barbican-tempest-plugin/.zuul.yaml
Takashi Kajinami 39eb56d9c7 Use consistent naming for enforce_scope option
Tempest and a few other plugins such as manila-tempest-plugin registers
the option to enable scope enforcement tests in the [enforce_scope]
option. This renames the option so that this plugin follows that
standard.

Change-Id: Ibd6962947c64f04ff1948a19c4afe9f26d0b47bb
2024-01-24 12:33:05 +09:00

269 lines
8.8 KiB
YAML

- project:
queue: barbican
templates:
- tempest-plugin-jobs
- check-requirements
check:
jobs:
- barbican-tempest-plugin-simple-crypto
- barbican-tempest-plugin-simple-crypto-secure-rbac
- barbican-tempest-plugin-simple-crypto-2023-1
- barbican-tempest-plugin-simple-crypto-zed
- barbican-tempest-plugin-simple-crypto-yoga
- barbican-tempest-plugin-simple-crypto-xena
- barbican-tempest-plugin-simple-crypto-wallaby
- barbican-tempest-plugin-simple-crypto-ipv6-only
- barbican-tempest-plugin-simple-crypto-castellan-src
- barbican-tempest-plugin-simple-crypto-cursive
gate:
jobs:
- barbican-tempest-plugin-simple-crypto
- job:
name: barbican-tempest-plugin-simple-crypto
parent: devstack-tempest
required-projects: &barbican-tempest-reqs
- opendev.org/openstack/barbican
- opendev.org/openstack/barbican-tempest-plugin
- opendev.org/openstack/python-barbicanclient
vars: &barbican-tempest-vars
devstack_plugins:
barbican: https://opendev.org/openstack/barbican
devstack_localrc:
NOVA_BACKEND: LVM
LVM_VOLUME_CLEAR: none
devstack_local_conf:
post-config:
$NOVA_CONF:
glance:
verify_glance_signatures: True
ephemeral_storage_encryption:
key_size: 256
cipher: aes-xts-plain64
enabled: True
test-config:
$TEMPEST_CONFIG:
auth:
tempest_roles: creator
image-feature-enabled:
# this may be removed soon, as api_v1 is false since tempest>=20
api_v1: False
ephemeral_storage_encryption:
enabled: True
key_manager:
min_microversion: '1.0'
max_microversion: latest
tox_envlist: all
tempest_test_regex: barbican
tempest_plugins:
- barbican-tempest-plugin
- job:
name: barbican-tempest-plugin-simple-crypto-2023-1
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-jammy
override-checkout: stable/2023.1
vars:
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.1'
- job:
name: barbican-tempest-plugin-simple-crypto-zed
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/zed
vars:
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.1'
- job:
name: barbican-tempest-plugin-simple-crypto-yoga
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/yoga
vars: &microversion_v1_0
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.0'
- job:
name: barbican-tempest-plugin-simple-crypto-xena
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/xena
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-wallaby
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/wallaby
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: wallaby-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-victoria
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/victoria
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: victoria-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ussuri
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-bionic
override-checkout: stable/ussuri
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: ussuri-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-train
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-bionic
override-checkout: stable/train
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: train-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac
parent: barbican-tempest-plugin-simple-crypto
vars:
devstack_local_conf:
post-config:
$BARBICAN_CONF:
oslo_policy:
enforce_new_defaults: True
enforce_scope: True
# (lpiwowar): Uncomment once this bug is resolved:
# https://bugs.launchpad.net/barbican/+bug/2043457
# secretstore:
# enable_multiple_secret_stores: True
# stores_lookup_suffix: simple_crypto
# secretstore:simple_crypto:
# secret_store_plugin: store_crypto
# crypto_plugin: simple_crypto
# global_default: true
test-config:
$TEMPEST_CONFIG:
enforce_scope:
barbican: True
# barbican_tempest:
# enable_multiple_secret_stores: True
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-yoga
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/yoga
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-xena
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/xena
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-wallaby
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/wallaby
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: wallaby-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only
parent: devstack-tempest-ipv6
required-projects: *barbican-tempest-reqs
vars: *barbican-tempest-vars
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-yoga
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/yoga
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-xena
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/xena
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-wallaby
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/wallaby
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: wallaby-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-victoria
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/victoria
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: victoria-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-ussuri
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-bionic
override-checkout: stable/ussuri
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: ussuri-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-train
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-bionic
override-checkout: stable/train
required-projects:
- name: opendev.org/openstack/barbican-tempest-plugin
override-checkout: train-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-castellan-src
parent: barbican-tempest-plugin-simple-crypto
required-projects:
- opendev.org/openstack/castellan
- job:
name: barbican-tempest-plugin-simple-crypto-cursive
parent: barbican-tempest-plugin-simple-crypto
required-projects:
- opendev.org/x/cursive