Red Hat Certified Cloud and Service Provider Certification Workflow Guide

Red Hat Certified Cloud and Service Provider Certification 1.0

For Use with Red Hat Certified Cloud and Service Provider 1.0

Red Hat Customer Content Services

Abstract

This document describes the certification workflow for CCSP partners who want to offer Infrastructure-as-a-Service (IaaS) based on Red Hat Enterprise Linux.

Chapter 1. Introduction

1.1. Audience

This document provides an overview of the certification workflow for Red Hat Certified Cloud and Service Provider partners who want to certify Infrastructure-as-a-Service (IaaS) solutions. The certification tools and methodologies cater to infrastructure cloud images built on Red Hat Enterprise Linux.

Before starting the certification process, we recommend you read the following documents:

Additionally, we recommend that you are a Red Hat Certified Engineer or hold equivalent experience before starting the process.

Chapter 2. Giving Feedback and Getting Help

2.1. Giving Feedback

If you experience difficulty during the certification process with a Red Hat product, the Red Hat certification toolset, or with a procedure described in this documentation, visit Red Hat Customer Portal where you can gain access to Red Hat product documentation as well as solutions and technical articles about Red Hat products.

You may also open a case under the following instances:

  • To report issues and get help with the certification process
  • To submit feedback and request enhancements in the certification toolset & documentation
  • To receive assistance on the Red Hat product on which your product/application is being certified
Note

To receive Red Hat product assistance, it is necessary to have the required product entitlements or subscriptions, which may be separate from the partner program and certification program memberships.

2.2. Opening a Support Case

To open a support case, refer to How do I open and manage a support case.

Complete the Support Case Form with special attention to the following fields:

  • From the Product field, select Red Hat Enterprise Linux.
  • From the Product Version field, select the version of the Red Hat product on which your product/application is being certified.
  • In the Problem Statement field, type a problem statement/issue or feedback using the following format:

    {Partner Certification} (The Issue/Problem or Feedback)
  • Replace (The Issue/Problem or Feedback) with either the issue/problem faced in the certification process/Red Hat product or feedback on the certification toolset/documentation.

    For example: {Partner Certification} Error occurred while submitting certification test results using Red Hat Certification application.

    Important

    It is mandatory to write the problem statement with the {Partner Certification} tag to ensure assignment of the case to the appropriate group(s).

All cases related to Certification use a Severity 3 SLA which provides for a one business day response time.

Chapter 3. Prerequisites

3.1. Program and Product Requirements

3.1.1. Program Membership, Accounts, and Entitlements

To certify cloud images, an active membership in the Certified Cloud and Service Provider (CCSP) Program is required. If you are not already a member, visit Red Hat Connect for Business Partners to learn more and become a member.

During the CCSP program sign-up process a Red Hat Single Sign-On (SSO) account will be created for you. This SSO account and its credentials will be used throughout the certification process to access Red Hat products, the certification toolset, and other Red Hat assets.

After you have an active membership in the CCSP program and an SSO account, the account must be entitled with certification privileges. To do this, open a case and include the following information in the Problem Statement field:

Problem Statement:

  • Partner Certification: CCSP Certification Access for {Red Hat SSO Username} at {Partner Name}

    Optionally, include all of the following information in the What do you expect to see field to have a Red Hat associate service your case and create the first certification request for you:

  • Name of the Cloud or the Cloud Service Offering
  • Public Catalog URL/Public URL of the Cloud or Cloud Service Offering
  • Supported Regions (Global/Australia & New Zealand/ASEAN/EMEA/Japan/LATAM/North America/Public Sector):
  • Supported Languages
  • Any 3rd Party Certifications Acquired (E.g. FedRAMP, Systrust, SAS 70, PCI, Other Non-NA Certs, etc.):
  • RHEL Version (6.x or 7.x) of the first certification desired to be achieved

Attach File:

Attached Partner Brand Logo (PNG 256x256)

3.1.2. Image Requirements

As a Certified Cloud and Service Provider (CCSP), you are required to certify images that you publish in a catalog. The certification process provides your Red Hat customers with the assurance that they will have a consistent experience across cloud providers, that the customer’s experience comes with the highest level of support, and that good security practices are available to the customers.

