Setup non-voting VPNaaS func test for StrongSwan

The StrongSwan driver has been proposed as the new 'reference'
implementation for VPNaaS, eventually replacing the current OpenSwan
driver.

The StrongSwan driver requires that StrongSwan is installed, and that
AppArmor is disabled for the charon and stroke processes. To do this,
a separate DevStack based functional job will be created.

To support both jobs, and to allow sharing of test cases that may
apply to both driver implementations, the plan is to create the
following directory structure (and corresponding test filtering):

tests/functional/             - Shared test cases/modules
tests/functional/strongswan/  - StrongSwan specific tests
tests/functional/openswan/    - OpenSwan specific tests

Note: As StrongSwan test modules are developed, they will need to
be located in tests/functional/strongswan/. Likewise, the existing
placeholder module for the OpenSwan driver (test cases are empty
currently) will be moved into the tests/functional/openswan area.
As a result, this change will not affect any existing functional
tests.

For this functional job, a different argument will be passed into
the hook scripts to indicate the tests will use StrongSwan. The
gate hook will set the environment variable IPSEC_PACKAGE=strongswan
and DevStack (modified under review 158741) will install StrongSwan
and disable AppArmor for charon/stroke.

Depends-On: fbde695ac2bef255703dc131beeede769d9e005a
Change-Id: Ie0a45fe450ccded61b66a96cd95fac3878d00cfb
Partial-Bug: 1424757

jenkins/jobs/neutron-vpnaas.yaml

@@ -42,3 +42,48 @@
       - test-results
       - devstack-logs
       - console-log
+
+- job-template:
+    name: '{pipeline}-neutron-vpnaas-dsvm-functional-sswan{branch-designator}'
+    node: '{node}'
+
+    wrappers:
+      - build-timeout:
+          timeout: 125
+      - timestamps
+
+    builders:
+      - link-logs
+      - net-info
+      - devstack-checkout
+      - shell: |
+          #!/bin/bash -xe
+          export PYTHONUNBUFFERED=true
+          export DEVSTACK_GATE_UNSTACK=1
+          export DEVSTACK_GATE_TIMEOUT=120
+          export DEVSTACK_GATE_TEMPEST=0
+          export DEVSTACK_GATE_EXERCISES=0
+          export DEVSTACK_GATE_NEUTRON=1
+          export DEVSTACK_GATE_INSTALL_TESTONLY=1
+          export BRANCH_OVERRIDE={branch-override}
+          if [ "$BRANCH_OVERRIDE" != "default" ] ; then
+              export OVERRIDE_ZUUL_BRANCH=$BRANCH_OVERRIDE
+          fi
+
+          function gate_hook {{
+              bash -xe $BASE/new/neutron-vpnaas/neutron_vpnaas/tests/contrib/gate_hook.sh dsvm-functional-sswan
+          }}
+          export -f gate_hook
+
+          function post_test_hook {{
+             bash -xe $BASE/new/neutron-vpnaas/neutron_vpnaas/tests/contrib/post_test_hook.sh dsvm-functional-sswan
+          }}
+          export -f post_test_hook
+
+          cp devstack-gate/devstack-vm-gate-wrap.sh ./safe-devstack-vm-gate-wrap.sh
+          ./safe-devstack-vm-gate-wrap.sh
+
+    publishers:
+      - test-results
+      - devstack-logs
+      - console-log

jenkins/jobs/projects.yaml

@@ -423,6 +423,16 @@
           node: 'devstack-precise || devstack-trusty'
           branch-designator: ''
           branch-override: default
+      - '{pipeline}-neutron-vpnaas-dsvm-functional-sswan{branch-designator}':
+          pipeline: gate
+          node: 'devstack-precise || devstack-trusty'
+          branch-designator: ''
+          branch-override: default
+      - '{pipeline}-neutron-vpnaas-dsvm-functional-sswan{branch-designator}':
+          pipeline: check
+          node: 'devstack-precise || devstack-trusty'
+          branch-designator: ''
+          branch-override: default
       - gate-{name}-pylint
 
 - project:

zuul/layout.yaml

@@ -675,6 +675,19 @@ jobs:
   - name: ^(gate|check)-tempest-dsvm-networking-odl
     branch: ^(?!stable)
     voting: false
+  - name: ^(gate|check)-neutron-vpnaas-dsvm-functional$
+#   Note: This job will run common test cases (first line), and
+#   OpenSwan specific tests (second line).
+    files:
+      - '^neutron_vpnaas/tests/functional/[^/]+\.py$'
+      - '^neutron_vpnaas/tests/functional/openswan/.+\.py$'
+  - name: check-neutron-vpnaas-dsvm-functional-sswan
+    voting: false
+#   Note: this job will run common test cases (first line), and
+#   StrongSwan specific tests (second line).
+    files:
+      - '^neutron_vpnaas/tests/functional/[^/]+\.py$'
+      - '^neutron_vpnaas/tests/functional/strongswan/.+\.py$'
 # For Gerrit ver 2.4.x (using maven)
   - name: ^(gate|check)-gerrit-unittests$
     branch: ^openstack/2\.4.*$
@@ -1473,6 +1486,8 @@ projects:
     gate:
       - gate-neutron-vpnaas-pylint
       - gate-neutron-vpnaas-dsvm-functional
+    experimental:
+      - check-neutron-vpnaas-dsvm-functional-sswan
 
   - name: openstack/nova
     template: