barbican/.zuul.yaml
Douglas Mendizábal 116a9045eb Remove System scope from policy
As specified in Phase 1 of the Consistent and Secure Default RBAC
goal [1] policies have been updated to remove "system" scope and
only use "project" scope in all policies.

APIs with policies that previously required "system" scope have been
updated to accept "project" scoped tokens with the "admin" role instead.

[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#phase-1

Change-Id: I3b781112fc6ced7b73196f973cefd6a30ef99dd3
2023-06-05 15:03:06 -04:00

127 lines
3.6 KiB
YAML

---
- job:
name: barbican-tox-functional
parent: devstack-tox-functional
description: Functional testing
required-projects:
- name: openstack/barbican
- name: openstack/castellan
- name: openstack/openstacksdk
vars:
devstack_plugins:
barbican: https://opendev.org/openstack/barbican
tox_install_siblings: true
- job:
name: barbican-dogtag-tox-functional
nodeset: devstack-single-node-fedora-latest
parent: barbican-tox-functional
description: |
Functional testing for DogTag backend
vars:
devstack_services:
barbican-dogtag: true
- job:
name: barbican-tox-functional-fips
nodeset: devstack-single-node-centos-9-stream
parent: barbican-tox-functional
description: |
Functional testing for a FIPS enabled Centos 8 system
pre-run: playbooks/enable-fips.yaml
vars:
nslookup_target: 'opendev.org'
- job:
name: barbican-vault-tox-functional
parent: barbican-tox-functional
description: |
Functional testing for Hashicorp Vault backend
vars:
devstack_services:
barbican-vault: true
tox_environment:
VAULT_PLUGIN_ENABLED: 1
- job:
name: barbican-kmip-tox-functional
parent: devstack-tox-functional
description: |
Functional testing for KMIP backend using PyKMIP
vars:
devstack_services:
kmip: true
- job:
name: barbican-simple-crypto-devstack-tempest
parent: barbican-tempest-plugin-simple-crypto
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto
- job:
name: barbican-simple-crypto-devstack-tempest-ipv6-only
parent: barbican-tempest-plugin-simple-crypto-ipv6-only
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto-ipv6-only
- job:
name: barbican-simple-crypto-devstack-tempest-castellan-from-git
parent: barbican-tempest-plugin-simple-crypto-castellan-src
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto-castellan-src
- job:
name: barbican-simple-crypto-devstack-tempest-cursive
parent: barbican-tempest-plugin-simple-crypto-cursive
description: |
Compatibility alias for barbican-tempest-plugin-simple-crypto-cursive
- job:
name: barbican-grenade
parent: grenade
required-projects:
- opendev.org/openstack/grenade
- opendev.org/openstack/barbican
- opendev.org/openstack/barbican-tempest-plugin
- opendev.org/openstack/python-barbicanclient
vars:
devstack_plugins:
barbican: https://opendev.org/openstack/barbican
devstack_services:
barbican-svc: true
barbican-retry: true
tempest_plugins:
- barbican-tempest-plugin
tempest_test_regex: '\[.*\bsmoke\b.*\]|^(barbican_tempest_plugin.tests)'
tox_envlist: all
- project:
queue: barbican
templates:
- check-requirements
- openstack-cover-jobs
- openstack-python3-jobs
- publish-openstack-docs-pti
- release-notes-jobs-python3
check:
jobs:
- barbican-tox-functional
- barbican-vault-tox-functional:
voting: false
- barbican-grenade:
voting: false
- barbican-tempest-plugin-simple-crypto
- barbican-tempest-plugin-simple-crypto-secure-rbac:
voting: false
- barbican-tempest-plugin-simple-crypto-ipv6-only
- barbican-tox-functional-fips
- octavia-v2-dsvm-tls-barbican
gate:
jobs:
- barbican-tox-functional
experimental:
jobs:
- barbican-dogtag-tox-functional
- barbican-kmip-tox-functional