barbican-tempest-plugin/.zuul.yaml

- project:
    queue: barbican
    templates:
      - tempest-plugin-jobs
      - check-requirements
    check:
      jobs:
        - barbican-tempest-plugin-simple-crypto
        - barbican-tempest-plugin-simple-crypto-secure-rbac
        - barbican-tempest-plugin-simple-crypto-2026-1
        - barbican-tempest-plugin-simple-crypto-2025-2
        - barbican-tempest-plugin-simple-crypto-2025-1
        - barbican-tempest-plugin-simple-crypto-ipv6-only
        - barbican-tempest-plugin-simple-crypto-castellan-src
        - barbican-tempest-plugin-simple-crypto-cursive
    gate:
      jobs:
        - barbican-tempest-plugin-simple-crypto

# TODO(gmann): As per the 2025.1 testing runtime, we need to run at least
# one job on jammy. This job can be removed once 2025.1 is retired.
- job:
    name: barbican-tempest-plugin-simple-crypto-jammy
    description: This is integrated job testing on Ubuntu jammy(22.04)
    parent: barbican-tempest-plugin-simple-crypto
    nodeset: openstack-single-node-jammy

- job:
    name: barbican-tempest-plugin-simple-crypto
    parent: devstack-tempest
    required-projects: &barbican-tempest-reqs
      - openstack/barbican
      - openstack/barbican-tempest-plugin
      - openstack/python-barbicanclient
    vars: &barbican-tempest-vars
      devstack_plugins:
        barbican: https://opendev.org/openstack/barbican
      devstack_localrc:
        NOVA_BACKEND: LVM
        LVM_VOLUME_CLEAR: none
      devstack_local_conf:
        post-config:
          $NOVA_CONF:
            glance:
              verify_glance_signatures: True
            ephemeral_storage_encryption:
              key_size: 256
              cipher: aes-xts-plain64
              enabled: True
        test-config:
          $TEMPEST_CONFIG:
            auth:
              create_isolated_networks: False
            image-feature-enabled:
              # this may be removed soon, as api_v1 is false since tempest>=20
              api_v1: False
            ephemeral_storage_encryption:
              enabled: True
            key_manager:
              min_microversion: '1.0'
              max_microversion: latest
      tox_envlist: all
      tempest_test_regex: barbican
      tempest_plugins:
        - barbican-tempest-plugin

- job:
    name: barbican-tempest-plugin-simple-crypto-2026-1
    parent: barbican-tempest-plugin-simple-crypto
    nodeset: openstack-single-node-noble
    override-checkout: stable/2026.1
    vars: &microversion_v1_1
      devstack_local_conf:
        test-config:
          $TEMPEST_CONFIG:
            key_manager:
              min_microversion: '1.0'
              max_microversion: '1.1'
- job:
    name: barbican-tempest-plugin-simple-crypto-2025-2
    parent: barbican-tempest-plugin-simple-crypto
    nodeset: openstack-single-node-noble
    override-checkout: stable/2025.2
    vars: *microversion_v1_1

- job:
    name: barbican-tempest-plugin-simple-crypto-2025-1
    parent: barbican-tempest-plugin-simple-crypto
    nodeset: openstack-single-node-noble
    override-checkout: stable/2025.1
    vars: *microversion_v1_1

- job:
    name: barbican-tempest-plugin-simple-crypto-yoga
    parent: barbican-tempest-plugin-simple-crypto
    nodeset: openstack-single-node-focal
    override-checkout: stable/yoga
    vars: &microversion_v1_0
      devstack_local_conf:
        test-config:
          $TEMPEST_CONFIG:
            key_manager:
              min_microversion: '1.0'
              max_microversion: '1.0'

- job:
    name: barbican-tempest-plugin-simple-crypto-secure-rbac
    parent: barbican-tempest-plugin-simple-crypto
    vars:
      devstack_localrc:
        ENFORCE_SCOPE: True
      devstack_local_conf:
        # (lpiwowar): Uncomment once this bug is resolved:
        # https://bugs.launchpad.net/barbican/+bug/2043457
        # post-config:
        #   $BARBICAN_CONF:
        #     secretstore:
        #      enable_multiple_secret_stores: True
        #      stores_lookup_suffix: simple_crypto
        #     secretstore:simple_crypto:
        #      secret_store_plugin: store_crypto
        #      crypto_plugin: simple_crypto
        #      global_default: true
        test-config:
          $TEMPEST_CONFIG:
            enforce_scope:
              barbican: True
            # barbican_tempest:
            #  enable_multiple_secret_stores: True

- job:
    name: barbican-tempest-plugin-simple-crypto-secure-rbac-zed
    parent: barbican-tempest-plugin-simple-crypto-secure-rbac
    nodeset: openstack-single-node-focal
    override-checkout: stable/zed
    required-projects:
      - name: openstack/barbican-tempest-plugin
        override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
    vars: *microversion_v1_0

- job:
    name: barbican-tempest-plugin-simple-crypto-secure-rbac-yoga
    parent: barbican-tempest-plugin-simple-crypto-secure-rbac
    nodeset: openstack-single-node-focal
    override-checkout: stable/yoga
    required-projects:
      - name: openstack/barbican-tempest-plugin
        override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
    vars: *microversion_v1_0

- job:
    name: barbican-tempest-plugin-simple-crypto-ipv6-only
    parent: devstack-tempest-ipv6
    required-projects: *barbican-tempest-reqs
    vars: *barbican-tempest-vars


- job:
    name: barbican-tempest-plugin-simple-crypto-ipv6-only-yoga
    parent: barbican-tempest-plugin-simple-crypto-ipv6-only
    nodeset: openstack-single-node-focal
    override-checkout: stable/yoga
    required-projects:
      - name: openstack/barbican-tempest-plugin
        override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
    vars: *microversion_v1_0

- job:
    name: barbican-tempest-plugin-simple-crypto-castellan-src
    parent: barbican-tempest-plugin-simple-crypto
    required-projects:
      - openstack/castellan

- job:
    name: barbican-tempest-plugin-simple-crypto-cursive
    parent: barbican-tempest-plugin-simple-crypto
    required-projects:
      - opendev.org/openstack/cursive