Investigate the feasibility and approach for implementing functional/integration tests that validate Zero Downtime Password Rotation behavior across all Ironic services.

Research Areas:

• Survey existing test frameworks used in openstack-k8s-operators for functional testing
• Identify test scenarios that need coverage:
  • Initial deployment with AppCreds
  • Credential rotation during grace period
  • Fallback to password auth
  • Service availability during rotation
  • Multiple services rotating simultaneously
  • Evaluate test environment requirements (e.g., test Keystone, test clusters)
  • Assess complexity and effort required for different test approaches
  • Review how other operators (e.g., nova-operator, cinder-operator) test ZDPR if available
  • Determine if tests can run in CI or require special environment

Deliverables:

• Document with findings and recommendations
• Recommendation on whether to proceed with functional tests or rely on other testing.

Technical Context:

• May involve envtest, kind clusters, or other Kubernetes testing frameworks
• Need to simulate keystone-operator behavior (AppCred creation/rotation)
• Consider testing with actual Ironic services or mocked components