From 5e01f811b08c7bca53a1f1db05da774004ccc912 Mon Sep 17 00:00:00 2001
From: Ian Cordasco <graffatcolmingov@gmail.com>
Date: Wed, 13 Jan 2016 11:29:15 -0600
Subject: [PATCH] Add integration jobs for Bandit

The Bandit team is hoping to start ensuring we do not break other
projects currently relying on Bandit in their gate jobs. We define a job
template and then utilize that repeatedly with our jobs.

Depends-On: I38bfc2f8298761ebf86152933630f629e545029d
Change-Id: I9c243ce734d7653145d5fa916cc25da5d664603e
---
 jenkins/jobs/bandit.yaml   | 22 ++++++++++++++++++++++
 jenkins/jobs/projects.yaml | 12 ++++++++++++
 zuul/layout.yaml           | 24 ++++++++++++++++++++++++
 3 files changed, 58 insertions(+)
 create mode 100644 jenkins/jobs/bandit.yaml

diff --git a/jenkins/jobs/bandit.yaml b/jenkins/jobs/bandit.yaml
new file mode 100644
index 0000000000..677c8f29c9
--- /dev/null
+++ b/jenkins/jobs/bandit.yaml
@@ -0,0 +1,22 @@
+- job-template:
+    name: gate-bandit-integration-{target-project}
+    node: bare-trusty
+
+    builders:
+      - link-logs
+      - shell: |
+          #!/bin/bash -eux
+          cd $WORKSPACE
+
+          /usr/zuul-env/bin/zuul-cloner --cache-dir /opt/git \
+            git://git.openstack.org \
+            openstack/bandit \
+            {target-org}/{target-project}
+
+          cd $WORKSPACE/openstack/bandit
+
+          tox -e integration {target-org} {target-project} \
+            $WORKSPACE/{target-org}/{target-project}
+
+    publishers:
+      - console-log
diff --git a/jenkins/jobs/projects.yaml b/jenkins/jobs/projects.yaml
index 1b54dad6b5..763e2564d0 100644
--- a/jenkins/jobs/projects.yaml
+++ b/jenkins/jobs/projects.yaml
@@ -203,6 +203,18 @@
       - python-jobs
       - openstack-publish-jobs
       - pypi-jobs
+      - gate-bandit-integration-{target-project}:
+          target-org: openstack
+          target-project:
+            - barbican
+            - glance
+            - keystone
+            - keystonemiddleware
+            - magnum
+            - oslo.vmware
+            - python-keystoneclient
+            - python-magnumclient
+            - sahara
 
 - project:
     name: barbican
diff --git a/zuul/layout.yaml b/zuul/layout.yaml
index 3246bfb340..b665b72d8d 100644
--- a/zuul/layout.yaml
+++ b/zuul/layout.yaml
@@ -2189,6 +2189,11 @@ jobs:
   - name: gate-tooz-tox-py34-consul
     voting: false
 
+  # NOTE(sigmavirus24): This is presently failing but will be made voting as
+  # soon as sahara updates its configuration or fixes its issues.
+  - name: gate-bandit-integration-sahara
+    voting: false
+
     # Requirements project publishes documents from master only.
   - name: ^(?:gate-)requirements-docs$
     branch: master
@@ -3794,6 +3799,25 @@ projects:
       - name: openstack-server-publish-jobs
       - name: check-requirements
       - name: publish-to-pypi
+    check:
+      - gate-bandit-integration-barbican
+      - gate-bandit-integration-glance
+      - gate-bandit-integration-keystone
+      - gate-bandit-integration-keystonemiddleware
+      - gate-bandit-integration-magnum
+      - gate-bandit-integration-oslo.vmware
+      - gate-bandit-integration-python-keystoneclient
+      - gate-bandit-integration-python-magnumclient
+      - gate-bandit-integration-sahara
+    gate:
+      - gate-bandit-integration-barbican
+      - gate-bandit-integration-glance
+      - gate-bandit-integration-keystone
+      - gate-bandit-integration-keystonemiddleware
+      - gate-bandit-integration-magnum
+      - gate-bandit-integration-oslo.vmware
+      - gate-bandit-integration-python-keystoneclient
+      - gate-bandit-integration-python-magnumclient
 
   - name: openstack/bansho
     template: