From a5925541c654c01e599743158416b46a95f4d125 Mon Sep 17 00:00:00 2001
From: Ade Lee <alee@redhat.com>
Date: Tue, 11 May 2021 14:04:09 -0400
Subject: [PATCH] Add FIPS check job

Testing a new FIPS enabled gate job here.  This job will be
for Centos 8 with FIPS enabled.  This will use a playbook in
the zuul-jobs repo to enable FIPS.

Change-Id: I3187971a14b38c7ca3bb64bdd3d18c64709c466f
(cherry picked from commit 50f0a50cf4d52d3f61b64713bd4faa7a4626ae53)
---
 .zuul.yaml                 | 11 +++++++++++
 playbooks/enable-fips.yaml |  4 ++++
 2 files changed, 15 insertions(+)
 create mode 100644 playbooks/enable-fips.yaml

diff --git a/.zuul.yaml b/.zuul.yaml
index 9e39b771e1..184d53c9e0 100644
--- a/.zuul.yaml
+++ b/.zuul.yaml
@@ -32,6 +32,14 @@
         TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin'
         USE_PYTHON3: True
 
+- job:
+    name: keystone-dsvm-py3-functional-fips
+    parent: keystone-dsvm-py3-functional
+    nodeset: devstack-single-node-centos-8-stream
+    description: |
+      Functional testing for a FIPS enabled Centos 8 system
+    pre-run: playbooks/enable-fips.yaml
+
 - job:
     name: keystone-dsvm-functional-federation-opensuse15
     parent: keystone-dsvm-functional
@@ -212,6 +220,9 @@
               - ^etc/.*$
               - ^keystone/tests/unit/.*$
               - ^releasenotes/.*$
+        - keystone-dsvm-py3-functional-fips:
+            voting: false
+            irrelevant-files: *irrelevant-files
         - keystone-dsvm-py3-functional-federation-ubuntu-focal:
             voting: false
             irrelevant-files: *irrelevant-files
diff --git a/playbooks/enable-fips.yaml b/playbooks/enable-fips.yaml
new file mode 100644
index 0000000000..c8f042dba6
--- /dev/null
+++ b/playbooks/enable-fips.yaml
@@ -0,0 +1,4 @@
+- hosts: all
+  tasks:
+    - include_role:
+        name: enable-fips