Merge "Add FIPS enable multinode job definition"

doc/source/general-jobs.rst

@@ -6,6 +6,7 @@ General Purpose Jobs
 .. zuul:autojob:: unittests
 .. zuul:autojob:: markdownlint
 .. zuul:autojob:: multinode
+.. zuul:autojob:: multinode-fips
 .. zuul:autojob:: run-test-command
 .. zuul:autojob:: shake-build
 .. zuul:autojob:: upload-git-mirror

playbooks/enable-fips/pre.yaml

@@ -0,0 +1,9 @@
+- name: Enable FIPS mode
+  hosts: all
+  tasks:
+    # Enabling FIPS mode requires changes in boot procedure to provide the
+    # appropriate kernel flag. The change has effect only after system reboot.
+    - name: Enable FIPS mode and reboot node
+      include_role:
+        name: enable-fips
+      when: enable_fips | default(true)

zuul.d/general-jobs.yaml

@@ -25,6 +25,16 @@
       overlay networks and setting up known-hosts and ssh keys
     pre-run: playbooks/multinode/pre.yaml
 
+- job:
+    name: multinode-fips
+    abstract: true
+    description: |
+      Enable fips and do the setup needed for multi-node jobs such as setting
+      up overlay networks and setting up known-hosts and ssh keys
+    pre-run:
+      - playbooks/enable-fips/pre.yaml
+      - playbooks/multinode/pre.yaml
+
 - job:
     name: run-test-command
     parent: unittests