Merge "Add CentOS9 standalone job with FIPS enabled"

roles/run-test/tasks/main.yaml

@@ -14,6 +14,7 @@
           - 'dlrn_hash_tag'
           - 'dlrn_hash_tag_newest'
           - 'extra_args'
+          - 'enable_fips'
           - 'run_tempest'
           - 'standalone_container_cli'
           - 'standalone_environment_files'

zuul.d/base-upstream.yaml

@@ -11,7 +11,7 @@
     description: |
         Base abstract job to add common required-projects for tripleo-ci-base
     abstract: true
-    parent: multinode
+    parent: multinode-fips
     required-projects:
       - opendev.org/openstack/tripleo-ci
       - opendev.org/openstack/tripleo-quickstart
@@ -67,6 +67,8 @@
       bridge_address_subnet: 24
       bridge_address_offset: 2
       bridge_mtu: 1350
+      # Disable fips role for all jobs, and select the ones that we want to enable
+      enable_fips: false
     roles:
       - zuul: opendev.org/zuul/zuul-jobs
       - zuul: opendev.org/openstack/openstack-zuul-jobs

zuul.d/standalone-jobs.yaml

@@ -357,6 +357,7 @@
         - tripleo-ci-centos-9-scenario012-standalone: &c9_scen12
             <<: *c9_scen1
             files: *scen12_files
+        - tripleo-ci-centos-9-standalone-fips: *cs9_vars
 
     gate:
       jobs:
@@ -950,3 +951,19 @@
         tempest_services: *tempest_services
         tempest_test_whitelist:
           - 'api'
+
+### FIPS Jobs
+
+- job:
+    name: tripleo-ci-centos-9-standalone-fips
+    parent: tripleo-ci-centos-9-standalone
+    voting: false
+    vars:
+      enable_fips: true
+      nslookup_target: 'opendev.org'
+      featureset_override:
+        enable_fips: true
+        standalone_environment_files:
+          - 'environments/fips.yaml'
+        tempest_tempestconf_profile_overrides:
+          validation.ssh_key_type: 'ecdsa'