From f78d7b0df51faf0695ec5d67c9b46b50df1b02dd Mon Sep 17 00:00:00 2001 From: Ade Lee Date: Wed, 15 Sep 2021 16:53:30 -0400 Subject: [PATCH] Add fips jobs Added jobs to test to see if things still work when fips is enabled. Initially set to non-voting until the job proves to be stable. Change-Id: I2fd562c3b2ff13be11bdaed126c47b1fb9f5ef91 (cherry picked from commit 14f66646fc08584317fd2279836e7a598cfc27cf) --- playbooks/enable-fips.yaml | 3 +++ zuul.d/jobs.yaml | 28 ++++++++++++++++++++++++++++ zuul.d/projects.yaml | 6 ++++++ 3 files changed, 37 insertions(+) create mode 100644 playbooks/enable-fips.yaml diff --git a/playbooks/enable-fips.yaml b/playbooks/enable-fips.yaml new file mode 100644 index 0000000000..bc1dc04ea8 --- /dev/null +++ b/playbooks/enable-fips.yaml @@ -0,0 +1,3 @@ +- hosts: all + roles: + - enable-fips diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml index a9375a2588..965a43ee38 100644 --- a/zuul.d/jobs.yaml +++ b/zuul.d/jobs.yaml @@ -196,3 +196,31 @@ - openstack/octavia vars: tox_envlist: pip-missing-reqs,pip-extra-reqs + +- job: + name: octavia-v2-dsvm-scenario-fips + parent: octavia-v2-dsvm-scenario + nodeset: octavia-single-node-centos-8-stream + description: | + Functional testing for a FIPS enabled Centos 8 system + pre-run: playbooks/enable-fips.yaml + vars: + devstack_local_conf: + test-config: + "$TEMPEST_CONFIG": + validation: + ssh_key_type: 'ecdsa' + +- job: + name: octavia-v2-dsvm-tls-barbican-fips + parent: octavia-v2-dsvm-tls-barbican + nodeset: octavia-single-node-centos-8-stream + description: | + Functional testing for a FIPS enabled Centos 8 system + pre-run: playbooks/enable-fips.yaml + vars: + devstack_local_conf: + test-config: + "$TEMPEST_CONFIG": + validation: + ssh_key_type: 'ecdsa' diff --git a/zuul.d/projects.yaml b/zuul.d/projects.yaml index 147a7053f7..fcfaab1130 100644 --- a/zuul.d/projects.yaml +++ b/zuul.d/projects.yaml @@ -50,6 +50,12 @@ - ^tools/.*$ - ^(test-|)requirements.txt$ - ^tox.ini$ + - octavia-v2-dsvm-scenario-fips: + irrelevant-files: *irrelevant-files + voting: false + - octavia-v2-dsvm-tls-barbican-fips: + irrelevant-files: *irrelevant-files + voting: false - octavia-v2-act-stdby-dsvm-scenario: irrelevant-files: *irrelevant-files voting: false