dd63733b55
We bumped the default nodeset to ubuntu-noble which bumped our python version up to python3.12. We were previously pinning hacking to a version that pulls in a version of flake8 that isn't compatible with python3.12 due to entrypoint importlib_metadata compatibility issues. We fix that by updating hacking to lastest, but that introduces a new rule that requires we have whitespace after a return statement. We also fix that in the one location that was a problem. Then separately ssl.wrap_context has been removed in python 3.12 so we switch that out with SSLContext.wrap_context instead when checking irc access in the irc access check job. Change-Id: Id4e3c6f35ffcf5cea302aa1bd8b126affa4eeb07
159 lines
4.6 KiB
INI
159 lines
4.6 KiB
INI
[tox]
|
|
minversion = 1.6
|
|
envlist = linters,gerrit,grafyaml
|
|
skipsdist = True
|
|
|
|
[testenv]
|
|
passenv =
|
|
http_proxy
|
|
HTTP_PROXY
|
|
https_proxy
|
|
HTTPS_PROXY
|
|
no_proxy
|
|
NO_PROXY
|
|
basepython = python3
|
|
|
|
[testenv:linters]
|
|
allowlist_externals =
|
|
bash
|
|
{toxinidir}/tools/ansible-lint-roles-cache.sh
|
|
{toxinidir}/tools/run-bashate.sh
|
|
{toxinidir}/tools/zuul-projects-checks.py
|
|
setenv =
|
|
# NOTE(ianw) : In the gate job openstack-zuul-jobs-linters this is
|
|
# overridden to the Zuul checkouts of the projects. Locally,
|
|
# tools/ansible-lint-roles-cache.sh will populate these for the
|
|
# linter.
|
|
ANSIBLE_ROLES_PATH={env:ANSIBLE_ROLES_PATH:{toxinidir}/.cache/ansible-lint/opendev/base-jobs/roles:{toxinidir}/.cache/ansible-lint/opendev/system-config/roles:{toxinidir}/.cache/ansible-lint/zuul/zuul-jobs/roles:{toxinidir}/.cache/ansible-lint/openstack/openstack-zuul-jobs/roles}
|
|
|
|
# Add dependencies here since other jobs use python2 and zuul requires
|
|
# python3.
|
|
deps =
|
|
# ansible-lint brings in the latest version of ansible, but we
|
|
# keep this in sync with what Zuul uses so we don't allow though
|
|
# things from a later ansible that would actually fail in
|
|
# production.
|
|
ansible>=5,<6
|
|
# pin these two until someone has time to update all our skips to >=6.16
|
|
ansible-lint>=6.0.0,<6.5.0
|
|
ansible-compat<4
|
|
hacking>=7.0.0,<8.0.0
|
|
bashate>=0.2
|
|
commands =
|
|
{toxinidir}/tools/ansible-lint-roles-cache.sh
|
|
{toxinidir}/tools/run-bashate.sh
|
|
flake8
|
|
# Run some policy checks on zuul.d/projects.yaml
|
|
{toxinidir}/tools/zuul-projects-checks.py
|
|
# Ansible lint
|
|
bash -c "find playbooks -type f -regex '.*.ya?ml' -print0 | \
|
|
xargs -t -0 ansible-lint"
|
|
bash -c "find roles -maxdepth 1 -mindepth 1 -type d -printf '%p/\n' | \
|
|
xargs -t ansible-lint"
|
|
# Make sure site-variables at least parses
|
|
python -c 'import yaml ; yaml.safe_load(open("zuul/site-variables.yaml", "r"))'
|
|
|
|
[testenv:gerrit]
|
|
allowlist_externals =
|
|
{toxinidir}/tools/check_valid_gerrit_projects.py
|
|
{toxinidir}/tools/check_projects_yaml_alphabetized.sh