Your image needs to meet the complete list of image requirement policies outlined in the CCSP Program Guide and the Technical and Operations requirements Guide available in Red Hat Connect for Business Partners. The certification specific policies and requirements are covered in the CCSP Policy Guide.

3.2. Prepare the Test Environment

3.2.1. Test Environment Overview

The following diagram depicts the environment setup required for testing of RHEL 6 or RHEL 7 image-under-test (whichever is applicable) using Red Hat Certification web UI. The diagram includes the certification packages that need to be installed on each host (color coded).

Test Environment Overview

The primary application that is implemented in the Red Hat Certification workflow is a client server application.You can launch Red Hat Certification web user interface on a different host (test server), and use the web UI to run certification tests on a cloud image-under-test (test client). The test server communicates with the the image-under-test or the test client and triggers certification tests on the image-under-test/test client host. Using the Red Hat Certification web user interface you can:

  • Generate requests for new certifications
  • Submit logs
  • Conduct discussions with the certification team

Although it is not mandatory, Red Hat recommends that you set up an independent test server to run certification tests on the image-under-test/test client. This allows testing of multiple images/test clients from a single host/test server, provides detailed validation reports on the test server and prevents resource constraints. The validated test results/reports are also saved on Red Hat Certification server and can be viewed on Red Hat Certification web user interface. After the data is submitted, partners can maintain the Red Hat Certification web user interface for further communication with certification team if required.

Note

You may use the Red Hat Certification Command-Line Interface if Red Hat Certification web UI is inaccessible or if the image-under-test does not have access to the internet. Red Hat supports the usage of Red Hat Certification CLI as documented for this release of CCSP certification.

3.2.2. Prepare the Image-under-Test

The software packages required on the image-under-test have to be installed manually from Red Hat Customer Portal. This ensures minimum modifications to the default content of the image-under-test.

Note

If the image-under-test does not have internet access, we recommend that you download the required software packages on any other connected RHEL 6/7 host (whichever is applicable) and then transfer the RPM files to the image-under-test. After installation of the required packages on the image-under-test, Red Hat recommends using Red Hat Certification CLI to run certification tests and complete the rest of the process.

To download and install the required software packages manually from Red Hat Customer Portal, complete the following steps:

  1. Log in to Red Hat Customer Portal and open the Red Hat Certification Downloads Page.
  2. Select the relevant version of RHEL from the Version list. Select an appropriate architecture from the Architecture list.

    Download Options
  3. Click the Download Latest button next to the redhat-certification-backend and redhat-certification-cloud packages.

    Download Latest
  4. Install the RPM files/packages downloaded in the previous step on the image-under-test.
  5. Run the following command to start Red Hat Certification back-end server and the server listener process on the image-under-test:

    # rhcertd start

Result

The image-under-test is now prepared for certification testing.

3.2.3. Prepare the Test Server

The software packages required on the test server must be installed by subscribing to Red Hat Certification channel via Red Hat web user interface or Satellite. This ensures that the required dependencies are automatically installed.

To install the required software packages on the test server, complete the following steps:

  1. Select a persistent RHEL 7 host which can act as the test server host. The chosen RHEL 7 host should be able to access Red Hat services including the certification channels and use the same network as the RHEL 6 or RHEL 7 image-under-test.
  2. Run the following command to register your host using Red Hat Subscription Management:

    # subscription-manager register

    Use your RHN credentials for the registration.

  3. Run the following command to display the list of available subscriptions for your system:

    # subscription-manager list --available

    From the list of available subscriptions, search for the subscription which provides the Red Hat Certification (for RHEL Server) repository. Make a note of the subscription and its Pool ID.

    Important

    The Red Hat Certification (for RHEL Server) repository provides the certification packages.

  4. Run the following command to attach the subscription which provides the Red Hat Certification (for RHEL Server) repository to your system:

    # subscription-manager attach --pool=[pool_ID]

    Replace [pool_ID] with the Pool ID of the subscription which provides the Red Hat Certification (for RHEL Server) repository.

    It is mandatory to use the correct Pool ID with the # subscription-manager attach --pool command to attach the required subscription to the system.

    Tip

    To verify the list of subscriptions your system has currently attached, at any time, run the # subscription-manager list --consumed command. Ensure that the subscription which provides the Red Hat Certification (for RHEL Server) repository is attached to your system.

