Add a new FIPS enabled gate job This job will be
for Centos 8 with FIPS enabled, and will use a playbook in
zuul-jobs to enable FIPS.
The dogtag bindep dependencies are curently broken. Lets
temporarily remove them here until we can figure out how to
fix them and thereby fix the dogtag gate.
Change-Id: Ibcd8cb6fc356e27266ba04cd972834dcd97c1a9b
Depends-On: https://review.opendev.org/c/zuul/zuul-jobs/+/788778
- re-enable the tempest jobs and use the version defined inside
barbican-tempest-plugin;
- (temporarily) define compatibility alias based on the new jobs
so that the users of the legacy ones are not broken.
Depends-On: https://review.opendev.org/745321
Change-Id: Ibcfe314eb7e8a132d68d5b139956246c54c509ad
A local devstack test with
USE_PYTHON3=True
DEVSTACK_GATE_USE_PYTHON3=True
and
PROJECTS="openstack/barbican $PROJECTS"
enable_plugin barbican https://opendev.org/openstack/barbican
blew up because uwsgi tried to run under py2.
The dep sets USE_PYTHON3 to True by default, which may or may not be
sufficient to expose $problems, but let's see.
[Later] We think the (legacy) grenade-devstack-barbican job was failing
because it was trying to "upgrade" from py2 to py3 and running into
packaging conflicts. This explicitly sets DEVSTACK_GATE_USE_PYTHON3=True
in that job to resolve the problem.
Depends-On: https://review.opendev.org/649097
Change-Id: I6aabb1463b001e81e1e6f7d44fb66e9b7ff3a251
As part of Train community goal 'Support IPv6-Only Deployments and Testing'[1],
we need to define the integration job which deploy services
on IPv6 and perform testing to make sure service listen and communicate
over IPv6 properly.
Barbican has legacy zuul jobs only so base zuulv3 IPv6 job 'devstack-ipv6' and
'devstack-tempest-ipv6' cannot be used and we have to copy the whole
run.yaml to set the IPv6 setting and run the IPv6 verification
script via post_test_hook.
This commit adds the new job 'barbican-simple-crypto-devstack-tempest-ipv6-only'
run on gate and set the required IPv6 setting'.
Story: #2005477
Task: # 35881
[1] https://governance.openstack.org/tc/goals/train/ipv6-support-and-testing.html
Change-Id: I150df168225189dcad2e052f06f098f578151fbd
The dogtag pki python module has been moved to Python 3 in
Fedora 29. This patch also fixes a few Python 3
compatibility issues in the DogTag backend plugin.
Unfortunately, there is a bug in the dogtag pki module
that must be fixed before the gate will pass. [1]
This patch temporarily makes the DogTag gate non-voting
to unblock the gate while we wait for a fix from the
DogTag maintainers.
[1] https://pagure.io/dogtagpki/issue/3108
Depends-on: https://review.opendev.org/#/c/662529/
Change-Id: Iaa7a535c410c726fa8e7346c2ef775fbaf58eb61
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.
This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.
This update should result in no functional change.
For more information see the thread at
http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html
Change-Id: I9be44f89d2ed5e04ef8b27d03cb2544680419b4f
Work with 389-ds-base-1.4.0.20. Following
https://pagure.io/389-ds-base/c/4fd73c5 `dscreate fromfile`
got renamed to `dscreate from-file`.
Save dogtag server files for future debug.
Removed pip install of dogtag-pki which installed old Dogtag client code.
Temporarily skipping paging tests and making grenade non-voting.
Change-Id: I4bbc3d39c8d4a3591374e5c4a733a987f001a896
This bumps testing on fedora to 28, it also allows openstack-infra in
the future to make changes to fedora much easier.
Also, Dogtag now pulls in python3-requests, so no need to remove the
pip installed python2-requests, which is needed by keystone-manage.
Change-Id: I7635f039848f8c3ab052f339344bb1cb8ea4aecd
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Migrate all functional jobs and gate to zuul v3.
We will have to migrate all other legacy jobs too later.
This patch do step 1 in the docs: Move Legacy Jobs to Projects.
Co-Authored-By: Dai Dang Van <daidv@vn.fujitsu.com>
Needed-By: If7dfc17ccc93cd5d99cc899abf7c7cbe08a738dd
Needed-By: I18b026fbfc1741ca397f36c8cbf24aa02c03f4b5
Change-Id: I5c230a5cdd9ee42eee218f84e678d4f155dfc953
Ade Lee