From 50f0a50cf4d52d3f61b64713bd4faa7a4626ae53 Mon Sep 17 00:00:00 2001 From: Ade Lee Date: Tue, 11 May 2021 14:04:09 -0400 Subject: [PATCH] Add FIPS check job Testing a new FIPS enabled gate job here. This job will be for Centos 8 with FIPS enabled. This will use a playbook in the zuul-jobs repo to enable FIPS. Depends-On: https://review.opendev.org/c/zuul/zuul-jobs/+/788778 Change-Id: I3187971a14b38c7ca3bb64bdd3d18c64709c466f --- .zuul.yaml | 11 +++++++++++ playbooks/enable-fips.yaml | 4 ++++ 2 files changed, 15 insertions(+) create mode 100644 playbooks/enable-fips.yaml diff --git a/.zuul.yaml b/.zuul.yaml index 9e39b771e1..184d53c9e0 100644 --- a/.zuul.yaml +++ b/.zuul.yaml @@ -32,6 +32,14 @@ TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin' USE_PYTHON3: True +- job: + name: keystone-dsvm-py3-functional-fips + parent: keystone-dsvm-py3-functional + nodeset: devstack-single-node-centos-8-stream + description: | + Functional testing for a FIPS enabled Centos 8 system + pre-run: playbooks/enable-fips.yaml + - job: name: keystone-dsvm-functional-federation-opensuse15 parent: keystone-dsvm-functional @@ -212,6 +220,9 @@ - ^etc/.*$ - ^keystone/tests/unit/.*$ - ^releasenotes/.*$ + - keystone-dsvm-py3-functional-fips: + voting: false + irrelevant-files: *irrelevant-files - keystone-dsvm-py3-functional-federation-ubuntu-focal: voting: false irrelevant-files: *irrelevant-files diff --git a/playbooks/enable-fips.yaml b/playbooks/enable-fips.yaml new file mode 100644 index 0000000000..c8f042dba6 --- /dev/null +++ b/playbooks/enable-fips.yaml @@ -0,0 +1,4 @@ +- hosts: all + tasks: + - include_role: + name: enable-fips