  5. Run the following command to subscribe to Red Hat Certification channel:

    # subscription-manager repos --enable=rhel-7-server-cert-rpms
    # yum install redhat-certification
  6. Run the following commands to start Apache, Red Hat Certification back-end server and the server listener process:

    # systemctl start httpd
    # rhcertd start

Result

The test server (RHEL 7.x host) is now prepared. The redhat-certification package provides Red Hat Certification web UI which can be used to run certification tests on the image-under-test/test client.

Chapter 4. Certification Workflow

4.1. Certification Workflow Overview

The following diagram represents the entire Certified Cloud and Service Provider (CCSP) certification workflow along with the roles & responsibilities of Red Hat and the Partners.

Certification Workflow

4.2. Create a Certification Request

To create a new certification request, complete the following steps:

In your test server, launch Red Hat Certification web user interface in a browser using the http://<machine-IP>.

  1. Type your Red Hat account credentials previously enabled for certification in the Username and Password fields. Click Login.
  2. Click the New Certification button. This will take you to Choose the Red Hat Certification web page.
  3. From the Product drop-down list, select Red Hat Enterprise Linux. The Version and Platform value gets generated automatically. However, partners can select the version, platform and RHEL version according to their requirement. Click Next, this will take you to the Choose the product to be certified web page.
  4. Select the Vendor, Make and Name items from the drop-down list. Click Next.
  5. A notification of the requested Cloud certification gets displayed.
Note

If you do not see Red Hat Certified Cloud Provider option on Red Hat Certification web user interface, ensure that you are logged in with the account previously enabled for certification and have completed all the certification prerequisites. For further assistance, try opening-a-support-case.

4.3. Run Certification Tests

4.3.1. Overview

Certification tests can be run on the image-under-test using Red Hat Certification web UI (by launching Red Hat Certification application on the local test server) or by using Red Hat Certification CLI.

4.3.2. Run Certification Tests using Red Hat Certification WUI

To run certification tests on the image-under-test using Red Hat Certification web user interface, complete the following steps on the test server:

  1. Launch Red Hat Certification web user interface in a browser using the http://machine-IP link. Replace machine-IP with the IP address/hostname of your machine.
  2. Type Red Hat account credentials previously enabled for certification in the User Name and Password fields. Click Log In.
  3. On Red Hat Certification Home Page, click the Server settings tab.

    Server Setting
  4. In the Register a System field, enter the hostname or IP address of the image-under-test and then click Add.
  5. On Red Hat Certification Home Page, click on your existing certification entry.

    Add Product

    The Progress Page opens and displays the certification tests available in the certification test suite and the progress of the previous runs (if any).

  6. Click the Testing link to open the Testing Page.
  7. In the Testing Page, click Add System.
  8. In the Select Host Page, select the host/hostname of the image-under-test and click Test.

    The Testing Page opens and a certification test plan is created for the image-under-test. After the certification test plan run is complete and the test plan is ready, the status column displays a “Finished test run” status and a Continue Testing button.

    Continue Testing
  9. Click Continue Testing.
  10. From the Run Table, select all the tests which are displayed and then click Run Selected.

    Run Selected
Note

It is mandatory to run all the tests which are displayed after the creation of a test plan for certification. It is recommended to select and run specific tests only for debugging purposes if advised by Red Hat Review team.

Result

Certification tests are run on the image-under-test. The status of the certification test run is displayed on the Testing Page. Tests with the interactive label will require feedback from the user during runtime. The status column on the Testing page displays a question and a textbox for inputs during testing. The test pauses until you provide a response and click Submit.

After the test run completes, the test logs from various tests are stored in a single log file in .xml.gz format.

4.3.3. Run Certification Tests using Red Hat Certification CLI

To run the certification tests using Red Hat Certification CLI, execute the following commands on the image-under-test:

# rhcert-cli

Certain tests require feedback from the user during runtime (on the CLI). The test pauses until you provide a response and click Enter. The following screenshot shows an example.

Needs Review
Note

It is recommended that you run all the tests.

After the tests run, the test logs/results are automatically collected in a single .xml.gz file. To save the test results/logs, run the following command on the image-under-test.

# rhcert-cli save --server [hostname/IP address of LTS]

It is also possible to directly submit the test results/logs for validation without saving them on the image-under-test.

