CI: Add RBAC specific tempest jobs for main branch exec

Adds configs for Zed, 2023.1, but only runs the job on master
branch for now, while we sort out a policy fix needing to be
backported in ironic.

Gives us some initial feedback and forced testing while we fix
the other issues.

Change-Id: Ic435368a5840aae8dab26a843bd79e0ae2546639

zuul.d/project.yaml

@@ -20,6 +20,11 @@
             voting: false
         - ironic-tempest-functional-python3-xena:
             voting: false
+        - ironic-tempest-functional-rbac-scope-enforced
+        # Enable these *once* we have the policy fix backported
+        # for making own node changes.
+        # - ironic-tempest-functional-rbac-scope-enforced-2023.1
+        # - ironic-tempest-functional-rbac-scope-enforced-zed
         - ironic-inspector-tempest
         - ironic-inspector-tempest-2023.1
         - ironic-inspector-tempest-zed
@@ -63,9 +68,11 @@
         - ironic-tempest-functional-python3
         - ironic-tempest-functional-python3-2023.1
         - ironic-tempest-functional-python3-zed
+        - ironic-tempest-functional-rbac-scope-enforced
         - ironic-inspector-tempest
         - ironic-inspector-tempest-2023.1
         - ironic-inspector-tempest-zed
+        - ironic-inspector-tempest-rbac-scope-enforced
         - ironic-standalone-redfish
         - ironic-standalone-redfish-2023.1
         - ironic-inspector-tempest-discovery

zuul.d/stable-jobs.yaml

@@ -133,6 +133,16 @@
     parent: ironic-tempest-functional-python3
     override-checkout: stable/train
 
+- job:
+    name: ironic-tempest-functional-rbac-scope-enforced-2023.1
+    parent: ironic-tempest-functional-rbac-scope-enforced
+    override-checkout: stable/2023.1
+
+- job:
+    name: ironic-tempest-functional-rbac-scope-enforced-zed
+    parent: ironic-tempest-functional-rbac-scope-enforced
+    override-checkout: stable/zed
+
 - job:
     name: ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode-zed
     parent: ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode
@@ -228,6 +238,16 @@
         EBTABLES_RACE_FIX: True
         USE_PYTHON3: True
 
+- job:
+    name: ironic-inspector-tempest-rbac-scope-enforced-2023.1
+    parent: ironic-inspector-tempest-rbac-scope-enforced
+    override-checkout: stable/2023.1
+
+- job:
+    name: ironic-inspector-tempest-rbac-scope-enforced-zed
+    parent: ironic-inspector-tempest-rbac-scope-enforced
+    override-checkout: stable/zed
+
 - job:
     name: ironic-inspector-tempest-discovery-2023.1
     parent: ironic-inspector-tempest-discovery