- job:
    name: glance-secure-rbac-protection-functional
    parent: devstack-tempest
    timeout: 4200
    branches:
      regex: ^stable/wallaby$
      negate: true
    required-projects:
      - openstack/glance
      - openstack/glance-tempest-plugin
    vars: &rbac-protection-functional-vars
      tox_envlist: all
      tempest_test_regex: 'glance_tempest_plugin.tests.rbac'
      devstack_localrc:
        GLANCE_ENFORCE_SCOPE: True
        TEMPEST_PLUGINS: '/opt/stack/glance-tempest-plugin'
        USE_PYTHON3: True
      devstack_plugins:
        glance: https://opendev.org/openstack/glance
      devstack_local_conf:
        test-config:
          $GLANCE_API_CONF:
            DEFAULT:
              default_log_levels: "amqp=WARN, amqplib=WARN, boto=WARN, qpid=WARN, sqlalchemy=WARN, suds=INFO, oslo.messaging=INFO, oslo_messaging=INFO, iso8601=WARN, requests.packages.urllib3.connectionpool=WARN, urllib3.connectionpool=WARN, websocket=WARN, requests.packages.urllib3.util.retry=WARN, urllib3.util.retry=WARN, keystonemiddleware=WARN, routes.middleware=WARN, stevedore=WARN, taskflow=WARN, keystoneauth=WARN, oslo.cache=INFO, dogpile.core.dogpile=INFO, oslo_policy=DEBUG"

- job:
    name: glance-secure-rbac-protection-functional
    parent: devstack-tempest
    timeout: 4200
    branches:
      - stable/wallaby
    required-projects:
      - openstack/glance
      - name: openstack/glance-tempest-plugin
        override-checkout: 0.2.0
    vars: *rbac-protection-functional-vars

- job:
    name: glance-legacy-rbac-protection-functional
    parent: devstack-tempest
    timeout: 4200
    required-projects:
      - openstack/glance
      - openstack/glance-tempest-plugin
    vars:
      tox_envlist: all
      tempest_test_regex: 'glance_tempest_plugin.tests.rbac.v2..*.Project(Admin|Member)Tests'
      devstack_localrc:
        GLANCE_ENFORCE_SCOPE: True
        TEMPEST_PLUGINS: '/opt/stack/glance-tempest-plugin'
        USE_PYTHON3: True
      devstack_plugins:
        glance: https://opendev.org/openstack/glance
      devstack_local_conf:
        test-config:
          $TEMPEST_CONFIG:
            image-feature-enabled:
              enforce_scope: true
          $GLANCE_API_CONF:
            DEFAULT:
              default_log_levels: "amqp=WARN, amqplib=WARN, boto=WARN, qpid=WARN, sqlalchemy=WARN, suds=INFO, oslo.messaging=INFO, oslo_messaging=INFO, iso8601=WARN, requests.packages.urllib3.connectionpool=WARN, urllib3.connectionpool=WARN, websocket=WARN, requests.packages.urllib3.util.retry=WARN, urllib3.util.retry=WARN, keystonemiddleware=WARN, routes.middleware=WARN, stevedore=WARN, taskflow=WARN, keystoneauth=WARN, oslo.cache=INFO, dogpile.core.dogpile=INFO, oslo_policy=DEBUG"

- job:
    name: glance-secure-rbac-protection-functional-2024-1
    parent: glance-secure-rbac-protection-functional
    nodeset: openstack-single-node-jammy
    override-checkout: stable/2024.1

- job:
    name: glance-secure-rbac-protection-functional-2023-2
    parent: glance-secure-rbac-protection-functional
    nodeset: openstack-single-node-jammy
    override-checkout: stable/2023.2

- job:
    name: glance-secure-rbac-protection-functional-2023-1
    parent: glance-secure-rbac-protection-functional
    nodeset: openstack-single-node-jammy
    override-checkout: stable/2023.1

- project:
    templates:
      - check-requirements
      - tempest-plugin-jobs
    check:
      jobs:
        - glance-secure-rbac-protection-functional
        - glance-legacy-rbac-protection-functional
        # NOTE(gmann): We are testing stable jobs in check pipeline only as
        # that should be enough if any tests is changed in backward
        # incompatible way.
        - glance-secure-rbac-protection-functional-2024-1
        - glance-secure-rbac-protection-functional-2023-2
        - glance-secure-rbac-protection-functional-2023-1
    gate:
      jobs:
        - glance-secure-rbac-protection-functional
        - glance-legacy-rbac-protection-functional