openstack/keystone
Code Issues Proposed changes

Add FIPS check job

Browse Source 
Testing a new FIPS enabled gate job here.  This job will be
for Centos 8 with FIPS enabled.  This will use a playbook in
the zuul-jobs repo to enable FIPS.

Depends-On: https://review.opendev.org/c/zuul/zuul-jobs/+/788778
Change-Id: I3187971a14b38c7ca3bb64bdd3d18c64709c466f
This commit is contained in:
Ade Lee 2021-05-11 14:04:09 -04:00
parent d1c7759f48
commit 50f0a50cf4
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.zuul.yaml
View File

@ -32,6 +32,14 @@
TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin' TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin'
USE_PYTHON3: True USE_PYTHON3: True
- job:
name: keystone-dsvm-py3-functional-fips
parent: keystone-dsvm-py3-functional
nodeset: devstack-single-node-centos-8-stream
description: |
Functional testing for a FIPS enabled Centos 8 system
pre-run: playbooks/enable-fips.yaml
- job: - job:
name: keystone-dsvm-functional-federation-opensuse15 name: keystone-dsvm-functional-federation-opensuse15
parent: keystone-dsvm-functional parent: keystone-dsvm-functional
@ -212,6 +220,9 @@
- ^etc/.*$ - ^etc/.*$
- ^keystone/tests/unit/.*$ - ^keystone/tests/unit/.*$
- ^releasenotes/.*$ - ^releasenotes/.*$
- keystone-dsvm-py3-functional-fips:
voting: false
irrelevant-files: *irrelevant-files
- keystone-dsvm-py3-functional-federation-ubuntu-focal: - keystone-dsvm-py3-functional-federation-ubuntu-focal:
voting: false voting: false
irrelevant-files: *irrelevant-files irrelevant-files: *irrelevant-files

4
playbooks/enable-fips.yaml Normal file
View File

@ -0,0 +1,4 @@
- hosts: all
tasks:
- include_role:
name: enable-fips