barbican/.zuul.yaml
Douglas Mendizábal 8f92d6f508 Update devstack plugin for Secure RBAC
This patch refactors the devstack plugin to separate the legacy (now
deprecated) RBAC settings from the Secure RBAC (new default) settings.

The legacy policies can still be deployed by setting
ENFORCE_SCOPE=False.

Change-Id: Idec818e43016402de0188cf5ade032a1aee638ff
2024-03-01 14:09:27 -05:00

155 lines
4.6 KiB
YAML

---
- job:
name: barbican-tox-functional
parent: devstack-tox-functional
description: Functional testing
required-projects:
- name: openstack/barbican
- name: openstack/castellan
- name: openstack/openstacksdk
vars:
devstack_plugins:
barbican: https://opendev.org/openstack/barbican
tox_install_siblings: true
- job:
name: barbican-dogtag-tox-functional
nodeset: devstack-single-node-fedora-latest
parent: barbican-tox-functional
description: |
Functional testing for DogTag backend
vars:
devstack_services:
barbican-dogtag: true
- job:
name: barbican-tox-functional-fips
nodeset: devstack-single-node-centos-9-stream
parent: barbican-tox-functional
description: |
Functional testing for a FIPS enabled Centos 8 system
pre-run: playbooks/enable-fips.yaml
vars:
nslookup_target: 'opendev.org'
- job:
name: barbican-vault-tox-functional
parent: barbican-tox-functional
description: |
Functional testing for Hashicorp Vault backend
vars:
devstack_services:
barbican-vault: true
tox_environment:
VAULT_PLUGIN_ENABLED: 1
# Temporary job until SQLAlchemy 2.0 is no longer blocked by upper-requirements
- job:
name: barbican-tox-py310-with-sqlalchemy-2x
parent: openstack-tox-py310
description: |
Run unit tests with main branch of SQLAlchemy, alembic and oslo.db.
Takes advantage of the base tox job's install-siblings feature.
# The job only tests the latest and shouldn't be run on the stable branches
branches:
regex: ^stable
negate: true
required-projects:
- name: github.com/sqlalchemy/sqlalchemy
override-checkout: main
- name: github.com/sqlalchemy/alembic
override-checkout: main
- name: openstack/oslo.db
- job:
name: barbican-kmip-tox-functional
parent: devstack-tox-functional
description: |
Functional testing for KMIP backend using PyKMIP
vars:
devstack_services:
kmip: true
- job:
name: barbican-simple-crypto-devstack-tempest
parent: barbican-tempest-plugin-simple-crypto
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto
- job:
name: barbican-simple-crypto-devstack-tempest-ipv6-only
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto-ipv6-only
- job:
name: barbican-simple-crypto-devstack-tempest-castellan-from-git
parent: barbican-tempest-plugin-simple-crypto-castellan-src
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto-castellan-src
- job:
name: barbican-simple-crypto-devstack-tempest-cursive
parent: barbican-tempest-plugin-simple-crypto-cursive
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto-cursive
- job:
name: barbican-grenade
parent: grenade
required-projects:
- opendev.org/openstack/grenade
- opendev.org/openstack/barbican
- opendev.org/openstack/barbican-tempest-plugin
- opendev.org/openstack/python-barbicanclient
vars:
devstack_plugins:
barbican: https://opendev.org/openstack/barbican
devstack_services:
barbican-svc: true
barbican-retry: true
tempest_plugins:
- barbican-tempest-plugin
tempest_test_regex: '\[.*\bsmoke\b.*\]|^(barbican_tempest_plugin.tests)'
tox_envlist: all
- job:
name: octavia-v2-dsvm-tls-barbican-secure-rbac
parent: octavia-v2-dsvm-tls-barbican
vars:
devstack_localrc:
ENFORCE_SCOPE: True
- project:
queue: barbican
templates:
- check-requirements
- openstack-cover-jobs
- openstack-python3-jobs
- publish-openstack-docs-pti
- release-notes-jobs-python3
check:
jobs:
- barbican-tox-functional
- barbican-vault-tox-functional:
voting: false
- barbican-grenade:
voting: false
- barbican-tempest-plugin-simple-crypto
- barbican-tempest-plugin-simple-crypto-secure-rbac
- barbican-tempest-plugin-simple-crypto-ipv6-only
- barbican-tox-functional-fips:
voting: false
- octavia-v2-dsvm-tls-barbican
- octavia-v2-dsvm-tls-barbican-secure-rbac
- barbican-tox-py310-with-sqlalchemy-2x
gate:
jobs:
- barbican-tox-functional
- barbican-tox-py310-with-sqlalchemy-2x
experimental:
jobs:
- barbican-dogtag-tox-functional
- barbican-kmip-tox-functional