keystone/.zuul.yaml

# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- job:
    name: keystone-tempest
    parent: devstack-tempest
    timeout: 4200
    required-projects:
      - openstack/keystone
      - openstack/keystone-tempest-plugin
    vars:
      tox_envlist: all
      tempest_test_regex: "keystone_tempest_plugin"
      devstack_localrc:
        TEMPEST_PLUGINS: "/opt/stack/keystone-tempest-plugin"

# TODO(stephenfin): Remove this when references to it have been removed from
# keystone-tempest-plugin
- job:
    name: keystone-dsvm-py3-functional
    parent: keystone-tempest

- job:
    name: keystone-tempest-fips
    parent: keystone-tempest
    nodeset: devstack-single-node-centos-9-stream
    description: |
      Functional testing for a FIPS enabled Centos 9 system
    pre-run: playbooks/enable-fips.yaml
    vars:
      nslookup_target: "opendev.org"

# TODO(stephenfin): Remove this when references to it have been removed from
# keystone-tempest-plugin
- job:
    name: keystone-dsvm-py3-functional-fips
    parent: keystone-tempest-fips

- job:
    name: keystone-tempest-oidc-federation
    parent: keystone-tempest
    vars:
      devstack_localrc:
        TEMPEST_PLUGINS: "/opt/stack/keystone-tempest-plugin"
        OS_CACERT: "/opt/stack/data/ca_bundle.pem"
      devstack_services:
        tls-proxy: true
        keystone-oidc-federation: true
      devstack_plugins:
        keystone: https://opendev.org/openstack/keystone

# TODO(stephenfin): Remove this when references to it have been removed from
# keystone-tempest-plugin
- job:
    name: keystone-dsvm-functional-oidc-federation
    parent: keystone-tempest-oidc-federation

- job:
    name: keystone-tempest-federation
    parent: keystone-tempest
    nodeset: openstack-single-node-jammy
    vars:
      devstack_localrc:
        TEMPEST_PLUGINS: "/opt/stack/keystone-tempest-plugin"
      devstack_services:
        keystone-saml2-federation: true
        tls-proxy: false
      devstack_plugins:
        keystone: https://opendev.org/openstack/keystone
      zuul_copy_output:
        /etc/shibboleth: logs
        /var/log/shibboleth: logs

# TODO(stephenfin): Remove this when references to it have been removed from
# keystone-tempest-plugin
- job:
    name: keystone-dsvm-py3-functional-federation-ubuntu-jammy
    parent: keystone-tempest-federation

- job:
    name: keystone-tempest-federation-k2k
    parent: keystone-tempest-federation
    vars:
      devstack_localrc:
        IDP_ID: k2k

# TODO(stephenfin): Remove this when references to it have been removed from
# keystone-tempest-plugin
- job:
    name: keystone-dsvm-py3-functional-federation-ubuntu-jammy-k2k
    parent: keystone-tempest-federation-k2k

# This job will execute 'tox -e upgrade' from the OSA
# repo specified in 'osa_test_repo'.
- job:
    name: openstack-ansible-keystone-rolling-upgrade
    parent: openstack-ansible-cross-repo-functional
    required-projects:
      - name: openstack/openstack-ansible-os_keystone
    vars:
      tox_env: upgrade
      osa_test_repo: openstack/openstack-ansible-os_keystone

- job:
    name: keystone-tempest-ldap-domain-specific-driver
    parent: devstack-tempest
    vars:
      devstack_localrc:
        KEYSTONE_CLEAR_LDAP: "yes"
        LDAP_PASSWORD: "nomoresecret"
      devstack_services:
        ldap: true

# Experimental
- job:
    name: keystone-grenade-multinode
    parent: grenade-multinode
    required-projects:
      - openstack/grenade
      - openstack/keystone
    vars:
      devstack_plugins:
        keystone: https://opendev.org/openstack/keystone
      grenade_devstack_localrc:
        shared:
          MULTI_KEYSTONE: True

- project:
    templates:
      - openstack-cover-jobs
      - openstack-python3-jobs
      - publish-openstack-docs-pti
      - periodic-stable-jobs
      - check-requirements
      - integrated-gate-py3
      - release-notes-jobs-python3
      - openstack-python3-jobs-arm64
    check:
      jobs:
        - keystoneclient-devstack-functional:
            voting: false
            irrelevant-files: &irrelevant-files
              - ^.*\.rst$
              - ^api-ref/.*$
              - ^doc/.*$
              - ^etc/.*$
              - ^keystone/tests/unit/.*$
              - ^\.pre-commit-config\.yaml$
              - ^releasenotes/.*$
        - keystone-tempest:
            irrelevant-files: *irrelevant-files
        - keystone-tempest-fips:
            voting: false
            irrelevant-files: *irrelevant-files
        - keystone-tempest-federation:
            voting: false
            irrelevant-files: *irrelevant-files
        - keystone-tempest-federation-k2k:
            irrelevant-files: *irrelevant-files
        - keystone-tempest-oidc-federation:
            irrelevant-files: *irrelevant-files
        - keystone-tempest-ldap-domain-specific-driver:
            voting: false
            irrelevant-files: &tempest-irrelevant-files
              - ^(test-|)requirements.txt$
              - ^.*\.rst$
              - ^api-ref/.*$
              - ^doc/.*$
              - ^etc/.*$
              - ^keystone/tests/unit/.*$
              - ^\.pre-commit-config\.yaml$
              - ^releasenotes/.*$
              - ^setup.cfg$
        - tempest-full-py3:
            irrelevant-files: *tempest-irrelevant-files
        - tempest-ipv6-only:
            irrelevant-files: *tempest-irrelevant-files
        - grenade:
            irrelevant-files: *tempest-irrelevant-files
        - grenade-skip-level:
            irrelevant-files: *tempest-irrelevant-files
        - keystone-protection-functional
        - codegenerator-openapi-identity-tips-with-api-ref:
            voting: false
    gate:
      jobs:
        - keystone-tempest:
            irrelevant-files: *irrelevant-files
        - keystone-tempest-federation-k2k:
            irrelevant-files: *irrelevant-files
        - tempest-full-py3:
            irrelevant-files: *tempest-irrelevant-files
        - tempest-ipv6-only:
            irrelevant-files: *tempest-irrelevant-files
        - grenade:
            irrelevant-files: *tempest-irrelevant-files
        - grenade-skip-level:
            irrelevant-files: *tempest-irrelevant-files
        - keystone-protection-functional
    experimental:
      jobs:
        - keystone-grenade-multinode:
            irrelevant-files: *irrelevant-files
        - openstack-ansible-keystone-rolling-upgrade:
            irrelevant-files: *irrelevant-files
        - tempest-pg-full:
            irrelevant-files: *tempest-irrelevant-files