As per victoria cycle testing runtime and community goal
we need to migrate upstream CI/CD to Ubuntu Focal(20.04).

Tempest based jobs are migrated automatically via devstack
base job start running on Focal but stable jobs testing stable
branch needs to keep running on their supported
distro version which is bionic from train till ussuri.

Also, remove stein support (removed from tempest)
and add a job for victoria.

Change-Id: I3d792925e81172ae8abe75c5ceb2d5a039fc84f7
Story: #2007865
Task: #40184

The openstack can have multiple glance stores deployed/available.
It may be a proper thing to copy newly created signed image into
all the available glance stores so barbican tempest tests can access
image regardless on which compute and storage backend they are ran on
and regardless on which glance store is local.
Additionally there is a nova-compute conf parameter[1] which can even
prevent instances being spawned from image which is not available in local
glance store.
The copy-image would happen only if import_image tempest cong option
is available which indicates glance multistore is available.

[1] https://review.opendev.org/#/c/657078/

Change-Id: I1f0d8be1b237da0c96e820c4b3dca09a83b29752

Current skip runs from the testcase and consumes time and resources.
Changed the skip to decorator.

Change-Id: Ia98fa1607c56b34ed1c764873f2909f423d1fffd

1.update barbican and tempest plugins links to the lastest ones

2.since we don't use launchpad to report bugs,replace it with
storyboard.openstack.org

Change-Id: I287563a7abfa57021cbdebeece35057e85691056

The repo is Python 3 now, so update hacking to version 3.0 which
supports Python 3.

Fix problems found.

Change-Id: Ia59a23a36ebb8548a20e894000f7342c73012eac

Change-Id: I1efa783233a435b6dbe134e035e0c2efb8ac1a6d

Remove six Replace the following items with Python 3 style code.
- six.moves.urllib
- six.binary_type

Change-Id: I234c3b205ee21b59953aa6ce7af5c2a1e4a6cfa6

It seems this dummy test has been around since the creation of the plugin,
but it is not really needed.

Change-Id: Ic17ac37472dc2742fa5d6299ff5724bfd9f7197e

author-email, home-page are aliases, replacing them for their final value

description-file -> long_description = file:

requires-python is old value and does not work, python-requires
is right metadata.

'python-requires' is introduced from PEP440 and requires-python was old value
in PEP345.
- https://packaging.python.org/guides/distributing-packages-using-setuptools/#python-requires
- https://www.python.org/dev/peps/pep-0345/#requires-python

Change-Id: I2d2cd5d660ef937bfe8445bae7cf6b279eb80b0f

in 'victoria' cycle, we should test py38 by default.

Change-Id: Id1b69b2e4fa56ade670a72f0775690beb09bf89d

The option is deprecated for more than 4 years already and it will
be removed soon, see the change in Tempest [1]

Starting Tempest 25.0.0 release, CONF.scenario.img_file need
a full path for the image. CONF.scenario.img_dir was deprecated
and will be removed in the next release. Till Tempest 25.0.0,
old behavior is maintained and keep working but starting
Tempest 26.0.0, you need to specify the full path in
CONF.scenario.img_file config option.

This patch does analogically the same change as was done in Tempest,
in order to give users of the plugin some time for removing img_dir.

[1] https://review.opendev.org/#/c/710996

Related-Bug: #1393881
Change-Id: I610d267eab287e3df8dd428621c4d3abace6dd0c

1. Tempest has an option CONF.compute.compute_volume_common_az to make
sure that Volume and Instance are created in common AZ If Availability
zones are used. The paramater is respected when instance is created
because tempest.common.compute.create_test_server() is used but not
respected when volume is created for test purpose. Let's make sure
AZ is set when volume is created if parameter is set.

2. The plain Encryptor provider is not support on ceph backends, the
test test_encrypted_cinder_volumes_cryptsetup fails on:
cinder.exception.VolumeDriverException: Volume driver reported an error:
Provider plain not supported.
This comes from [1] which is called in [2]. The Plain provider will be deprecated
in future completely.

[1] https://opendev.org/openstack/cinder/src/branch/master/cinder/volume/volume_utils.py#L1195
[2] https://opendev.org/openstack/cinder/src/branch/master/cinder/volume/drivers/rbd.py#L877

Change-Id: Ib6290ed1ad5779e4e6fed449f3335dbdada42f0d

As per victoria cycle testing runtime and community goal[1]
we need to migrate upstream CI/CD to Ubuntu Focal(20.04).

Fixing:
- bug#1886296
Bump the pyflakes to 2.1.1 as min version to run pep8 jobs
on py3.8 which is default python vesion in ubuntu focal.

Story: #2007865
Task: #40177

Closes-Bug: #1886296
[1] https://governance.openstack.org/tc/goals/selected/victoria/migrate-ci-cd-jobs-to-ubuntu-focal.html

Change-Id: I206a845b6a7e271b73aef762062fe57f228edcbe

Define here the barbican tempest plugin which rely on
barbican-tempest-plugin, following the common patterns:

- follow the rules for naming (repository name as prefix,
  remove some redundant details);
- define branch-specific jobs from the most basic job
  to catch regressions against older branches;
- remove barbican-simple-crypto-devstack-tempest-py35,
  long gone, from the experimental queue.

Change-Id: I106addbe99b1bd4ed72ab07aba16031067503483

... instead of the encryptor classes, whose direct usage has been
deprecated since Ocata.
See also Id221414d74af8413084c7935b762f93b7ce43c42 which applied
those changes to tempest.git.