|
|
{toxinidir}/tools/check_valid_gerrit_config.sh
|
|
deps =
|
|
PyYAML
|
|
ruamel.yaml
|
|
GitPython
|
|
commands =
|
|
{toxinidir}/tools/check_valid_gerrit_projects.py gerrit/projects.yaml gerrit/acls zuul/main.yaml
|
|
{toxinidir}/tools/check_projects_yaml_alphabetized.sh gerrit/projects.yaml
|
|
{toxinidir}/tools/check_valid_gerrit_config.sh
|
|
|
|
[testenv:venv]
|
|
commands = {posargs}
|
|
|
|
[testenv:irc]
|
|
allowlist_externals =
|
|
{toxinidir}/tools/check_irc_access.py
|
|
{toxinidir}/tools/irc_tests.py
|
|
{toxinidir}/tools/check-channels-yaml.sh
|
|
deps =
|
|
PyYAML
|
|
ruamel.yaml
|
|
irc
|
|
commands =
|
|
{toxinidir}/tools/check_irc_access.py -l accessbot/channels.yaml opendevaccess
|
|
{toxinidir}/tools/irc_tests.py
|
|
{toxinidir}/tools/check-channels-yaml.sh
|
|
|
|
[flake8]
|
|
show-source = True
|
|
exclude = .tox,.test,.cache
|
|
# These are ignored intentionally in openstack-infra projects;
|
|
# please don't submit patches that solely correct them or enable them.
|
|
ignore = E125,E129,E402,H,W503
|
|
|
|
[testenv:grafyaml]
|
|
deps =
|
|
{env:GRAFYAML_SRC:git+https://opendev.org/opendev/grafyaml#egg=grafyaml}
|
|
commands = grafana-dashboard validate grafana
|
|
|
|
[testenv:bindep]
|
|
# Do not install any requirements. We want this to be fast and work even if
|
|
# system dependencies are missing, since it's used to tell you what system
|
|
# dependencies are missing! This also means that bindep must be installed
|
|
# separately, outside of the requirements files.
|
|
deps = bindep
|
|
commands = bindep test
|
|
|
|
[testenv:infra-docs]
|
|
allowlist_externals =
|
|
{toxinidir}/docs-site/generate_infra_index.py
|
|
deps =
|
|
Jinja2
|
|
PyYAML
|
|
commands = {toxinidir}/docs-site/generate_infra_index.py {toxinidir}/docs-site/infra-documents.yaml
|
|
|
|
[testenv:specs]
|
|
allowlist_externals =
|
|
{toxinidir}/specs/generate_specs_site.py
|
|
deps =
|
|
Jinja2
|
|
PyYAML
|
|
commands = {toxinidir}/specs/generate_specs_site.py {toxinidir}/specs/specs.yaml
|
|
|
|
[testenv:dib]
|
|
allowlist_externals =
|
|
env
|
|
deps =
|
|
diskimage-builder
|
|
yamllint
|
|
changedir = {toxinidir}/nodepool
|
|
commands = env ELEMENTS_DIR=elements dib-lint
|
|
|
|
[testenv:nodepool]
|
|
allowlist_externals =
|
|
{toxinidir}/tools/nodepool-validate.sh
|
|
deps = nodepool
|
|
commands =
|
|
{toxinidir}/tools/nodepool-validate.sh
|
|
|
|
[testenv:add-projects-to-main]
|
|
allowlist_externals =
|
|
git
|
|
deps =
|
|
ruamel.yaml
|
|
commands =
|
|
python tools/add-projects-to-main.py
|
|
git diff-files --quiet
|
|
|
|
[testenv:normalize-gerrit-acl]
|
|
commands =
|
|
python {toxinidir}/tools/normalize_acl.py {posargs} apply
|
|
|
|
[testenv:normalize-projects-yaml]
|
|
allowlist_externals =
|
|
{toxinidir}/tools/normalize_projects_yaml.py
|
|
deps =
|
|
ruamel.yaml
|
|
commands =
|
|
{toxinidir}/tools/normalize_projects_yaml.py
|