c3e085b800
This change adds two network policy zuul checks, one for the compute-kit, and one for cinder/ceph, to test network policy for each OpenStack service. These checks will be non-voting initially. The network policy rules for each service will initially allow all traffic. These ingress/egress rules will be defined in future changes to only explicitly allow traffic between services that are explicitly allowed to communicate, other traffic will be denied. Depends-On: https://review.opendev.org/#/c/685130/ Change-Id: Ide2998ebb2af2832f24ca7abc398a82e4a6d70e3
73 lines
2.7 KiB
YAML
73 lines
2.7 KiB
YAML
---
|
|
# Copyright 2018, SUSE LINUX GmbH.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# For having the full context, this file should be read
|
|
# with the openstack-helm-infra repository, where nodesets
|
|
# and jobs are defined.
|
|
# NOTE(evrardjp): Some jobs and playbooks haven't been
|
|
# migrated to openstack-helm-infra yet.
|
|
- project:
|
|
templates:
|
|
- publish-openstack-docs-pti
|
|
check:
|
|
jobs:
|
|
- openstack-helm-lint
|
|
- openstack-helm-bandit
|
|
- openstack-helm-cinder
|
|
- openstack-helm-cinder-pike-ubuntu_xenial
|
|
- openstack-helm-cinder-queens-ubuntu_xenial
|
|
- openstack-helm-cinder-rocky-ubuntu_xenial
|
|
- openstack-helm-cinder-rocky-ubuntu_bionic
|
|
- openstack-helm-cinder-rocky-opensuse_15
|
|
- openstack-helm-cinder-stein-ubuntu_bionic
|
|
- openstack-helm-compute-kit
|
|
- openstack-helm-compute-kit-pike-ubuntu_xenial
|
|
- openstack-helm-compute-kit-queens-ubuntu_xenial
|
|
- openstack-helm-compute-kit-rocky-ubuntu_xenial
|
|
- openstack-helm-compute-kit-rocky-ubuntu_bionic
|
|
- openstack-helm-compute-kit-rocky-opensuse_15
|
|
- openstack-helm-compute-kit-stein-ubuntu_bionic
|
|
- openstack-helm-horizon
|
|
- openstack-helm-apparmor:
|
|
voting: false
|
|
- openstack-helm-netpol-compute-kit:
|
|
voting: false
|
|
- openstack-helm-netpol-cinder:
|
|
voting: false
|
|
gate:
|
|
jobs:
|
|
- openstack-helm-lint
|
|
- openstack-helm-cinder
|
|
- openstack-helm-compute-kit
|
|
periodic:
|
|
jobs:
|
|
# Keystone job that exersizes feature gate
|
|
- openstack-helm-keystone-ldap
|
|
# Unique periodic jobs
|
|
- openstack-helm-multinode-temp-ubuntu
|
|
- openstack-helm-ironic-ubuntu
|
|
- openstack-helm-armada-deploy
|
|
- openstack-helm-armada-update-uuid
|
|
- openstack-helm-armada-update-passwords
|
|
experimental:
|
|
jobs:
|
|
# - openstack-helm-multinode-temp-centos
|
|
# # NOTE(lamt): Make fedora job experimental until issues with gates are resolved.
|
|
# - openstack-helm-multinode-temp-fedora
|
|
# - openstack-helm-multinode-temp-tempest
|
|
- openstack-helm-armada-deploy
|
|
- openstack-helm-armada-update-uuid
|
|
- openstack-helm-armada-update-passwords
|