# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- job:
    name: keystone-dsvm-functional
    parent: devstack-tempest
    timeout: 4200
    required-projects:
      - openstack/devstack-gate
      - openstack/keystone
      - openstack/keystone-tempest-plugin
    vars:
      tox_envlist: all
      tempest_test_regex: 'keystone_tempest_plugin'
      devstack_localrc:
        TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin'

- job:
    name: keystone-dsvm-py3-functional
    parent: keystone-dsvm-functional
    vars:
      devstack_localrc:
        TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin'
        USE_PYTHON3: True

- job:
    name: keystone-dsvm-py3-functional-fips
    parent: keystone-dsvm-py3-functional
    nodeset: devstack-single-node-centos-9-stream
    description: |
      Functional testing for a FIPS enabled Centos 9 system
    pre-run: playbooks/enable-fips.yaml
    vars:
      nslookup_target: 'opendev.org'

- job:
    name: keystone-dsvm-py3-functional-federation-ubuntu-jammy
    parent: keystone-dsvm-functional
    nodeset: openstack-single-node-jammy
    vars:
      devstack_localrc:
        TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin'
        USE_PYTHON3: True
      devstack_services:
        keystone-saml2-federation: true
        tls-proxy: false
      devstack_plugins:
        keystone: https://opendev.org/openstack/keystone
      zuul_copy_output:
        /etc/shibboleth: logs
        /var/log/shibboleth: logs

- job:
    name: keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k
    parent: keystone-dsvm-py3-functional-federation-ubuntu-jammy
    vars:
      devstack_localrc:
        IDP_ID: k2k

# This job will execute 'tox -e upgrade' from the OSA
# repo specified in 'osa_test_repo'.
- job:
    name: openstack-ansible-keystone-rolling-upgrade
    parent: openstack-ansible-cross-repo-functional
    required-projects:
      - name: openstack/openstack-ansible-os_keystone
    vars:
      tox_env: upgrade
      osa_test_repo: openstack/openstack-ansible-os_keystone

- job:
    name: keystone-dsvm-ldap-domain-specific-driver
    parent: devstack-tempest
    vars:
      devstack_localrc:
        KEYSTONE_CLEAR_LDAP: 'yes'
        LDAP_PASSWORD: 'nomoresecret'
        USE_PYTHON3: True
      devstack_services:
        ldap: true

# Temporary job until SQLAlchemy 2.0 is no longer blocked by upper-requirements
- job:
    name: keystone-tox-py310-with-sqlalchemy-2x
    parent: openstack-tox-py310
    description: |
      Run unit tests with main branch of SQLAlchemy, alembic and oslo.db.
      Takes advantage of the base tox job's install-siblings feature.
    # The job only tests the latest and shouldn't be run on the stable branches
    branches: ^[^(stable)]
    required-projects:
      - name: github.com/sqlalchemy/sqlalchemy
        override-checkout: main
      - name: github.com/sqlalchemy/alembic
        override-checkout: main
      - name: openstack/oslo.db

# Experimental
- job:
    name: keystone-tox-patch_cover
    parent: openstack-tox
    description: |
      Run test for keystone project.

      Uses tox with the ``patch_cover`` environment.
    vars:
      tox_envlist: patch_cover

# Experimental
- job:
    name: keystone-grenade-multinode
    parent: grenade-multinode
    required-projects:
      - openstack/grenade
      - openstack/keystone
    vars:
      devstack_plugins:
        keystone: https://opendev.org/openstack/keystone
      grenade_devstack_localrc:
        shared:
          MULTI_KEYSTONE: True

# Experimental
- job:
    name: keystone-dsvm-functional-oidc-federation
    parent: keystone-dsvm-functional
    vars:
      devstack_localrc:
        TEMPEST_PLUGINS: '/opt/stack/keystone-tempest-plugin'
        USE_PYTHON3: True
        OS_CACERT: '/opt/stack/data/ca_bundle.pem'
      devstack_services:
        tls-proxy: true
        keystone-oidc-federation: true
      devstack_plugins:
        keystone: https://opendev.org/openstack/keystone

- project:
    templates:
      - openstack-cover-jobs
      - openstack-python3-jobs
      - publish-openstack-docs-pti
      - periodic-stable-jobs
      - check-requirements
      - integrated-gate-py3
      - release-notes-jobs-python3
      - openstack-python3-jobs-arm64
    check:
      jobs:
        - keystone-tox-py310-with-sqlalchemy-2x
        - keystone-dsvm-py3-functional:
            irrelevant-files: &irrelevant-files
              - ^.*\.rst$
              - ^api-ref/.*$
              - ^doc/.*$
              - ^etc/.*$
              - ^keystone/tests/unit/.*$
              - ^releasenotes/.*$
        - keystone-dsvm-py3-functional-fips:
            voting: false
            irrelevant-files: *irrelevant-files
        - keystone-dsvm-py3-functional-federation-ubuntu-jammy:
            voting: false
            irrelevant-files: *irrelevant-files
        - keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k:
            irrelevant-files: *irrelevant-files
        - keystoneclient-devstack-functional:
            voting: false
            irrelevant-files: *irrelevant-files
        - keystone-dsvm-ldap-domain-specific-driver:
            voting: false
            irrelevant-files: &tempest-irrelevant-files
              - ^(test-|)requirements.txt$
              - ^.*\.rst$
              - ^api-ref/.*$
              - ^doc/.*$
              - ^etc/.*$
              - ^keystone/tests/unit/.*$
              - ^releasenotes/.*$
              - ^setup.cfg$
        - tempest-full-py3:
            irrelevant-files: *tempest-irrelevant-files
        - grenade:
            irrelevant-files: *tempest-irrelevant-files
        - tempest-ipv6-only:
            irrelevant-files: *tempest-irrelevant-files
        # FIXME(dmendiza): temporarily disabling protection job
        # - keystone-protection-functional:
    gate:
      jobs:
        - keystone-tox-py310-with-sqlalchemy-2x
        - keystone-dsvm-py3-functional:
            irrelevant-files: *irrelevant-files
        - keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k:
            irrelevant-files: *irrelevant-files
        - tempest-full-py3:
            irrelevant-files: *tempest-irrelevant-files
        - grenade:
            irrelevant-files: *tempest-irrelevant-files
        - tempest-ipv6-only:
            irrelevant-files: *tempest-irrelevant-files
        # FIXME(dmendiza): temporarily disabling protection job
        # - keystone-protection-functional
    experimental:
      jobs:
        - keystone-tox-patch_cover
        - keystone-grenade-multinode:
            irrelevant-files: *irrelevant-files
        - openstack-ansible-keystone-rolling-upgrade:
            irrelevant-files: *irrelevant-files
        - tempest-pg-full:
            irrelevant-files: *tempest-irrelevant-files
        - keystone-dsvm-functional-oidc-federation:
            irrelevant-files: *irrelevant-files