4.4. View the Test Logs and Submit the Test Logs for Review

4.4.1. View the Test Logs and Submit the Test Logs for Review using Red Hat Certification WUI

To view and submit the test logs using Red Hat Certification web user interface (launched on the test server), complete the following steps. The following procedure also provides steps to submit, save, download and delete the test results/log file. However, it is mandatory to submit the test log file to Red Hat Certification services for validation.

  1. Launch Red Hat Certification web user interface on the test server.
  2. From the Certification Page, click the relevant certification entry.
  3. Click the Testing link to open the Testing Page.
  4. In the Testing page, click the timestamp under the relevant hostname that corresponds to the results you wish to view.

    Results Link
  5. From the Actions list, select an appropriate action based on the following details:

    Note

    You may view the results of each test from the Results column in the table.

    • To submit the test log file for validation, select Submit. To close the test log file, select Close
    • To save the test log file on a different Red Hat Certification server, select Save. The save action transfers the test log file (in .xml.gz format) to a remote server which has Red Hat Certification application installed. If you save the test log file on a different Red Hat Certification server, you must submit the log file from the same server
    • To download the test log file (in .xml.gz format), select Download
    • To delete the test log file from the server, select Delete

The Submit option submits the consolidated test log or test results file to Red Hat certification services for review.

4.4.2. View the Test Logs and Submit the Test Logs for Review using Red Hat Certification CLI

To submit the test logs using Red Hat Certification CLI, use the # rhcert-cli submit command on the image-under-test.

Type your Red Hat account credentials previously enabled for certification in the Red Hat Catalog Username and Password. The Certification ID is generated when you successfully create a certification request. Type the ID of the certification request in the Certification ID dialog box.

Note

You can view your product Certification ID in the Details tab with the row named as certification_id.

The # rhcert-cli submit command works only if the image has a network that can connect to the Red Hat services. The command submits the latest timestamped test logs on your host/image to Red Hat certification services for review. The test log file is reviewed by Red Hat certification services and Red Hat Review team. The certification results are displayed on Red Hat Certification web user interface.

If the image-under-test does not have internet access, complete the following steps to submit the test log file:

  1. Save the results to a file using the rhcert-cli --save command. Copy the file to a USB.
  2. Connect the USB to your LTS.
  3. To upload the copied file, click Upload Results File button on the Testing tab of your certification page.
  4. To submit the test results click on the timestamp link. On the Progress tab click the Submit button.

After the result is successfully submitted, the certificate state in Testing tab changes to Submitted.

The uploaded file will appear in the Testing tab of the Certification page and will be associated with the Certification ID and the Program.

Note

The uploaded file will replace the original file if both the filenames are same.

4.5. Review and Posting of Certification

The test log file submitted after a certification test run is validated by Red Hat certification services and the Review Team. The review team may get in touch with the partner using the Dialog tab on Red Hat Certification web user interface to confirm specific results and obtain more information.

In some instances, there may be a need to rerun some tests. However, the logs from the rerun can be submitted using the existing certification request. The final certification results are displayed on Red Hat Certifcation web user interface. To view certification results, check the Show In Progress Certifications button on Red Hat Certification web user interface.

After a successful certification, the certified product is listed on Red Hat Certified Cloud Providers Page.

Chapter 5. Recertification Workflow

5.1. Recertification

Partners must recertify their cloud application image on every major release of the Red Hat Enterprise Linux included in the image and are recommended to also recertify their image on each minor release.

To recertify an image, complete the following steps:

  1. Section 4.2, “Create a Certification Request”. It is mandatory to create a new certification request for recertification.
  2. Run the certification tests and proceed with the rest of the workflow as documented.

Chapter 6. Finding More Information

6.1. References

For more information on Red Hat Certified Cloud and Service Provider Program or Red Hat Certified Cloud and Service Provider Certification, refer the following documents/pages.

Legal Notice

Copyright © 2017 Red Hat, Inc.
The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version.
Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law.
Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries.
Linux® is the registered trademark of Linus Torvalds in the United States and other countries.
Java® is a registered trademark of Oracle and/or its affiliates.
XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries.
MySQL® is a registered trademark of MySQL AB in the United States, the European Union and other countries.
Node.js® is an official trademark of Joyent. Red Hat Software Collections is not formally related to or endorsed by the official Joyent Node.js open source or commercial project.
The OpenStack® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community.
All other trademarks are the property of their respective owners.