OpenSearch: Disable SSL validation for unsupported regions (#13346)

dfangl · web-flow · commit a2d83bfbd8d3 · 2025-11-06T13:30:51.000+01:00
diff --git a/tests/aws/services/opensearch/test_opensearch.py b/tests/aws/services/opensearch/test_opensearch.py
@@ -99,6 +99,21 @@ def try_cluster_health(cluster_url: str):
     ], "expected cluster state to be in a valid state"
 
 
+@pytest.fixture(autouse=True)
+def disable_ssl_validation_for_unsupported_regions(region_name, monkeypatch):
+    # list of regions supported in our certificate
+    # prevents SSL verification for regional hostnames not present in the SAN list of the certificate
+    if region_name not in {
+        "eu-central-1",
+        "eu-west-1",
+        "us-east-1",
+        "us-east-2",
+        "us-west-1",
+        "us-west-2",
+    }:
+        monkeypatch.setattr(requests, "verify_ssl", False)
+
+
 @markers.skip_offline
 class TestOpensearchProvider:
     """
