From 36b56f76c06fa4d1cd64991d791225930c490d66 Mon Sep 17 00:00:00 2001
From: Paul Belanger <pabelanger@redhat.com>
Date: Wed, 16 Aug 2017 13:06:59 -0400
Subject: [PATCH] Create testpypi_secret secret for zuulv3

This creates credentials needed for testpypi.python.org. I've also
stored the information in our password file.

Also start fleshing out release-openstack-python job allowing us to
install twine and pypirc on to the executor.

Change-Id: I06422102b6af209bd22d05faa6202e480a128f84
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
---
 playbooks/publish/testpypi.yaml               | 10 +++++++
 .../templates/publish/testpypi/pypirc.j2      |  8 ++++++
 zuul.yaml                                     | 26 +++++++++++++++++++
 3 files changed, 44 insertions(+)
 create mode 100644 playbooks/publish/testpypi.yaml
 create mode 100644 playbooks/templates/publish/testpypi/pypirc.j2

diff --git a/playbooks/publish/testpypi.yaml b/playbooks/publish/testpypi.yaml
new file mode 100644
index 0000000000..8ccd4acea0
--- /dev/null
+++ b/playbooks/publish/testpypi.yaml
@@ -0,0 +1,10 @@
+- hosts: localhost
+  tasks:
+    - name: Install twine python package
+      command: pip install --user twine
+
+    - name: Create credentials for pypi
+      template:
+        dest: ~/.pypirc
+        mode: 0400
+        src: publish/testpypi/pypirc.j2
diff --git a/playbooks/templates/publish/testpypi/pypirc.j2 b/playbooks/templates/publish/testpypi/pypirc.j2
new file mode 100644
index 0000000000..334abf19ca
--- /dev/null
+++ b/playbooks/templates/publish/testpypi/pypirc.j2
@@ -0,0 +1,8 @@
+[distutils]
+index-servers=
+    testpypi
+
+[testpypi]
+repository:{{ testpypi_secret.repository }}
+username:{{ testpypi_secret.username }}
+password:{{ testpypi_secret.password }}
diff --git a/zuul.yaml b/zuul.yaml
index eb2beedf7a..808ca9619e 100644
--- a/zuul.yaml
+++ b/zuul.yaml
@@ -153,11 +153,37 @@
     secrets:
       - site_zuulv3_dev
 
+- job:
+    name: release-openstack-python
+    parent: publish-openstack-tarball
+    description: |
+      Release python tarballs / wheels to pypi.
+    post-run: playbooks/publish/testpypi
+    secrets:
+      - testpypi_secret
+
 - project:
     name: openstack-infra/project-config
     check:
       jobs: []
 
+- secret:
+    name: testpypi_secret
+    data:
+      repository: https://test.pypi.org/legacy/
+      username: openstackci
+      password: !encrypted/pkcs1-oaep
+        - ev0vtSMICZsT/LjfT/f9prqvwdPibwY/88nxJxoJNF4syUW2S/5ine9vZoK+atJEzlFbq
+          J9VrHbc3RokVxR3bjiur/MH5hH5Kk+tZGdRQwk6eoroI5dtyO23lWr86LTRG8BJJPbQmd
+          jrdPp9E+Tea/C/xAoTGhUbNnofOPEaxsS1T0RqdphCA2FAfefnVR5oWURQpa/XaBKZLAS
+          H2fBSr0un0mxV+67SlyOFkTTbtF9x72DE9clw3gBX1uArMnKSXdl3SK2LgB/POiGH5YoU
+          GTFOs6qBxNP/jV8cIBxSf80IHUfspv49LoMNTPfwDRMie4lGCNUgTINzgtkCwuysY0wcC
+          LYd1NA1RYd57coHKEftCIC1NQYRriTA543kdnCWoZPU6DVaswgEJai0Pg1vC8b5NPYYPw
+          YZm011oEN6bnVOEfsnhwYCl6GCibELolyW4vv4xGMrOGLFwt6/DXBWpbktwrGqbG4Ku06
+          hneCGOGjjzy09LmkdjCMi9cbe01udaIB+MA9Bqgt1Jh8AM4OIJaUsCX014g5OUDSNw/VZ
+          A55ES2jKpwFCottqtgiZSO4n0+0TmjsVwYPwKbyxYEvmxkeldRFwKSz8T3EpV2HQi++aT
+          aR6LCLkViHsSTluDbv5dJESSQDVjyXyd3gp4jTvXmHlSxSenfSbyV7Rqkia0tk=
+
 - secret:
     name: site_zuulv3_dev
     data: