openstack/barbican-tempest-plugin
Code Issues Proposed changes
barbican-tempest-plugin/.zuul.yaml
Douglas Mendizábal 26928121dd Update roles required for testing 
This patch removes the hard-coded 'key-manager:service-admin' role from
the base test class because the role is not available in deployments
with the new Secure RBAC policies enabled.

There is only one test that still requires this role in the API quotas
tests, so we generate a dynamic user there and only use it in this
class.  This test is skipped when SRBAC is enabled.

Change-Id: I6fbfe43f821d9315e01d3bdfd6f5d4edf4e552b7
2024-03-07 10:41:47 -06:00

331 lines
11 KiB
YAML
Raw Blame History

- project:
queue: barbican
templates:
- tempest-plugin-jobs
- check-requirements
check:
jobs:
- barbican-tempest-plugin-simple-crypto
- barbican-tempest-plugin-simple-crypto-secure-rbac
- barbican-tempest-plugin-simple-crypto-2023-2
- barbican-tempest-plugin-simple-crypto-2023-1
- barbican-tempest-plugin-simple-crypto-zed
- barbican-tempest-plugin-simple-crypto-ipv6-only
- barbican-tempest-plugin-simple-crypto-castellan-src
- barbican-tempest-plugin-simple-crypto-cursive
gate:
jobs:
- barbican-tempest-plugin-simple-crypto
- job:
name: barbican-tempest-plugin-simple-crypto
parent: devstack-tempest
required-projects: &barbican-tempest-reqs
- openstack/barbican
- openstack/barbican-tempest-plugin
- openstack/python-barbicanclient
vars: &barbican-tempest-vars
devstack_plugins:
barbican: https://opendev.org/openstack/barbican
devstack_localrc:
NOVA_BACKEND: LVM
LVM_VOLUME_CLEAR: none
devstack_local_conf:
post-config:
$NOVA_CONF:
glance:
verify_glance_signatures: True
ephemeral_storage_encryption:
key_size: 256
cipher: aes-xts-plain64
enabled: True
test-config:
$TEMPEST_CONFIG:
auth:
create_isolated_networks: False
image-feature-enabled:
# this may be removed soon, as api_v1 is false since tempest>=20
api_v1: False
ephemeral_storage_encryption:
enabled: True
key_manager:
min_microversion: '1.0'
max_microversion: latest
tox_envlist: all
tempest_test_regex: barbican
tempest_plugins:
- barbican-tempest-plugin
- job:
name: barbican-tempest-plugin-simple-crypto-2023-2
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-jammy
override-checkout: stable/2023.1
vars:
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.1'
- job:
name: barbican-tempest-plugin-simple-crypto-2023-1
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-jammy
override-checkout: stable/2023.1
vars:
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.1'
- job:
name: barbican-tempest-plugin-simple-crypto-zed
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/zed
vars:
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.1'
- job:
name: barbican-tempest-plugin-simple-crypto-yoga
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/yoga
vars: &microversion_v1_0
devstack_local_conf:
test-config:
$TEMPEST_CONFIG:
key_manager:
min_microversion: '1.0'
max_microversion: '1.0'
- job:
name: barbican-tempest-plugin-simple-crypto-xena
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/xena
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-wallaby
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/wallaby
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: wallaby-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-victoria
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-focal
override-checkout: stable/victoria
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: victoria-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ussuri
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-bionic
override-checkout: stable/ussuri
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: ussuri-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-train
parent: barbican-tempest-plugin-simple-crypto
nodeset: openstack-single-node-bionic
override-checkout: stable/train
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: train-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac
parent: barbican-tempest-plugin-simple-crypto
vars:
devstack_localrc:
ENFORCE_SCOPE: True
devstack_local_conf:
# (lpiwowar): Uncomment once this bug is resolved:
# https://bugs.launchpad.net/barbican/+bug/2043457
# post-config:
# $BARBICAN_CONF:
# secretstore:
# enable_multiple_secret_stores: True
# stores_lookup_suffix: simple_crypto
# secretstore:simple_crypto:
# secret_store_plugin: store_crypto
# crypto_plugin: simple_crypto
# global_default: true
test-config:
$TEMPEST_CONFIG:
enforce_scope:
barbican: True
# barbican_tempest:
# enable_multiple_secret_stores: True
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-2023-1
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-jammy
override-checkout: stable/2023.1
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-zed
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/zed
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-yoga
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/yoga
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-xena
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/xena
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-secure-rbac-wallaby
parent: barbican-tempest-plugin-simple-crypto-secure-rbac
nodeset: openstack-single-node-focal
override-checkout: stable/wallaby
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: wallaby-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only
parent: devstack-tempest-ipv6
required-projects: *barbican-tempest-reqs
vars: *barbican-tempest-vars
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-2023-1
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-jammy
override-checkout: stable/2023.1
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-zed
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/zed
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-yoga
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/yoga
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-xena
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/xena
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: a31f9ef3a68e58fe970783d1b7b4cff45e4ee78b
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-wallaby
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/wallaby
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: wallaby-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-victoria
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-focal
override-checkout: stable/victoria
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: victoria-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-ussuri
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-bionic
override-checkout: stable/ussuri
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: ussuri-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-ipv6-only-train
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
nodeset: openstack-single-node-bionic
override-checkout: stable/train
required-projects:
- name: openstack/barbican-tempest-plugin
override-checkout: train-last
vars: *microversion_v1_0
- job:
name: barbican-tempest-plugin-simple-crypto-castellan-src
parent: barbican-tempest-plugin-simple-crypto
required-projects:
- openstack/castellan
- job:
name: barbican-tempest-plugin-simple-crypto-cursive
parent: barbican-tempest-plugin-simple-crypto
required-projects:
- opendev.org/x/cursive
View Git Blame Copy Permalink