Change-Id: I05b0200b80d8ae957caaa53d5006b050d2d49da6

This patch adds certificate validation scenario tests
incorporate cursive's new certificate validation feature.

Change-Id: Ica1d32ca66d6f89692e9cc90e415bf569332f58d
Implements: blueprint nova-validate-certificates

OpenStack is dropping the py2.7 support in ussuri cycle.

barbican-tempest-plugin is ready with python 3 and ok to drop the
python 2.7 support.

Complete discussion & schedule can be found in
- http://lists.openstack.org/pipermail/openstack-discuss/2019-October/010142.html
- https://etherpad.openstack.org/p/drop-python2-support

Ussuri Communtiy-wide goal:
https://governance.openstack.org/tc/goals/selected/ussuri/drop-py27.html

Change-Id: I557159bea7c749202ef327995754a7f54b58028c

Tempest has moved the Volume APIs testing to v3 as default and can be run
under v2 API via catalog_type.
- https://review.opendev.org/#/q/topic:volume-default-testing-v3+(status:open+OR+status:merged)

Below config options were deprecated since Rocky and now Tempest is going
to remove those (Needed-By patch):
    * ``CONF.volume-feature-enabled.api_v2``
    * ``CONF.volume-feature-enabled.api_v3``

Change-Id: I600ac88dbed8697cd1efe009fd46195f934f3eb6
Needed-By: https://review.opendev.org/#/c/698754/

For more detail, see http://lists.openstack.org/pipermail/openstack-discuss/2019-May/006478.html

Change-Id: Icecb2f54fd27fab4c43cc487dc9c434d3bb9ee48

oslosphinx project is retired. Since this repo does not build any docs,
we can remove oslosphinx and sphinx requirements directly.

Change-Id: If6b19082bc1092f5322dc529458af1e07da90194

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

Without this patch, if the barbican tempest plugin is installed in an
environment running with `[glance]/verify_glance_signatures] set to
false in nova.conf, which is the default value, the test will fail.
Enabling glance signature verification unconditionally in order to
support this test is not realistic, as it then prevents users from
booting from unsigned images which may not always be desired. This patch
adds a configuration option to allow for disabling the
`test_signed_image_upload_boot_failure` test, so that we can still run
the majority of the plugin tests for a standard environment with default
nova configuration. The new option defaults to `True`, meaning assume
that nova's configuration has been overrridden to enforce image
verification, which allows the barbican CI to run as normal with no
configuration changes, but it allows operators to explicitly disable the
test as needed.

Change-Id: Ibb5c06ce2773e0ee13bda97717e8e18e77e0be7c

This commit removes Manager class which is unused now.

Change-Id: I49d3790c3f649a3d84e9d31f00b3f15a5dbaa36f

This is a mechanically generated patch to complete step 1 of moving
the zuul job settings out of project-config and into each project
repository.

Because there will be a separate patch on each branch, the branch
specifiers for branch-specific jobs have been removed.

Because this patch is generated by a script, there may be some
cosmetic changes to the layout of the YAML file(s) as the contents are
normalized.

See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html

Change-Id: I145f449d42c0d9a9102ae5216dde4d75d9c37855
Story: #2002586
Task: #24285

According to Openstack summit session [1],
stestr is maintained project to which all Openstack projects should migrate.
Let's switch to stestr as other projects have already moved to it.

[1] https://etherpad.openstack.org/p/YVR-python-pti

Change-Id: I3fb32622b029bfadef7f34e973d8277c107112f0

Volume v1 API has been gone since long and Tempest also
marked their deprecation since Juno
- https://review.openstack.org/#/c/446238/

Now Tempest is removing the deprecated config option and
alias for voluem v1 service client in
- https://review.openstack.org/#/c/573135/

Before the Tempest patch gets merged, we need to remove all usage
of volume v1 things.

Change-Id: I2d715a8a63069da5cfe02fbc0992eccb7ba598a7
Needed-By: https://review.openstack.org/#/c/573135/

* From rocky release projects are consuming the volume featured
  enabled v3 API, Since the earlier code has support
  for v1, v2 and since api_v3 is used in tempest.conf, it will give
  AttributeError: 'Manager' object has no attribute 'volumes_client'.
  The above patch fixes the issue.

* Keep cinder v1 api as tempest plugin is branchless, it would avoid
  breakage if someone is still consuming it.

Closes-Bug: #1775353

Change-Id: Ia9d070a6033a8192112dbaa1704b1de6838051c5

Cinder volume delete [1] is executed during resource cleanup.
So, if test fails due to some reason then it tries to delete a volume
which is "in-use" state. Detach volume should be executed before
trying to delete the volume. This patch adds nova_detach volume
as a cleanup task.

[1] a6d945d8e6/barbican_tempest_plugin/tests/scenario/manager.py (L229)

Change-Id: I3457bb6fc22a7bb6a32c8d6f4ea5879aeb8d43c5
Related-Bug: #1755485

Update the old url links in docs.

Change-Id: Iad72842a7a22c820c703a9270af8ce8ad2dd25ff

e.g. services/key_manager/json/secret_client.py
is importing six unconditionally, so it is good to
declare the dependency appropriately.

Change-Id: I62eab606546c8654bd42b47b054c0c041f60e864

Closes-bug: #1737513
Depends-On: Ia3d80bf2f81c7317fec117aecbc3c560d51a7d4e
Change-Id: I5032c71a3a0230df7352a415b5b77f37fafc29a7

Change-Id: I6d9019a448f80e72f0bd49e5aa6a3ace2eefe9dc