zuul: move jobs in-tree and updates them

Move the job definitions in-tree, updating them when needed
(no more python 2 jobs, bump hacking requirements to make
the pep8 job work with the newest python releases and ignore
a few spurious flake8 warnings).

The old barbican simple-crypto job name is still available as an alias
for a while, but it is time to switch away and directly
use the new job.

Depends-On: https://review.opendev.org/771443
Change-Id: Iba7b4106c49e4b492c97097648c7b8f599a2ca4b

.zuul.yaml

@@ -1,7 +1,10 @@
 - project:
+    templates:
+      - openstack-python3-wallaby-jobs
+      - check-requirements
     check:
       jobs:
-        - barbican-simple-crypto-devstack-tempest-cursive
+        - barbican-tempest-plugin-simple-crypto-cursive
     gate:
       jobs:
-        - barbican-simple-crypto-devstack-tempest-cursive
+        - barbican-tempest-plugin-simple-crypto-cursive

cursive/signature_utils.py

@@ -334,7 +334,7 @@ def get_certificate(context, signature_certificate_uuid):
     try:
         # The certificate retrieved here is a castellan certificate object
         cert = keymgr_api.get(context, signature_certificate_uuid)
-    except ManagedObjectNotFoundError as e:
+    except ManagedObjectNotFoundError as e:  # noqa: F841
         raise exception.SignatureVerificationError(
             reason=_('Certificate not found with ID: %s')
             % signature_certificate_uuid)

test-requirements.txt

@@ -2,7 +2,7 @@
 # of appearance. Changing the order has an impact on the overall integration
 # process, which may cause wedges in the gate later.
 
-hacking<0.12,>=0.11.0 # Apache-2.0
+hacking>=3.1.0,<3.2.0 # Apache-2.0
 
 coverage>=3.6 # Apache-2.0
 python-subunit>=0.0.18 # Apache-2.0/BSD

tox.ini

@@ -33,6 +33,6 @@ commands = oslo_debug_helper {posargs}
 [flake8]
 
 show-source = True
-ignore = H301
+ignore = H301,W504
 builtins = _
 exclude=.venv,.git,.tox,dist,doc,*lib/python*,*egg,build