Move legacy-cinder-tox-* jobs in-tree

The compliance and bandit-baseline jobs just call tox to run tests.
These are an easy step to move in-tree.

Since it is also easier to have conditions on when things run, this
also adds filtering so the compliance job will now only run when there
are changes in code that impact the drivers.

Change-Id: Idb9a1f39481f3ebb704b28abc062ae24414d7224
Needed-by: I3af7771ab3e8d5a192f466dcec36a2b41db08ac3
Needed-by: I4af1813c69a5ddccbde8b99ed15023aa407995b5

.zuul.yaml

@@ -4,19 +4,12 @@
       jobs:
         - cinder-tempest-dsvm-lvm-lio:
             voting: false
-            branches: ^(?!driverfixes/).*$
-            irrelevant-files:
-              - ^.*\.rst$
-              - ^api-ref/.*$
-              - ^cinder/hacking/.*$
-              - ^cinder/locale/.*$
-              - ^cinder/tests/functional.*$
-              - ^cinder/tests/unit.*$
-              - ^contrib/block-box.*$
-              - ^doc/.*$
-              - ^releasenotes/.*$
-              - ^setup.cfg$
-              - ^tools/.*$
+        - cinder-tox-compliance
+        - cinder-tox-bandit-baseline:
+            voting: false
+    gate:
+      jobs:
+        - cinder-tox-compliance
 
 - job:
     # Previously named legacy-tempest-dsvm-full-lio
@@ -31,3 +24,52 @@
       - openstack/python-barbicanclient
       - openstack/tempest
       - openstack/os-brick
+    irrelevant-files:
+      - ^.*\.rst$
+      - ^api-ref/.*$
+      - ^cinder/hacking/.*$
+      - ^cinder/locale/.*$
+      - ^cinder/tests/functional.*$
+      - ^cinder/tests/unit.*$
+      - ^contrib/block-box.*$
+      - ^doc/.*$
+      - ^releasenotes/.*$
+      - ^tools/.*$
+
+- job:
+    # Test that all drivers follow the defined interface
+    name: cinder-tox-compliance
+    parent: openstack-tox
+    timeout: 2400
+    vars:
+      tox_envlist: compliance
+    required-projects:
+      - openstack/requirements
+    files:
+      - ^cinder/volume/driver.py
+      - ^cinder/volume/drivers/.*$
+      - ^cinder/interface/.*$
+      - ^cinder/backup/.*$
+      - ^cinder/zonemanager/.*$
+
+- job:
+    # Security testing for known issues
+    name: cinder-tox-bandit-baseline
+    parent: openstack-tox
+    timeout: 2400
+    vars:
+      tox_envlist: bandit-baseline
+    required-projects:
+      - openstack/requirements
+    irrelevant-files:
+      - ^.*\.rst$
+      - ^api-ref/.*$
+      - ^cinder/hacking/.*$
+      - ^cinder/locale/.*$
+      - ^cinder/tests/functional.*$
+      - ^cinder/tests/unit.*$
+      - ^contrib/block-box.*$
+      - ^doc/.*$
+      - ^releasenotes/.*$
+      - ^setup.cfg$
+      - ^tools/.*$