Fix adoption fernet session token test

tests/roles/development_environment/tasks/main.yaml

@@ -44,19 +44,15 @@
       {{ shell_header }}
       {{ openstack_command }} secret store --name testSecret --payload 'TestPayload'
 
-- name: saves a fernet token
+- name: Issue session fernet token
   no_log: "{{ use_no_log }}"
   ansible.builtin.shell:
     cmd: |
       {{ shell_header }}
       {{ openstack_command }} token issue -f value -c id
   register: before_adoption_token
 
-- name: debug token
-  ansible.builtin.debug:
-    var: before_adoption_token
-
-- name: create credential for sanity checking its value after adoption
+- name: Create credential for sanity checking its value after adoption
   no_log: "{{ use_no_log }}"
   ansible.builtin.shell:
     cmd: |

tests/roles/keystone_adoption/defaults/main.yaml

@@ -6,6 +6,9 @@ keystone_patch: |
       apiOverride:
         route: {}
       template:
+        customServiceConfig: |
+          [token]
+          expiration = 360000
         override:
           service:
             internal:

tests/roles/keystone_adoption/tasks/main.yaml

@@ -69,23 +69,35 @@
       ${BASH_ALIASES[openstack]} service list | awk "/ $service /{ print \$2; }" | xargs -r ${BASH_ALIASES[openstack]} service delete || true
     done
 
-- name: debug token
+- name: Print session test token
   ansible.builtin.debug:
     var: before_adoption_token
 
 - name: Verify that pre-adoption token still works
   ansible.builtin.shell: |
     {{ shell_header }}
     {{ oc_header }}
-    OS_TOKEN={{ before_adoption_token.stdout }}
-    alias openstack="oc exec -t openstackclient -- openstack"
-    ${BASH_ALIASES[openstack]} endpoint list
+
+    alias openstack="oc exec -t openstackclient -- env -u OS_CLOUD - OS_AUTH_URL={{ auth_url }} OS_AUTH_TYPE=token OS_TOKEN={{ before_adoption_token.stdout }} openstack"
+
+    if ${BASH_ALIASES[openstack]} endpoint list 2>&1 | grep "Failed to validate token"; then
+      exit 1
+    else
+      exit 0
+    fi
+  register: adoption_token_result
+
+- name: Print credentials test token
+  ansible.builtin.debug:
+    var: before_adoption_token
 
 - name: Verify that pre-adoption credential stills the same
   ansible.builtin.shell: |
     {{ shell_header }}
     {{ oc_header }}
+
     alias openstack="oc exec -t openstackclient -- openstack"
+
     ${BASH_ALIASES[openstack]} credential show {{ before_adoption_credential.stdout }} -f value -c blob
   register: after_adoption_credential
   failed_when: after_adoption_credential.stdout != 'test'