSH keys https://tests.stdin.at/prereqs/PRE-07?product=virt 2026-08-03T06:07:40.119Z PRE-08: Create namespace vmtest and NetworkAttachmentDefinitions https://tests.stdin.at/prereqs/PRE-08?product=virt 2026-08-03T06:07:40.119Z PRE-09: Install MetalLB Operator and configure IP pools (3 options) https://tests.stdin.at/prereqs/PRE-09?product=virt 2026-08-03T06:07:40.119Z PRE-10: MCE + HyperShift for hosted control planes https://tests.stdin.at/prereqs/PRE-10?product=virt 2026-08-03T06:07:40.119Z PRE-11: Deploy MinIO (S3 object storage) https://tests.stdin.at/prereqs/PRE-11?product=virt 2026-08-03T06:07:40.119Z PRE-12: Install MTV (Migration Toolkit for Virtualization) Operator https://tests.stdin.at/prereqs/PRE-12?product=virt 2026-08-03T06:07:40.119Z PRE-13: Install OADP Operator and configure with MinIO (S3) https://tests.stdin.at/prereqs/PRE-13?product=virt 2026-08-03T06:07:40.119Z PRE-14: Install Advanced Cluster Management (ACM) v2.17 https://tests.stdin.at/prereqs/PRE-14?product=virt 2026-08-03T06:07:40.119Z PRE-15: Install Kasten K10 (Veeam) Operator and configure with MinIO https://tests.stdin.at/prereqs/PRE-15?product=virt 2026-08-03T06:07:40.119Z PRE-01: Verify Helm 3+ and install repository https://tests.stdin.at/prereqs/PRE-01?product=openbao 2026-08-03T06:07:40.119Z PRE-02: Verify OpenShift health — COs, nodes, clusterversion https://tests.stdin.at/prereqs/PRE-02?product=openbao 2026-08-03T06:07:40.119Z PRE-03: Install the OpenBao CLI (`bao`) https://tests.stdin.at/prereqs/PRE-03?product=openbao 2026-08-03T06:07:40.119Z PRE-04: Prepare the Helm values file https://tests.stdin.at/prereqs/PRE-04?product=openbao 2026-08-03T06:07:40.119Z PRE-05: Install OpenBao with Helm (HA on OpenShift) https://tests.stdin.at/prereqs/PRE-05?product=openbao 2026-08-03T06:07:40.119Z PRE-06: Initialise the cluster — save unseal keys and root token https://tests.stdin.at/prereqs/PRE-06?product=openbao 2026-08-03T06:07:40.119Z PRE-07: Unseal HA pods (manual Shamir) https://tests.stdin.at/prereqs/PRE-07?product=openbao 2026-08-03T06:07:40.119Z PRE-08: Verify deployment — pods, API, UI, Raft https://tests.stdin.at/prereqs/PRE-08?product=openbao 2026-08-03T06:07:40.119Z PRE-09: Deploy a Transit OpenBao Instance for Auto-Unseal https://tests.stdin.at/prereqs/PRE-09?product=openbao 2026-08-03T06:07:40.119Z PRE-10: Prepare Keycloak for OpenBao OIDC https://tests.stdin.at/prereqs/PRE-10?product=openbao 2026-08-03T06:07:40.119Z PRE-11: Install cert-manager via the OpenShift Operator https://tests.stdin.at/prereqs/PRE-11?product=openbao 2026-08-03T06:07:40.119Z